1. What personal data we collect and how

We collect various types of personal data which we obtain directly from you or through your authorized representative, or via alternative communication channels, such as our website, as part of our business relationship.

If you are a prospective client, or the authorized representative, agent, or beneficial owner of a legal or natural person client, the types of data we may collect include:

Full name, contact details (address, phone, email), identification documents (ID or passport), tax identification number, marital status, employment status, signature verification.

​

2. Why we process your data and on what legal basis

We process personal data in compliance with applicable data protection laws and for one or more of the following legal grounds:

a) Performance of a contract

To provide our services based on contracts with our clients, or to take steps prior to entering into a contract.

b) Legal obligations

To comply with applicable legislation (e.g. tax laws, accounting rules), court orders, or regulatory authorities.

c) Legitimate interests

To serve the legitimate interests of the company or third parties, such as:

• Risk management and fraud prevention

• Operation of security systems (e.g. CCTV)

• Internal administration and service improvement

d) Consent

In cases where you have explicitly given us your consent, e.g. for marketing communication. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

 

3. Who receives your personal data

To fulfill our contractual and legal obligations, your data may be shared with:

• Service providers, consultants, legal or tax advisors

• Hosting and IT support companies

• Regulatory or public authorities as required by law

All third-party providers are contractually bound to maintain confidentiality and data protection standards.

 

4. Marketing and profiling

We may use your personal data to inform you about services, news, or offers that may be of interest to you.
Profiling may be used to tailor marketing content. Such processing will only occur:

• With your explicit consent, or

• If it serves a legitimate interest that does not override your own rights and freedoms.

You have the right to object to such processing at any time.

 

5. How long we retain your data

We keep your personal data:

• For the duration of our business relationship

• For up to two (2) years after its termination unless a longer period is required by law

• For up to six (6) months if you are a prospective client who did not enter into a contract

 

6. Your data protection rights

You have the right to:

• Access your personal data

• Correct or update inaccurate or incomplete data

• Request deletion (“right to be forgotten”) under certain conditions

• Object to data processing, including direct marketing

• Restrict processing under specific circumstances

• Receive a copy of your data (data portability) in a structured, machine-readable format

• Withdraw your consent at any time (without affecting prior lawful processing)

To exercise your rights or for any inquiries regarding your data, please contact us.

 

7. Right to lodge a complaint

If you have exercised your data protection rights and remain unsatisfied, you have the right to file a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

 

8. Changes to this notice

We may occasionally amend this privacy notice. The most recent version will always be available on our website. Please review it periodically to stay informed.