privacy policy

1. Introduction – Data Controller

The website located at www.isoltec.gr, hereinafter referred to as the “Website” or “we,” is owned by the company “ΜΠΟΒΟΛΟΣ Σ. & Ι. Ο.Ε.,” headquartered at 12 Lampeti St., Postal Code 12462, Skaramagas.

Name of Data Controller: Stefanos Bovolos

Contact Phone: +30 2105572141

Email: isoltec@isoltec.gr

In the course of promoting our services (waterproofing & technical works), the Website collects certain information about its visitors, which may lead to their direct or indirect identification.

According to the applicable legal framework, some of this information constitutes personal data, and you as visitors are characterized as “data subjects,” while we are the “data controllers” of your data.

If you have any questions regarding the management of your data or the exercise of your rights, please contact us.

2. The basic principles for processing your data

The Website is committed to processing your data in a fair and transparent manner, in accordance with the applicable legal framework.

– We process your data only for purposes that are explicit, lawful, and determined from the outset, and we do not subject them to further processing in a manner incompatible with these purposes (purpose limitation).

– We only process data that are appropriate, relevant, and necessary for the purposes we set for their processing (minimization).

– We make every possible effort to ensure that your data are accurate, providing you, where appropriate, with the opportunity to rectify/delete them.

– We keep your data in a format that allows your identification only for the period required for the purposes we set for their processing (storage limitation).

– We make every possible effort to safeguard the security of your data, protecting them, among other things, from unauthorized or unlawful processing and accidental loss, destruction, or damage.

In the context of protecting your data, the Website implements a series of appropriate technical and organizational measures, adopts internal security policies, trains its staff, which is committed to confidentiality, and utilizes a range of technologies to ensure the security of your data (e.g., SSL certificate, certified hosting providers, etc.).

Adhering strictly to the principles of security, we regularly monitor these measures and, if necessary, adapt them to new best practices.

3. What data we process

The Website processes your data only when you actively provide it (e.g., by filling out a contact form).

However, this may not apply to certain data collected with the help of cookie files (see “Cookie Policy”) and for certain data that are automatically collected during your visit.

A. Information collected automatically

Due to the way the internet operates, as soon as you visit the Website, our server records your IP address, as well as some other information, such as the date and time of your visit, the page from which your visit originated, the type of browser and operating system you are using.

The legal basis for processing this data [collection and storage in special files (log files)] is our legitimate interest in ensuring the security of networks, information, and services from random events or illegal or malicious actions that endanger the availability, authenticity, integrity, and confidentiality of stored or transmitted data (e.g., denial-of-service attack monitoring) and to effectively address any technical problems.

B. Information you provide us

We process personal data that you provide to us when you communicate with us via a contact form, email, or telephone:

Data we process	Purpose	Legal Basis
Full Name Email Address Important Note: In your message to the company, you should only mention the necessary details and avoid referring to personal data of yourself or third parties.	We process this data as part of serving you, so that we can communicate with you by responding to your message. Sending just one email or submitting a form or calling us does not make you a “customer” of ours, and we do not include you in our database.	We process the data you provide us based on your consent (Article 6(1)(a) GDPR), which you have the right to withdraw at any time and request the deletion of your data.

Important Note: The accuracy of the information submitted in all cases lies with those who submit it. Please refer to the section of the policy regarding your rights to learn about the possibility of correcting your details.

4. Who are the recipients of your data

Primarily, authorized personnel and partners of our company have access to your data, which is processed under strict confidentiality terms, only to the extent and within the framework of the lawful purposes for which we have informed you above.

In order for the Website to function smoothly, some of your data are processed by cooperating companies. These companies (data processors) process your data only for the purposes mentioned above and only on behalf and on the instructions of our Company, except for any legal obligations. When transferring your data to them, we take all necessary technical and organizational measures to ensure the optimal level of security.

These companies are contractually bound with our company to provide necessary guarantees for the protection of personal data and take appropriate measures to ensure that the processing is lawful and safeguard your rights.

These companies provide us services such as web hosting of the Website.

5. Where and for how long do we store your data

Your data are stored in the information system of the company, which is hosted in a data center in Canada with an adequacy decision εfrom the European Union. In any case, appropriate organizational and technical measures are always applied to prevent any violation thereof.

The data are stored exclusively for the period necessary for the respective processing purpose.

For example, if you contact us through the contact form, telephone, or email message, your data will be kept for a period of three (3) months and then permanently deleted unless you proceed to enter into a contract with the company.

6. What are your rights regarding your data and how can you exercise them

Based on the relevant legal framework, you have a series of rights regarding the processing of your data by the Website.

Specifically, you have the right to:

1. Submit a request to the Website to be informed if we process data and, if so, what data we process (right of access).
2. Request their correction (right of rectification).
3. Request, under certain conditions, their deletion (right to erasure).
4. Request, under certain conditions, the restriction of their processing (right to restriction of processing).
5. Object, under certain conditions, to their processing by us (right to object), especially regarding processing related to commercial promotion (e.g., newsletter sending).
6. Request the data you have provided to us in a structured, commonly used, and machine-readable format (right to data portability), provided that this is technically feasible.
7. In case of a data breach, which may pose a high risk to your rights and freedoms and if it does not fall within one of the exceptions provided for in the GDPR, the Website is obliged to inform you of the breach without undue delay.

Compliance with the legal framework for data processing and, in this context, the exercise of your rights, is a priority for the Company. For this reason, we have the right to request additional information necessary to confirm your identity before exercising your rights.

In principle, the Website is obliged to respond to your request promptly and no later than within one month. If necessary, taking into account the complexity of the request and the number of requests, this period may be extended by two more months. In any case, the company will inform you as soon as possible and, in any case, within one month from the submission of your request, about its progress and the reason for any delay in its satisfaction.

If your requests are manifestly unfounded or excessive, especially due to their repetitive nature, the company may either impose the payment of a reasonable fee, taking into account the administrative costs for providing the information or communication or taking the action requested, or refuse to give effect to your request.

If you believe that we do not comply with the data protection legislation, you have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

7. Hyperlinks to Third-Party Websites

By using hyperlinks within the Website, you can access third-party websites. The placement of hyperlinks is solely for the purpose of facilitating visitors during their navigation. It does not imply acceptance or approval of the content of the websites linked.

Access to each respective website is solely at your own risk, and we encourage you to carefully read the privacy policy of each website you visit.

8. Social Media Platforms

Facebook Page

The company maintains an official page on the Facebook social media platform.

You can communicate with us through our Facebook page to obtain more information about our services by selecting the “send message” option.

In order to respond to your inquiries, we process your Facebook username and other information that is publicly available through your profile (e.g., email address). Sending a message for communication between us implies your consent to the above processing of your data. Accessing and using the Website is subject to this Privacy Policy.

In the event that you choose to click “LIKE” on our page, you consent to receive news and promotional actions (via newsfeed) carried out by the company through its Facebook account. If you do not wish to receive such updates, you can click the “UNLIKE” option at any time.

Responsible for the operation of Facebook in the European Union is Facebook Inc., 1601 S California Ave, Palo Alto, CA 94304, USA. Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay. You can learn about the processing of your data by Facebook at the following links:

https://el-gr.facebook.com/policy.php?CAT_VISITOR_SESSION=c7b73ebc78d1681ade25473632eae199

https://el-gr.facebook.com/business/GDPR

Instagram

The company maintains an official page on the Instagram social media platform.

Through the Instagram platform, you have the opportunity to follow the Website’s account and comment on its posts, providing data for processing on the platform.

Instagram, which is owned by Facebook Inc., 1601 S California Ave, Palo Alto, CA 94304, USA. Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, has its own policies regarding cookies and data protection, over which we have no control and cannot influence.

Access to Instagram takes place solely at your own risk, and we encourage you to carefully read its privacy policy, as you accept it by using its services.

General Information about Social Media Platforms

The company takes all appropriate technical and organizational measures to ensure the security of data processing through social media platforms, such as limiting access to individuals who have access to managing each page.

The company is only responsible for the manner and means of processing your data for the purposes it sets (communication, information, and promotional actions) and to the extent that it exercises control over your data. On the other hand, it bears no responsibility for the manner or means by which each social media platform processes your data.

In any case, we urge you to be particularly careful about the content you submit to our pages on social media platforms, especially when providing personal data of your own or others, and you should ensure that the page you are communicating with is indeed official.

Comments on Social Media Platforms

We encourage user comments on posts and/or pages maintained on social media platforms, within the framework of open dialogue with respect for different opinions.

We do not have a general obligation to monitor the content submitted by users of these platforms, but we make efforts to ensure a safe online environment.

Therefore, the administrators of the Website reserve the right to remove any type of content deemed to violate their terms of use, such as offensive, obscene, pornographic, threatening, advertising content, or content that violates intellectual property rights or contains false statements about the user’s identity, while retaining the ability to block users who submit it.

If you believe that user-generated content hosted on the company’s pages on social media platforms violates or otherwise breaches our terms of use, please contact the administrators immediately.

9. Changes to Policy and Updates

This policy may be amended at any time and without prior notice. We are committed to informing you of any significant changes to our policy. In any case, however, you should regularly check our policy, as your use of our services implies your acceptance of it.