​​​

Last updated: 8 August 2026

 

1. Who I am

This website is operated by:

Spyridon “Spyros” Giannelos, professionally known as Dr Spyros Giannelos

Location: London, United Kingdom
Email: spyros@spyrosgiannelos.com

I am the controller of the personal information described in this Privacy Notice where I determine why and how that information is used.

​

2. Scope of this Privacy Notice

This Privacy Notice applies to personal information I collect and use in connection with:

• your use of spyrosgiannelos.com;

• the website Contact form;

• Wix website-account features;

• cookies and similar technologies;

• professional enquiries and related correspondence.

The website contains links to external platforms, including Skool, Substack, LinkedIn, Google Scholar, ORCID, Scopus and Web of Science. Those services operate under their own privacy notices when you visit or use them.

​

​

3. Personal information I may collect

Depending on how you use the website, I may collect the following categories of personal information.

​

Website and technical information

When you visit the website, Wix and related services may collect technical information such as:

• your Internet Protocol address;

• browser and device information;

• pages viewed and dates or times of access;

• website interactions;

• security, diagnostic and error information.
  ​

Contact information

When you contact me through the website or by email, I may collect:

• your name;

• email address;

• organisation, if provided;

• the subject and content of your enquiry;

• related correspondence.

​

Website-account information

When you create a Wix website account, I may collect:

• your name and email address;

• account identifier;

• registration date;

• account status;

• access permissions;

• login and security information.

Passwords and authentication credentials are managed through Wix. I do not receive your password in readable form.

 

​

​

4. How I receive personal information

I may receive personal information:

• directly from you;

• through Wix forms and website accounts;

• automatically through website technologies;

• through email or other professional correspondence;

• from a person acting with your authority.

​​
 

5. Why I use personal information
 

Professional enquiries

I use contact details and correspondence to assess and respond to research, industry collaboration, speaking, media, employment and other professional enquiries.

The lawful basis is normally my legitimate interest in receiving and responding to relevant professional communications. 

Website accounts and access

I may use account information to:

• create and administer Wix accounts;

• authenticate users;

• control access to restricted website areas;

• maintain account security;

• respond to account-related enquiries.

The lawful bases are my legitimate interest in administering secure website access and, where relevant, taking steps at your request before entering into an agreement.

Website security and administration

I may use technical, account and communication information to:

• protect the website and website accounts;

• prevent fraud, unauthorised access and misuse;

• investigate security incidents;

• resolve complaints;

• maintain appropriate business records;

• establish, exercise or defend legal claims.

The lawful bases are my legitimate interests in operating a secure and lawful website and, where applicable, compliance with legal obligations.
 

Cookies and similar technologies

Essential cookies and similar technologies are used to provide website security, Wix account login, authentication, restricted-page access and other website functions requested by the visitor. 

Marketing

Information submitted through the Contact form is not automatically added to my Substack publication or another mailing list.

If you separately choose to receive optional marketing communications, you may unsubscribe or withdraw your consent at any time.

 

​

6. Legitimate interests

Where I rely on legitimate interests, these may include:

• responding to relevant professional communications;

• operating and improving the website;

• administering website accounts and access;

• maintaining website and account security;

• preventing fraud and misuse;

• keeping appropriate business records;

• resolving complaints and disputes;

• protecting my legal rights.

I consider whether the use of personal information is necessary and balance these interests against the rights and reasonable expectations of the person concerned.
 

​

7. Who personal information may be shared with
 

I share personal information only where reasonably necessary to operate or protect the website, communicate with visitors, obtain professional advice or comply with legal obligations.

​

Wix 

Wix provides website hosting, forms, website accounts, access controls and technical infrastructure. 

 

Google Workspace

Google Workspace is used for professional email and related communication services.

 

Other service providers and professional advisers

Email, cloud-storage, information-technology, security, accounting and legal providers may process personal information where reasonably necessary to operate or protect the website and professional activities.

 

Legal and regulatory recipients

Personal information may be disclosed where required by law, taxation obligations, a court or regulatory authority, or where necessary to establish, exercise or defend legal claims.

Some of these organisations process personal information under their own privacy notices.

I do not sell personal information.

​​​
 

8. International processing

Some service providers, including Wix, Google and technology providers, may process personal information outside the United Kingdom.

Where UK data-protection law requires safeguards for an international transfer, the relevant transfer may rely on:

• a United Kingdom adequacy regulation;

• approved contractual safeguards;

• the United Kingdom International Data Transfer Agreement;

• an approved United Kingdom addendum;

• another legally recognised transfer mechanism.

Further information about the transfer arrangements used by a particular service provider is available in that provider’s privacy notice.

​​
 

9. How long I keep personal information
 

I keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Notice.

The following periods normally apply:

• Professional enquiries and correspondence: up to 24 months after the last meaningful communication.

• Website-account information: while the account remains active and normally for up to 24 months after the last relevant activity.

• Security and technical records: for the period reasonably needed to protect the website and investigate incidents.

Information may be retained for longer where necessary for an active complaint, legal claim, regulatory obligation or investigation.

When personal information is no longer required, it will be deleted or anonymised where reasonably practicable.

​​​
 

10. Cookies and similar technologies

The website uses cookies and similar technologies that are necessary for its operation.

These technologies may be used for:

• website security;

• Wix account login and authentication;

• restricted-page access;

• maintaining essential website sessions;

• providing functions requested by the visitor.

You can control or delete cookies through your browser settings. Blocking essential cookies may prevent account login, restricted-page access or other requested website functions from working correctly.

 

​​​​​

​

11. Security

I use reasonable technical and organisational measures designed to protect personal information.

These may include:

• Wix account and access controls;

• restricted page permissions;

• authentication;

• secure website hosting;

• access limitation;

• account and platform security settings;

• secure email and technology providers.

No website or internet transmission can be guaranteed to be completely secure.

Where you have a website account, you are responsible for:

• choosing a strong and unique password;

• keeping login information confidential;

• logging out from shared devices;

• notifying me if you believe your account has been compromised.

​​​
 

12. Automated decision-making

I do not use solely automated decision-making to make decisions about you that produce legal or similarly significant effects.

Website, security or technology providers may use automated systems for security, fraud prevention or technical protection under their own privacy notices.

​​
 

13. Your data-protection rights

Depending on the circumstances and the lawful basis used, you may have the right to:

• request access to your personal information;

• request correction of inaccurate or incomplete information;

• request deletion of personal information;

• request restriction of processing;

• object to processing;

• receive certain personal information in a portable format;

• withdraw consent where processing is based on consent;

• complain to a supervisory authority.

These rights are not absolute and may be subject to legal conditions or exemptions.

To exercise a right, contact:

spyros@spyrosgiannelos.com

I may need to request information reasonably necessary to verify your identity before responding.

​​
 

14. Your right to object

You have the right to object to processing based on legitimate interests in certain circumstances.

You also have an absolute right to object to the use of your personal information for direct marketing.

Where processing is based on consent, you can withdraw that consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

​​​
 

15. External websites and platforms

This website contains links to external services, including:

• Skool;

• Substack;

• LinkedIn;

• Google Scholar;

• ORCID;

• Scopus;

• Web of Science.

I am not responsible for how those external services independently process personal information.

You should review the privacy information provided by the relevant service before creating an account or supplying personal information.

​​
 

16. Complaints

Please contact me first if you have a concern about how your personal information is handled:

spyros@spyrosgiannelos.com

You also have the right to complain to the Information Commissioner’s Office, which is the United Kingdom supervisory authority for data protection.

​​​
 

17. Changes to this Privacy Notice

This Privacy Notice may be updated where:

• website functionality changes;

• new service providers are introduced;

• privacy or cookie settings change;

• legal or regulatory requirements change.

The latest version will be published on this page and will show the date on which it was last updated.