Effective Date: 01.12.2023
Last Updated: 10.01.2024
Our company addresses data privacy issues lawfully and sensitively. We have created this policy to inform you about the processing of your personal data by us.
-
Introduction – Data Controller
The website at insert.gr, hereafter referred to as “Website” or “we,” belongs to the sole proprietorship “SARRIS STAMATIOS OF GERASIMOS,” hereafter referred to as the company, with VAT number 077436135 and G.E.MI. registration number 112024208000, located at 56 Esperidon St., 18451 Nikaia.
Data Controller: Stamatis Sarris
Contact Phone: 2104256498 / 6973024129
Email: insert@insert.gr
As part of promoting our services (IT services), the Website collects certain information about its visitors, which may directly or indirectly lead to their identification.
According to the current legal framework, some of this information constitutes personal data, with you as visitors being considered “data subjects” and we being the “data controllers” of your data.
If you have any questions regarding the management of your data or wish to exercise your rights, please contact us.
-
Core Principles for Data Processing
The Website is committed to processing your data lawfully and transparently in accordance with the current legal framework.
– We process your data only for purposes that are explicit, lawful, and clearly defined from the outset, and we do not process them further in ways incompatible with these purposes (purpose limitation).
– We process only the data that are appropriate, relevant, and necessary for the purposes set (data minimization).
– We strive to keep your data accurate, providing you, where applicable, the opportunity to correct or delete them.
– We retain your data in a form that allows identification only for as long as necessary for the purposes set (storage limitation).
– We take all reasonable measures to ensure the security of your data, protecting them from unauthorized or illegal processing, accidental loss, destruction, or damage.
To protect your data, the Website implements a range of appropriate technical and organizational measures, adopts internal security policies, trains its staff bound by confidentiality, and utilizes a range of technologies that ensure the security of your data (e.g., SSL certificate, certified hosting providers, etc.).
We strictly adhere to security principles and regularly review these measures, adapting them to new best practices when necessary.
-
What Data We Process
The Website processes your data only when you actively provide it (e.g., by filling out a contact form).
However, this does not apply to certain data collected using cookies (see “Cookies Policy”) and some data automatically collected during your visit.
A. Information Collected Automatically
Due to the way the internet works, as soon as you visit the Website, our server records your IP address, as well as other information such as the date and time of your visit, the page from which you were referred, the type of browser and operating system you use.
The legal basis for processing this data [collection and storage in special files (log files)] is our legitimate interest in ensuring network and information security from accidental events or illegal or malicious actions that jeopardize the availability, authenticity, integrity, and confidentiality of stored or transmitted data (e.g., denial-of-service attack control) and effectively addressing any technical issues.
B. Information You Provide
We process personal data that you provide when you contact us via contact form, email, or phone:
Data We Process | Purpose | Legal Basis |
Full Name
Email Address Important Note: In your message to the company, you should include only necessary information and avoid mentioning personal data of yourself or third parties. |
We process this data in the context of serving you, in order to be able to communicate with you, responding to your message.
Sending an email, submitting a form, or making a phone call does not make you a “customer” nor does it place you in our database. |
We process the data you provide based on your consent (Article 6 para. 1a GDPR), which you have the right to revoke at any time and request deletion of your data. |
Important Note: The accuracy of the submitted information in all cases lies with those submitting it. Please review the section of the policy related to your rights for information on correcting your data.
-
Who Has Access to Your Data
Initially, access to your data is granted to authorized personnel and associates of our company, who process your data under strict confidentiality, only to the extent and for the lawful purposes we have informed you about.
For the Website to function properly, some of your data are processed by partner companies. These companies (data processors) process your data solely for the purposes mentioned above, on behalf of and under the instructions of our company, except for any legal obligations. During the transfer of your data to them, we take all necessary technical and organizational measures to ensure the highest possible level of security.
These companies are contractually bound to our company to provide the necessary guarantees for the protection of personal data and take appropriate measures to ensure lawful processing and the protection of your rights.
These companies provide services such as web hosting for the Website.
-
Where and For How Long We Store Your Data
Your personal data is stored in Hostinger UK Limited, UK private limited company, registered address Nwms Center, 31 Southampton Row, Office 3.11, 3rd Floor, London, England, WC1B 5HJ. Proper organizational and technical means are used in order to avoid any data breach.
Data is stored exclusively for the duration necessary for the respective processing purpose.
For example, if you contact us via the contact form, phone, or email, your data will be retained for three (3) months and then permanently deleted unless you enter into a contract with the company.
-
What Are Your Data Rights and How You Can Exercise Them
According to the applicable legal framework, you have a series of rights regarding the processing of your data by the Website.
Specifically, you have the right to:
- Submit a request to the Website to find out if we process any data and, if so, which data (right of access),
- Request their correction (right to rectification),
- Request, under certain conditions, their deletion (right to erasure),
- Request, under certain conditions, the restriction of their processing (right to restriction of processing),
- Object, under certain conditions, to the processing of your data by us (right to object), particularly regarding processing for marketing purposes (e.g., newsletter distribution),
- Request the data you have provided to us in a structured, commonly used, and machine-readable format (right to data portability), provided that this is technically feasible.
- In the event of a data breach that may pose a high risk to your rights and freedoms, and if it does not fall under one of the exceptions provided by the GDPR, the Website is obligated to notify you of the breach without undue delay.
Compliance with the legal framework for data processing and, in this context, the exercise of your rights is a priority for the Company. For this reason, we may request additional information necessary to confirm your identity before you exercise your rights.
The Website is generally required to respond to your request promptly, and no later than within one month. If necessary, taking into account the complexity of the request and the number of requests, this deadline may be extended by an additional two months. In any case, the Company will inform you as soon as possible, and in any case within one month of submitting your request, of its progress and the reason for any delay in fulfilling it.
If your requests are manifestly unfounded or excessive, particularly due to their repetitive nature, the Company may impose a reasonable fee, taking into account the administrative costs of providing the information, communication, or action requested, or refuse to act on your request.
If you believe we are not complying with the personal data protection laws, you have the right to file a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
-
Hyperlinks to Third-Party Websites
By using hyperlinks within the Website, you may access third-party websites. The inclusion of these hyperlinks is solely for the convenience of visitors during their navigation. It does not imply endorsement or approval of the content of the websites linked to.
Access to the respective website is solely at your own risk, and we encourage you to carefully read the privacy policy of each website you visit.
-
Social Media
Facebook Page
The company maintains an official page on the social media platform Facebook ( https://www.facebook.com/insert.gr ).
You can contact us via our Facebook page to receive more information about our services through the “send message” option.
To respond to your inquiries, we process your Facebook username and any other publicly available information from your profile (e.g., email address). The act of sending a message for communication purposes implies your consent to the above processing of your data. Access to and use of the Website is subject to this Privacy Policy.
If you choose to click “LIKE” on our page, this implies your consent to receive news and promotional activities (via newsfeed) that the company carries out through its Facebook account. If you no longer wish to receive such updates, you can click the “UNLIKE” option at any time.
Facebook is responsible for its operations in the European Union through Facebook Inc., 1601 S California Ave, Palo Alto, CA 94304, USA, and Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay. You can learn more about how Facebook processes your data through the following links:
https://el-gr.facebook.com/policy.php?CAT_VISITOR_SESSION=c7b73ebc78d1681ade25473632eae199
https://el-gr.facebook.com/business/GDPR
General Information on Social Media
The company takes all appropriate technical and organizational measures to ensure the security of data processing through social media, such as limiting the number of individuals who have access to manage each page.
The company is only responsible for how and the means by which your data is processed for the purposes it sets (communication, information, and promotional activities) and to the extent that it controls your data. Conversely, it is not responsible for how or the means by which the respective social media platform processes your data.
In any case, we encourage you to be particularly cautious about the content you send to our social media pages, especially when providing personal data of yourself or third parties, and to verify that the page you are communicating with is indeed the official one.
Comments on Social Media
We encourage users to submit comments on posts or pages maintained on social media as part of an open dialogue with respect for different opinions.
We do not have a general obligation to monitor the content submitted by social media users, but we make efforts to ensure a safe online environment.
Therefore, the Website administrators reserve the right to remove any content deemed to violate the terms of use, such as abusive, vulgar, pornographic, threatening, advertising content, content that infringes intellectual property rights, or includes false declarations regarding the identity of the user. We also reserve the right to block users who submit such content.
If you believe that user content hosted on the company’s social media pages offends you or violates our terms of use, please contact the administrators immediately.
-
Changes to the Policy and Updates
This policy may be amended at any time and without prior notice. We are committed to informing you of any significant changes to our policy. In any case, you should check our policy regularly, as the use of our services implies acceptance of it.