Privacy policy

Data controller

Kos Business Directory (eoko.gr) and its content are managed by E-Ypiresies – Ιδιωτικό ΚΕΠ Ρόδου, which is also the controller of your data under the General Data Protection Regulation (EU) 2016/679 and Greek Law 4624/2019. It also manages the sister directories for Rhodes and Kos.

Name

E-Ypiresies – Ιδιωτικό ΚΕΠ Ρόδου

Website

e-ypiresies.com

Address

Κωνσταντίνου Παλαιολόγου 25, Ρόδος

Email

[email protected]

Phone

+302241601234

Cookies

Kos Business Directory does not use cookies or any other on-device storage for tracking, and has no third-party advertising or analytics tools. You do not need an account to use the directory.

View counters

To show which categories and businesses are popular, we anonymously count how many times each business page (and its category) is viewed per day. We do not store IP addresses, device identifiers or anything that identifies you.

The hosting and content delivery providers we use technically process your IP address to deliver pages to your device and to keep the site secure. The application's logs contain no IP addresses and are kept for a short time.

Search

What you type in the search box is processed to find results. Searches are not linked to you: we keep no per-visitor search history and build no profiles. To protect the service from abuse, your IP address is used only temporarily, in the server's memory, to limit the number of requests.

AI smart search

When you use the smart search, or when a search is a description that needs better understanding (e.g. “my tap is dripping”), its text is sent to external artificial intelligence (AI) service providers. This lets us understand what you need and suggest the right categories and businesses.

Only the search text is sent to the provider, together with the directory's list of categories. Your IP address, device identifiers, cookies or anything else that identifies you are not sent, and no link between a search and the person who made it is stored anywhere. So that the same phrase is not sent twice, we keep the processed form of the text for up to 30 days, with nothing about who typed it.

AI providers may be located outside the European Economic Area. Because nothing that identifies you reaches them, please do not type personal details (names, phone numbers, health information, etc.) into the search. AI answers are generated automatically and may be inaccurate.

The one exception, for the security of the service: if a search is automatically classified as malicious (e.g. an attempted attack or abuse), we keep the network address (IP) it came from, together with its text, so that it can be temporarily blocked from the smart search, and the management team is notified internally. This data is deleted automatically once the block has ended and 30 days have passed since the last malicious search. The legal basis is our legitimate interest in protecting the service.

Details of listed businesses

The directory publishes business details (name, category, address, phone numbers, email, website, social profiles, opening hours, photos) as provided by the businesses themselves or as publicly available. Where a business is a sole trader, these details may relate to a natural person. The legal basis is the legitimate interest in informing the public about local businesses. To categorise listings correctly, these details may be processed with AI tools that suggest categories, keywords and short names. Any business may ask at any time for its listing to be corrected or removed.

Listing applications

When you apply to have a business listed, we collect what you enter in the form: the business name, its category (or the one you propose), area, optionally an address, website and email, a phone number, a description, up to 10 photos, the contact person's name and the time they prefer to be called. We also record when you gave your consent. We do not store your IP address or device details; to protect the form from abuse the IP address is used only temporarily, in the server's memory, to limit how many applications one visitor can send. Metadata (such as location) is removed from photos.

We use the data only to contact you and to create or update the listing; no application is ever published automatically. The legal basis is your consent, given in the application, which you may withdraw at any time. Only authorised team members have access. For every new application we send an internal Telegram notification that contains only the business name and area. Once the business is listed, the business details (not the contact person's) are shown publicly. The data is not sold or shared with third parties for their own purposes. It is kept while the application is processed and the listing exists, and deleted when you ask.

Who receives data

We do not sell data or share it for advertising. We use only the processors we need, acting on our behalf: the server's hosting provider (a data centre in the European Union), network and content delivery providers, AI providers for the smart search (the text only, as described above) and Telegram for the team's internal notifications. Data may also be disclosed to public authorities where the law requires it.

Security

We take reasonable technical and organisational measures to protect data: encrypted connections (HTTPS), a database that is not reachable from the internet, and access for authorised team members only. No transmission or storage over the internet is completely secure.

Minors

Listing applications are meant for professionals. We do not knowingly collect data from children under 15.

Your rights

You may request access to, correction, erasure or restriction of your data and data portability, withdraw consent and object to processing by emailing the controller at the address above. We reply within one month. Because searches are not linked to anyone, we cannot find or give you your searches. You also have the right to complain to the Hellenic Data Protection Authority (dpa.gr).

Changes to this policy

We may update this policy when the way the site works or the law changes. The version published here, with its last-updated date, always applies. See also the Terms of use.