This Privacy Policy describes the policies of ABK Solutions S.A. (the “Company”), located at Egialias 18, Marousi 15125, Greece, on the collection, use and disclosure of your information that the Company collects when you use the website: https://abk.gr (the “Website”). By accessing or using the website, you are explicitly granting your freely given, specific, informed and unambiguous consent to the collection, use and disclosure of your information in accordance with this Privacy Policy. If you do not consent to the same, please do not access or use the Service.

The protection of your personal data is of the utmost importance for ABK Solutions S.A; consequently, the Company collects and processes personal data strictly in conformance with the General Data Protection Regulation (GDPR) No. 2016/679 of the European Parliament and the Council, which came into effect on 25.05.2018, and the applicable legislation in general and to the extent necessary in connection with some aspect of the business of the Company. The Company limits the access to such data to authorized persons only, and takes enhanced data security measures to secure data against -among others- loss, mishandling, unauthorized access, alteration or disclosure. However, given the inherent risks, the Company cannot guarantee absolute security and consequently, the Company cannot ensure or warrant the security of any information you transmit to the Company and you do so at your own risk. The Company may modify this Privacy Policy at any time without any prior notice to you and will post the revised Privacy Policy on the Website. The revised Policy will be effective 180 days from when the revised Policy is posted on the Website and your continued access or use of the Website after such time will constitute your acceptance of the revised Privacy Policy. The Company therefore recommends that you periodically review this page.

 

1. Processing of Personal Data

1.1 Categories of personal data

When you visit the Company Website, the Company may process:

(a) The data that you have entered on the website (full name, contact phone, e-mail address, communication content);

(b) Personal data automatically collected while you browse (IP address, device type, browser, redirection website, company web pages that you visited, visit date and time).

1.2 Purpose of processing

Personal data are processed for the following purposes:

(a) Το serve a pre-contractual or contractual relationship and especially to respond to your requests or contact you when you have so requested;

(b) Τo document a legitimate legal claim or defense of the Company against an attempt at fraud, cyber-attack or other unlawful activity;

(c) Τo create anonymized statistics on the number of visits and accessibility of the homepage and the individual pages, for the purpose of proceeding with necessary action aimed at improving your browsing experience.

If the Company wants to use your information for any other purpose, the Company will ask you for consent and will use your information only on receiving your consent and then, only for the purpose(s) for which grant consent unless the Company is required to do otherwise by law.

1.3 Legal basis for data processing

The processing of your personal data is necessary to fulfill the above purposes. Unless otherwise stipulated at the time of collection of personal data, the legal basis for the processing of such data is one of the following:

(a) processing is necessary for the fulfillment of our contractual relationship with you (Article 6(1)(b) of the General Regulation);

(b) processing is necessary for the purposes of the legitimate interests pursued by the Company (Article 6(1) (f) of the General Regulation);

(c) you have given your explicit consent to the processing of your personal data (Article 6 (1) (a) of the General Regulation).

1.4 Data recipients and transfers

Some of our websites may be managed by third-party IT companies (processors). In such cases the Company makes sure, via contractual provisions and regular inspections, that should such third parties have access to personal data this is done with due observance of the applicable legislation on data protection.

1.5 Personal Data of Minors

The Company and its websites are addressed to persons having completed their eighteenth (18) year of age. The Company has no liability if minors visit its websites on their own initiative. If during the data collection process, it becomes evident that the user is of a younger age, the Company will not process the minor’s personal data.

 

2. Data Retention Period

The Company shall store your personal data for as long as is necessary to achieve the purposes described in the present policy, unless the applicable legislation stipulates or allows a longer time period. The criteria governing the determination of the data retention period include the following: (a) as long as the contractual relationship is in effect; (b) as long as is necessary for the Company to be in compliance with a legal obligation it incurs; (c) as long as is necessary having regard to the legal situation the Company finds itself in (such as defense of rights in court, audits by regulatory authorities, etc.).

 

3. Your Rights

Under the applicable legislation on personal data protection and provided the relevant legal conditions are met, you have the following rights:

3.1 Right of access

You have the right to be informed as to whether or not the Company processes your data, to have access to such data and obtain supplementary information in connection with such processing.

3.2 Right to rectification

You have the right to request that your personal data be updated, rectified or completed.

3.3 Right to erasure

You have the right to submit a request for the erasure of your personal data, and such request shall be granted provided no other legal grounds for processing are in place (such as, as an indication, compliance with a legal obligation to process personal data).

3.4 Right to restriction of processing

You have the right to request the restriction of the processing of your personal data in the following cases: (a) when you contest the accuracy of your personal data, and pending verification of the accuracy of your data; (b) when you oppose the erasure of your personal data and you request the restriction of their use instead; (c) when your personal data are no longer needed for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims, and (d) when you have objected to the processing and pending verification that our legitimate grounds for processing override those for which you object to the processing.

3.5 Right to object to the processing

You have the right to object at any time to the processing of personal data concerning you which is based on the legal basis of the processing (Article 6 (1) (e) or (f) of the General Regulation) and your objection shall be granted unless the Company demonstrates compelling legitimate grounds for the processing.

3.6 Right to data portability

You have the right to receive, at no cost, your personal data in a structured, commonly used and machine-readable format or to request, if technically feasible, that the Company transmits such data directly to another controller.

3.7 Right to oppose automated decision-making

You have the right to request that you be excluded from decision-making which is based on automated processing, including profiling.

 

4. Data Controller

The Data Controller is “ABK Solutions S.A”, located at Egialias 18, Marousi 15125, Greece, email: , phone: +302107458465

The Company provides support for all questions, comments, concerns or complaints relating to personal data protection or should you wish to exercise any right in connection with the protection of your data. You may contact our Data Protection Officer by email at [email protected] or by post at the following mailing address:

ABK Solutions S.A., Egialias 18, Marousi 15125, Greece,

 

5. Right to lodge a complaint with the competent authority

If you wish to lodge a complaint with the competent authority, the competent authority for these matters is Hellenic Data Protection Authority (HDPA). You need first make an effort to exercise your rights to the Data Controller.

For the Authority’s responsibilities and how to file a complaint, you can visit its website (www.dpa.gr> My Rights> Submitting a Complaint) where detailed information is available.

 

Do note that if you do not allow us to collect or process the above mentioned personal information or withdraw the consent to process the same for the required purposes, you are not entitled to access or use the website.