Privacy Policy

WEBSITE PERSONAL DATA PROTECTION POLICY

The website https://kourtis-contract.gr/site/ (hereinafter the “Website”) is under the management of the Greek company under the name “IOANNIS A. KOURTIS SA.” with Tax Identification Number 801271856, which is located at 6 Malakonta Street, in Kifissia, Attica Post Code: 14564 (hereinafter: “the Company” or “Kourtis SA”, “we”, or “us”), which is the personal data Controller we collect from you during your visit to the Website, ie all information that identifies you as persons or can identify you directly or indirectly.

The Company takes the protection of your privacy and personal data very seriously and has taken all the necessary measures in order to safeguard the security and confidentiality of the information concerning the visitors / users of the Website.

Please read this Privacy Policy of our Website carefully in order to be informed about the information collected by you, when you visit it and when you use its internet services, the information posted on it, its use, as well as your rights.

This Policy is for the information of the data subjects in accordance with articles 13-14 of the General Data Protection Regulation of the EU 679/2016 (GDPR) regarding the personal data collected by the Company through the Website. If you have any questions about this Policy and in general about the way the Company collects and processes your personal data, please contact the Company’s Personal Data Officer at: info@kourtis-contract.gr.

1. HOW PERSONAL DATA IS COLLECTED

1.1. Directly from you: we collect personal data directly from you when you visit the Website, when you request information, submit a request or subscribe to our updates (newsletter).

1.2. By automated means through the use of the Website: when you visit the Website, we may collect data from you based on your browsing and use of our services. This data may include search history, IP address, screen resolution, browser you used, operating system and settings, access times and URL reporting as well as data collected through cookies (See Cookies Policy).

1.3. Third parties: If you link to the Website through a third party service (eg Facebook), this third party service may send us information such as your registration information and profile from that service. This information is varied and controlled by this service or under your authority through your privacy settings on this service. Also to the extent permitted by applicable law, we may receive additional information about you, such as demographics or fraud detection information, from third-party service providers and / or affiliates, and combine it with information about you.

2. WHAT PERSONAL DATA IS COLLECTED

When you visit the Website we take care to collect only your absolutely necessary personal data, which are appropriate and clear for the purpose intended, which (data) will vary depending on the use made by each visitor / user (contact form, newsletter and others):

Data when completing / using the contact form:

-Mandatory: e-mail address

-Mandatory: name, surname, postal address, telephone number so that we can contact you.

But also any additional information that you provide voluntarily in the text editor of the contact form.

Anonymous browsing data:

In order to provide the best possible experience of the Website, the following data is further collected: technical information about your internet connection and browser, operating system and settings, as well as the country and phone code where your computer is located, the websites that appear during your visit, the ads you click on and with what search terms you visited the Website, access times and URLs and data collected through cookies, about which you can learn more in the Cookies Policy.

3. USE OF COOKIES

The Website uses cookies or similar technologies to ensure the best possible visitor / user experience and to analyze trends, manage the website, monitor the visitor / user browsing the website and collect demographic information about the origin of our visitors / users as a whole. For more information about the use of cookies, consult the Cookies Policy.

4. PURPOSE OF PROCESSING

The purpose of data collection / processing is to provide information to all visitors / users, existing and future customers regarding the Company and its products and services, effective communication with visitors / users and customers, support, promotion and execution of any contractual relationship with customers and the protection of transaction security.

Specifically, your data is used as follows:

a. To access and use the Website and the services provided through it.

b. To respond more easily to customer service requests.

c. To send you useful notifications and to communicate for commercial purposes.

d. For the implementation of marketing campaigns and promotional actions related to the products and services of the Company (targeted advertising).

e. To be able to detect and prevent cases of fraud, abuse, security incidents and other harmful activities and to carry out safety and risk assessments.

f. For the imposition of the Terms of Use of the Website and other policies.

g. To ensure the compliance of the Company with its legal obligations.

h. To improve our services and the visitor / user experience, in order to control, troubleshoot and improve the functionality and quality of our online services and in general the optimization and adaptation of our online presence to your needs, making the Website easier and more efficient to use.

5. LEGAL BASIS OF PROCESSING

The legal basis for processing personal data, collected in accordance with the above, may be one or more of the following:

a. processing of personal data is necessary for the execution of the contract or during the pre-contractual process between you and the Company, especially for the sale of products, the provision of services and / or the information you request.

b. processing is necessary for the purposes of the legitimate interests pursued by the Company, such as direct commercial promotion, fraud prevention, ensuring network and information security.

c. processing is necessary for the observance of the legal obligations imposed on the Company by the current legislation.

d. your consent, in order to process your personal data for the purposes of direct marketing, to provide personalized offers or any other case, where consent is required in accordance with applicable law, such as when you choose to receive emails or newsletters.

The Company also reserves the right to regularly inform the visitor / user, interested party or customer, by telephone, mail, e-mail, mobile message (SMS) or any other appropriate means of communication in its contact details legally acquired about the products and its services in the context of their transactional relationship (article 11-3 of Law 3471/2006) and as long as the subject does not object to this communication. This information may include information about products, services, communication to conduct research to improve the services and products provided to customers, as well as other promotional activities and the service of similar purposes.

6. SOCIAL MEDIA PLUG -INS

The Company has official accounts on social media and specifically on Facebook, Instagram and YouTube. The Website, in accordance with article 6 par. 1 f. GDPR, incorporates social media add-ons (plug-ins) of Facebook, Instagram and YouTube with a proposal to the visitors / users of the Website to visit the Company’s accounts in the respective media, in order for the Website to become better known. This commercial purpose must be regarded as a legitimate interest in accordance with the provisions of the GDPR. When you visit the Website, these add-ons are normally disabled, that is, they do not send data to these social networks without your active participation. To use these add-ons, you must enable them by clicking on them. After activation, a direct connection is created with the server of the respective social network.

If you are a member of a social network and you do not want the data collected when you visit the Website to be linked to your data stored on the social network, you must disconnect from the respective social network before activating these add-ons. We have no control over the amount of data that social networks process through their add-ons. Information on the purpose and volume of data collection, the individual processing and use of data by social networks, as well as the rights and possibilities of regulation regarding the protection of your data, can be found in the statements of social networks for data protection. 

7. RECIPIENTS OF PERSONAL DATA

As a rule, we do not disclose to any third party your personal data collected through the Website. Access to your collected data may, however, can be granted (with or without your prior notice), within the framework necessary to fulfill each of the above processing purposes and within the responsibilities of each recipient:

a. The authorized employees of the Company in the exercise of their duties.

b. public authorities, such as tax, judicial, public, police and independent authorities, as long as this is absolutely necessary for the protection of legal rights or the fulfillment of obligations of the Company.

c. to the extent that this is appropriate for the fulfillment of our contractual obligations, your better service and the satisfaction of your requests, providers cooperating with the Company, such as companies providing legal, consulting and auditing services, IT services companies, transport companies , companies that provide internet services, or other services necessary for the operation of the Website and the execution of the Company’s services, any external partners of the Company that are either related to the Company’s marketing and the management of the Website, or gain access due to legal obligations or due to a dispute that may arise (eg legal counsel of the Company).

Your personal data is not disclosed to third parties and they are generally not transferable outside the European Union. We assure you that in the event of the transfer of your personal data outside the E.U. / E.E.A., including the transfer of your personal data to third party service providers established outside the E.U. / E.E.A., we ensure that the country to which your personal data is transmitted ensures an adequate level of protection of personal data, based on an adequacy decision of the European Commission or that appropriate safeguards are in place for the protection of personal data, including standard data protection clauses.

It should be noted that when accessing and / or processing the personal data of the visitor / user, the employees and employees of the Company fully comply with the provisions of the GDPR, as well as with the applicable Greek legislation and jurisprudence regarding the protection of personal data.

The Company requires from its employees, the maintainers of the Website, as well as its third party partners to take all the necessary technical and organizational measures (including the appropriate policies and procedures, in order to prevent the disclosure of the personal data of its visitors / users, who process and possess and implement procedures for the management and processing of personal data in a lawful manner and protect them in accordance with the GDPR.

8. DATA RESERVE TIME

We retain your personal data only for as long as we need it for the purpose for which we collect it, in order to meet your needs or to comply with our legal obligations. The retention period is determined based on the following criteria:

a. When you purchase products and services, for as long as our contractual relationship lasts and for a period of five (5) years from the completion of the specific service and at least for as long as it is defined by the respective legal (tax or other) obligation.

b. When you participate in a promotional offer, for as long as the promotional offer last.

c. When you contact us to conduct a survey, for the time required to process the survey.

d. In case you contact us or submit a request, for as long as required for your service and for a period of five (5) years after the end of the procedure.

e. in case you subscribe to our newsletter, for as long as you wish to receive the newsletter.

f. When you create an account, until you request its deletion or after a period of inactivity defined in accordance with national rules.

g. As long as you have given your consent to receive direct marketing services, until you cancel your registration or request its deletion or after a period of inactivity defined in accordance with national rules.

h. When cookies are installed on your computer, for as long as it is necessary to achieve their purposes (eg as long as your visit to the respective website in the case of shopping cart cookies or ID number cookies) and for a period defined according to with domestic rules.

i. After you revoke your consent to the collection and processing of your personal data, your data is deleted immediately from our electronic and physical files, unless compliance with them becomes necessary in compliance with our legal obligation in accordance with the above or for the exercise, establishment or defense of our rights or legitimate interests before judicial or other authorities.

We may retain certain personal data for reasons of compliance with our legal or regulatory obligations, as well as to be able to manage our rights (for example, to defend our claims before the courts) or for statistical or historical purposes.

When we no longer need to use your personal data, it is removed from our system and our files or they are anonymized so that you can no longer be identified by them.

9. TECHNICAL AND ORGANIZATIONAL MEASURES

The Company, its employees, its affiliates and its representatives are committed to implement the appropriate technical and organizational measures to ensure, as much as possible, the most appropriate protection of personal data from accidental or unlawful destruction, loss, alteration, unlawful disclosure or access to these and any illegal processing, as well as the possibility of restoring availability and access to them. These measures are intended to ensure that processing is carried out in accordance with the GDPR, obviously taking into account the nature, scope, context and purposes of the processing, as well as the risks to the rights and freedoms of individuals, by applying appropriate procedures for their regular monitoring, evaluation and evaluation of their effectiveness.

10. RIGHTS OF VISITORS / USERS

According to the GDPR (Articles 12-22) you have the following rights:

a. the right of access, to be informed which data we process, for what purpose and the recipients.

b. the right to correction, in order to correct any deficiencies or inaccuracies in your data.

c. the right to erasure (right to be forgotten), to delete your personal data from our files, as long as their processing is no longer necessary or the retention of your data is no longer required, in order to comply with our legal obligations or for defending our legal interests before the Courts.

d. the right to restriction of processing, in case of doubt about the accuracy of your data.

e. the right to data portability, to receive your data in a structured, commonly used and machine-readable format.

f. the right to object, if you do not wish to use your data for the purpose of direct marketing of our services and products, including opposition to profiling. However, we inform you that the Company does not make a profile based on the personal data you provide to us through the Website for absolutely any purpose.

In order to exercise any of the above rights, you can contact us via e-mail: info@kourtis-contract.gr or by post or in person at the Company’s facilities: Malakonta 6, PC: 14564 Kifissia Attica.

We will take every possible measure to satisfy your request within a reasonable time, no later than thirty (30) days from the submission of the request and your proper identification. This deadline may be extended by an additional sixty (60) days, if required, taking into account the complexity of the request and the number of applications.

Depending on the circumstances and the request, we may not be allowed to give you access to personal data or otherwise fully comply with your request, for example, when the provision of your data may reveal the identity of another person. The Company also reserves the right not to satisfy your request, in case it is deemed manifestly unfounded or excessive, informing you of the reasons for its non-satisfaction.

In any case, every visitor / user, if he considers that some of his rights are violated, has the right to submit a complaint to the Personal Data Protection Authority (www.dpa.gr, 1-3 Kifissias, PC: 11523 Athens, 2106475600, contact@dpa.gr). 

11. MINORS

The content and services of this Website are not intended for minors under 16 years of age. Therefore, no personal data should be submitted to the Company through the Website by visitors / users under the age of 16.

When collecting information from you, we take due care to verify, as far as technically possible, which of the personal information collected relates to minors. In any case, if we find that we have collected any personal information from a minor under the age of 16 without verifiable parental consent, in accordance with Article 8 of the GDPR, we will delete the information from our database as soon as possible. If you believe that we may have collected information from a minor under 16 years of age, please contact the Company’s Personal Data Officer at: info@kourtis-contract.gr.

12. CHANGES IN POLICY

The Company may amend this Policy. Please check the implementation date at the end of the Policy to see exactly when it was last revised. Each revision takes effect as soon as the revised Policy is posted.

If the Company makes substantial changes to this Policy that extend its rights to use the personal data it has already collected from you, it will inform you and give you the option to use this data in the future.

Date of Application: 1.4.2022