Privacy Notice

Last updated: 16 May 2026

This page explains what data the wind.surftheologos.com dashboard processes when you visit it, why, and what your rights are under the EU General Data Protection Regulation (GDPR).

Who runs this site

Data controller: Tobias Gottfried, Surf and Kite Theologos, 851 06 Theologos, Rhodos, Greece. For privacy questions or to exercise your rights, contact info@surftheologos.com or +30 224 108 2203.

What we collect ourselves

Our application writes short-lived access logs of every HTTP request. Each log line contains:

• your IP address
• the request method and path (e.g. GET /)
• the response status and timing

We do not log user-agent strings, referrers, cookies, or request bodies. On Render, these application logs are retained for up to 7 days. They are used only to detect abuse, debug errors, and operate the service. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).

We do not use analytics or advertising cookies. We use the following first-party cookie for regular visitors:

• theologos_consent (value 0 or 1) — remembers whether the optional Windguru forecast widget may load. SameSite=Lax, Secure on HTTPS, expires 6 months after it is written.

Hosting & infrastructure

The site is hosted on Render (Render Services, Inc., USA) as our processor, in Render's Frankfurt (EU) region. Limited US support or subprocessor access may occur. See Render's DPA, security/subprocessor information, privacy policy, and EU-US Data Privacy Framework certification.

Third-party services loaded in your browser

The only optional third-party service on the dashboard is the Windguru forecast widget. When loaded, your browser connects to Windguru and transfers at minimum your IP address to that provider. Legal basis: your consent (GDPR Art. 6(1)(a) and, where applicable, ePrivacy rules). The widget does not load until you click Accept on the consent banner; you can withdraw consent at any time via the Cookie settings link.

• Windguru (windguru.cz, Czech Republic / EU) — forecast widget. When loaded, Windguru may set or read cookies on its own domain. Privacy policy: windguru.cz/help.php?sec=privacy.

Live beach camera

Surf Theologos operates a live camera at Theologos beach. The camera points at the water and the beach to show current surf, kite, and wingfoil conditions. The feed is embedded on this page and also appears on the Surf Theologos live cam and wind page. The camera is wide-angle and primarily captures the water, but it may incidentally record identifiable individuals present at the beach.

• Controller: Surf Theologos (same entity as the operator of this site, see "Who runs this site" above).
• Purpose: showing live wind, wave, and beach conditions to surfers, kiters, wingfoilers, and visitors planning a session at the spot; supporting related on-site rental activities.
• Legal basis: legitimate interest (GDPR Art. 6(1)(f)). The camera is intended to show spot conditions, not to monitor individuals.
• Minimisation: the camera uses a sea-focused wide-angle view, although the beach may also be visible. We do not use audio, facial recognition, biometric analysis, manual tracking of individuals, or zoom/following.
• How the stream is delivered: to play the live camera, your browser requests media from restreamer.lefiasco.de. That host is operated by Surf Theologos as part of the same controller environment and is not an independent third-party widget provider.
• Recording and retention: the stream is live to viewers and also recorded on our side for up to 72 hours / three (3) days, after which recordings are automatically deleted. Recordings are kept for this short window so that very recent incidents (safety, equipment loss, accident review) can be checked. If footage needs to be preserved for an accident review, legal claim, insurance matter, police or authority request, or similar, the relevant clip may be kept separately only as long as necessary for that purpose and then deleted. Recordings are not shared with third parties except where required by law or to cooperate with competent authorities.
• Your rights: you may request confirmation, access, objection, or erasure for footage containing you. Email info@surftheologos.com with the approximate date, time, location, and identifying details. Because retention is only 72 hours / 3 days, please contact us promptly.

Your rights

Under GDPR you have the right to: access your personal data, correct it, request its deletion, object to processing based on legitimate interest, restrict processing, and data portability.

You can also lodge a complaint with a data protection supervisory authority in your EU/EEA country of residence, your place of work, or the country where the alleged infringement took place. For reference, our lead authority is the Hellenic Data Protection Authority (HDPA); a full list of EEA authorities is maintained by the European Data Protection Board.

To exercise any of these rights, email info@surftheologos.com.

Withdrawing consent

You can change or withdraw consent at any time using the Cookie settings link in the corner of the dashboard, or by deleting the theologos_consent cookie in your browser. When you change your choice the dashboard reloads so that the optional Windguru widget can be loaded or removed cleanly.

Changes to this notice

If we change how data is processed, we will update this page and the date at the top.