GDPR Compliance
For us, maintaining your online privacy is a fundamental right. As the Data Controller under the General Data Protection Regulation (GDPR) 679/2016, we are committed to safeguarding the privacy of the personal data we collect during our commercial transactions.
The processing and protection of your personal data are subject to the terms of our Privacy Policy, the provisions of the GDPR, and other applicable national, EU, and international laws regarding the protection of individuals with regard to the processing of personal data, as currently in force.
WHAT DOES THE GDPR DEFINE AS PERSONAL DATA?
Any information that can be used to directly or indirectly identify a natural person, such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, genetic, psychological, economic, cultural, or social identity of that person.
WHAT DATA DO WE COLLECT AND FOR WHAT PURPOSE? PURPOSE
The personal data we collect during your browsing and your use of the features offered by our website include: Data you provide when registering or filling out the contact form: full name and email address, as well as your postal address and contact telephone numbers; and Technical data, such as the IP address and the web browser used during your visit to our website. By registering on our site, you consent to the general terms of use and any amendments thereto, as described herein.
CONSENT
In cases where we are required to process your personal data based on your consent, a copy of the consent statement—including all details contained therein—is retained to provide proof that consent was granted and to facilitate the process should a withdrawal of consent be requested. Consent is granted for clear and specific processing purposes that have been disclosed in advance, and by granting such consent, you acknowledge that you are fully aware of them.
YOUR RIGHTS
As the data subject whose data we process, you may access the record of personal data we have collected about you. You may also request the deletion, correction, or restriction of processing, or object to the processing of such data, except in cases where we are required to retain your data for administrative, legal, or security purposes. Furthermore, as a data subject, you have the right to withdraw the consent you have given regarding the processing of your data.
In summary, your rights regarding your personal data, in accordance with the GDPR, are as follows:
SUBMITTING REQUESTS – EXERCISING RIGHTS
You may submit a request to exercise the rights defined below. We commit to responding and providing you with the relevant information without undue delay, and within one month of confirmed receipt of the request.
This period may be extended by a further two months where necessary, taking into account the complexity and number of the requests. In this case, you will be notified within one month of the verified receipt of the request.
If it is not possible to respond within the prescribed timeframe, you will be informed of the reasons for this within one month of the verified receipt of the request.
Requests are reviewed regarding their volume and frequency per requester for potential abuse, in order to ensure the rights under Article 12(3) of the GDPR are upheld.
HOW DO WE PROCESS YOUR PERSONAL DATA?
In compliance with the requirements of the GDPR, we process your personal data in a fair and transparent manner, ensuring the lawfulness, objectivity, and transparency of the processing.
We collect the data for specified, explicit, and legitimate purposes and do not process it in a manner incompatible with those purposes.
We collect data that is necessary and relevant to the purposes of processing and limited to what is necessary.
We keep the data up to date and ensure its accuracy, or arrange for its deletion or correction if it is inaccurate in relation to the purpose of the processing.
We retain the data for as long as required for the purpose of the processing and subsequently ensure its secure destruction.
We protect personal data against loss, misuse, abuse, unauthorized access, and disclosure, ensuring that appropriate technical and organizational measures are implemented for their protection.
LEGAL BASIS FOR PROCESSING
For all the processing purposes described above, the legal basis for processing is a legal obligation: the processing of your personal data is necessary for compliance with a legal obligation—that is, an obligation arising from the law. Failure to process the necessary data would result in a violation of the law and the imposition of corresponding sanctions, as well as a failure to provide you with adequate service.
Specifically, the company’s purpose and functions are defined by relevant legislation and by specific regulations, provisions, and circulars issued for its implementation; the manner in which these functions are carried out—including all necessary actions taken to execute them—is determined by and conducted in accordance with the relevant legislation.
SHARING OF YOUR PERSONAL DATA
Your personal data are treated with strict confidentiality and security and are not disclosed to third parties, except in cases where such disclosure is required.
RETENTION PERIOD FOR YOUR DATA
Your personal data are retained only for the reasonable period required to fulfill the specific processing purposes for which they are used; this period is determined based on specific criteria. In cases where the processing of your personal data is based on a legal obligation, as described above, the retention period is determined by statutory requirements, the timeframe during which competent authorities may conduct audits, applicable limitation periods, and your own legitimate interests.
In cases where your personal data is processed based on your consent—whether simple or explicit—the retention period is determined by the possibility of withdrawing that consent. Once you withdraw your consent, the relevant personal data is deleted.
FURTHER PROCESSING
We reserve the right to modify this Privacy Policy whenever there is a change in its content that requires notification. Should the need arise to use your personal data for a new purpose not covered by this Policy, we will notify you of the updated Privacy Policy before processing begins; this updated policy will outline the new use and specify the relevant purposes and conditions of processing. Wherever and whenever necessary, your prior consent will be requested for any new processing.
OTHER TERMS
We collect the personal data relevant to this matter directly from you, the data subjects.
As the data controller, we declare that we have taken all necessary organizational measures to protect your personal data and that we maintain a comprehensive security plan in accordance with GDPR requirements.
The collection and processing of personal data under this Privacy Policy are carried out by lawful means and in a manner that ensures respect for privacy, personality, and human dignity.
Adherence to this Privacy Policy is based on good faith, fair dealing, and the free will of the parties, with the aim of fostering a productive collaboration while ensuring the protection of all involved.
Should you be unable to exercise the rights granted to you by the GDPR, or if you have general questions, require clarifications, or wish to file a complaint, you have the right to contact the Hellenic Data Protection Authority for support and assistance.
The processing and protection of your personal data are subject to the terms of our Privacy Policy, the provisions of the GDPR, and other applicable national, EU, and international laws regarding the protection of individuals with regard to the processing of personal data, as currently in force.
WHAT DOES THE GDPR DEFINE AS PERSONAL DATA?
Any information that can be used to directly or indirectly identify a natural person, such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, genetic, psychological, economic, cultural, or social identity of that person.
WHAT DATA DO WE COLLECT AND FOR WHAT PURPOSE? PURPOSE
The personal data we collect during your browsing and your use of the features offered by our website include: Data you provide when registering or filling out the contact form: full name and email address, as well as your postal address and contact telephone numbers; and Technical data, such as the IP address and the web browser used during your visit to our website. By registering on our site, you consent to the general terms of use and any amendments thereto, as described herein.
CONSENT
In cases where we are required to process your personal data based on your consent, a copy of the consent statement—including all details contained therein—is retained to provide proof that consent was granted and to facilitate the process should a withdrawal of consent be requested. Consent is granted for clear and specific processing purposes that have been disclosed in advance, and by granting such consent, you acknowledge that you are fully aware of them.
YOUR RIGHTS
As the data subject whose data we process, you may access the record of personal data we have collected about you. You may also request the deletion, correction, or restriction of processing, or object to the processing of such data, except in cases where we are required to retain your data for administrative, legal, or security purposes. Furthermore, as a data subject, you have the right to withdraw the consent you have given regarding the processing of your data.
In summary, your rights regarding your personal data, in accordance with the GDPR, are as follows:
- Right of access
- Right to rectification
- Right to erasure ("Right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to object to automated individual decision-making, including profiling
SUBMITTING REQUESTS – EXERCISING RIGHTS
You may submit a request to exercise the rights defined below. We commit to responding and providing you with the relevant information without undue delay, and within one month of confirmed receipt of the request.
This period may be extended by a further two months where necessary, taking into account the complexity and number of the requests. In this case, you will be notified within one month of the verified receipt of the request.
If it is not possible to respond within the prescribed timeframe, you will be informed of the reasons for this within one month of the verified receipt of the request.
Requests are reviewed regarding their volume and frequency per requester for potential abuse, in order to ensure the rights under Article 12(3) of the GDPR are upheld.
HOW DO WE PROCESS YOUR PERSONAL DATA?
In compliance with the requirements of the GDPR, we process your personal data in a fair and transparent manner, ensuring the lawfulness, objectivity, and transparency of the processing.
We collect the data for specified, explicit, and legitimate purposes and do not process it in a manner incompatible with those purposes.
We collect data that is necessary and relevant to the purposes of processing and limited to what is necessary.
We keep the data up to date and ensure its accuracy, or arrange for its deletion or correction if it is inaccurate in relation to the purpose of the processing.
We retain the data for as long as required for the purpose of the processing and subsequently ensure its secure destruction.
We protect personal data against loss, misuse, abuse, unauthorized access, and disclosure, ensuring that appropriate technical and organizational measures are implemented for their protection.
LEGAL BASIS FOR PROCESSING
For all the processing purposes described above, the legal basis for processing is a legal obligation: the processing of your personal data is necessary for compliance with a legal obligation—that is, an obligation arising from the law. Failure to process the necessary data would result in a violation of the law and the imposition of corresponding sanctions, as well as a failure to provide you with adequate service.
Specifically, the company’s purpose and functions are defined by relevant legislation and by specific regulations, provisions, and circulars issued for its implementation; the manner in which these functions are carried out—including all necessary actions taken to execute them—is determined by and conducted in accordance with the relevant legislation.
SHARING OF YOUR PERSONAL DATA
Your personal data are treated with strict confidentiality and security and are not disclosed to third parties, except in cases where such disclosure is required.
RETENTION PERIOD FOR YOUR DATA
Your personal data are retained only for the reasonable period required to fulfill the specific processing purposes for which they are used; this period is determined based on specific criteria. In cases where the processing of your personal data is based on a legal obligation, as described above, the retention period is determined by statutory requirements, the timeframe during which competent authorities may conduct audits, applicable limitation periods, and your own legitimate interests.
In cases where your personal data is processed based on your consent—whether simple or explicit—the retention period is determined by the possibility of withdrawing that consent. Once you withdraw your consent, the relevant personal data is deleted.
FURTHER PROCESSING
We reserve the right to modify this Privacy Policy whenever there is a change in its content that requires notification. Should the need arise to use your personal data for a new purpose not covered by this Policy, we will notify you of the updated Privacy Policy before processing begins; this updated policy will outline the new use and specify the relevant purposes and conditions of processing. Wherever and whenever necessary, your prior consent will be requested for any new processing.
OTHER TERMS
We collect the personal data relevant to this matter directly from you, the data subjects.
As the data controller, we declare that we have taken all necessary organizational measures to protect your personal data and that we maintain a comprehensive security plan in accordance with GDPR requirements.
The collection and processing of personal data under this Privacy Policy are carried out by lawful means and in a manner that ensures respect for privacy, personality, and human dignity.
Adherence to this Privacy Policy is based on good faith, fair dealing, and the free will of the parties, with the aim of fostering a productive collaboration while ensuring the protection of all involved.
Should you be unable to exercise the rights granted to you by the GDPR, or if you have general questions, require clarifications, or wish to file a complaint, you have the right to contact the Hellenic Data Protection Authority for support and assistance.