PERSONAL DATA PROTECTION POLICY

Update 

As of 25 May 2018, the new General Data Protection Regulation 2016/679 of the European Parliament and of the Council, known as GDPR, applies, which strengthens the protection of personal data across the European Union. This Regulation was incorporated into Greek law by Law No. 4624/2019 (29-8-2019). The company " AVENG ONE PERSON COMPANY P.L.C." and the distinctive title "AVENG", with respect to your personal data, with this privacy policy informs you about how we protect the confidentiality of your communications, collect, process, use and store your personal data and how you can contact us in case of your objection to the processing of your data and the exercise of your rights. Our company reserves the right to modify and update this policy whenever it deems it necessary and your notification will be made when the revised version appears on our Website. We collect personal data only for purposes that are directly related to our business. We handle this data with great responsibility.

Processing Principles

We take care to collect only your strictly necessary data that is adequate and clear for the purpose for which it is intended. In this context, when processing your data, we follow the following basic principles: 

- Subject to this policy, we do not disclose your personal data to third parties without your consent, unless required by law or permitted by the contract between us. 

- Your data may be processed: either to enable us to perform the contract between us, or to better serve you, or to comply with the provisions of the law and we maintain full transparency towards you. 

- We also use the data to communicate directly with you in order to offer you better services. 

 - We limit ourselves to the purpose for which it was collected. 

- We process data only to the extent that it is appropriate and relevant to the purpose for which it was collected. 

- We use only what is strictly necessary for the purpose we seek (minimisation).

- We retain your personal data only for as long as necessary. 

- We update personal data in relation to the purposes of the processing collected, while taking steps to promptly delete or correct it when necessary.

Who collects your personal data?

The Greek company " AVENG ONE PERSON COMPANY P.L.C." and the distinctive title "AVENG" is the controller of the processing of the personal data you provide to us and is responsible for the security of your data under the Personal Data Protection Act.

The types of data - The sources of collection - The purposes - Legal basis for processing 

The types of personal data we collect and process from you are directly related either to the contract between us or to the services you choose to provide to us.

What personal data do we collect? 

- Contact information such as name, surname, address, email address, telephone number, postcode.

- Account information such as first name, last name, address, email address, telephone number, postcode, date of birth, gender, city, country and user name.

- Activity log information.

- IP address.

- While browsing the www.aveng.gr Website we collect: Internet Protocol address, navigation data within the Website, Preference and service information, User generated file. 

- Data related to electronic communication under the terms and conditions of this policy in order to respond to requirements and requests and to improve the services offered, as well as to communicate directly with you about information that may be of interest to you.

What is the lawful basis for processing your data?

We process your personal data because it is necessary for:

- the performance of the service contract

- to comply with our legal obligations

- to comply with our legal obligations in order to fulfil our legal obligations; to comply with our legal obligations; to comply with our legal obligations; to pursue our legitimate interests

In general, we rely on your consent as a legal basis only for processing related to sending direct marketing messages by email. You have the right to withdraw your consent at any time. Where your consent is the only legal basis for processing, we will stop processing your data after you withdraw it.

We collect data on a case-by-case basis: 

Before or during the conclusion of the contract between us or the performance of our company's contractual obligations, when you enter and use the Website, when providing services and when resolving complaints. We also collect your data from various sources with your consent and always in accordance with the applicable legal framework. Since the processing of personal data is based on your consent, the company "AVENG ONE PERSON COMPANY P.L.C." and the distinctive title "AVENG", follows the procedures provided for by the applicable legislation to inform you and obtain your consent. In summary, the data may come from information that you choose to share with us, under contract, from our trusted partners with confirmation that they have a legitimate basis for sharing this information with us, from information that is publicly available. This may be information that you have offered directly to them or they have collected about you through their legal processes. The type and amount of data collected depends on the type of relationship through contract, service provision and the type of processing it will receive. Such data is in each case relevant, relevant and no more than is required in view of the purposes set out below, is accurate and, if necessary, subject to review. The data shall be kept only for the period necessary to fulfil the purposes for which they were collected and processed and shall be deleted at the end of that period.

Why do we collect and use your personal data?

We collect and use your personal data:

- To manage and analyse our customer base (purchasing behaviour) in order to improve the quality, variety, and availability of the services we offer.

- To conduct surveys on customer satisfaction.

- to organise and operate our company administratively. 

- for promotional activities, at your request and to communicate with you in connection with the services; to enhance our service experience; to fulfill an obligation under law or contract; to send you informational newsletters with tips and articles about our services. 

- to manage complaints about our services.

- to improve our services.

- to send promotional emails about new services, our news or other information we think you may find useful, using the email addresses you have provided to us.

Retention time of personal data 

Your personal data is retained to fulfil the purposes set out in this Policy and if you request us to do so we may remove all the information we retain (unless a longer retention period is required by applicable law). 

 Our company may also retain personal data after the purposes of collection and processing have been fulfilled, for use: before tax, social security authorities, auditing authorities, and any other public authority or competent court, until the limitation period provided for by law in each case or for as long as we consider it necessary to defend our rights and legitimate interests. After the expiry of the retention period, your personal data will be destroyed/deleted from our files and system in compliance with our company's policy and always provided that their retention is no longer required for the fulfilment of the stated purposes.

Who else has access to your personal data - Third Party Data Recipients: 

We do not share your Personal Data with third party private companies for financial or other consideration. Our Company may, after ensuring its confidentiality, provide access or transfer your Personal Data to the following processors in order to enable us to offer services to you or to enhance your service experience, namely:

- To companies providing maintenance and support services for software programs with databases. 

- To web hosting service providers with whom we have a contractual relationship. 

- To affiliated attorneys, affiliated subcontractors. 

- To public agencies and government entities.

We will never transfer, sell, rent or trade our customers' data to other organisations for marketing purposes. We may share your data with government agencies, regulatory bodies, law enforcement agencies, courts, banking institutions and insurers in circumstances where we are required to do so:

- To comply with our legal obligations.

- To exercise our legal rights.

- to prevent, detect, investigate crimes or prosecute offenders.

- to protect our employees and customers.

Your rights regarding the protection of your personal data

You have the following rights:

a) To know which personal data concerning you are held and processed by the company under the name " AVENG ONE PERSON COMPANY P.L.C." and the distinctive title "AVENG", as well as their origin (right of access). This contains the right to information about your personal data at any time. You can contact the company who will gladly notify you by e-mail of your personal data being processed.

b) To request the correction and/or completion of your personal data in order to make it complete and accurate, by presenting any necessary document showing the need for completion or correction (right of rectification), which is also an obligation. 

c) Request the restriction of the processing of his/her data (right of restriction).

d) To refuse and/or object to any further processing of personal data held by the company " AVENG ONE PERSON COMPANY P.L.C." and the distinctive title "AVENG" (right to object). We will not continue to process your personal data unless we can demonstrate legitimate grounds for processing that override your interests and rights or there are legitimate claims against us. Further, you have the right to object to direct marketing, including profiling done for direct commercial purposes. You have the option to opt out of direct marketing.

e) To request the deletion of your data from the records of the company " AVENG ONE PERSON COMPANY P.L.C." and the distinctive title "AVENG" at any time, unless there is a debt on your part to the company (right to be forgotten).

f) Request the company " AVENG ONE PERSON COMPANY P.L.C." and the distinctive title "AVENG" to transfer the data you have provided to it to any other controller. Whenever our company processes your personal data, you have the right to obtain a copy of it in a structured, commonly used and machine-readable format, as well as to request that it be transferred to another party. This only includes personal data that you yourself have provided to us.(right to data portability). 

g) To revoke at any time any consent you have given.

h) To refuse automatic processing, including profiling.

How you can exercise your rights: 

If you wish to exercise any of the above rights, please contact us using our contact details or go to your personal account where you can change your data or unsubscribe. If you believe that our company is processing your personal data in an incorrect way, please contact us.

Our company will respond to any request within one month of receiving it. Upon informing you, it is possible that the above deadline may be extended on a case-by-case basis and if necessary, taking into account the volume of requests and their complexity. Reasons will be given for any refusal of your request. 

Our company reserves the right, if your requests do not meet the legal requirements, either to impose a corresponding fee taking into account the time required to perform the requested action, the employment costs for the in-house information and the possible communication, or to refuse to follow up your request. 

If we are in doubt about the identity of the individual making the request, we may ask for additional information to confirm the identity of the individual.

How do we safeguard your data?

We do our best to safeguard your Personal Data. We use secure protocols for the communication and transfer of data, and we take all appropriate organisational, technical, physical, electronic and procedural security measures. Our security measures include data encryption, regular cybersecurity assessments by all service providers that may handle your Personal Data, security controls that protect our entire technology infrastructure from external attack and unauthorized access, and internal policies that define how we ensure the protection of your data and the training of our employees. Although we try our best, we cannot guarantee the security of information. However, we promise to notify the appropriate authorities of any potential data breach. We will also notify you if there is a threat to your rights or interests. We will do everything possible to prevent a data breach and assist the authorities if there are any similar breaches. The company processes data exclusively by personnel appointed for this purpose and bound by strict obligations to maintain confidentiality.

Website user obligations

By using the Sites and by providing your personal data, you acknowledge that you have an obligation to provide the true, accurate and complete information requested by our Company. At any time you may inform our Company of any changes to this information in order to keep it up to date and accurate. By using the websites of the company " AVENG ONE PERSON COMPANY P.L.C." and the distinctive title "AVENG" your age is confirmed. If you are under the age of eighteen, you must refrain from any use of the Websites and from any transfer of your personal data without the consent of the person exercising parental authority. The company is not responsible for any breach of the above obligations. 

The Company may delete, cross-reference, supplement or modify the information you provide based on information lawfully collected by third parties, and will notify you accordingly. 

You have the possibility to unregister or withdraw your consent from processes and actions that process your data at any time you wish.

Cookies and other technologies we use

Our company's site uses "cookies", so that each time the user logs on to the website, the latter retrieves information from them and offers the user relevant services. The installation of "cookies" by us is only allowed with the user's consent and after appropriate information. 

Why we use cookies 

We use cookies to make your browsing experience easier and more enjoyable. When you browse the website, cookies from third party services such as: for statistical purposes regarding traffic and browsing within the website (analytics), social media or other forms of internet marketing and promotion of the website on the internet (facebook, twitter, etc.), corporate promotion in the form of video playback (youtube, etc.), service of approaching the website's business via map (google maps, foursquare, etc.), updating data, corporate, financial, statistical or other forms (pdf, excel, word, txt, etc.).

Cookies we use: 

 ▪ Mandatory cookies : they are mandatory for you to use some important actions on our website, such as logging in to it. These cookies do not collect any personal information.

▪ Functional cookies : provide functionality which make it easier to use our services.

▪ Analytics cookies : used to track the use and efficiency of our website and services. 

▪ Advertising cookies: used to deliver advertisements that are relevant to you and your interests. In addition, they are used to limit the number of times you see an advertisement. Often targeted or advertising cookies are linked to the functionality of the website offered by the other organisation.

Electronic forms

In the online forms of our site there are check boxes only for the acceptance of COOKIES by the user. 

 Information Leakage

In the event that we detect a data breach, we will notify the Data Protection Authority within 72 hours in accordance with the provisions of the Data Protection Regulation. 

International jurisdiction and applicable law

For the resolution of any dispute arising in relation to this data policy, the courts of Thessaloniki shall have jurisdiction and the applicable law shall be Greek law.

Contact

For any further information or request regarding this data protection policy, please contact our company's Data Protection Officer Mr. Nikolaos Skepastianos in writing at 39 Stenimachou Street, in Thermi, Thessaloniki, P.O. Box 57001, e-mail: welcome@aveng.gr and telephone 2310 460042. Last update of the present : 20/03/2024.

 

COOKIE POLICY

The Website uses cookies - including third party cookies - that provide us with information about how you use the Website so that we can give you the best possible experience, keep it as up-to-date, relevant and error-free as possible and offer you offers that are tailored to your interests. The information collected is only for the purposes of the functionality of the Website, such as language selection and encrypted login, so that the user does not have to repeatedly enter the same information. We do not store any visitor's personal type information.

By selecting ACCEPT, the user declares that he/she accepts the use of such cookies. 

What are cookies?

Cookies are small text files that are stored in our web browser during our web browsing. They usually describe our details such as our username and password in order to "remember" us when we visit the same website later on, so that we do not have to log in. Cookies may come from the website we have visited or from someone else (third-party cookies), for example through advertisements.

 

Exercise of Site User Rights www.aveng.gr

 

After reading the terms of use and privacy policy, do you accept all the above?