In M&M House We are committed to protecting the personal data of our visitors and customers in accordance with the General Data Protection Regulation of the European Union (GDPR – 2016/679) and the applicable Greek legislation (Law 4624/2019).
1. Who we are
The address of our website is: https://themmhouse.com
The Data Controller is M&M House (Architectural Interior Spaces, Custom Furniture & House Curation), based in Thessaloniki, Greece.
Contact Information of the Responsible:
Email: info@themmhouse.com / machi.d@themmhouse.com / myrto.d@themmhouse.com
Phone: +30 6974583878
AddressThessaloniki, Greece (Visits by appointment)
2. What personal data do we collect and why?
We collect only the strictly necessary data to provide our services, communicate and optimize the navigation experience:
a) Contact Forms & Study Requests (Consultation)
When you fill out the contact form or interest form for a project/service on the website, we collect the following information:
- Name
- Email Address (Email)
- Contact Phone
- Location & Type of Project (e.g. Full Residential Design Study, Boutique Hotel & Commercial Space, Custom Furniture, Home Curations, etc.)
- Project Description & Notes
Purpose & Legal Basis:
This data is used exclusively for communicating with you, evaluating the needs of your project, and providing a quote/consultation.
Legal basis: Your explicit consent (Article 6(1)(a) GDPR) and the taking of measures at your request before the conclusion of the contract (Article 6(1)(b) GDPR).
b) Cookies & Technical Data
Like most websites, we use cookies (small text files) to ensure the proper functioning of the website, to maintain your preferences, and to improve security:
- Necessary / Functional CookiesFor basic navigation and form security (e.g. anti-spam / session nonces).\
- Cookies for statistical purposes (Analytics)They help us understand how visitors interact with the page (anonymous information such as page views, duration of visit, device type).
c) Comments & Multimedia
Our website serves as an exhibition portfolio and a presentation of services. Public posting of comments or the uploading of multimedia files directly by visitors is not permitted.
3. With whom do we share your data
We do not sell, rent or share your personal data with third parties for advertising purposes.
Your data is only shared with trusted external partners/technical service providers who operate as «Processors» solely on our behalf:
- Website Hosting Providers (Web Hosting)For the safe storage and operation of the server.
- Email Delivery ServicesFor the safe transmission of messages from the forms.
- Statistical & Analytics ToolsFor anonymous traffic analysis.
4. For how long do we keep your data
- Data from Communication FormsThey are kept for a period of up to 12 months after the completion of the communication or for as long as our professional relationship / cooperation lasts, unless you request their deletion earlier.
- Tax and Contractual Data of Customers: If we proceed with cooperation, the data required by tax law are retained for the period stipulated by law (up to 10 years).
- Cookies & Statistics: Cookies are stored according to their type (from the duration of the session to 12 months).
5. What rights you have over your data
According to the GDPR, you have the following rights regarding your personal data:
- Right of Access: To request a copy of the data we hold about you.
- Right to Correction: To request the correction of inaccurate or incomplete data.
- Right to Erasure («Right to Be Forgotten»): To request the deletion of your personal data.
- Right to Restriction of Processing & Objection: To restrict or object to the processing of your data.
- Right to Portability: To receive your data in a structured and readable format.
- Right to Withdraw Consent: You can withdraw your consent at any time without retroactive effect.
To exercise any of the above rights, you can contact us at info@mmhouse.gr.
You also have the right to file a complaint with the Personal Data Protection Authority (APDPCH) if you believe that your rights are being violated.
6. Where your data is sent
Your data is hosted and processed within European Union (EU/EEA). In the event that a third-party cloud or analytics service provider is based outside the EU (e.g., the USA), we ensure that the necessary data protection safeguards are implemented (such as the European Commission’s Standard Contractual Clauses and the EU-U.S. Data Privacy Framework).
7. How do we protect your data & Breach Procedures
- SSL/TLS encryptionAll traffic between your browser and our website is encrypted (HTTPS).
- Protection & FirewallsWe implement security mechanisms against malicious attacks, spambots (honeypot fields), and unauthorized access.
- Procedure in case of violationIn the event that any data security breach comes to our attention, we are committed to notifying the relevant regulatory authority and the affected individuals within 72 hours, as required by law.
8. Automated Decision Making & Profiling
We do not carry out automated decision-making or profiling based on the personal data of visitors.
9. Changes to the Privacy Policy
We reserve the right to modify this Privacy Policy whenever deemed necessary. Any changes will be posted on this page with a renewed modification date.
10. Communication
For any questions, clarification or request regarding this Policy or the protection of your personal data, you can contact us:
- Email: info@themmhouse.com
- Phone: +30 6974583878
- M&M House, Thessaloniki, Greece
Greek 
English