Privacy policy

Last updated: 23 October 2026.

This policy covers browsing this website and contacting WorkRoot through it. It does not cover separate candidate or employee processes outside the website.

Contact and information we collect

Contact WorkRoot at 11 Victoria Square, Athens, 10434, Greece, info@workroot.gr or +30 699 486 2626, including for privacy questions and rights requests.

The enquiry form requires your name, company, phone number and email. Industry, service and message are optional. We use these details to answer your enquiry and explore a possible partnership, not to enrol you in marketing. Please do not send health information, identity documents or unnecessary information about others. You can also contact us by email or phone.

Purposes and legal bases

Where you request steps towards your own contract, processing is based on those pre-contractual steps (GDPR Article 6(1)(b)). Business correspondence, including enquiries from company representatives, relies on WorkRoot's legitimate interest in answering enquiries and managing business relationships (Article 6(1)(f)).

Website security relies on our legitimate interest in protecting the service. Optional announcement storage relies on consent. The form is not used for automated candidate assessment or selection.

Access and service providers

Enquiries go to info@workroot.gr and are accessible to authorised people handling correspondence and technical providers where needed for support and security. Form enquiries are not shared with Lalita Budha Agency & Partners L.P. or partners in Nepal or India.

Hostinger provides website and business-email hosting. Technical connection data, such as IP addresses and request times, supports page delivery and security. We use HTTPS, authenticated encrypted SMTP, input checks and abuse controls. No system can guarantee absolute security.

Hostinger's data-processing terms describe subprocessors and contractual safeguards for transfers outside the EEA. Not sharing enquiries with our business partners does not mean all providers process data exclusively in the EU.

Retention

Enquiries that do not lead to a partnership are kept for up to 180 days after correspondence is completed, then deleted unless a specific legal retention obligation applies. Information no longer needed is deleted earlier.

WorkRoot is responsible for manual review and deletion; the form does not automatically delete mailbox messages. Contract-related and legally required records follow their own purposes and obligations. The 180-day period is not a blanket retention period for infrastructure logs or backups.

Cookies and analytics

Our cookie policy describes necessary consent storage and optional announcement preferences. Rejecting optional storage does not prevent browsing or contacting us.

Planned Google Analytics 4 integration

We plan to use GA4 to understand website use and improve its content. Google Analytics is not active. This section explains the planned integration, not current collection or permission to start it.

Once connected, measurement will require a positive choice in a separate Analytics category, based on consent (GDPR Article 6(1)(a)). Until then, or if you reject it, no Analytics code will load and no measurement requests will be sent to Google. Today's announcement-preference consent does not cover Analytics.

Planned data includes page views, interactions, referral sources, basic device/browser details and approximate location, linked to browser identifiers. This is not necessarily anonymous. We will not send names, email addresses, phone numbers or form contents. Google signals, personalised advertising and Google Ads linking are not planned.

The intended user/event retention is 14 months, with user-identifier reset on new activity disabled. This is separate from cookie expiry and does not limit standard aggregated reports. These settings will be applied and verified before collection starts.

Google will receive measurement data as the service provider; processing may involve countries outside the EEA, including the US. Before activation, we will review the applicable Google data-processing terms and transfer safeguards, publish the verified setup and request a fresh consent choice. See also how Google uses information from partner websites.

After activation, withdrawing consent in Cookie settings will stop future measurement; it will not itself recall data already sent. Contact info@workroot.gr for requests concerning that data.

Your rights

Subject to the applicable legal basis and conditions, you may request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. Withdraw optional-storage consent through "Cookie settings" without affecting processing already lawfully carried out.

Email info@workroot.gr. We may request necessary identity clarification where there is reasonable doubt. We normally respond within one month, without undue delay. Complex or numerous requests may require up to two additional months, with notice during the first month. You may complain to the Hellenic Data Protection Authority.

External links

Social networks, WhatsApp and other linked services have their own privacy policies. These are links, not embedded tracking tools on our website.