Privacy Policy

Last Updated: October 3, 2026

1. Introduction

Xathlos ("we", "our", or "us") operates the website xathlos.com and associated services. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services.

We operate in Greece and are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Website Visitors

When you visit xathlos.com, we may collect:

Email Addresses: If you subscribe to our event notification service, we collect your email address to send you updates about running events in Greece.
Analytics Data: We use Google Analytics to understand how visitors use our website. This includes:
- IP addresses (anonymized)
- Browser type and version
- Pages visited and time spent on pages
- Referring website
- Device type and screen resolution
Country detection: When you first visit, your IP address is used to detect your country so we can show the site in Greek or English. The IP address is not stored for this purpose. IP Geolocation by DB-IP.
Cookies: We use cookies for analytics purposes. You can control cookies through your browser settings.

2.2 Facebook App Integration

We use a Facebook app exclusively for administrative purposes to automatically post running event information to our Facebook page. This app:

Is only accessed by website administrators
Does not collect data from Facebook users
Does not access user profiles, friends lists, or personal information
Only posts public content to our Facebook page
Does not store any Facebook user data

Important: Regular website visitors and Facebook users never interact with this app directly. It is solely used for content automation by administrators.

3. How We Use Your Information

We use the information we collect for the following purposes:

Email Subscriptions: To send you notifications about new running events, event updates, and registration openings based on your preferences.
Analytics: To understand website usage patterns, improve our services, and enhance user experience.
Facebook Posting: To automatically share running event information on our Facebook page to reach our community.

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

Consent: When you subscribe to email notifications, you provide explicit consent for us to process your email address.
Legitimate Interests: We use analytics to improve our website and services, which constitutes a legitimate interest.

5. Data Sharing and Third Parties

We share your data with the following third parties:

Google Analytics: For website analytics. Google's privacy policy can be found at https://policies.google.com/privacy
SMTP2GO: To send subscription and notification emails. Privacy policy
Hosting: The website is hosted by netcup GmbH in the European Union.
Facebook: Only to post public event information to our Facebook page. We do not share user data with Facebook.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Retention

Email Subscriptions: We retain your email address until you unsubscribe or request deletion.
Analytics Data: Google Analytics retains data according to their retention policies (typically 26 months by default).

7. Your Rights Under GDPR

As a data subject in the EU, you have the following rights:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate data.
Right to Erasure: Request deletion of your personal data.
Right to Restrict Processing: Request that we limit how we use your data.
Right to Data Portability: Request a copy of your data in a structured format.
Right to Object: Object to processing of your data for certain purposes.
Right to Withdraw Consent: Withdraw your consent at any time (e.g., unsubscribe from emails).

To exercise any of these rights, please contact us using the information below.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

9. Cookies

We use cookies for analytics purposes through Google Analytics. You can control and delete cookies through your browser settings. Please note that disabling cookies may affect the functionality of some parts of our website.

10. Children's Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

12. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States (for Google Analytics and Facebook services). We ensure appropriate safeguards are in place for such transfers in accordance with GDPR.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us through our feedback form:

Contact Form

14. Supervisory Authority

If you are located in the EEA and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.