Privacy Policy

1. Introduction

«IOANNIS NANOS KAI SIA AEVE» (hereinafter "Company", "we", "us") fully respects your right to personal data protection. This Privacy Policy explains what data we collect, how we use, store and protect it, in accordance with:

• The General Data Protection Regulation (GDPR — Regulation (EU) 2016/679)
• Greek Law 4624/2019 (Greek implementation of the GDPR)
• Greek Law 3471/2006 on the protection of personal data in electronic communications
• All relevant guidelines of the Hellenic Data Protection Authority (HDPA)

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

When you browse our website, the following data may be collected:

a) Data you voluntarily provide

• Full name, email, phone number (via our contact form)
• Any message or inquiry you submit through the form

b) Automatically collected data

• IP address
• Browser type and operating system
• Pages visited and time spent
• Referrer URLs
• Cookies and similar technologies (see section 7)

4. Purpose of Processing & Legal Basis

5. Data Recipients

Your data is not sold, traded or transferred to third parties without your consent, except as required for:

• Website hosting and technical support (hosting provider: Vercel Inc.)
• Compliance with legal obligations or court orders
• Protection of our legitimate rights

In case of transfer outside the EU/EEA, appropriate safeguards apply (e.g. Standard Contractual Clauses).

6. Data Retention Period

Your personal data is retained only for as long as necessary for the purpose for which it was collected:

• Contact form data: up to 12 months after last communication
• Cookies: depending on type (see section 7)
• Server logs: up to 6 months

7. Cookie Policy

Our website uses cookies in accordance with Greek Law 3471/2006 and HDPA guidelines:

You can manage your preferences at any time through the cookie banner or your browser settings.

8. Your Rights (Articles 15-22 GDPR)

Under the GDPR and Greek Law 4624/2019, you have the following rights:

• Access: Request information about your personal data we hold
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Restrict processing under certain conditions
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing
• Withdraw consent: Withdraw your consent at any time

To exercise your rights, contact us at info@nanosaeve.gr. We will respond within 30 days.

9. Complaint to the HDPA

If you believe that the processing of your data violates the GDPR, you have the right to file a complaint with the:

10. Data Security

We implement appropriate technical and organizational security measures (Article 32 GDPR), including:

• SSL/TLS encryption across the entire website
• Regular security updates
• Restricted data access to authorized personnel only
• Regular backups

11. Policy Changes

We reserve the right to update this Privacy Policy at any time. The updated policy will be published on our website with the date of the last update. We encourage you to check this page periodically.

12. Contact

For any questions regarding this Privacy Policy or your data, please contact us: