Last updated: May 10, 2026
RocketSavvy is a managed technology services provider based in Athens, Greece, specializing in web development, cloud hosting, VoIP telephony, AI automation, marine internet connectivity (Starlink & LTE), GPS fleet tracking, and remote CCTV solutions. We are committed to protecting your personal data in compliance with GDPR, Greek Law 4624/2019, and all applicable data protection laws. Contact: hello@rocketsavvy.io
We collect: (a) Contact information — name, email, phone, company name, address submitted via contact forms or service requests; (b) Service data — for Starlink/LTE: device IMEI, signal strength, data usage; for GPS fleet: vehicle location, speed, fuel consumption, driver behavior; for CCTV: camera footage metadata; (c) Account data — billing information, subscription status, support tickets, payment method; (d) Website analytics — browser type, IP address, pages visited, referral source via Google Analytics; (e) Communication data — email and chat support records; (f) Device data — for mobile apps: device type, OS version, unique identifiers.
We use your data to: (a) Deliver services — provision and manage your subscriptions, provide technical support, send service notifications; (b) Billing & compliance — process payments, generate invoices, comply with Greek tax law and GDPR; (c) Communication — send account updates, security alerts, and optional marketing with your consent; (d) Security — detect fraud, prevent unauthorized access, investigate security incidents; (e) Improvement — analyze usage patterns, optimize performance, develop new features; (f) Legal obligations — comply with regulatory requirements and respond to lawful requests.
We process data under: (a) Contract Performance — necessary to deliver your services; (b) Legal Obligation — compliance with Greek tax authority (AADE), accounting law, and GDPR; (c) Legitimate Interests — fraud prevention, security, service improvement; (d) Consent — for marketing communications and optional analytics (you can withdraw anytime).
We retain: (a) Service data — duration of contract + 5 years (per Greek Law 1566/1985); (b) Payment records — 6 years (Greek tax authority requirements); (c) Website analytics — 26 months (Google Analytics default); (d) Support records — 1 year; (e) GPS/CCTV footage — duration of contract, then deleted unless legally required; (f) Contact inquiries — 3 years. You may request deletion at any time, subject to legal retention obligations. Requests processed within 30 days.
Data processors we use (all under Data Processing Agreements): (a) Cloud infrastructure — AWS, Hetzner, DigitalOcean; (b) Security/CDN — Cloudflare; (c) Analytics — Google Analytics; (d) Payments — Stripe; (e) Email — Resend; (f) Telecommunications — Greek telecom providers for VoIP; (g) Starlink/LTE providers. We never sell or rent your data to third parties for marketing.
We protect your data with: (a) SSL/TLS encryption in transit, AES-256 encryption at rest; (b) Role-based access controls and multi-factor authentication; (c) Regular security audits, penetration testing, vulnerability assessments; (d) Real-time monitoring and intrusion detection; (e) Documented incident response with 72-hour GDPR breach notification to authorities.
You have the right to: (a) Access — receive a copy of your personal data; (b) Rectification — correct inaccurate data; (c) Erasure ("Right to be Forgotten") — request deletion where no legal basis exists; (d) Restrict Processing — limit how we use your data; (e) Data Portability — receive your data in machine-readable format; (f) Object — refuse processing for marketing or legitimate interests; (g) Automated Decision Rights — request human review of automated decisions. To exercise these rights, email: hello@rocketsavvy.io. We respond within 30 days (60 days for complex requests).
We transfer data internationally using: (a) Standard Contractual Clauses (SCCs) approved by the European Commission; (b) Supplementary technical and contractual safeguards. Transfers occur primarily to US-based providers (AWS, Stripe, Google) under adequacy mechanisms compliant with GDPR.
For GPS fleet tracking: you represent that all tracked individuals have consented and that tracking complies with local labor laws. For CCTV: recordings may constitute special data; we process only as necessary for security purposes. For VoIP: call metadata (numbers, duration) is retained only for billing and compliance purposes.
Privacy inquiries: hello@rocketsavvy.io | Complaints to Hellenic Data Protection Authority (HDPA): www.dpa.gr, +30 210 6475 600, 1-3 Kifisias Ave., 11523 Athens, Greece.