1. Data controller
The controller of your personal data is the company identified above. For any matter concerning your data you may contact us using the details at the end of this page.
2. What data we collect
We collect only what the service needs in order to work:
- Registration and billing details: company name, VAT number, tax office, registered address, postal code, email, phone, username.
- Contact and register-interest form data: name, company, email, phone and your message.
- Contract and licence data: products, term, activations, certificates, support requests.
- Conversations with the website's digital assistant.
- Technical data: IP address and timestamp, used to prevent abuse and to rate-limit requests.
- Sign-in data, where you sign in with a Google or Microsoft account: the account identifier and email address passed to us by that provider.
3. Purposes and legal bases
We process your data for the following purposes:
- Performing the contract: account creation, orders, licensing, support. Legal basis: performance of a contract (Article 6(1)(b)).
- Responding to contact and register-interest requests. Legal basis: consent or legitimate interest in answering your request (Article 6(1)(a) or (f)).
- Invoicing and meeting tax and accounting obligations. Legal basis: compliance with a legal obligation (Article 6(1)(c)).
- Security, abuse prevention and correct operation of the service. Legal basis: legitimate interest (Article 6(1)(f)).
- Verifying business status through the VAT number you provide. Legal basis: performance of a contract and legitimate interest.
4. The digital assistant
The website offers a digital assistant that answers questions about our products. To make this work, your message and the conversation history are transmitted to an artificial intelligence provider acting as a processor on our behalf.
Please do not enter sensitive personal data, passwords or third-party confidential information into the conversation.
If you express interest through the conversation and leave contact details, these are handled like any other contact request.
5. Payments
Card payments are executed by Viva Payments. Card details are entered exclusively within the provider's environment.
We neither receive nor store card numbers. From the provider we receive only the outcome of the transaction, the amount and its reference code, so that your order can be activated.
The payment provider acts as an independent controller for transaction data, under its own privacy policy.
6. Recipients
We do not sell or rent personal data. Your data is disclosed only to:
- Our cloud hosting and infrastructure provider, where the application and database are hosted.
- An artificial intelligence provider, solely to operate the digital assistant.
- The payment service provider, to execute the transaction.
- An email service provider, to send service messages.
- Our own business management system, to issue invoices and keep our accounting records.
- Our external accountant and, where required by law, competent public authorities.
7. Transfers outside the European Economic Area
Some of our providers may process data outside the EEA, in particular the artificial intelligence provider.
In those cases the transfer relies on the European Commission's Standard Contractual Clauses or another appropriate safeguard under Article 46 of the Regulation.
8. Retention
We keep data only for as long as necessary:
- Account and contract data: for the duration of our relationship and afterwards for as long as needed to establish or defend legal claims.
- Invoices and tax records: for the period required by tax law.
- Contact requests that did not lead to a business relationship: up to twenty-four months.
- Assistant conversations: for a limited period, as needed to operate and secure the service.
- Technical rate-limiting data: for a short period, in application memory.
9. Security
We apply appropriate technical and organisational measures: encrypted transport, hashed password storage, role-based access control, a second authentication factor where required, and action logging.
No method of transmission or storage is completely secure; we undertake to act promptly in the event of an incident and to notify where the law requires it.
10. Your rights
Under the Regulation you have the following rights:
- Access to your data and a copy of it.
- Rectification of inaccurate data and completion of incomplete data.
- Erasure, where no lawful ground for retention applies.
- Restriction of processing.
- Portability of the data you have provided to us.
- Objection to processing based on legitimate interest.
- Withdrawal of consent, without affecting the lawfulness of processing carried out beforehand.
11. Exercising your rights and complaints
To exercise your rights, please contact us. We respond within one month; this may be extended by a further two months for complex requests, in which case we will tell you.
If you believe the processing infringes the Regulation, you have the right to lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifissias Avenue, 115 23 Athens, www.dpa.gr).
12. Cookies
The use of cookies and local storage is described in the Cookie Policy.
13. Changes to this policy
We may update this policy. The version in force is always published on this page, together with its update date.
Competent courts
The courts of Thessaloniki, Greece