Our Company is committed to safeguarding the confidentiality and trust of the information provided to us and complies with the applicable legislation on the protection of personal data. Please read this Privacy Notice and Protection of Personal Data (hereinafter the “Notice”) to learn more about the types of information we collect about you through this website and how we use that information.
Our Company also collects personal data in the context of providing professional services (see below for more information).
As part of this fundamental obligation, our Company is committed to protecting and appropriately using personal information (often referred to as “personal data”) collected either online, through the professional services we provide, or through our communication/co-operation with any third party.
In general, our goal is to collect only the personal data that visitors voluntarily provide so that we can offer them information and/or services or better serve and personalise their experience and interaction with our Company.
Please read this Notice to understand how we collect, store, use, transfer and protect the information/personal data that we receive.
1. Personal data this website collects and why we collect it
We receive your personal data when you choose to provide it—e.g., if you contact us by email or subscribe to certain services. In some cases, you may have already provided your personal data to our Company in the past.
If you choose to register with or sign in to our website using a third-party single sign-on service that verifies your identity and links your social media login information (e.g., LinkedIn, Google, Twitter) to our Company, we will collect the information or content required for registration or sign-in which you have authorised the social media provider to share with us (such as your name and email address). The collection of any additional information may depend on the privacy settings you have set with the social media provider—please consult that service’s privacy notice/policy.
By registering and/or submitting your personal data to our Company, you also consent to the use of such data in accordance with this Notice. Your personal data will not be used for other purposes unless we obtain your permission or unless such use is required or permitted by law or professional standards. For example, if you register on our website and provide information about your preferences, we will use that information to personalise your user experience. When you register or sign in using third-party single sign-on, we may identify you as the same user across different devices and tailor your experience accordingly. If you send us your CV to apply online for a position with our Company, we will use the details you provide to assess your suitability for our open roles.
In some cases where you have subscribed to specific services, we may temporarily store your email address until we receive confirmation of the information you provided (by sending a message to the address you supplied to confirm the subscription).
Our Company generally collects only the personal data necessary to fulfil your requests. For example, if you use our services, we will use your data to perform our obligations for delivering those services under our agreement. We also use data based on our legitimate interests, such as providing you with the most suitable website/email/newsletter content, improving and promoting our products and services, administering our systems, detecting fraud and for other legal purposes. Whenever we rely on legitimate interests, we always give priority to your rights and interests in relation to data protection over our own. Where additional, optional information is requested, you will be informed at the time of collection.
1.1 Automatic collection of personal data
In certain cases, our Company and its service providers use cookies, web beacons and similar technologies to automatically collect specific categories of data when you visit us online and through any email communications exchanged. This collection allows us to personalise your online experience, and improve the performance, usability and effectiveness of our online presence, as well as to evaluate the effectiveness of our marketing activities.
1.1.1 IP addresses
An IP address is a number assigned to your computer whenever you access the Internet. It allows computers and servers to recognise and communicate with each other. IP addresses from which visitors appear to originate may be recorded for IT security and system diagnostics. These data may also be used in aggregate form to analyse website trends and performance.
1.1.2 Cookies
Cookies may be placed on your computer or Internet-enabled device whenever you visit our website. This enables the site to remember your device and serves several purposes.
On our website, a consent banner will appear requesting your permission for the collection of cookies. If you do not give consent, your device will not be tracked for marketing-related activities. A secondary type of cookies referred to as user-input cookies may be required to ensure essential functionality. These are not blocked by the banner. Your choice will be stored in a cookie and will apply for 90 days. If you wish to revoke your choice, you can do so by deleting your browser cookies.
Although most browsers automatically accept cookies, you can choose to accept or reject cookies via your browser settings (usually found in the Tools or Preferences menu). You can also delete cookies at any time. However, please note that if you do not accept cookies, you may not be able to fully use some features of our website. Additional information on managing cookies can be found in your browser’s Help section or on sites such as www.allaboutcookies.org.
Below are examples of the cookie types we use:
- Performance (e.g., browser compatibility): built-in cookies that help with compatibility and performance (e.g., faster loading). Session duration (deleted when the browser closes).
- Site preferences: record preferences (e.g., language) or enhance your experience in registered-access areas. Session duration.
- Analytics: third-party tools to help us understand how visitors use our website (visits, page views, referrals). Generally persistent cookies deleted automatically after up to 24 months if you do not revisit the site.
- Visitor feedback: cookies to prevent repeated survey invitations; one session cookie and one persistent (up to 90 days).
- Social sharing: third-party social widgets/buttons may set cookies to facilitate sharing, display counts and link interactions to your broader online activity. Generally persistent (up to 24 months).
Cookies alone do not disclose your email address nor personally identify you. In analytics reports we may receive identifying information, including IP addresses, solely to determine the number of unique visitors and their geographic origin—not to identify individual visitors.
1.1.3 Google Analytics
Like most websites, we use Google Analytics (GA) to track user activity: how many people use our site, how they find it and use it, and their paths through it. GA records data such as your geographic location, device, browser and operating system; none of this information identifies you to us personally. GA also logs your computer’s IP address, which could be used for identification, but Google does not provide that to us. Google acts as a third-party processor.
GA uses cookies (see Google’s developer guides). Our site uses GA’s analytics.js implementation. Disabling cookies in your browser will prevent GA from tracking any part of your visit within this site.
Google provides a Google Analytics Opt-out Browser Add-on which communicates with GA (ga.js) to signal that information about your website visit should not be sent to GA. The add-on does not prevent data being sent to the website itself or to other web analytics services.
More information on how our Company uses Google Analytics: https://www.google.com/analytics/learn/privacy.html
1.1.4 Web beacons
A web beacon is a small image file on a web page that can be used to collect certain data from your computer, such as IP address, time of viewing, browser type and the existence of cookies previously set by the same server. Our Company uses web beacons only in accordance with applicable law. We or our service providers may use them to measure the effectiveness of third-party sites that provide recruiting or advertising services, to collect aggregate visitor statistics and to manage cookies. You can disable some web beacons by rejecting the related cookies; the beacon may still record an anonymous visit from your IP address, but cookie-derived information will not be logged.
1.1.5 Location-based tools
We may collect location data to provide you with information about services we believe may interest you based on your location and to improve our location-based products and services.
1.1.6 Contact forms and email links
If you choose to contact us using the “Contact us” form or an email link, none of the data you provide will be stored on this website or processed by any third-party processor. Instead, the data will be sent to us via SMTP. Our SMTP servers are protected by TLS/SSL (SHA-2, 256-bit encryption), meaning email content is encrypted before being sent across the Internet and decrypted on our local devices.
1.1.7 Email newsletter
If you subscribe to our email newsletter, the email address you submit will be forwarded to MailChimp (our email-marketing provider), which we consider a third-party processor. Your email address is not stored in the website database or our internal systems.
Your email address will remain in MailChimp’s database for as long as we continue to use its services or until you explicitly request removal (via the unsubscribe link included in every newsletter). If you are under 16 years of age, you must obtain parental consent before subscribing.
1.2 Social media applications and widgets
Our website may include functionality to share content via third-party social media applications (e.g., Facebook “Like” button, Twitter widget). Such applications may collect and use information about your use of our site (see “Social” cookies above). Any personal information you provide through such applications may be collected and used by other members of that social platform and is governed by their privacy policies. We have no control over, and accept no responsibility for, how those companies use your information.
Our website may also host blogs, forums, crowd-sourcing and other applications or services (collectively “social media features”). The purpose is to facilitate sharing of information and content. Any personal information you provide in such features may be disclosed to other users of that feature (unless otherwise stated at the point of collection), over whom we may have limited or no control.
1.3 Children
We recognise the importance of protecting children’s personal data, especially online. Our website is not intentionally designed for, nor directed to, children under 13 years of age. It is our policy not to knowingly collect or retain data about any person under 13.
2. Disclosure and transfer of personal data
We do not share personal data with unrelated third parties, except where required for our legitimate business and professional purposes, to respond to your requests and/or where required or permitted by law.
In certain cases, our Company may share your personal data with external companies/service providers/vendors working on our behalf to fulfil your requests, after informing you in advance and obtaining your consent. We may also disclose personal data in connection with the sale, assignment or other transfer of the business of the website to which the data relate; to respond to government or law-enforcement requests; or where required by applicable law, court orders or regulations. Such disclosures may also be necessary for data-protection/security audits or to investigate/respond to complaints or security threats.
Our Company does not sell personal data to any third parties. Nor will we transfer the personal data you provide to any third party other than as set out above.
3. Your rights regarding processing
Where applicable, you may exercise the following rights: access (to know what data we process, why and to whom it is disclosed), rectification (to correct inaccuracies), erasure (right to be forgotten, where processing is no longer necessary), restriction (if accuracy is contested), portability (to receive your data in a structured, commonly used format), and objection (in particular to direct marketing).
You may exercise these rights free of charge by sending a letter or email to our Company, unless requests are frequent/repetitive and, due to volume, entail administrative costs, in which case you may be charged the relevant fee. Upon exercising any of your rights, we will take all reasonable measures to satisfy your request within thirty (30) days of receipt, informing you either of its fulfilment or of the objective reasons preventing it.
Beyond the above, you may at any time object to processing for the purposes of providing professional services by withdrawing your consent. However, this may result in termination of such services, since no professional service can be provided without processing the personal data necessary for it.
In general, you are not required to submit personal data online; however, we may ask you to provide certain data in order to receive additional information about our services and events. We may also request your consent for certain uses of your personal data, which you may accept or refuse. If you subscribe to communications such as a newsletter, you will be able to unsubscribe at any time using the instructions contained in each communication. We will endeavour to delete your data as soon as possible, though some time and/or information may be needed to process your request.
As noted under “Cookies”, if you wish to avoid being tracked by cookies while browsing our site, you may set your browser to refuse all cookies or to alert you when a cookie is sent. Some parts of our site may not function properly if you choose to refuse cookies.
4. How long we keep your data
We will keep your data for as long as you maintain a contractual relationship with us, in paper and electronic form. If for any reason this relationship ends, we will retain your data for the period necessary until the limitation period for any related claims has expired. Criteria used to determine retention include: (a) the length of our ongoing relationship; (b) whether there is a legal obligation to which we are subject; (c) whether retention is advisable in light of our legal position (e.g., statutes of limitation, litigation or regulatory investigations).
5. Data security and integrity
Our Company implements reasonable technical and organisational security measures to protect personal data from loss, misuse, alteration or destruction. We also strive to ensure access to your data is limited to those who need to know it and who are bound by confidentiality obligations.
Please note that transmission of information over the Internet is not completely secure. While we make every effort to protect your personal data, we cannot guarantee the security of data transmitted to our website. Once received, we apply strict procedures and security controls to try to prevent unauthorised access.
We make every reasonable effort to retain personal data only for as long as needed for the purpose for which it was collected or until deletion is requested (if earlier), unless continued retention is required by applicable law.
6. Links to other websites
Our website may contain links to other websites governed by privacy notices that may differ from this Notice. Please review the privacy policy of any website you visit before submitting personal data. While we endeavour to link only to sites that share our high standards and respect for privacy, we are not responsible for the content, security or privacy practices of other sites.
7. Provision of professional services
Our Company receives personal data in the course of providing professional services—typically when serving individuals, employers, businesses with consumer clients and the public sector. Relationships with clients are governed by engagement letters and general terms, including the use of personal data we receive. Our Company provides various types of services and our role may not always be apparent to data subjects. However, we comply with our obligations under applicable Greek and European data-protection law and relevant regulatory guidance.
8. Data breaches
We will report any unlawful breach of this website’s database or that of any third-party data processor to all relevant parties and authorities within 72 hours of the breach, where it is apparent that personal data stored in identifiable form have been stolen.
9. Data Controller
The Data Controller of this website is the legal entity that represents this website and is duly represented by law.
10. Changes to this Notice
Our Company reviews this Notice regularly and may amend or revise it from time to time at our discretion. We encourage you to review it periodically to check for any changes in how we process your personal data. If we make material changes or changes that affect you (e.g., start processing your data for purposes other than those stated above), we will contact you before commencing such processing.
11. Contact us
If you have any questions, comments or complaints about how we handle or protect your personal data, or if you wish to modify your personal data or exercise any of your data-subject rights, please contact us at our Company’s main email address.