Privacy Policy

This Privacy Statement describes the data we collect about you, how we use, process and protect it, and your choices about it. The protection of personal data is an ongoing responsibility for us and we inform you that we may amend this statement from time to time, and you of any such amendments.

The personal data we process about you is your full name, home address, contact telephone numbers and email. These data are recorded so that we can answer your queries and provide you with our online services better and faster, inform you about our newsletters and our commercial and advertising promotions (marketing).

For the online services we provide, such as online services, blogs, etc., we collect and process all necessary information and digital data such as your social media account ID and profile picture, IP address, cookies, other online identifiers and other personal data you provide us online.

Also on our viewable website we use three types of cookies that are designed to store visitors' preferences, improve the functionality of our websites and collect analytics data (about user behaviour). These are placed by us and can only be read by us and remember if you have accepted (or rejected) the cookie policy of the website in question, if you have already responded to the pop-up window asking you to complete our survey (about how useful the website content was) so you will not be asked again. Identification cookies or technical cookies may also be included. You can delete all cookies on your device at any time by clearing your browser's browsing history.

Doing so will delete all cookies from all the websites you have visited, including this one. However, you should be aware that in case of deletion, some stored data (e.g. stored login details, site preferences, etc.) may be lost. For your participation in the Blog or in the articles on the website, please note that the views expressed are the personal views of the respective author and editor and do not necessarily agree with our views and positions. The facility we provide to visitors to our website merely provides a platform for our members to express their views and the same applies to articles from third party sources, information etc. that are republished, which are of an informative and informative nature. Only our registered members have the right to submit an article to our blog.

We also use and process your personal data: to prevent, detect and investigate crime, including fraud and money laundering, and to analyse and manage other commercial risks. To conduct research and data analysis, including analysis of our customer base, to complete market research, including customer satisfaction surveys and to assess the risks faced by our business, always in accordance with applicable Greek and European legislation (including obtaining consent where required). For promotional commercial and advertising activities (marketing), we may carry out promotional activities according to your preferences and with your consent, using emails, short messages via mobile phone (SMS) and other text messages, by post or telephone. For your participation in competitions and sweepstakes, in these cases additional terms and conditions may be set, which will contain more information on how your personal data will be processed and after we have obtained your consent. To personalize your experience and to analyze and record your needs in relation to the services you have received from us, presenting information, advertisements and other promotions for new services and/or products tailored to your needs. For our company to comply with applicable laws and regulatory obligations, European directives and guiding principles, court decisions and other legal proceedings, to respond to requests from public and governmental authorities, as defined in Greek and European legislation. To enforce and defend our legal rights to protect our business activities and those of our business partners and to safeguard our rights, privacy, security or assets, as well as to enforce our terms and conditions and to pursue available remedies and limit our damages.

Your personal data is collected from various sources, including:

Application forms, proposal forms and other forms that we and our partners use to record your data and other information. Telephone calls, emails, mobile short messages (SMS) meetings and other communications related to the investigation of our services. Our service providers, consultants, employees and other partners. From our website. From software applications we make available on computers, smart phones (smartphones) and other mobile devices.

From our social media pages, other social media content, tools and apps. The processing of your ordinary personal data and/or special category personal data (sensitive data) is carried out for the provision of our services to you, which is based on your request for the provision of our services which is transmitted either directly to us or through our third party partners. Based on your request, a contract is drawn up between us and you receive our services that you have chosen. Furthermore, the processing of special categories of personal data (sensitive data) is based either on explicit consent or on some other legal basis, in accordance with the General Data Protection Regulation (GDPR) and the relevant European and Greek legislation. It is necessary to be aware that we may ask you for simple personal data or special category (sensitive) personal data to comply with applicable legal requirements and certain personal data may be required to enable us to fulfil the terms of our contract with you.

In some cases the processing of your ordinary personal data and/or special categories of personal data (sensitive) is necessary for the purposes of our legitimate interests or for the purposes of complying with national and/or European legislation.

Where the processing is based on your consent e.g. for promotional activities, etc. you can withdraw your consent at any time.

The retention period of your personal data lasts for the entire duration of the contract between us. Where we are required to comply with a legal or regulatory obligation, we retain your ordinary personal data as well as special category (sensitive) personal data for at least as long as necessary to comply with that obligation.

We retain the personal data of persons who have subscribed to our newsletters (newsletters) and/or promotional activities for up to five (5) years, unless you indicate to us that you no longer wish to receive newsletters newsletters and/or promotional material from us.

We take all measures necessary under Greek and European legislation to ensure that they are kept securely, either in a dedicated electronic space (when your data is in electronic form) or in a dedicated storage space (if your data is in paper form). In order to protect your personal data, we take physical, technical and organisational measures to protect it. We update and monitor the security technology we use on an ongoing basis. We restrict access to your personal data to only those employees who need to know that data in order to provide benefits or services to you. In addition, we educate employees on the importance of maintaining the confidentiality and privacy and security of your personal data.

Data Controller and Recipients and/or Processors:

The controller of my data is hayc. Recipients and Processors of the data will be hayc, its partners and employees. Data may only be transferred abroad on the basis of an explicit legal obligation (e.g. money laundering legislation) or on the basis of a contractual obligation on your instructions.

You have the right to request access to your personal data that we process by sending an email to support@hayc.gr . In addition, you have the right to update, rectify or delete (where possible) your personal data, to restrict processing or object to the processing of your personal data, the right (subject to conditions) to receive your personal data so that we can use it elsewhere or transfer it on your behalf, you also have the right at any time to have your personal data processed by us or to have it transferred to us. Finally, you have the right to lodge a complaint with the competent Greek independent authority, which is the Hellenic Data Protection Authority (http://www.dpa.gr/), 1-3 Kifissia Avenue, P.O. Box 115 23, Athens, Athens, Phone +30 210 6475600.