Privacy policy
Last updated: 22 October 2026
1. Controller
The controller of personal data collected through this website is Kartia IKE, a private company (Ιδιωτική Κεφαλαιουχική Εταιρεία) registered in Greece, Dorylaiou 10-12, 11521 Athens, registered in the General Commercial Registry (ΓΕΜΗ) under number 170727601000, which provides Vardion ("Vardion", "we"). Contact: support@getvardion.com.
2. Scope
This policy applies to the website at getvardion.com and to the free domain check at check.getvardion.com. It does not apply to the Vardion software. A customer that installs Vardion on its own infrastructure is the controller of the data processed there, and Vardion does not receive that data. For the hosted console, Vardion processes customer data as a processor under the customer's data processing agreement.
3. Data collected
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, email address, organisation and message content sent by email | Replying to an enquiry, arranging a demonstration, partner discussions | Steps prior to a contract (Art. 6(1)(b) GDPR) and legitimate interests (Art. 6(1)(f) GDPR) | 24 months after the last contact, or the term of any resulting contract |
| Domain entered in the domain check, with its grade and the date | Showing the result from public records; a record of the domains checked | Legitimate interests (Art. 6(1)(f) GDPR) | While the domain check is offered. The record names no visitor. |
| IP address of a visitor using the domain check, kept only as a one-way digest of the address and its network | Limiting the number of checks per address, per network and per day | Legitimate interests (Art. 6(1)(f) GDPR) | One hour |
| Delivery data: IP address, date and time, requested page, browser type | Delivering and securing the website and the domain check | Legitimate interests (Art. 6(1)(f) GDPR) | Not kept by Vardion, which keeps no server logs. The hosting providers below process these details to deliver each request. |
The website uses no analytics, no advertising technology and no third-party embeds. The cookie policy describes the website's use of cookies.
4. Recipients
Personal data is disclosed only to the following processors, under contracts that meet Article 28 GDPR:
- Website hosting and delivery: Cloudflare, Inc., United States
- Hosting of the domain check: OVHcloud
- Email: Google Ireland Limited (Google Workspace), Ireland
Personal data is not sold or shared for marketing purposes.
5. Transfers outside the European Economic Area
Where a processor is located outside the European Economic Area, the transfer is based on an adequacy decision of the European Commission or on the Standard Contractual Clauses.
6. Rights of the data subject
Under the GDPR, a data subject has the right to:
- access their personal data;
- have inaccurate data rectified;
- have data erased;
- restrict processing;
- receive their data in a portable format;
- object to processing based on legitimate interests.
Requests are sent to support@getvardion.com and answered within one month. A data subject may also lodge a complaint with the Hellenic Data Protection Authority, 1-3 Kifissias Avenue, 115 23 Athens, www.dpa.gr.
7. Security
The website is served over HTTPS. Access to enquiries and to the record of domains checked is limited to the staff who handle them. The record of domains checked does not identify the visitor.
8. Changes
Changes to this policy are published on this page with a new date.