Privacy Policy

The protection of individuals with regard to the processing of personal data is a fundamental right. Article 8 (1) of the Charter of Fundamental Rights of the European Union ("Charter") and Article 16 (1) of the Treaty on the Functioning of the European Union (TFEU) provide that every person has the right to the protection of personal data concerning him or her.

Furthermore, from 25.05.2018 the no. 2016/679 General Data Protection Regulation (GDPR) of the European Parliament and of the Council, which introduces a stricter framework for the protection of individuals with regard to the processing of personal data and for the free movement of such data (hereinafter referred to as the "General Regulation" »).
 
The protection of individuals against the processing of personal data is of the utmost importance for the company «H NAYS» (hereinafter "«H NAYS»"). Therefore, the collection and processing of personal data is done only in accordance with the General Regulations and the generally applicable legislation and where this is required regarding the operation of the employment relationship and the business activity of «H NAYS». The «H NAYS» allows access only to authorized persons and takes increased data security measures including loss, mishandling, unauthorized access, modification or disclosure.
 
1. Processing of personal data
 
1.1 Categories of personal data
When you visit our website you may edit:
(a) The data you have entered for the registration on the website and the services offered (username, password for entering the page, name, contact phone, e-mail address, Provision Number, TIN, contact content),
(b) Personal data that is automatically collected during your browsing (IP address, device type, browser, redirect website, websites of the company you visited, date and time of the visit).
 
1.2 Purposes of processing
The processing of personal data is done for the following purposes:
(a) The service of a pre-contractual or contractual relationship in order to receive the personalized information for you and to have access to your personal documents as well as to respond to your requests or to contact you upon your request.
(b) The establishment of any lawful legal claim or defense of «H NAYS» against attempted fraud, possible cyber attack or other illegal activity.
(c) The creation of anonymous statistics for the traffic and accessibility of the main website as well as the subsequent pages, so that we can take the necessary steps to improve them in order to improve your browsing experience.
 
1.3 Legal bases for processing
The processing of your personal data is necessary for the fulfillment of the above purposes. Unless otherwise specified in the collection of personal data, the legal basis for their processing is one of the following:
(a) the processing is necessary for the performance of the contractual relationship with you Article 6 (1)
(b) of the General Regulation), (b) the processing is necessary for the purposes of the legitimate interests (Article 6 (1) (f) of the General Regulation);
(c) your express consent to the processing of personal data has been given (Article 6 (1) (a) of the General Regulation).
1.4 Recipients and transfers
Third party IT companies (editors) may manage our website. In these cases, we ensure through contractual terms and regular checks that if and when they have access to personal data, the legislation for their protection is adequately observed.
1.5 Cookie Policy
Cookies are small text files that are stored on your computer or mobile device when you visit a website. Cookies are used primarily to ensure that your visit to our websites is as easy to use as possible, as well as for advertising purposes during your future visits to other websites.
Clickhere for cookies policyfor further details types of cookies we use, their use, and ways to delete or prevent the storage of specific cookies on your computer or mobile device.
 
1.6 Personal data of minors.
The Company and its websites are addressed to persons who have completed the eighteenth (18th) year of their age. If minor users voluntarily visit our websites, «H NAYS» bears no responsibility.
In case during the data collection it is realized that the user is younger, the Company he will not process his personal data.
 
2. Data Retention Time
 
«H NAYS» will keep your personal data for as long as is required to fulfill the purposes described in this policy, unless applicable law requires or allows for a longer period. The criteria that govern the determination of the time of data retention include the following:
(a) as long as the contractual relationship between us lasts,
(b) as long as it is required in order for the «H NAYS» to be in compliance with a legal obligation that burdens it.
 
3. Technical and organizational measures
«H NAYS» effectively implements, both at the time of defining the means of processing and at the time of processing, appropriate technical and organizational measures, such as pseudonymization, designed to apply data protection principles, such as data minimization, and integration the necessary guarantees in this processing in such a way as to meet the requirements of applicable law and to protect the rights of natural persons.
 
4. Right to withdraw consent In the event that you have given your consent to the processing of certain personal data, you have the right to revoke the consent at any time, with future effect.
Revocation of consent does not affect the lawfulness of the processing based on consent before it was revoked. In case of revocation of the consent, the «H NAYS» may further process the personal data, only in cases where there is another legal reason for the processing.
 
5. Subject rights Under the current legislation on the protection of personal data and provided that the relevant legal requirements are met, you have the following rights:
 
5.1 Right of access You have the right to be informed if your data is being processed, to have access to the data and to receive additional information about their processing.
 
5.2 Right of correction You have the right to request the updating, correction, completion of your personal data.
 
5.3 Right of deletion You have the right to submit a request for deletion of your personal data, which will be satisfied provided that there is no other legal basis for processing (such as the obligation to process personal data imposed by law).
 
5.4 Right to restrict processing You have the right to request a restriction on the processing of your personal data in the following cases: (a) when you dispute the accuracy of the personal data and until it is verified, (b) when you oppose the deletion of personal data and request instead of the deletion the restriction of their use; (c) when personal data is not needed for processing purposes, it is nevertheless necessary for you to establish, exercise, support legal claims, and (d) when you object to the processing and until it is verified that there are legitimate reasons that concern us and take precedence over the reasons why you oppose the processing.
 
5.5 Right to object to processing You have the right to object at any time to the processing of your personal data when it is based on the legal basis (Article 6 (1) (e) or (f) of the General Regulation) which will be satisfied unless the Company demonstrates compelling and legal reasons for their processing.
 
5.6 Right to portability You have the right to receive your personal data free of charge in a structured, commonly used and machine-readable format or to request, if technically feasible, that we transfer the data directly to another processor.
 
5.7 Right to object to a decision based on automated processing You have the right to request an exemption from decision-making based on automated editing, including profiling.
 
6. «H NAYS» provides support for all questions, comments, concerns or complaints related to the protection of personal data or in case you wish to exercise any right regarding the protection of your data. The communication with the Head of Personal Data Protection can be done via email at the address info@enaus.gr or by post “H NAYS” Agion Anargyron 14 Mykonos 84600 Greece.
 
Right to appeal to the Authority The competent authority is the Hellenic Authority for the Protection of Personal Data. You have the right to appeal to the Personal Data Protection Authority for issues related to the processing of your personal data. You must have attempted to exercise your rights in the «H NAYS» before appealing to the competent Authority. For the competence of the Authority and the way of submitting a complaint, you can visit its website (www.dpa.gr> My rights> Submit a complaint), where there are detailed informations 
ESPA