Privacy policy
Last updated: date of publication
Who we are
This policy explains how personal data is handled on the ihos.ai website. ihos is a product of Formato. The controller of your personal data is legal entity name, registered address, ΓΕΜΗ and VAT number.
Contact us about your data at info@ihos.ai, by phone on +30 210 751 4471, or by post at John Kennedy 35, Athens. Data protection officer contact, if one is appointed.
This policy covers the website only. The ihos app that guides and guests use during tours has its own privacy notice link, or note that it is still to be written.
Setup enquiries and demos
When you send the setup enquiry form we receive your name, email address and role, and, if you fill them in, your organisation, phone number, group size, listening setup or equipment preference, purchase, rental or own-equipment preference, preferred date and message.
With the request we also receive the page language, the page where you first arrived on our site, the domain of the website that linked to us, and the campaign labels in the link you followed (utm_source, utm_medium, utm_campaign, utm_content, utm_term). These labels tell us which advert or post brought you. We do not attach advertising click identifiers to your request.
- Why: to reply about your setup, quote or demo request, and to see which of our campaigns bring enquiries.
- Legal basis: steps you ask us to take before a possible contract (Article 6(1)(b) GDPR) for the reply and the demo; our legitimate interest in measuring our marketing (Article 6(1)(f) GDPR) for the campaign labels.
- How it reaches us: the form is delivered by FormSubmit (formsubmit.co) as an email to our company mailbox, hosted by Microsoft 365.
- How long we keep it: for example, 24 months after our last contact, unless we go on to work together.
Website analytics (Google Analytics 4)
We use Google Analytics 4, provided by Google Ireland Limited, to understand how the site is used: which pages are visited, how many people start the live demo and how many send a setup enquiry. We record these events: generate_lead (enquiry sent), demo_start, demo_first_audio, demo_complete, demo_end, cta_click and faq_open. They never include what you say in the demo or what you write in the form.
The Google tag runs in consent mode. Analytics cookies are set only if you choose Accept in the cookie bar. If you choose Reject, or make no choice, the tag still sends Google basic signals without cookies, for example that a page was viewed, with advertising identifiers removed, which Google may use for aggregated modelling. Legal to confirm: keep this setting, or switch to sending nothing to Google before consent.
- Legal basis: your consent for the cookies (Article 6(1)(a) GDPR and Article 4(5) of Greek Law 3471/2006); legitimate interest, Article 6(1)(f) GDPR for the cookieless signals.
- Change your mind: use Cookie settings at the bottom of every page.
Meta Pixel (Facebook and Instagram ads)
If you choose Accept, and once we have switched it on, the Meta Pixel from Meta Platforms Ireland Limited loads. It tells Meta that you visited our site and whether you started the demo or sent a setup enquiry (events PageView, DemoStart, DemoHeard and Lead). We use this to measure our Facebook and Instagram ads and to show them to people likely to be interested. Meta may link this information to your Facebook or Instagram account.
We do not send your email address, phone number or anything you write in the form to Meta.
For collecting this data on our site and passing it to Meta, we and Meta are joint controllers, under Meta's controller addendum (facebook.com/legal/controller_addendum). What Meta does with the data afterwards is Meta's responsibility; see Meta's privacy policy.
- Legal basis: your consent (Article 6(1)(a) GDPR and Article 4(5) of Law 3471/2006).
- Change your mind: use Cookie settings at the bottom of every page.
The live voice demo
The demo on our pages lets you speak into your microphone and hear yourself translated. Nothing is recorded until you press Start and allow microphone access. The demo stops after 60 seconds, when you press Stop, or when you leave or hide the page.
While it runs, your voice is streamed from your browser to our demo server (live.ihos.ai, hosted by hosting provider and country) and from there to Google Cloud (contracting entity, e.g. Google Cloud EMEA Limited), our speech-translation provider, which returns the translated speech and the text shown on screen. Our demo server does not save your audio or the transcripts, and does not log them.
Legal to confirm: how long Google Cloud keeps this audio and whether it may use it to improve its services, under our agreement and its terms for our account.
To keep the free demo available, our server limits each IP address to 5 demo sessions per hour. It keeps the IP address in memory only for that hour and does not write it to disk.
Please do not say anything personal or confidential during the demo.
- Legal basis: your request to use the demo (Article 6(1)(b) GDPR), or legal to advise; our legitimate interest in preventing abuse (Article 6(1)(f) GDPR) for the IP limit.
Hosting and server logs
The website is hosted by Vercel Inc. When you visit, Vercel's servers process your IP address, browser type and the pages you request, to deliver the site and protect it from attacks, and keep these logs for retention period.
Our fonts are served from our own site, so no font provider receives your visit.
- Legal basis: our legitimate interest in running a secure website (Article 6(1)(f) GDPR).
What we store on your device
| Name | Type | Set by | Purpose | Kept |
|---|---|---|---|---|
ihos.consent | Local storage | ihos.ai | Remembers your cookie choice | Until you clear it |
ihos.attribution | Session storage | ihos.ai | Keeps your landing page and campaign labels until you send the form | Until you close the tab |
_ga, _ga_* | Cookie | Google Analytics | Tells visits apart; only after Accept | Up to 2 years |
_fbp | Cookie | Meta Pixel | Recognises your browser for ad measurement; only after Accept | 90 days |
Who receives your data
- FormSubmit, which delivers the setup enquiry form.
- Microsoft, which hosts our company mailbox.
- Google, for website analytics.
- Google Cloud, which translates your voice in the live demo.
- Meta, as joint controller for the pixel, if you accept.
- Vercel, which hosts the website, and the host of the demo server.
We do not sell your personal data.
Transfers outside the EU
Some of these providers process data outside the European Union, mainly in the United States. Where they do, the transfer relies on the EU-US Data Privacy Framework if the provider is certified, or on the European Commission's standard contractual clauses. Confirm the basis for each provider, especially FormSubmit.
Your rights
You can ask to see the personal data we hold about you, correct it, delete it, restrict how we use it or receive it in a portable format. You can object at any time to processing based on our legitimate interest. Where we rely on your consent, you can withdraw it at any time; this does not affect what we did before.
Write to info@ihos.ai. We reply within one month.
You can also complain to the Hellenic Data Protection Authority (www.dpa.gr), Kifisias 1-3, 115 23 Athens.
Children
This website is meant for businesses and professionals in tourism. We do not knowingly collect personal data from children under 15.
Changes to this policy
We will update this page when the way we handle data changes, and show the date of the change at the top.