Privacy Policy
Introduction
For the Company under the name “GIOVANOUDIS CHRISTOS AND ASSOCIATES S.A.” (hereinafter referred to as the “Company”) respect and protection of your personal data is a commitment. We understand and take seriously the fact that you are aware of and interested in your personal data.
This Privacy Policy describes the information we collect and explains how the Company processes this information and how you can manage and control the use of your information, in accordance with the provisions of Greek law and European personal data protection legislation including the General Data Protection Regulation (2016/679/EU), commonly known as the “GDPR”.
The management and protection of the personal data of the visitor/user of the Website is subject to the terms of this document as well as to the provisions of national, Community and international law on the protection of individuals with regard to the management of personal data, as applicable from time to time.
The Website deals responsibly with issues concerning the protection of your personal data. As part of its operation, the Website collects certain information about its visitors/members that may lead to their direct or indirect identification.
For any information regarding the management of your data or the exercise of your rights, please contact us at web@epidosis.gr.
The website www.epidosis.gr, is owned by the limited liability company “GIOVANOUDIS CHRISTOS AND ASSOCIATES S.A.”. The Data Controller has been appointed
“GIOVANOUDIS CHRISTOS AND ASSOCIATES SOLE PROPRIETORSHIP P.C.C.”
Ethnikis Antistaseos, No. 173 P.O. Box 55134 Kalamaria, Thessaloniki
VAT no. 800941778, GEMI no. 145409106000
tel. +30 2310 477725, e-mail: web@epidosis.gr
Changes in policy and information
Accordingly, these privacy terms may be revised and updated at any time and without notice. Users of the Website are kindly requested to periodically check these terms for any changes, as their continued use of the Website implies their acceptance of all possible amendments thereto.
This Privacy Policy may be amended at any time and without prior notice. Guided by the principle of transparency, we are committed to informing you of any significant change to our policy. In any case, however, you should check our policy periodically, as your use of our services implies your acceptance of it.
Data Security
In the context of the protection of the data processed, the Website implements a series of appropriate technical and organizational measures, adopts internal security policies, trains its staff, which is committed to confidentiality and privacy, and uses a series of technologies that ensure the security of your data (e.g. SSL certificate, encryption, certified hosting providers). As required by information security and data protection principles, technical and organizational security measures are regularly monitored and, if necessary, updated and adapted to new best practices.
Our partners have agreed and committed to:
– To maintain confidentiality,
– not to send your Data to third parties without the Company’s permission,
– to take appropriate technical and organizational security measures,
– To comply with the legal framework for the protection of personal data and in particular Regulation 979/2016/EU (otherwise GDPR).
Which data we process
The Website collects personal data of its visitors/users only when they voluntarily provide it themselves. Personal data are the data that can be used to identify or contact an individual, as well as other data concerning that individual and data that are necessary for the Company to better respond to his/her expression of interest and message, etc. The data collected, depending on whether the user is communicating on behalf of himself or on behalf of a legal entity and depending on the specific characteristics of the legal entity in question, are the following:
Data Collected:
- First Name
- Last Name
- Address
- PO
- State
- City
- Country
- Company name
- Company headquarters
- Company Tax Identification Number – D.O.Y.
- Legal Form of the Company
- Company activity
- Contact telephone number
Data collected through Cookies (e.g. IP). For detailed information see our Cookies Policy.
We do not collect special categories of data – such as information about your political views, religion, health or sexual orientation – unless you choose to provide such information (e.g. in the content of the message you send us).
Non-Personal Data:
Any visitor may browse www.epidosis.gr without providing any personal information. Personal data will only be needed in case the visitor wants to become a member of the website in order to be able to use its services. Any collection and processing of Personal Data will be carried out in a fair and lawful manner, in accordance with Law 4624/2019. 4624/2019.
The Company reserves the right to store the visitor’s IP address and if necessary to contact any responsible person in case of violation of the Terms of Use of the Website. The Website may collect non-personal identification data of its users using relevant technologies, such as cookies and/or Internet Protocol (IP) address tracking. Cookies are small text files stored on the hard drive of each visitor/user and do not take note of any document or file from his/her computer. They are used to facilitate the visitor/user’s access in terms of using specific services and/or pages of the Website, for statistical purposes and in order to determine which areas are useful, popular or for marketing purposes.
Non-personal data may also include the type of browser used by the visitor/user, the type of computer, its operating system, internet service providers and other such information. In addition, the Website’s system automatically collects information about the sites visited by the visitor/user and about the links to third-party web-sites / web-pages that the visitor/user may select through the use of the Website.
Each visitor may browse epidosis.gr without providing any personal information. Personal data will be needed only in case the visitor wants to become a member of the Website in order to be able to use its services. Any collection and processing of Personal Data will be carried out in a fair and lawful manner, in accordance with Law 4624/2019. The Company reserves the right to store the visitor’s IP address and if necessary to contact any competent person in case of violation of the Terms of Use of the Website.
The Website includes links to other websites which are under the responsibility of third parties (natural or legal persons). Under no circumstances is the Website responsible for the terms of protection of personal data which these websites follow.
Purposes of processing
With regard to the data that Users provide themselves on the Website, the Company processes these data following the User’s request to contact the Company in order for the Company to take appropriate measures before contacting the User, as well as to fulfil its contractual obligations (Article 6(1B) GDPR).
The Website may also use these data for informational purposes or to propose new subscription services to the user, unless the latter does not wish to do so. The Website shall not make available for sale or otherwise transfer or disclose personal data of visitors/users of the Website to third parties not related to the Website, without the consent of the visitor/user, with the exception of the application of relevant legal dictates and to the competent authorities only.
The Website may process part or all of the data sent by visitors/users for statistical purposes and for the improvement of its services – information.
Indicatively, we may use your data in order to:
- Respond to your requests for information about the services provided by us.
- To send you newsletters, information or material that may be of interest to you.
- We may collect statistics on site traffic, information, news, news, information, information or news or information that you may want to share with us.
- To detect, prevent and respond to fraud or other illegal activities.
- To evaluate the effectiveness of our events and other promotional activities.
- Maintain (through updates) our contact list
a) the contractual relationship between us or the taking of measures at the pre-contractual stage.
b) your consent, where required, such as for example in the case where there is no previous transaction and you wish to receive a newsletter. You may withdraw your consent at any time. You may withdraw your consent at any time.
c) to the legal obligations of the Company. In some cases we may have a legal obligation to use or retain your Data because it is provided for as an obligation by law, such as tax law.
d) in the legitimate interest of the Company. In some cases it is necessary to understand our readers, to promote our services and to effectively use our websites to create, publish and distribute news and related journalistic content both electronically and in print. For example, we rely on our legitimate interest when analysing the content viewed on the websites to understand how they are used.
The visitor/user may contact the Website in order to verify the existence of his/her personal record, to correct it, change it or delete it.
Who are the recipients of your data
In order to be able to provide its services, the Website transmits some of your data to partner companies. These companies (processors) process your data only for the purposes mentioned above and only on behalf of and at the request of the Company, to the exclusion of any legal obligations. When transmitting your data, the Website takes all necessary technical and organisational measures to ensure the best possible level of security.
These companies are all located within the European Union and have been selected on the basis of, inter alia, the possibility of secure processing of your data. These companies are bound by a contract concluded with the Website to provide the necessary guarantees for the protection of Personal Data and take appropriate technical and organisational measures to ensure that the processing is lawful and that your data and rights are protected.
These companies provide us with (a) services for providing web hosting of the Website (b) services for marketing our services to you and (c) services for promoting messages in communication and social media applications outside the Website (e.g. viber).
Where and for how long we store your data
Your data is stored on the company’s system and any backups are kept in databases within the European Union. In any case, appropriate organisational and technical day-to-day procedures are always implemented to prevent any breach.
Data are stored exclusively and only for the period of time necessary for the purpose of the processing in question.
If your account on the Website remains inactive for more than two (2) years, the Website will proceed to inform you and if there is no response, it will proceed to delete it and all data concerning you, except those deemed necessary for compliance with a legal obligation or for the exercise of claims.
What are your rights in relation to your data and how you can exercise them
Under the relevant legal framework you have a number of rights in relation to the processing of your data by the Website.
- To request their rectification (right of rectification)
- Request, under certain conditions, their deletion (right to erasure)
- Request, under certain conditions, the restriction of processing (right to restriction of processing)
- object, under certain conditions, to our processing of your data (right to object)
- Request the data you have provided to us in a structured, commonly used and machine-readable format (right to data portability), where this is technically feasible.
In the event of a data breach, which may put your rights and freedoms at high risk and if it does not fall under one of the exceptions provided for in the GDPR, the Website undertakes to inform you of the breach without undue delay.
You may exercise your rights by sending an email to web@epidosis.gr.
Compliance with the legal framework for data processing and, in this context, the exercise of your rights, is a priority for the Website. For this reason, we have the right to request additional information necessary to confirm your identity before exercising your rights.
In principle, the Website is obliged to respond to your request promptly and at the latest within one month. If necessary, taking into account the complexity of the request and the number of requests, this deadline may be extended by two more months. In any event, the Website will inform you as soon as possible and in any event within one month of the submission of your request, of its progress and of the reason for any delay in complying with it.
In the event that your requests are manifestly unfounded or excessive, in particular because of their repetitive nature, the Website may either impose a reasonable fee, taking into account the administrative costs of providing the information or of communicating or performing the requested action, or refuse to comply with your request.