Request a first conversation
Request a first conversation info@fioxx.com

Legal

Privacy policy

This website processes as little personal data as possible: no cookies of our own, no analytics tools, no tracking. Below we explain transparently which data is processed when you visit and when you get in touch, including session storage in the browser and the security mechanisms of our hosting provider.

Version: 1 September 2026

1. Controller

The controller for data processing on this website is:
FIOXX ΜΟΝΟΠΡΟΣΩΠΗ Ι.Κ.Ε. (FIOXX SINGLE MEMBER P.C.)
Adrianoupoleos 12, 62121 Serres, Greece
Email: info@fioxx.com

Represented by the managing directors Ioannis Fotiou and Tugce Fotiou. A data protection officer is not legally required and has not been appointed.

2. Overview

  • FIOXX sets no cookies of its own and uses no analytics, tracking or marketing tools. Our hosting provider may set a technically necessary security cookie to defend against attacks (section 3).
  • The scan and the contact form use your browser’s session storage. That data stays local as long as you do not submit anything (sections 4 and 6).
  • When you open the website, technically necessary connection data is processed by our hosting provider (section 3).
  • If you use the contact form or write us an email, we process the details you provide to handle your request (sections 4 and 5).
  • The FIOXX Scan runs entirely in your browser; results are only transmitted if you voluntarily send them through the contact form (section 6).

3. Hosting and server logs

This website is delivered as a static site through Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (for customers in the EEA: Cloudflare Germany GmbH, Rosental 7, 80331 Munich). Cloudflare operates a global network; requests are usually answered from the nearest location.

When a page is opened, Cloudflare processes technically necessary data: IP address, date and time of access, the URL requested, the volume of data transferred, browser type and version, operating system and the referrer URL. This data is processed to deliver the website, to defend against attacks (for example DDoS) and to ensure stability. It is not combined with other data sources.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a secure, stable and performant website). A data processing agreement under Art. 28 GDPR is in place with Cloudflare. Where data is transferred to the USA, the transfer relies on the EU standard contractual clauses and Cloudflare’s certification under the EU-US Data Privacy Framework. Further information: Cloudflare privacy policy.

Cloudflare may in individual cases set technically necessary security cookies to defend against attacks (for example __cf_bm). These serve security only, contain no profile data and are not used by us for any other purpose. Further information is in our cookie notice.

4. Contact form

If you send us a request through the contact form, we process the following details: name, company, business email address, optionally your website, the selected area of interest, your message and optionally your indication of the support you would like.

In addition the form transmits, if your browser technically allows it, the path of the page through which you entered our website (landing page), the referring website without its search parameters (referrer) and the three campaign parameters utm_source, utm_medium and utm_campaign, if they are present in the address. No further parameters from the address are taken over. This information is stored temporarily in your browser only (session storage, no cookies) and is transmitted only when you submit the form. The browser clears session storage when the session ends; depending on the setting, a browser may however restore a session. You can delete the data at any time through your browser settings. It helps us understand which route enquiries take. No profiling or combination with other data takes place.

To protect against automated spam submissions the form uses a check field invisible to humans. No third-party CAPTCHA service is embedded and the time you take to fill in the form is not evaluated.

The processing serves to answer your request and to initiate a business relationship. The legal bases are Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in handling requests). You give your consent to the processing by ticking the checkbox in the form; it can be withdrawn at any time with effect for the future.

Delivery through Resend

The form data is received by a server function we operate, checked for completeness and delivered as an email to our mailbox info@fioxx.com. For sending email we use the service Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Resend processes the content of the request and technical delivery information exclusively on our behalf; a data processing agreement under Art. 28 GDPR has been concluded. Where data is transferred to the USA, this happens on the basis of the EU standard contractual clauses. Further information: Resend privacy policy.

The form data is not stored in a database on our server. After delivery it sits in our mailbox, for a limited period additionally in Resend’s delivery log, and, if a business relationship comes about, in our business records.

5. Contact by email

If you write to us directly by email, we process your email address and the content of your message to handle the request. The legal bases are Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in communicating with prospects and business partners). Please note that unencrypted emails are not fully protected against being read by third parties in transit.

6. FIOXX Scan

The FIOXX Revenue × Automation Scan is a self-assessment that runs entirely in your browser. Your answers and your progress are stored temporarily in your browser’s session storage so you can continue the scan within one visit. They are not transmitted to our servers unless you submit the contact form offered afterwards. In that case a summary of your result is transmitted as part of your message and processed as described in section 4. You can delete the intermediate state at any time through the button to restart the scan or through your browser settings.

Our website links to external websites, among them the product website weareiyos.com. When you open those websites, their privacy provisions apply. Simply viewing our pages transfers no data to those providers; no third-party content (for example fonts, videos, maps or social media plugins) is embedded. Fonts are delivered from our own server.

8. Storage period

  • Server logs: connection data is kept by the hosting provider only briefly for security purposes and then deleted or anonymised.
  • Requests by form or email: we store your request for as long as is necessary to handle it. If no business relationship comes about, we delete the correspondence after twelve months at the latest, unless statutory retention obligations apply.
  • Business relationship: data required for contracts, invoices or tax records is kept for the duration of the statutory retention periods.

9. Recipients and transfers to third countries

Recipients of personal data are exclusively the processors named in this policy (Cloudflare for hosting, Resend for email delivery) and our email provider. No data is passed to third parties for advertising purposes. Where processors handle data outside the European Economic Area, we ensure an adequate level of protection through the EU standard contractual clauses and, where available, certifications under the EU-US Data Privacy Framework.

10. Your rights

You have the following rights regarding the personal data concerning you:

  • right of access (Art. 15 GDPR),
  • right to rectification (Art. 16 GDPR),
  • right to erasure (Art. 17 GDPR),
  • right to restriction of processing (Art. 18 GDPR),
  • right to data portability (Art. 20 GDPR),
  • right to object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR),
  • right to withdraw consent with effect for the future (Art. 7 (3) GDPR).

An email to info@fioxx.com is enough to exercise your rights. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hellenic Data Protection Authority (Kifissias 1-3, 11523 Athens, www.dpa.gr). You may also contact the supervisory authority of your habitual residence.

11. Data security

The transfer between your browser and our website is encrypted with TLS (HTTPS). The contact endpoint checks the origin of the request, limits its size, validates all inputs on the server and stores no form data. The origin check is an additional protective measure against automated submissions, not proof of which page a request actually came from. Access to the mailbox and the systems is limited to management and secured with multi-factor authentication.

12. No automated decision-making

Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place on this website.

13. Changes to this policy

We adapt this privacy policy when the processing on this website changes, for example if we use an analytics tool in future. The current version is always available at fioxx.com/en/datenschutz/. Version of this text: 1 September 2026.