Privacy Policy

Welcome to the Website of RE-BESS IFAISTOS S.A.

Our Company takes your privacy protection seriously. For this reason, we strictly follow the Data Protection Policy set out below, which ensures the high level of services offered and complies fully with the applicable legal framework.

With this Data Protection Policy statement, we wish to inform you about the way our Company protects the confidentiality of your communications and collects, processes, uses and stores your personal data through our Website, as well as about the choices and rights you have regarding the above collection and processing of your personal data. By visiting our Website, you acknowledge and accept the Data Protection Policy that follows.

This Data Protection Policy (“the Policy”) applies only to the Company’s Website. Our Website may contain links to other websites; however, our Company bears no responsibility whatsoever for the data protection practices, terms, or content of those websites.

Subject Matter

1.1. This Policy sets out the terms and conditions observed by our Company for the protection of your privacy. The Policy includes the rules on the basis of which we carry out any collection and processing of your personal data and ensure the confidentiality of such information.

1.2. Our Company reserves the right to modify and revise this Policy whenever it deems necessary, with each change taking effect upon its public appearance on the Website. In this context, we encourage you to read the Policy at regular intervals to ensure you are informed of its content and the processing of your personal data.

1.3. Should any of the present terms be deemed invalid, unlawful or abusive for any reason, the remaining terms shall remain valid and in full force to the extent they do not conflict with the intent expressed through this Policy.

Processing Principles

We fully respect your fundamental rights and place the protection of your privacy as a priority of our Company. In this context, when processing your personal data we follow the following basic principles:

2.1. We process your personal data lawfully and fairly, and maintain full transparency towards you regarding the manner in which we manage it.

2.2. We collect and process your data only for specified, explicit and legitimate purposes as set out in this Policy, and do not process it further in a manner incompatible with those purposes.

2.3. We process your personal data only to the extent that it is adequate and relevant to the above purposes, while simultaneously limiting such processing to what is necessary for those purposes.

2.4. We make reasonable efforts, with your assistance, to ensure that the data being processed is accurate and, where necessary, kept up to date in relation to the purposes of processing, taking all reasonable steps for the immediate deletion or correction of inaccuracies.

2.5. We retain your personal data in a form that permits identification only for the period required for the above processing purposes.

2.6. We process your personal data in a manner that guarantees its security through the use of appropriate technical or organisational measures.

2.7. We do not intend to further process your personal data for any purpose other than that for which it was collected.

2.8. We inform you that you are under no obligation to provide your personal data and that there are no potential consequences from not providing it unless this is mandatorily required. You may, however, visit the Website without disclosing your identity and without providing us with any personal information. Furthermore, we inform you that your personal data, if disclosed to us, will not be used for automated decision-making, including profiling.

2.9. Subject to the provisions of this Policy, we do not disclose or transfer your personal data to further third parties without your consent, unless this is permitted by law or by the agreement between us.

2.10. We inform you that we do not transfer your personal data to a third country or international organisation for which there is no adequacy decision by the European Commission in accordance with the General Data Protection Regulation (“GDPR”).

2.11. In general, we fully comply with applicable legislation and fulfil all our obligations arising from it, as the legally responsible controller of your personal data.

Types of Data

3.1. If you contact us via email or other means, we collect and process your personal data related to such communications, under the terms and conditions of this Policy, in order to respond to the relevant requirements and requests and to improve the services we offer.

3.2. Our Company does not collect or gain access in any way to special categories (“sensitive”) of your personal data or data relating to criminal convictions and offences. You are obliged to refrain from posting such data relating to yourself or third-party data subjects. Should you post such data on our Website, it will be removed as soon as it comes to our attention. We bear no liability towards you or third parties for any posting and/or processing of sensitive data resulting from your actions or omissions in breach of the above obligation.

Purposes and Legal Basis of Processing

4.1. Your personal data necessary for the provision of our services within the framework of our contractual relationship, in accordance with Article 6 § 1 (b) of the GDPR, is collected and processed by our Company for the following purposes:

• Communication with you in the context of the proper performance of our services and for the resolution of any complaints.
• Support of specific beneficial activities and/or purposes.
• Administrative organisation and operation of our Company.

4.2. Our Company collects and processes your personal data only for the aforementioned purposes and only to the extent necessary for their effective fulfilment. Such data is in each case relevant, adequate and not excessive in view of the above purposes, and is accurate and, where necessary, updated. Furthermore, such data is retained only for the period required for the achievement of the purposes of its collection and processing, and is deleted upon the expiry of that period.

Consent

5.1. Our Company may process your personal data only upon your lawful consent for the following purposes:

• For commercial communication purposes.
• For research and/or analysis purposes to better understand your interests and/or experiences.
• For promoting the public profile and activities of the Company.

5.2. You provide your consent to the processing of your personal data for the above purposes by means of an electronic declaration, in a clearly distinguishable manner from other matters, in an intelligible and easily accessible form. Your consent is given freely, and your personal data is provided without such provision constituting a legal or contractual obligation on your part or a requirement of our Company for entering into a contract with you.

5.3. In this context, by completing the relevant field online, you expressly declare that you wish to and that you provide your consent for the above purposes in accordance with the terms and conditions of this Policy. You provide the above consent in the following ways:

• When sending an email, and
• When submitting a contact request.

5.4. The non-provision of your personal data and/or the refusal to consent to the terms of their processing results in the inability to collect and therefore process your personal data for the achievement of the aforementioned purposes.

Third-Party Recipients of Data

6.1. Our Company does not transfer your personal data or link its files for financial or other consideration to any third private companies, natural or legal persons, public authorities or services, or other organisations.

6.2. For the purposes of processing referred to in this Policy, our Company may provide access to or transfer the following types of your personal data to the following processors acting on its behalf and on its instructions:

• Your personal data to the Company providing us with software and database maintenance and support services, for the purpose of supporting the Website.
• Your personal data to third-party consulting firms for the provision of data analysis services.

6.3. The processing of your personal data by the above associated entities is carried out under our supervision and only on our instructions, and is subject to the same data protection policy or a policy offering at least the same level of protection.

6.4. If required by a court or other administrative authority, or in any other case where a legal obligation so requires, our Company may disclose your personal data to the extent provided by law, but only after notifying you.

Data Confidentiality and Security

7.1. In order to ensure the proper use and integrity of your personal data and to prevent unauthorised or accidental access, processing, deletion, alteration or other use thereof, our Company applies appropriate internal policies and takes all appropriate organisational, technical, physical, electronic and procedural security measures, as well as technological standards, in accordance with applicable laws and regulations.

7.2. Our Company’s data processing procedure is carried out in a manner that ensures the confidentiality and the physical and logical security of the data, taking into account the latest developments, the cost of implementation, and the nature, scope, context and purposes of the processing, as well as the risks of varying likelihood and severity to your rights and freedoms.

7.3. The processing of your personal data is carried out exclusively by Company personnel authorised for this purpose, who are bound by strict obligations of confidentiality.

Data Retention Period

8.1. We retain your personal data for as long as the purposes for which it was collected, as described above, remain in effect.

8.2. Our Company may retain your personal data after the fulfilment of the purposes for which it was collected and processed in the following strictly listed cases:

• Where there is a legal obligation on our part arising from a relevant provision of law.
• Where required for the proper organisation and operation of our Company, provided that your data is anonymised or pseudonymised.
• Until the statute of limitations on the relevant claims expires, for the protection of our rights and legitimate interests before any competent Court and any other public authority.

8.3. Upon expiry of the retention period, your personal data is deleted from our files and system in compliance with our Company’s policy and provided that its retention is no longer required for the fulfilment of the purposes described above.

Rights

9.1. Subject to applicable law, you have the following rights:

• To request access to your personal data and to the information relating to its processing (e.g. processing purposes, retention period, etc.) and to receive a copy thereof.
• To request the correction of any inaccurate and the completion of any incomplete personal data.
• To request the deletion of your personal data.
• To request the restriction of the processing of your personal data in the cases expressly provided for by law.
• To request the portability of your personal data to another controller in a structured, commonly used and machine-readable format (e.g. CD).
• To object to the processing of your personal data in the cases expressly provided for by law.
• Not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. The above requests are addressed in writing by postal letter to our Company’s registered office.
• To withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.

9.2. Our Company will respond to each of your requests within one (1) month of receipt. Upon notifying you, this deadline may be extended by a further two (2) months where necessary, taking into account the complexity and number of requests. Any rejection of your request will be reasoned.

9.3. If your requests do not meet the legal requirements, our Company reserves the right to either: (a) charge a reasonable fee, taking into account the administrative costs of providing the information or communication or of taking the requested action, or (b) refuse to act on the relevant request.

9.4. In the event of a breach of your personal data which is likely to result in a high risk to your rights and freedoms, and provided that it does not fall within one of the exceptions expressly provided by law, we undertake to notify you accordingly without undue delay.

9.5. Where there is doubt as to the identity of the natural person submitting the request, we reserve the right to request additional information necessary to confirm their identity.

9.6. If your rights are being violated, we inform you that you have the right to lodge a complaint with the Hellenic Data Protection Authority or any other competent supervisory authority.

User Obligations

10.1. By using the Website and by providing your personal data upon consent, you acknowledge that you are obliged to declare the true, accurate and complete details requested by our Company. Furthermore, you must notify our Company of any changes to such details in order for them to remain up to date and accurate.

10.2. If you post and/or communicate to our Company in any way data relating to third-party data subjects, you guarantee that those data subjects have been duly informed and that you have obtained their explicit consent in accordance with the provisions of applicable law.

10.3. If it is found that you are not complying with the above obligations, or if our Company has reasonable suspicion that the information you provide is false, incomplete, or in any way contrary to the law, the Terms of Use, or this Data Protection Policy, we reserve the right to reject any request you make. In such case, you have no right to any compensation as a result of the rejection of your request.

10.4. You acknowledge that our Company may delete, cross-check, supplement or modify the information you provide on the basis of information lawfully provided by third parties. In such case, our Company will notify you accordingly, following the lawful procedure.

10.5. By using the Website, you confirm that you are over sixteen (16) years of age. If you are under sixteen (16) years of age, you are obliged to refrain from any use of the Website and from providing any personal data without the approval of the person exercising parental responsibility over you. If you fail to comply with the above obligations, you must immediately notify our Company accordingly. In any case, by using the Website, you acknowledge that our Company bears no liability for your breach of the above obligations to the extent that it is unable, even with reasonable efforts, to verify your age or the consent of the person exercising parental responsibility over you.

International Jurisdiction and Applicable Law

11.1. For the resolution of any dispute arising between us in relation to this Policy and its subject matter, the courts of Athens shall have jurisdiction and Greek law shall apply, without regard to its conflict of laws rules.

11.2. Should any provision of this Policy be invalidated by a decision of a competent court as unlawful, invalid or unenforceable, this shall not affect the remaining provisions, which shall remain in force and continue to apply normally.

Contact

For any further information or request regarding this Policy, or if you wish to exercise any of your rights as referred to above, you may at any time contact our Company’s Data Protection Officer at the following details:

Email: info@rebess-ifaistos.gr
Address: 3 Parnonos Street, 15125, Marousi, Attica, Greece