1. Data controller
Controller: Reality Check Ops
Business seat: Kifisia, Greece
Email: [email protected]
Telephone: +30 210 621 1693
2. Personal data and sources
- Data supplied directly through the form or subsequent correspondence: name, company/network, role, business email, optional phone number and optional message
- During a telephone call handled by the AI receptionist, the information provided may include the caller’s name, telephone number, reason for calling and preferred day or time for contact or an appointment.
- Business context: store count, geographic footprint, operational concern and preferred contact language
- Technical and security data generated when the website is used, including request metadata, IP-related security signals, Turnstile verification results and provider delivery identifiers
3. Required and optional fields
Fields marked as required are necessary to assess and respond to the request. If they are not provided, the form cannot be submitted. Phone number and additional context are optional.
Do not submit credentials, special-category data, employee records, audit evidence, confidential transaction documents or live financial files through this public form.
4. Purposes and legal bases
Enquiry data is processed to assess and respond to an Executive Demonstration request and to take steps requested before a possible business engagement (GDPR Article 6(1)(b)).
The AI receptionist is used to receive telephone enquiries, provide general company information, identify the purpose of a call and forward contact or appointment requests to the appropriate RCOps representative.
Relevant enquiry information may be processed to respond to the caller and take steps requested before a possible business engagement under Article 6(1)(b) GDPR, or for the legitimate interests of RCOps in managing genuine business enquiries under Article 6(1)(f) GDPR. The telephone service is not used to subscribe callers to unrelated marketing.
Relevant correspondence and technical security data may also be processed for the controller’s legitimate interests in maintaining necessary records and protecting the website and telephone service from abuse (GDPR Article 6(1)(f)).
5. Recipients and service providers
Access is limited to authorised RCOps personnel and service providers required to operate, protect and deliver the website and telephone services. Personal data is not sold.
Cloudflare provides hosting, serverless processing, Turnstile anti-bot verification and privacy-focused Web Analytics. Resend is currently configured to transmit form requests to the private receiving inbox.
6. International transfers
Where a provider processes personal data outside the European Economic Area, the controller will rely on an applicable adequacy decision or approved safeguards such as the European Commission Standard Contractual Clauses, together with supplementary measures where required.
7. Retention
Business enquiries that do not develop into an engagement are retained for up to 12 months after the last meaningful interaction. Records connected with an active or concluded engagement may be retained for the period required by contractual, accounting or legal obligations.
Technical security logs are retained only for the shortest period reasonably necessary and no longer than 12 months unless a specific incident or legal obligation requires longer. Provider-side logs are also subject to the providers’ configured terms and retention controls.
8. Your rights and how to exercise them
Subject to the GDPR, you may request access, correction, erasure, restriction, portability or object to processing based on legitimate interests. Where consent applies to a future optional activity, it may be withdrawn at any time without affecting earlier lawful processing.
Send requests to [email protected]. Requests are normally free of charge. Reasonable identity verification may be required, and a response will normally be provided within one month. You may also lodge a complaint with the Hellenic Data Protection Authority or another competent supervisory authority.
9. Automated decision-making
The website and AI receptionist do not use personal data for automated decisions or profiling that produce legal or similarly significant effects. The AI receptionist supports call reception and request routing; it does not make binding business decisions or confirm appointments.
Automated anti-bot checks are used only to protect the public form.
10. Security and data minimisation
The form uses server-side validation, payload limits, sanitisation, anti-bot verification, rate-limiting controls and secret-managed email delivery. These measures reduce risk but no internet transmission can be guaranteed absolutely secure.
11. Analytics, cookies, changes and contact
Cloudflare Web Analytics provides aggregate information about visits, page views, referring sites, visitor country, device/browser categories and page performance. Cloudflare states that this service does not use cookies or collect or use visitors’ personal data. RCOps does not send form content or contact details to Web Analytics.
The current configuration does not install advertising or non-essential tracking cookies. See the Cookie Policy for the current technical position.
This policy will be updated when the website’s actual processing changes. The effective date will identify the published version. Privacy questions may be sent to [email protected].