The present Privacy Statement describes the personal data we collect about you through our website, how we use and protect it, and the choices you have regarding the way we use this data. Its purpose is to inform you about the Company’s policy regarding your personal data, which you provide to us, so that you are aware of the purpose of their processing by us, the category of recipients, and the procedures you can follow to exercise your legal rights.
We acknowledge that the protection of personal data is a continuous responsibility, and therefore, we will update and modify this Statement periodically.
- What personal data do we collect about you?
The provision of the following personal data is not mandatory in any case. However, the non-provision of data that has been designated as mandatory will prevent us from providing the contractual service. The non-provision of other, non-mandatory personal data will not affect the provision of our services.
We collect names (first name, last name) and email addresses of our visitors to respond to and manage their requests in case of communication through the website’s contact form. In case a customer voluntarily provides further personal data through the message they send, this information will be retained for better and more immediate service of their request. We do not use email content, chats, or other personal files for your advertising targeting.
- How do we collect your personal data?
We collect your personal data when you express your interest in our services or submit any request through the contact form.
- Who else is the recipient of your personal data?
We do not disclose your personal data to third parties. Our company will not sell, transfer, or otherwise disclose the personal information of visitors/users of its website to third parties, except in compliance with relevant legal requirements and to the competent authorities only.
- Why do we use (process) your personal data?
The Company collects, keeps, and processes only the personal data that are minimal and absolutely necessary to achieve the respective processing purpose.
We use your personal data for the following purposes:
4.1. To serve your request.
4.2. For cases where the processing of your personal data is necessary for the purposes of our legitimate interests or for compliance with national and/or European legislation.
- How long do we retain your personal data?
Your personal data will be retained for as long as necessary to fulfill the purposes for which they were collected. Our company may continue to store your personal data for a longer period if it is necessary to protect its legitimate interests in relation to possible liability related to the provision of the service.
- Guarantees we take to protect your data
When you provide us with your personal data, we take measures to ensure that they are securely maintained and managed. In order to protect your personal data, we take adequate physical, technical, and organizational security measures. We continuously update and control the security technology we use.
- Your rights
You can exercise the following rights in accordance with the terms and specific provisions of Regulation (EU) 2016/679:
In the context of our services and the content of our website, we do not process sensitive personal data.
Our company does not process personal data regarding individuals under the age of 16. If the company becomes aware of the disclosure of online personal data of an individual under the age of 16 without the consent of the parent or the person exercising parental responsibility, the company will take appropriate measures to delete such data from its databases and not use them.
Rights you can exercise according to the terms and specific provisions of Regulation (EU) 2016/679:
- Right of access to your personal data, which we process, as well as information regarding their processing (Article 15 of Regulation 679/2016). Within the scope of this right, you are entitled to request from the Company a copy of the personal data concerning you, free of charge. In case your requests are repetitive and manifestly unfounded, the Company reserves the right to set a reasonable fee.
- Right to rectification of your personal data, meaning the right to correct any inaccuracies in your data (Article 16 of Regulation 679/2016). The Company is committed to promptly inform third parties – recipients to whom your Data have been disclosed (Article 19 of Regulation 679/2016).
- Right to object to the processing of your personal data, where there is a legitimate interest, including your right to object to automated processing of your data (Article 21 of Regulation 679/2016).
- Right to restriction of processing of your personal data, meaning to request the suspension or restriction thereof, where you dispute their accuracy, you object to their processing, or there is another reason provided for in the relevant Greek or European Legislation on the Protection of Personal Data (Article 18 of Regulation 679/2016).
- Right to receive your personal data, which you have provided to us with your consent, so that you can use them elsewhere (Article 15 & 20 of Regulation 679/2016).
- Right to erasure (right to be forgotten) of your personal data without undue delay upon your relevant request under the conditions specified by the relevant Greek and European Legislation on the Protection of Personal Data (Article 17 of Regulation 679/2016). In certain cases (such as when there is an obligation to process personal data imposed by law, public interest), this right is subject to specific restrictions or does not apply depending on the case.
- Right to withdraw your consent. In cases where we process your personal data based on your consent, you also have the right to withdraw your consent at any time or to change the degree of consent you have given, without affecting the legality of the processing prior to the withdrawal of your consent (Article 7 of the Regulation).
- Right to be informed about incidents of violation that put your rights and freedoms as a natural person at high risk (Article 34 of the Regulation). Right to lodge a complaint with the competent Greek independent authority, which is the Hellenic Data Protection Authority, in case of illegal processing of your data (http://www.dpa.gr/).
If you exercise any of the above rights, the Company will respond within one month, unless your request is particularly complex or there is a multitude of similar requests.
- There is no transfer of your personal data outside the EU.