Last updated: 23 June 2026
This Privacy Policy explains how the “Turkey Out of NATO — Project 2028” website (“the platform”, “we”, “us”) collects and processes personal data when you visit https://turkeyoutofnatoproject2028.com. We are committed to processing personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), the Greek Law 4624/2019 and the ePrivacy framework.
1. Who we are (Data Controller)
- Controller: The operator of turkeyoutofnatoproject2028.com
- Contact: [email protected]
- Country: Greece
2. What data we collect and why
a) Analytics data (only with your consent)
If — and only if — you give your consent through our cookie banner, we use Google Analytics 4 to understand, in aggregate, how the platform is used (for example, which pages are read and from which countries). Google Analytics sets cookies and processes data such as a pseudonymous identifier, pages viewed, approximate location, device and browser type. No analytics cookies are set and no data is sent to Google before you consent. We do not use this data for advertising or profiling.
- Legal basis: your consent — Article 6(1)(a) GDPR and Article 5(3) of the ePrivacy Directive (as transposed in Greece). You may withdraw consent at any time (see section 7).
- Processor / recipient: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), with Google LLC (USA) as a sub-processor.
- International transfer: data may be transferred to the United States under the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses.
- Retention: Google Analytics user/event data is retained for up to 14 months; cookies last up to 2 years (see our Cookie Policy).
b) Contact data
When you contact us — for example by emailing us at the address in section 1, or by submitting the form on our Contact page — we process the personal data you choose to provide, such as your name, email address, organisation and the content of your message, in order to read and respond to your enquiry. The contact form sends your message to us by email.
- Legal basis: your consent and/or the taking of steps at your request (Article 6(1)(a) and (b) GDPR), and our legitimate interest in responding to enquiries (Article 6(1)(f) GDPR).
- Retention: for as long as necessary to handle your enquiry and for a reasonable period afterwards, unless a longer period is required by law.
c) Server log and security data
Like virtually all websites, our hosting provider automatically records technical information (such as IP address, browser type, and the date and time of access) in server logs. In addition, the site is delivered through Cloudflare, a content-delivery and security network that processes connection data (including IP addresses and request metadata) on our behalf in order to deliver the site, secure it and protect it against abuse. This is necessary to operate the platform securely and reliably.
- Legal basis: our legitimate interest in the security and proper functioning of the platform (Article 6(1)(f) GDPR).
- Retention: a short period, in line with our hosting provider’s standard practice.
3. Cookies
We use a strictly necessary cookie to remember your cookie choice, and — only with your consent — analytics cookies. Full details, names and durations are in our Cookie Policy.
4. Who has access to your data
We do not sell your personal data. Data may be processed on our behalf by service providers acting as processors, namely our website hosting provider, Cloudflare, Inc. (content delivery and security), our email service provider (Zoho, used to receive and handle contact messages) and Google (for analytics, only with your consent). They may only process data on our documented instructions. Where these providers are based outside the European Economic Area (for example in the United States), such transfers rely on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. We may also disclose data where required by law.
5. How we protect your data
The site is served over an encrypted HTTPS connection and we apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration or loss.
6. Your rights
Under the GDPR you have the right to: access your personal data; request rectification or erasure; restrict or object to processing; data portability; and to withdraw consent at any time (without affecting processing carried out before withdrawal). To exercise any of these rights, contact us at [email protected].
You also have the right to lodge a complaint with the supervisory authority in Greece:
- Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα)
- 1–3 Kifissias Avenue, 115 23 Athens, Greece
- Tel: +30 210 6475600 — Email: [email protected] — Web: www.dpa.gr
7. Withdrawing or changing your consent
You can change or withdraw your cookie consent at any time by clicking “Cookie Settings” in the website footer, or by deleting cookies in your browser. Withdrawing consent stops further analytics data collection.
8. Changes to this policy
We may update this Privacy Policy from time to time. The “last updated” date above reflects the most recent revision.
9. Contact
For any question about this policy or your personal data, contact us at [email protected].