Privacy Policy

  1. INTRODUCTION

Welcome to the Personal Data Protection Policy of  the Private Company under the name “A.SINANIS IDIOTIKI KEFALAIOUCHIKI ETAREIA” and the distinctive title “IPODOMI”, located in Thessaloniki, at Egnatia Street, n.100, with VAT number 099930369 and GEMI no.: 042191906000 (hereinafter “IPODOMI”).

The purpose of this Policy is to explain the following in as simple, understandable and concise a manner as possible:

  • What data do we collect and process about you?
  • What are the purposes for which we process them and what is the legal basis for processing on our behalf?
  • Who are the recipients of your data?
  • How long do we keep your data?
  • What are your rights regarding your data and how can you exercise them?

 

  1. DEFINITIONS

Personal Data: Any information addressed to the Data Subject. For the purposes hereof “Personal Data” means information and data relating to a specific individual, such as, for example, date of birth, name and surname, home address, telephone number, gender, nationality, education details, professional career, marital status, IP address, etc. Aggregate data of a statistical nature, from which the Data Subjects can no longer be identified, shall not be considered as personal data. 

Data Subject or Subject: The natural persons to whom the data refer, and whose identity is known to IPODOMI. For example, among others, you as visitors and users of the website are “data subjects”. 

Processing of Personal Data or Processing: any operation or set of operations which is performed on personal data, such as collection, recording, organisation, maintenance, storage, alteration, extraction, use, reading, disclosure, transmission, dissemination or any other form of making available, alignment or combination, interconnection, blocking, erasure, destruction. 

Processing Manager: Anyone who determines the purpose and manner of Processing of personal data, such as a natural or legal person, public authority or agency. In our case it is IPODOMI.

Consent of the Data Subject: any free, explicit and specific statement of intent, expressed in a clear and informed manner, by which the Data Subject, having been informed beforehand, accepts that the personal data concerning him or her may be processed. Consent may be withdrawn at any time, without retroactive effect. 

Recipient of the data: any natural or legal person, public authority or agency or any other body to whom the data are disclosed, whether or not a third party. 

Third party: Any natural or legal person, public authority or agency or any other organisation, other than the Data Subject, the Data Controller and persons authorised to process personal data, provided that they act under the authority or on behalf of the Data Controller. 

Processor: Anyone who processes personal data on behalf of the Controller, such as a natural or legal person, public authority or agency or any other organisation. 

 

  1. RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA

Responsible for the processing of data by the Private Company “A.SINANIS IDIOTIKI KEFALAIOUCHIKI ETAIREIA” (hereinafter referred to as the “Data Controller”). 

IPODOMI’s contact details are as follows:

Please note that IPODOMI has appointed a Data Protection Contact Person to whom you can raise any query regarding the processing of your personal data. 

Any interested party may contact the Data Protection Contact Person via the following contact details:

 

  1. OUR BASIC PRINCIPLES FOR THE PROCESSING OF YOUR DATA

We undertake to process your data in a fair and transparent manner, always in accordance with the applicable legal framework, and in particular the General Data Protection Regulation and Greek Law No. 4624/2019.

What this means in practice:

  • We collect and process your data only for specified, explicit and legitimate purposes.
  • We collect and process only the data that is necessary for the purposes we set out.
  • We make every effort to ensure that your data is accurate, providing you with the possibility of correction and/or deletion where applicable.
  • We retain your data for a limited period of time, which is determined as necessary either by law or by our Policy to fulfil the processing purposes we set.
  • We make every effort to safeguard the security of your data against unauthorised or unlawful processing and accidental loss, destruction or damage.
  • We do not transfer data to unauthorised third parties, except where required by law or where it is necessary to provide you with our services.
  • We ensure that every partner who processes your personal data on our behalf applies all technical and organisational measures to protect it. 

As part of the protection of the personal data it processes, IPODOMI implements a series of appropriate technical and organisational measures and adopts internal security policies, while at the same time utilising a range of technologies that ensure the security of your data. As required by the principles of information security and data protection, technical and organisational security measures are regularly monitored and, if necessary, updated and adapted to new market best practices and in accordance with commonly accepted international standards.

 

  1. COLLECTION OF PERSONAL DATA

The use of the term “personal data” in this Privacy Policy refers to information about you that allows us to identify you, directly or in combination with other information we may have (see also part 2.Definitions).

When you visit our website we collect and ask you to provide us with certain information about you. 

We only collect as much personal data as is deemed necessary and appropriate in order to provide you with a functional website. This information may include:

  • device information
  • navigation information when visiting our website and cookie data
  • IP address

In some other cases, your personal data may be collected automatically or through information transmitted to us by third parties. In particular:

 

  1. Data we collect automatically when you visit our website

In general, you can browse our site without sharing any data that identifies you. However, information about your login, navigation and interaction with the website is automatically collected in order to ensure the security of our website and the services we provide to you and to improve the online experience of users. 

In particular, in compliance with Article 6 par. 1(f) of the EU Regulation 2016/679, our website collects a series of data and information of a general nature on each of your accesses, which are temporarily stored. The log file is created as part of the automatic logging carried out by the electronic processing system. 

In any case, we reserve the right to check the server log files if specific indications of illegal use are found. 

The collection and storage of the above data is necessary for the operation of our website in order to provide functionality and offer its content. In addition, we use the data to optimise our website and to ensure the security of our information technology systems. The legal basis for the processing of the above data is Article 6 para. 1(f) of EU Regulation 2016/679.

 

  1. Cookies and Google Analytics/Google Ads

IPODOMI uses specific type of cookies (see “Cookies Policy”) in the website, in order to provide you with a comprehensive browsing experience. In particular, we collect the following information about you through Cookies. The cookie does not contain any personal information and is automatically deleted when you close your browser (temporary cookie). 

IPODOMI also uses Google Analytics and Google Ads services for the purpose of analysing the statistical data of the usage of the website and the use of the data for advertising/promotional purposes (Google Ads). Google Analytics, is a web analytics service provided by the company Google Inc. (https://www.google.com, Amphitheater Parkway, Mountain View, CA 94043, USA, hereinafter referred to as “Google”). 

More specifically Google service, pseudonymised user profiles that are created and for this purpose cookies are used (see Cookies Terms of Use). The information that is collected is used to create a personalised profile of the user generated by cookies about the use of this website, such as:

o Browser type/version,

o Type, version, of browser, operating system you are using, 

o Computer host/IP address

The above data are transmitted to a Google server in the USA and stored there. Under no circumstances will your IP address be linked to other data held by Google. For more information about personal data protection please refer to the Google Analytics Help Center: https://support.google.com/analytics/?hl=en#topic=3544906

This information is used to evaluate the website usage, to compile reports on the activity of the website, to provide other services related to the website and use of the internet for research purposes market research and web design.

The legal basis for the above processing is your consent under Article 6 par. 1(a) of EU Regulation 2016/679, which you provide to us when you accept the cookies when you first enter our website. For information on how to withdraw your consent for cookies and on the terms of use of cookies on our website can be found here.

 

  1. Data collection through the contact form

Through the contact form we collect your full name, your email address, your organisation, your address (country and city) an and your contact telephone number, as well as data related to message you want to send to us for the sole purpose of being able to respond to any communication you may have with us, which may concern your possible comments and remarks or any other information concerning our services, but also the exercise of your rights as data subjects of the personal data we process.

The information you provide us with are collected and stored by us on the basis of Article 6 par. 1(f) of EU Regulation 2016/679. Our communication is recorded and the data is collected in order to enable proof of communication in accordance with legal requirements. Your data are processed for the purposes of the legitimate interests we pursue.

 

  1. PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA

The information we collect or hold can only be used by us when the law allows us to do so. In particular, the main purposes for processing your data are:

  • Management of navigation and registration data on our website. The processing of the personal data you have provided us with, as well as the information you have provided to us, including your navigation data on our website, such as your IP address, the sections of our site that you have visited etc. These data are processed for the comfortable use of our Website as well as for the security of our products and the security of our Website.
  • Optimization of our website services, products, and services and our relationships with you. In pursuit of our legitimate interests and to improve our services, evaluate how users interact with our website, develop our business, tailor our communication with you according to your preferences and behavior, and to provide you with the best possible personalized experience, we may analyze and combine all information related to browsing data and data regarding your interactions with IPODOMI. This data is collected to improve our website and our applications, including the use of technologies that place cookies on your devices or in the emails we send you, and to provide you with higher quality services.
  • Managing communication through our website.
  • Responding to the exercise of access, rectification and deletion rights, as well as to queries and complaints.
  • Compliance with a legal obligation.
  • Protection, detection and prevention of fraud and other criminal activities, claims and other liabilities.
  • Network and information security, in order to take measures to protect your information from loss, damage, theft or unauthorised access.

 

  1. TRANSFER OF PERSONAL DATA

The personal data of our website users’ (navigation and login data) are not transmitted to third party recipients.

Transfers of data to third countries are not carried out or not currently foreseen.

We may transfer your personal data to our direct partners, if this is absolutely necessary for the provision of our services to you, but also if it is required to answer your query. 

In any case, we ensure that any partner to whom we entrust the provision of services takes appropriate data protection measures. To this end, we agree on specific data protection measures and monitor these measures on a regular basis. 

Each of these recipients of your personal data is a processor on our behalf and therefore we ensure that they are bound not to carry out any processing of your data beyond the purposes of the transfer. 

IPODOMI does not sell or otherwise transfer or disclose your personal information to third parties, other than those mentioned above, without your consent, except in accordance with the relevant legal dictates and to the competent authorities only.

The data kept in the file may be communicated to the competent judicial, police and other administrative authorities, at their legitimate request and in accordance with the legal provisions in force at any given time. In addition, in the event of a legal order, an administrative order or a formal preliminary investigation, we reserve the right to make the relevant data available to the relevant department without further ado.

 

  1. DURATION AND ACCURACY OF DATA RETENTION

Servers located within the European Economic Area (EEA) are used for the storage and further processing of your data. In order to ensure the security of our information systems, we use third party applications from specific service providers (such as firewalls), who are contractually bound to ensure the protection of your personal data processed on our behalf.

Your data are kept for as long as necessary to fulfil the purpose for which they are stored or for as long as we are required by law. To determine the appropriate period of data retention we consider: 

    • the quantity and nature of your data.
    • the potential risk of harm from unauthorised use or disclosure of your data.
    • the purposes for which we process your personal data so that we can consider the possibility of fulfilling these purposes by other means.
  • the applicable legal obligations.

 

  1. COLLECTION AND USE OF CHILDREN’S PERSONAL DATA

We do not collect and use personal data belonging to children under the age of 15. If it is determined that any personal information has been collected from a minor under the age of 15 without verifiable parental consent, such information will be deleted as soon as possible. If you believe that information may have been collected from a minor under the age of 15, please notify us via email at: info@ipodomi.eu .



  1. RIGHTS OF SUBJECTS

Under the GDPR you have a number of rights in relation to the processing of your personal data.

In particular, you can:

  1. Submit a request to IPODOMI to be informed whether we process data and, if so, what this data is, by downloading a copy if you wish (right of access).
  2. Request their rectification if your data is inaccurate, incomplete, misleading, irrelevant or incomplete (right of rectification).

iii. Request, under certain conditions, their deletion (right of deletion).

  1. Request, under certain conditions, the restriction of their processing (right to restriction of processing).
  2. Object, under certain conditions, to our processing of your data (right to object).
  3. Request the data you have provided to us in a structured, commonly used and machine-readable format (if technically feasible) so that you can transfer it to another controller (right to data portability).

In the event of a data breach, which may put your rights and freedoms at high risk and which does not fall within one of the exceptions provided for in the GDPR, IPODOMI undertakes to inform you of the breach without undue delay.

Compliance with the legal framework for data processing and, in this context, the exercise of your rights, is a priority for IPODOMI. For this reason, we have the right to request additional information necessary to confirm your identity before exercising your rights.

IPODOMI is obliged to respond to your request immediately and at the latest within one (1) month. If necessary, taking into account the complexity of the request and the number of requests, this period may be extended by two (2) more months. In any case, IPODOMI will inform you as soon as possible and, in any case, within one (1) month of the submission of your request, of its progress and of the reason for any delay in satisfying it.

If any of your requests are not answered (in time) or you are not satisfied with IPODOMI’s response, you have the right to submit a complaint to the competent supervisory authority (Personal Data Protection Authority | Kifissia 1-3 | P.K. 115 23 | Athens | Greece | tel. 210 6475600 | email: contact@dpa.gr .)

 

  1. DATA SECURITY

IPODOMI applies all appropriate technical and organisational protection measures (including encryption, anonymisation and/or pseudonymisation procedures where necessary) in order to prevent the loss, alteration, disclosure and use or access of your data in an unlawful manner. In addition, we restrict the collection, processing and access to your data to those associates and other third parties necessary to fulfil their professional duties. All of our partners process your personal data solely in accordance with our instructions and are committed to adhere to relevant confidentiality terms.

For any breach of your data, IPODOMI will notify you and any competent authority of any breach when it is legally obliged to do so.

 

  1. CONSENT OF THE SUBJECTS AND WITHDRAWAL OF CONSENT

By entering into any transaction and using any of our IPODOMI Services in accordance with the Terms of Use of our website, you agree to this Privacy Policy Statement and in particular: IPODOMI may process your personal data for promotional and informational purposes only if it has obtained your consent. 

 

  1. CONTACT US

If you have a question or a complaint about this Policy, the way we handle your personal data, please contact us.

  1. CHANGES IN POLICY

We may revise this Policy by posting an updated version on our website or by contacting you by email.

 

This Policy has been reviewed on 24/07/2025