The website www.fotellis.gr may collect and process personal data for the following purposes:

• 3.1 Website visit tracking
  

  The website uses required cookies and similar technologies that are necessary for its basic operation, security, and the storage of the user’s consent preferences.

  With the user’s consent, the website uses analytical cookies through Google Analytics 4, for the purpose of collecting aggregated statistical information about the use of the website. This information helps us understand how visitors interact with the website, which pages they visit, and how we can improve the content, functionality, and user experience.

  Google Tag Manager is used to manage technical tags and measurement tools. The activation of analytics or advertising services is carried out in accordance with the consent choices provided by the user through the website’s cookie consent management mechanism.

  The website applies a consent management mechanism through which the user can accept or reject optional categories of cookies, such as analytical or advertising cookies. The user may modify or withdraw their consent at any time through the website’s cookie settings.

  Where the user provides the relevant consent, the website may use advertising cookies or similar technologies from partner platforms, such as Google and Meta, for the purposes of measuring the effectiveness of advertising activities, creating remarketing audiences, and displaying more relevant advertisements.

• 3.2 Contact Forms
  

  If you choose to contact us through the contact form, by email, or through another available means of communication, we collect the information you provide to us, such as your full name, contact details, and the content of your message, for the purpose of responding to your request and managing our communication with you.

  To protect contact forms from spam, malicious use and automated submissions, the website uses Google reCAPTCHA. In this context, technical data such as IP address, browser information, device information and the user’s interaction with the form or the website may be processed for security purposes and to prevent abuse of the form.

  The information submitted through contact forms may be stored in the website’s administration environment and/or sent by email to the relevant recipients within the company.

  The transmission of messages is carried out by email and, according to the existing technical configuration of the website, using secure transmission protocols and encryption, where supported by the systems involved.

  This data is used exclusively for the purpose for which you provide it to us and is not disclosed to third parties for commercial purposes. It may be stored or processed in hosting, email, or technical support systems that we use for the operation and security of the website and our communication, as described in section 6 of this Policy.

  The legal basis for the processing is the taking of steps prior to entering into a contract, the performance of a contract where applicable, as well as our legitimate interest in responding to requests and managing communication with interested parties.

• 3.3 Electronic communication through Brevo
  

  For the sending or management of electronic communications, we may use the Brevo platform. The service is used for communication purposes related to requests, services, updates, or other communications for which there has been relevant communication or consent.

  Brevo acts as a data processing service provider on our behalf, to the extent required for the technical sending, management, and monitoring of communication.

  In the case of newsletters or promotional emails, these are sent only where there is relevant consent or another lawful basis for processing. The recipient may request to stop receiving such communications at any time, either through the relevant unsubscribe link or by contacting us.

For simple browsing of the website www.fotellis.gr, you are not required to provide personal information, except in cases where you choose to contact us through a contact form, by email, by phone, or through another available means of communication.

The personal data you provide to us is retained only for as long as necessary to fulfil the purposes for which it was collected, such as responding to a contact request or managing our communication with you, unless a longer retention period is required by applicable law or for the establishment, exercise, or defence of legal claims.

This website is hosted by Dazzlink at the Greek Athens 2 Datacenter of LAMDA HELLIX, using technologies commonly found in world-class datacenters.

Some of the most notable security features of the datacenter include:

• 24/7 staffed security
• Perimeter protection and CCTV
• ISO 27001 Information Security Standard
• PCI DSS Information Security Standard

Information about the Athens 2 Datacenter can be found here.

All traffic, meaning file transfer between this website and your browser, is encrypted and served over HTTPS.

As part of the technical operation and security of the website, technical data may be recorded, such as IP address, date and time of access, browser type, pages requested, and technical connection information. This data is used for website security, diagnosing technical issues, and protecting against malicious activity.

For the operation of the website and the provision of our services, we may use selected third-party service providers, such as hosting providers, technical support providers, website traffic analytics services, tag management services, email services, electronic communication services and, where used, advertising or retargeting services.

These providers process personal data only to the extent necessary for the provision of the relevant services and in accordance with the applicable personal data protection legislation.

Where a transfer of data outside the European Economic Area is required, such transfer is carried out on the basis of appropriate legal mechanisms, such as applicable adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

• Google — website traffic analytics, tag management, protection against spam and abuse through reCAPTCHA and, where used, advertising services.
• Brevo — services for sending, managing and monitoring electronic communications.
• Hosting, email and technical support provider — for hosting, security, backup creation, technical operation of the website and sending/receiving email messages.

In the event of a personal data breach incident, the company assesses the incident in accordance with applicable legislation and takes appropriate measures to limit and address it.

Where required, the competent supervisory authority is notified without undue delay and, where feasible, within 72 hours from the time the company became aware of the incident.

If the breach is likely to result in a high risk to the rights and freedoms of data subjects, the company will also inform the affected individuals in accordance with the legal requirements.

The data controller for the personal data collected through the website www.fotellis.gr is the company Fotellis S.A.

For matters relating to the protection of personal data or the exercise of your rights, you may contact the company at the following email address: This email address is being protected from spambots. You need JavaScript enabled to view it..

In accordance with applicable legislation, where we process personal data concerning you, you have the right to access such data, request the rectification of inaccurate or incomplete data, request erasure, restrict processing, object to processing and, where applicable, request data portability.

You also have the right to withdraw any consent you have given, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, you may contact us using the contact details provided in this Policy. If you believe that the processing of your personal data violates applicable legislation, you also have the right to lodge a complaint with the Hellenic Data Protection Authority.