Legal

PrivacyPolicy.

This Privacy Policy explains how INSTINKT collects, uses, stores, and protects personal information when you visit our website, contact us, or apply to join the INSTINKT Referral Partner Network.

1. Who we are

INSTINKT is a creative brand studio based in Athens, Greece.

For questions about this Privacy Policy or the processing of your personal information, contact: info@instinktagency.com.

2. Information we collect

Contact Form

When you contact us through our website, we may collect:

  • Your name
  • Email address
  • Company name, if provided
  • Service of interest
  • Message or enquiry

Referral Partner Applications

When you apply to join the INSTINKT Referral Partner Network, we may collect:

  • Full name
  • Email address and phone number
  • Professional status
  • Industry or professional background
  • Types of businesses within your network
  • How you discovered the program
  • Information about your professional network
  • Whether you have potential referral opportunities
  • Your motivation for joining
  • Professional website or social media profile links

We may also collect technical information necessary to operate and protect the application form, including information used to detect spam, prevent duplicate submissions, and maintain system security.

Where available, campaign attribution parameters may be associated with an application to understand how applicants discovered the program.

3. How we use your information

We use personal information to:

  • Respond to enquiries.
  • Communicate about our services.
  • Evaluate potential projects and business relationships.
  • Review Referral Partner applications.
  • Assess potential suitability for the Referral Partner Network.
  • Contact applicants about their applications.
  • Arrange introductory discussions.
  • Take steps toward establishing a potential partnership.
  • Maintain appropriate business records.
  • Protect our website and application systems against misuse.

Submitting an application does not automatically establish a partnership or guarantee acceptance.

We do not automatically add applicants or contact-form users to marketing mailing lists.

4. Legal basis for processing

Where the General Data Protection Regulation (GDPR) applies, we process personal information on the following legal bases, as appropriate:

Steps prior to entering into an agreement — Article 6(1)(b)
Where processing is necessary to respond to a request concerning a potential contractual relationship, including an application to become a Referral Partner.

Legitimate interests — Article 6(1)(f)
Where necessary to assess business opportunities, manage professional correspondence, evaluate potential partnerships, prevent misuse, and protect our systems, provided those interests are not overridden by applicable individual rights.

Legal obligations — Article 6(1)(c)
Where processing or retention is required by applicable law.

Consent — Article 6(1)(a)
For optional analytics technologies where consent is required and has been granted.

5. Data storage and retention

Information submitted through our website is processed and stored using the infrastructure supporting the INSTINKT website.

Contact enquiries are retained only for as long as necessary to respond, manage relevant business correspondence, or satisfy applicable legal requirements.

Referral Partner applications that do not result in a partnership are retained for no longer than 12 months following the last substantive communication, unless earlier deletion is appropriate or a longer retention period is justified by a specific lawful requirement.

Where an applicant becomes an active Referral Partner, information necessary to manage the partnership may be retained throughout the relationship and afterward where required by applicable contractual, accounting, tax, or legal obligations.

Personal information will be deleted or anonymized when it is no longer necessary for the applicable purpose, subject to lawful retention requirements.

6. Access to referral applications

Referral Partner applications are accessible only to authorized INSTINKT personnel responsible for reviewing applications and managing potential partnerships.

Applications are not publicly displayed.

Access to the administrative system is restricted through authentication and authorization controls.

7. Analytics and campaign tracking

We use Google Analytics 4 to understand website usage and improve performance.

Analytics operates according to the consent preferences selected through our cookie consent interface.

We may collect website interactions, page views, device and browser information, approximate geographic information, and campaign attribution information.

Referral application submissions may be recorded as analytics events only when the applicable analytics consent has been granted.

We do not intentionally send applicants' names, email addresses, phone numbers, or application responses to Google Analytics.

8. Service providers and data sharing

We use third-party service providers where necessary for website hosting, data storage, email delivery, security, and analytics.

These providers may process personal information on our behalf, subject to applicable contractual and data protection requirements.

We do not sell personal information.

We do not disclose Referral Partner applications publicly or share applicant information with unrelated third parties for their independent marketing purposes.

9. International data processing

Some service providers may process personal information outside Greece or the European Economic Area.

Where international transfers occur, we apply appropriate safeguards as required by applicable data protection law, including relevant adequacy decisions or approved contractual safeguards where applicable.

10. Your data protection rights

Subject to applicable law, you may have the right to:

  • Access your personal information.
  • Request correction of inaccurate information.
  • Request deletion of your information.
  • Request restriction of processing.
  • Object to certain processing activities.
  • Request data portability where applicable.
  • Withdraw consent where processing is based on consent.

You can exercise your rights by contacting: info@instinktagency.com.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority: www.dpa.gr.

11. Security

We use appropriate technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, and loss.

These measures include access controls and restricted administrative access.

No electronic system can guarantee absolute security.

12. Updates to this policy

We may update this Privacy Policy when our services, website functionality, or data processing practices change.

The latest version will be published on this page, together with its most recent update date.

Last updated: November 2026