Data protection
Privacy policy
You are planning your own funeral. You trust us with your most personal details, down to your religion. This page states exactly what we hold and what you can ask for.
Last updated:
This text is a draft under legal review. If something concerns you and is not clear, call us and a person will answer.
Who we are
The business below is the controller of your data. For anything concerning your data you write or call us — not a third party.
Verticom — Δ. Γιαννίκος Παν. Δημήτριος
ΑΦΜ 044041981, ΔΟΥ ΚΕΦΟΔΕ Αττικής
Ευμολπιδών 23, 118 54 Αθήνα
info@verticom.gr 210 9245577No Data Protection Officer has been appointed. Your requests are handled directly by the business, at the contact details above.
Data protection
What we hold and why
The table lists every category of data that exists in our database, with its purpose, legal basis and retention period. It is generated from the same register the application itself uses, not from a hand-written list: if the database changes, this page changes.
-
Identification details
Full name, email, phone, address, region, date of birth, ID number
- Why
- To form and perform the contract
- Legal basis
- Performance of a contract — Art. 6(1)(b)
- Retention
- 20 years
-
Religion
Special category (Art. 9)Religion (or "none")
- Why
- To hold the ceremony the way you want it
- Legal basis
- Explicit consent — Art. 9(2)(a)
- Retention
- 20 years
-
Your plan
Purchaser name, email and phone, contract number, region and community, locked price
- Why
- To form and perform the contract
- Legal basis
- Performance of a contract — Art. 6(1)(b)
- Retention
- 20 years
-
Proof of signature
IP address and browser at the moment of signing, time of signature
- Why
- To prove that you signed
- Legal basis
- Legitimate interest — Art. 6(1)(f)
- Retention
- 20 years
-
Payment
Order and transaction code from the payment provider, time of purchase
- Why
- For payment and accounting
- Legal basis
- Legal obligation — Art. 6(1)(c)
- Retention
- 5 years
-
Trusted person
Full name, phone, email, ID number, relationship to you, death certificate
- Why
- To notify the person you appointed
- Legal basis
- Legitimate interest — Art. 6(1)(f)
- Retention
- 20 years
-
Ceremony wishes
Special category (Art. 9)Church, priest, headstone inscription and photo, clothing, items, music, pallbearers, obituary text, instructions for ashes, personal message
- Why
- To hold the ceremony the way you want it
- Legal basis
- Explicit consent — Art. 9(2)(a)
- Retention
- 20 years
-
Files you upload
The files you upload and their original names
- Why
- To document the plan
- Legal basis
- Performance of a contract — Art. 6(1)(b)
- Retention
- 20 years
-
Audit log
Who did what, when, from which IP address · sign-ins and sign-outs · failed sign-in attempts, with the email that was tried
- Why
- For audit and traceability
- Legal basis
- Legal obligation — Art. 6(1)(c)
- Retention
- 20 years
-
Enquiries
Full name, phone, email, preferred time, your message, IP address
- Why
- To answer your enquiry
- Legal basis
- Legitimate interest — Art. 6(1)(f)
- Retention
- 2 years
-
Browsing session
Session identifier, IP address, browser
- Why
- To make the planning flow work
- Legal basis
- Performance of a contract — Art. 6(1)(b)
- Retention
- 1 month
Special category (Art. 9)
Two categories are special under Article 9: your religion, and your wishes about the church and the priest. We hold them only with your explicit consent and only because without them the service cannot be carried out as you want it. You can withdraw consent at any time — they are then erased and the ceremony will be held without religious rite.
How long we keep data
Two periods are not our choice. Accounting records are kept for at least five years (Law 4308/2014, Art. 7). The contract and the proof that you signed it are kept for twenty years, matching the general limitation period of Article 249 of the Civil Code — otherwise we could not prove what was agreed when the time comes to carry it out. Everything else is erased sooner.
Retention periods per category are under legal review. There are no European guidelines setting specific years — we set them and justify them. If they change, you will see it in the update date of this page.
Your rights
We answer within 30 days. If a request is complex we tell you and take the two-month extension Article 12 allows.
-
Find out what we hold
We send you a copy of all your data, in a form readable by a person and by a machine (Art. 15 and 20).
-
Correct it
Wrong name, wrong ID number, a change of address: we correct it and keep a record of the correction (Art. 16).
-
Be erased
We erase names, phone numbers, ID numbers, religion, wishes and files. Only the contract number, the amount and the proof of signature remain, for as long as the law binds us — with your name no longer on them (Art. 17).
-
Restrict processing
If you dispute something, we stop using it until it is settled (Art. 18).
-
Object
Where we rely on legitimate interest you may object and we stop, unless there is an overriding reason, which we explain (Art. 21).
-
Withdraw consent
For religion and religious wishes, at any time and without giving a reason.
How to make a request
By phone or email, at the details on this page. There is no form and no account: a person handles the request. We verify your identity before giving out or erasing anything — otherwise anyone could ask for your data.
The customer account, from which you will download and delete your own data, is under construction. Until then requests are made by phone or email and carried out manually by us.
Who else sees it
No advertising or analytics provider. The site carries no third-party script, no pixel, no embedded map. Your data is seen only by: us, the hosting provider the application runs on, and the payment provider for the transaction. Card details never pass through us — we do not see them and do not store them.
Data stays on servers within the European Union. No transfer to a third country.
How we protect it
Your ID number, your trusted person's ID number and your personal message are stored encrypted: even with access to the database they cannot be read. The connection is always encrypted. Every action on a plan is written to an audit log with time and user. Backups are kept for fourteen days.
If you disagree with us
Tell us first — it usually gets resolved. If it does not, you have the right to complain to the Hellenic Data Protection Authority, 1-3 Kifisias Ave, 115 23 Athens, tel. +30 210 6475600.