Privacy Policy Social Media Lead Forms.
Ascent Alliance
Last updated: 6/9/2026
1. Who we are
Ascent Alliance (“we”, “us”, “our”) is the data controller responsible for the personal data described in this policy.
| Item | Detail |
| Legal entity name | ASCENT ALLIANCE P.C. |
| Registered address | ΓΡΑΜΜΟΥ 71, ΜΑΡΟΥΣΙ |
| G.E.MI. number | 179871603000 |
| VAT (ΑΦΜ) | 802629900 |
| Website | https://ascent-alliance.com |
| Privacy contact | info@ascent-alliance.com |
We process personal data in accordance with Regulation (EU) 2016/679 (the GDPR), Greek Law 4624/2019, and Greek Law 3471/2006 on privacy in electronic communications.
2. How we collect your data
We collect personal data in three ways.
a) Lead forms in our advertising on Facebook and Instagram.
We run paid advertising on Meta platforms. When you submit one of our instant lead forms, Meta passes us the information in that form. Some fields are pre-filled automatically from your Meta profile, so please check them before submitting, you can edit or clear any pre-filled field, and you choose what to send us.
b) Our website. Directly, when you contact us, comment, or register; and automatically through cookies and similar technologies.
c) From Meta as a source of measurement data, through the Meta Pixel on our website.
3. What data we collect
From lead forms: full name; email address; telephone number; website the ad, campaign and form the enquiry came from; date and time of submission; and your responses to any consent questions on the form.
From our website: your IP address and browser user agent string; comment content and the data in the comment form; account details if you register; and cookie data.
From email marketing: whether you opened an email, which links you clicked, and whether you unsubscribed. We use this to measure campaign performance and to avoid sending to people who are no longer interested.
We do not knowingly collect special categories of data (health, political opinions, religious beliefs, trade union membership, biometric or genetic data, sexual orientation, or criminal record data). Please do not include such information in free-text fields.
Our services are not directed at children under 15, and we do not knowingly collect their data.
4. Why we use your data, and our legal basis
GDPR requires us to have a lawful basis for each purpose. The relevant purposes can be found in the table below:
| Purpose | Data used | Legal basis |
| Responding to your enquiry and providing the information, quote or service you asked for | Name, email, phone, enquiry details | Steps taken at your request prior to entering into a contract, Art. 6(1)(b) GDPR |
| Sending you marketing emails, newsletters and offers about our services | Name, email, engagement data | Your consent, Art. 6(1)(a) GDPR, and Art. 11(1) of Greek Law 3471/2006 |
| Measuring the performance of our advertising and improving our campaigns | Ad/campaign source, engagement data, pixel data | Your consent where cookies or similar technologies are used; otherwise our legitimate interest in understanding which advertising works, Art. 6(1)(f) GDPR |
| Website security, spam prevention and fraud prevention | IP address, user agent | Legitimate interest in protecting our site, Art. 6(1)(f) GDPR |
| Keeping accounting and tax records | Transaction and billing data | Legal obligation, Art. 6(1)(c) GDPR |
| Establishing, exercising or defending legal claims | As relevant | Legitimate interest, Art. 6(1)(f) GDPR |
5. How long we keep your data
| Category | Retention period |
| Lead data where you did not consent to marketing | 12 months from submission, then deleted or anonymised. We keep it this long to handle follow-up questions and to prove we handled your enquiry properly. |
| Lead data where you did consent to marketing (Basically I don’t even know if this is an option for you guys, to select or deselect marketing, so it’s here if you need it. Just delete it if its not relevant) | 24 months from your last active engagement with us — meaning the most recent of: your enquiry, a reply from you, or your opening or clicking one of our emails. Each new engagement restarts the 24-month period. |
| Marketing suppression list (people who unsubscribed or objected) | Kept indefinitely, as a minimal record of email address only. We must keep this to make sure we do not contact you again by mistake. |
| Website comments and associated metadata | Kept indefinitely, or until you ask us to remove it. |
| Accounting and tax records | As required by Greek tax law, currently 5 years from the end of the relevant financial year. |
| Records relating to a legal claim | Until the claim is resolved and any appeal period has expired. |
When the period ends, we delete the data or anonymise it so that it can no longer identify you. If you withdraw consent or object to marketing before the period ends, we remove you from our marketing list promptly and retain only the minimum needed for the suppression list.
We review these retention periods annually.
6. Who we share your data with
We do not sell your personal data. We share it only with the following categories of recipient.
- Meta Platforms Ireland Limited — as the operator of the lead forms and the Pixel. Meta also processes data for its own purposes as a separate controller, under its own Privacy Policy: https://www.facebook.com/privacy/policy/
- Our email marketing provider — moosend, which hosts our mailing list and sends our campaigns on our instructions.
- Our CRM provider —Excell , where lead records are stored.
- Our website host — Hostinger.
- Our accountants and professional advisers, where necessary.
- Public authorities, where we are legally required to disclose.
Each provider acting on our behalf is a processor bound by a written data processing agreement under Art. 28 GDPR, and may use your data only on our documented instructions.
7. International transfers
Some of our providers are established outside the European Economic Area, principally in the United States. Where personal data is transferred outside the EEA, we rely on one of the following safeguards:
- an adequacy decision of the European Commission, including the EU–US Data Privacy Framework where the recipient is certified under it; or
- the European Commission’s Standard Contractual Clauses, together with supplementary measures where required.
You can request a copy of the relevant safeguard by contacting us at info@ascent-alliance.com
8. Your rights
Under the GDPR you have the following rights, free of charge:
- Access — to be told whether we hold data about you and to receive a copy (Art. 15).
- Rectification — to have inaccurate data corrected or incomplete data completed (Art. 16).
- Erasure — to have your data deleted where one of the grounds in Art. 17 applies.
- Restriction — to have processing limited in the circumstances in Art. 18.
- Portability — to receive data you gave us in a structured, machine-readable format, and to have it transmitted to another controller (Art. 20).
- Objection — to object to processing based on legitimate interests (Art. 21(1)).
- Objection to direct marketing — you may object at any time, and we must stop immediately. This right is absolute and we cannot refuse it (Art. 21(2)).
- Withdrawal of consent — at any time, where we rely on consent (Art. 7(3)).
To unsubscribe from marketing emails, click the unsubscribe link at the foot of any email, or write to info@ascent-alliance.com It takes effect immediately.
To exercise any other right, contact info@ascent-alliance.com . We will respond within one month, extendable by two further months for complex requests, in which case we will tell you within the first month.
Complaints
If you are unhappy with how we have handled your data, you may lodge a complaint with the Greek supervisory authority:
Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα)
Kifissias Avenue 1–3, 115 23 Athens, Greece
Tel: +30 210 6475600 · www.dpa.gr
You may also seek a judicial remedy before the competent Greek courts.
9. Cookies and the Meta Pixel
We use the Meta Pixel on our website to understand how visitors interact with our content, to measure the effectiveness of our advertising, and to show relevant ads on Facebook and Instagram. The Pixel records actions such as page views and form submissions.
For the collection and transmission of this data to Meta, we and Meta act as joint controllers within the meaning of Art. 26 GDPR. Meta’s subsequent independent processing is governed by its own Privacy Policy. A summary of the joint controller arrangement is available at: https://www.facebook.com/legal/controller_addendum
We set non-essential cookies, including the Pixel, only after you consent through our cookie banner. You can change or withdraw your cookie choices at any time via www.ascent-alliance.com and select the cookie banner
You may also opt out of Meta’s use of data for advertising through your Facebook ad settings, or via https://www.youronlinechoices.com/
Other cookies we set
- Comment cookies — if you leave a comment you may opt in to saving your name, email address and website. These last one year.
- Login cookies — set when you log in, lasting two days; screen options cookies last a year; “Remember Me” extends login to two weeks. Removed when you log out.
- A temporary cookie on the login page to check whether your browser accepts cookies. It contains no personal data and is discarded when you close your browser.
10. Embedded content and other services
Articles on this site may include embedded content such as videos or images from other websites. Embedded content behaves exactly as if you had visited the other website, and those websites may collect data about you, set cookies, embed third-party tracking, and monitor your interaction with that content.
If you upload images to the website, please avoid uploading images with embedded location data (EXIF GPS), as visitors can download and extract that data.
If you request a password reset, your IP address will be included in the reset email.
Visitor comments may be checked through an automated spam detection service.
11. Security
We apply appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, as required by Art. 32 GDPR. These include access controls, encryption in transit, and restricting access to those who need it.
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Hellenic Data Protection Authority within 72 hours, and will notify you directly where the risk is high.
12. Automated decision-making
We do not make decisions producing legal or similarly significant effects about you based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR.
13. Is providing your data required?
Providing your data is entirely voluntary. If you do not provide the information marked as required on our enquiry form, we will not be able to respond to your enquiry. Providing consent to marketing emails is never required in order to receive a response.
14. Changes to this policy
We may update this policy from time to time. We will post the updated version on this page with a revised “Last updated” date. Where changes are significant, we will notify you directly.
15. Contact
Questions about this policy or about how we handle your data:
