Privacy Policy

Version and date: March 2024

 

Notice on the Processing of Personal Data

(Articles 13 and 14 of Regulation (EU) 2016/679)

 

The company under the name “SOFTONE F&B TECHNOLOGIES S.A.”, with the distinctive title “SOFTONE F&B Technologies”, with registered office in Kallithea, Attica (8 Achilleos & Lambrou Katsoni Str., 17674), hereinafter referred to as the “Company”, considers data protection and privacy a matter of the highest priority. The Company fully complies with Regulation (EU) 2016/679 n the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter “Regulation”), and the relevant laws of Greece.

 

In this context, and pursuant to Articles 13 and 14 of the Regulation, we provide this Notice to inform you about how we collect and process your personal data when you browse our website www.goestiasis.gr

 

1. 1. Data Controller

The Data Controller responsible for the collection and processing of your personal data is the Company as defined above.  This means that the Company determines the purposes and means of processing your personal data in accordance with the Regulation and all applicable laws.

1. 1. Sources of Personal Data Collection

As a rule, the Company collects your personal data directly from you and not from third-party sources.  These data are collected as part of your visit to our Website. In order to provide the services you request as a user, it is necessary to collect the personal data listed below, otherwise the service cannot be delivered.

1. 1. Processing of Personal Data and Legal Basis

The table below outlines the purposes for which your personal data are processed, the types of data involved, and the legal basis for such processing.

Purpose of Processing	Categories of Personal Data	Legal Basis
Visit and communication via the Website	Personal details (name, surname), contact information (phone, email), message content, and cookie data.	Art. 6(1)(f) – Processing is necessary for the purposes of the Company’s legitimate interests, particularly corporate communication and promotion of corporate purposes.
Free product trial	Personal details (name, surname), contact information (phone, email), company information (name and number of employees), and cookie data.	Art. 6(1)(f) – Processing is necessary for the purposes of the Company’s legitimate interests, particularly corporate communication and promotion of corporate purposes.
Newsletter Subscription	Personal details (name, surname), contact information (phone, email) and cookie data.	Processing is lawful when the data subject has given consent for this specific purpose.
Social media	Login credentials and cookie data.	Art. 6(1)(f) – Processing is necessary for the purposes of the Company’s legitimate interests, particularly corporate communication and promotion of corporate purposes.

1. 1. Disclosure to Third Parties and Categories of Recipients

Your personal data, as outlined above, may be disclosed to the relevant internal departments of the Company responsible for managing the Website (www.goestiasis.gr), and, when necessary, to third countries, international organizations, or third-party service providers responsible for data analysis (e.g., Google Analytics in the U.S.), and where and when deemed useful or our Company is bound by a relevant lawful obligation, to serve the processing purposes, as described in Section 3. Regardless of the country where your personal data may be disclosed, we will only share them when strictly necessary, and always under appropriate security safeguards.

1. 1. Security

The Company processes your personal data in a manner that ensures their protection, taking all appropriate organizational and technical measures to safeguard them against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access, and any other form of unlawful processing.

1. 1. Data Subject Rights

This section outlines your rights concerning your personal data.  These rights are subject to certain exceptions, limitations, or conditions.  Please submit your requests responsibly.  The Company will respond as soon as possible, and in any case within one (1) month of receiving the request.  If more time is needed, you will be informed accordingly. To exercise your rights, please contact us at: dpo@softone.gr, gdpr@drakopoulos-law.com.

The Company ensures your unrestricted ability to exercise the following rights:

1. 1. • 6.1. Right to information

You have the right to request and receive clear, transparent, and easily understandable information about how your personal data is processed, in accordance with the Company’s policies and procedures.

1. 1. • 6.2. Right of Access

You have the right to access your personal data free of charge, under the Company’s policies and procedures, except in the following cases where a reasonable fee may apply to cover the Company’s administrative expenses:

1. 1. • • Requests that are clearly unfounded, excessive, or repetitive 
        • Requests for additional copies of the same information
      • 6.3. Right to Rectification

You have the right to request the correction of your personal data if it is inaccurate or incomplete, following the Company’s applicable procedures.

1. 1. • 6.4. Right to Erasure

You have the right to request the deletion or removal of your personal data when it is no longer necessary for the purposes for which it was collected, or there is no legal basis for its continued processing, according to the Company’s policies and procedures each time. The right to erasure is not absolute and may be limited where a legal obligation or other lawful grounds for data retention exist.

1. 1. • 6.5. Right to Restriction of Processing

In certain cases, you have the right, in accordance with the Company’s policies and procedures, to request that further processing of your data be restricted or suspended. During such restriction, your data will remain stored but will not be processed further.

1. 1. • 6.6. Right to Data Portability

You have the right to receive your personal data, which you have provided, in a structured, commonly used, and machine-readable format, and to transmit those data to another controller, where technically feasible, in accordance with the Company’s policies and procedures in each case.

1. 1. • 6.7. Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data when such processing is based on Article 6(1)(f) of the Regulation (processing for legitimate interest).  In that case, the Company, as data controller, will no longer process your data unless it demonstrates compelling and legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

1. 1. • 6.8. Right to Withdraw Consent

You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

1. 1. • 6.9. Rights Regarding Automated Individual Decision-Making and Profiling

The Company does not carry out automated decision-making, including profiling.

1. 1. • 6.10. How to Exercise Your Rights

To exercise any of the above rights, you must submit a written request to the Company, following its applicable policies and procedures. The Company reserves the right to respond within one month of receipt, in accordance with the Regulation and its internal procedures.

1. 1. Data Retention Time
      The Company determines the retention period for each category of personal data in accordance with applicable legal requirements and its internal data retention policies.
   2. Data Protection Officer

1. 1. For any issue related to personal data processing or this notice, please contact the Company’s designated Data Protection Officer:

Data protection officer	DRAKOPOULOS LAW FIRM
Phone	(+30) 210 6836561
e-mail:	gdpr@drakopoulos-law.com

1. 1. Contacting the Supervisory Authority

For further information and advice regarding your rights or to file a complaint, you may contact the Hellenic Data Protection Authority: Postal Address:
Hellenic Data Protection Authority, Offices: 1-3 Kifissias Ave, P.C. 115 23, Athens, Call Center: +30-210 6475600, Fax: +30-210 6475628, email: contact@dpa.gr.

1. 1. Updates to This Notice

1. 1. We aim to regularly review and update this Privacy Notice to ensure compliance with data protection laws and best practices.  You will be notified promptly of any updates to this Notice.