This policy explains what personal data DMU collects when you visit this website, join the waitlist or use DMU Mail, why we collect it, and what you can do about it.
1Who is responsible
DMU (Konstantinos Mitsouras, Krystalli 7, Marousi 151 25, Greece, ΑΦΜ 174926054) is the controller for the data in this policy. You can reach us at privacy@dmu.email.
The mail inside your organisation’s mailboxes is different. There your organisation is the controller, and we process it on its behalf under the Data processing agreement.
2What we collect
| Data | Examples |
|---|---|
| Account | Name, email address, password (stored only as a hash), second factor |
| Organisation | Name, ΑΦΜ, ΔΟΥ, billing address and plan |
| Waitlist | Company, team size, and how you found us |
| Security and usage | Sign-ins, IP address, device and browser, errors |
| Support | The messages you send us, and our replies |
| Website visits, only if you accept analytics | Pages viewed, how you arrived, device and browser, approximate location, and a random ID in a cookie |
Account
- Examples
- Name, email address, password (stored only as a hash), second factor
Organisation
- Examples
- Name, ΑΦΜ, ΔΟΥ, billing address and plan
Waitlist
- Examples
- Company, team size, and how you found us
Security and usage
- Examples
- Sign-ins, IP address, device and browser, errors
Support
- Examples
- The messages you send us, and our replies
Website visits, only if you accept analytics
- Examples
- Pages viewed, how you arrived, device and browser, approximate location, and a random ID in a cookie
3Why we use it
| Purpose | Legal basis |
|---|---|
| Providing DMU Mail to you | Contract |
| Billing, and meeting tax law | Legal obligation |
| Keeping the service secure and fixing problems | Legitimate interest |
| Deciding whom to invite from the waitlist | Legitimate interest |
| Product news, only if you ask for it | Consent |
| Seeing how this website is used, only if you accept analytics | Consent |
Providing DMU Mail to you
- Legal basis
- Contract
Billing, and meeting tax law
- Legal basis
- Legal obligation
Keeping the service secure and fixing problems
- Legal basis
- Legitimate interest
Deciding whom to invite from the waitlist
- Legal basis
- Legitimate interest
Product news, only if you ask for it
- Legal basis
- Consent
Seeing how this website is used, only if you accept analytics
- Legal basis
- Consent
4Where it’s stored
Your account, your organisation’s data and your mail are stored in the EU. Our servers run in Nuremberg, Germany, with Hetzner Online GmbH, and files are kept in EU object storage. Website analytics is the one exception, below.
6How long we keep it
- Account data: for as long as your account exists, then deleted within 30 days of closing it.
- Invoices: for as long as Greek tax law requires.
- Waitlist answers: until you’re invited, or until you ask us to remove them.
- Security logs: for a limited period, then deleted.
- Website analytics: 14 months, then deleted by Google Analytics.
7Your rights
You can ask to see, correct, delete, restrict or move your data, object to how we use it, and withdraw consent at any time. Write to privacy@dmu.email and we’ll answer within a month.
9Complaints
If you’re not happy with how we handle your data, you can complain to the Hellenic Data Protection Authority, Kifissias 1–3, 115 23 Athens, complaints@dpa.gr.
10Changes to this policy
We update the date at the top whenever this policy changes, and email account holders about changes that matter.
Questions about this page?
Write to privacy@dmu.email, or by post to DMU, Krystalli 7, Marousi 151 25, Attica, Greece.