Who is responsible

The controller for this website is:

ΚΥΤΙΟ Ε.Ε., represented by Konstantinos Sevdinoglou
Kanada 42, 851 32 Rhodes, Greece
Email: hello@fixindex.eu

We have not appointed a data protection officer because we are not required to. For any privacy question, email us at the address above.

What we count

When you open a phone page, pick a fault, use a calculator, search, or the IMEI finder returns a model, your browser sends a short message to our server with: the type of action, the page, the phone model, the fault or tool, a shortened search text, and the page language. Our server adds the country, region and city that Cloudflare derives from the IP address of the connection. We add one to a daily counter for that combination and discard the message.

Your IP address is used only briefly to derive the location. We do not store IP addresses or browser or device details, set no cookies and assign no IDs, so we do not link counts to a person and counts cannot be linked to each other. Search text is cut to 40 characters, and we drop it if it looks like an email address or contains a long number. If your browser sends Global Privacy Control or Do Not Track, nothing is sent.

We use these totals to decide which phones, parts and tools to cover next, and we may share aggregated statistics (for example, "the most searched phones in Greece this week") with others. We never share or sell anything about individual visits, because we do not store it.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is knowing which content is used, so we can develop the site to meet demand.

Retention: The incoming message is discarded as soon as the counter is updated. We keep the daily counters for as long as we need them to plan and evaluate the service.

Cloudflare Web Analytics

We also use Cloudflare Web Analytics, an analytics service from Cloudflare, our host. A small script from static.cloudflareinsights.com reports page views and how fast the page loaded (timing and Core Web Vitals) to Cloudflare. As with any request on the internet, your IP address reaches Cloudflare in the process. Cloudflare shows us only totals by page, referring site, country, browser, operating system and device type. According to Cloudflare, the service uses no cookies or local storage, does not use the IP address to recognise visitors (no fingerprinting), and does not track individuals across sites.

It is separate from our own counter above, so the Global Privacy Control and Do Not Track check described there does not apply to it. If you block the script in your browser, nothing is sent, and the site works the same without it.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is measuring and improving the reach and loading speed of our pages.

Retention: We receive totals only. Cloudflare processes the underlying connection data only as long as needed to produce those totals.

IMEI finder

The IMEI you type stays in your browser. Only the model it matches is counted (see "What we count").

On your device

When you use the relevant feature, your browser stores your theme (fx-theme), used-phone checklist (fx-used), country for part prices (fx-price-country) and shortlist (fx-shortlist-v1). The shortlist contains only model identifiers for up to three phones, with no IMEI or contact details. These saved lists and preferences stay in this browser, except for the public model choices you deliberately include in a shared comparison link as described below. An individual action may still increment the anonymous counter described above. You can clear the shortlist on its page, or remove all these preferences by clearing this site's data in your browser.

My FixIndex stores up to six owned phones under fx-household-v2, each with a local device identifier, an optional label, model, market, self-reported checks, last and next review dates and, where applicable, the support reference shown at the last check, with its date and source link. Two devices of the same model keep separate records. Saving requires an explicit action. An older single-phone profile under fx-ownership-v1 is carried over on the next successful save. The earlier copy and a record of which version was imported remain in the browser so that a save in a still-open older tab is not lost. No email address, IMEI or serial number is required. Device labels and checks stay in this browser; they are not sent with the newsletter or to our usage counters. There is no cross-device synchronisation. Removing a device removes its entry from the active household list. Clear this site’s browser data to remove all records, including retained migration copies.

Shared comparisons: a link from the shortlist contains only public phone-model identifiers and the selected country. Anyone with the link can see those choices. Opening it sends those address parameters with a normal page request to our hosting service. Copying a link does not send a message, and opening a preview does not replace the recipient’s saved shortlist until they explicitly save it. Your owned-phone check-in and repair worksheet amounts are never included in this link.

The repair worksheet saves one comparison under fx-repair-worksheet-v1 only when you press Save: an optional phone-model identifier, your planning period, quote type, coverage assumption, the amounts you enter and the time of the last save. It stays in this browser, separate from My FixIndex and your shortlist. These figures are not placed in a URL, sent with the newsletter or included in our usage counters. There is no account or cross-device synchronisation. You can discard unsaved edits or remove the saved worksheet on its page, or clear this site’s browser data.

A calendar download from My FixIndex is generated locally in your browser and may include your optional device label in its title. You explicitly choose whether to download and import it. If you import the file into a calendar, your chosen calendar service handles its contents under its own terms. It is a one-time event, not a subscribed calendar or an automatic email reminder.

Contact drafts and external links

A contact draft is assembled in your browser and opened in your email app. The draft tool does not send its contents to FixIndex or save them in your shortlist. You review the recipient and message and choose whether to send the email. Preparing a draft does not submit an enquiry or book a service. If you write to FixIndex, we use your message and contact details to handle your enquiry; this does not subscribe you to the newsletter.

Following an external shop, affiliate or repair-provider link takes you away from FixIndex. The provider's or affiliate network's privacy notice applies to that visit and any subsequent enquiry. This also applies to the related businesses iRepair Rhodes and Ohmvia. We do not send contact-draft contents to our usage counters. A click may be counted as an anonymous action; it does not confirm a purchase or repair.

Email

When you choose to subscribe to the FixIndex Brief, the form sends your email address and its tags directly to Buttondown, our newsletter provider. The Brief contains occasional editorial editions; it is not an automatic price or support alert service. Your locally saved phone profile, check statuses and review dates are not included.

• Confirmation (double opt-in): Submitting the form opens Buttondown's response. Follow the steps shown there and confirm your address using the confirmation link if Buttondown sends you one. Buttondown explains its process in its confirmation documentation. Submitting the form alone does not establish a completed subscription. Saving a phone does not subscribe you.
• Tags: The form sends its page language (lang-en, lang-el or lang-de) and, where supplied, further form context: a phone, brand or topic. This includes existing labels such as price-alert and black-friday. These labels are not a promise of automatic or model-specific emails. Submitting again does not replace previously stored preferences.
• Open and click tracking: Buttondown offers optional measurement of email opens and link clicks. If enabled for a sent email, those events can be linked to your address. See the provider's documentation for details. You can object to this processing by emailing us, or unsubscribe using the link in any email.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is sending you the emails you asked for, being able to prove your sign-up, and improving our emails based on open and click counts.

Retention: We keep your address, tags and any recorded open and click data until you unsubscribe or ask us to delete them. Every email has an unsubscribe link, and you can ask us to delete your address and tags at any time. An address whose sign-up is never confirmed is not used for sending.

Hosting and security

The site runs on Cloudflare. On every request, Cloudflare processes connection data such as your IP address, the address requested, the time and the browser string, to deliver the site and protect it against attacks and abuse. Cloudflare also asks your browser to report connection errors to Cloudflare (Network Error Logging, to a.nel.cloudflare.com); successful requests are not reported. Cloudflare acts as our processor under its data processing terms.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is delivering the site reliably, quickly and securely.

Retention: We do not keep server logs with IP addresses ourselves. Cloudflare keeps security-related connection data only for a short period, as needed to fend off attacks and fix errors, and then deletes it.

Recipients and transfers outside the EU

We use the following providers for hosting, website statistics and newsletters. External links and messages you choose to send are described above.

• Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA: hosting, security and Cloudflare Web Analytics.
• Buttondown, LLC, 406 W Franklin St. #201, Richmond, VA 23221, USA: subscription handling and delivery of the occasional FixIndex Brief.

Both companies are based in the USA, so your data may be transferred there.

• Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, covered by the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR). You can check the certification at dataprivacyframework.gov.
• Buttondown, LLC is not certified under the Data Privacy Framework. Transfers rely on the European Commission's Standard Contractual Clauses (Module 2, Art. 46(2)(c) GDPR), as set out in Buttondown's Data Processing Agreement. You can ask us for a copy of the clauses.

Your rights

You have the following rights regarding personal data about you:

• access to whether and which data we process about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability, where its conditions are met (Art. 20 GDPR),
• objection to processing (Art. 21 GDPR, see below).

For most data arising from using this site we store nothing we could link to you (see "What we count"), so in practice these rights mostly concern your email address. Just email hello@fixindex.eu.

Right to object: Because we process all data described here on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. You can object to the use of your email address for our emails, including open and click tracking, at any time and without giving reasons, for example with the unsubscribe link in every email.

Right to complain: You can complain to a data protection supervisory authority, in particular in the EU Member State where you live, work or where the alleged infringement took place (Art. 77 GDPR). The authority responsible for us is the Hellenic Data Protection Authority (dpa.gr).

Whether you must provide data, and automated decisions

You do not have to give us any personal data. Without an email address, we simply cannot send you the FixIndex Brief; My FixIndex works without a subscription. We do not make automated decisions, including profiling, within the meaning of Art. 22 GDPR.

Last updated: 4 November 2026.