Imprint
ELXIS – AT HOME IN GREECE P.C.
Aristotelous Square 4th, 54623, Thessaloniki, Greece
Tel.: +302311180959
Email: contact@elxis.com
Privacy Policy GDPR
This Privacy Policy governs the manner in which Elxis – At Home in Greece P.C. (hereinafter referred to as “the Company”) collects and processes data from users (each, hereinafter referred to as “User”) of the website «https://elxis.com/» (hereinafter referred to as the“Website”).
The Company is the Data Controller of the data collected through the use of this website, in accordance with the General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as the “GDPR”), and any other applicable legislation.
Personal data
The Company collects and processes personal data only when Users voluntarily provide it, such as their full name, telephone number, e-mail address, and any information included in the message they submit.
Users may choose not to provide personal data; however, this may limit the Company’s ability to respond to their requests or provide access to certain features of the Website.
Non personal data
The Company may automatically collect certain technical and usage data when Users interact with the Website. Such data may include the IP address, browser type, language settings, country, device characteristics, operating system, Internet service provider, date and time of access, and pages visited. This information is collected through cookies and similar technologies to ensure the Website’s proper functioning, maintain security, and analyze general usage trends.
Web browser cookies
The Company’s Website may use cookies or similar technologies to improve the User experience. Non-essential cookies, such as those used for analytics or personalization, are activated only with your prior consent through our cookie banner.
You can change your cookie settings here. Please note that disabling cookies through your browser settings may affect the proper functioning of certain parts of the Website.
How and Why the Company processes your data
The Company processes your data only for specified, explicit and legitime business purposes and on a valid legal basis under Article 6 GDPR.
In particular, the Company collects and uses your data (a) to respond to inquiries and deliver newsletters, (b) to optimize and ensure the secure use and smooth operation of the Website, including fraud/abuse prevention, (c) to develop and display personalized and relevant content and advertising tailored to Users’ interests and location, (d) to analyze usage through consent-based analytics, and (e) to comply with applicable legal obligations.
How the Company protects your data
The Company adopts appropriate and reasonable data collection, storage and processing practices (including but not limited to data minimization, role-based access) and security measures to protect against unauthorized access, alteration, disclosure or destruction of your data.
Sharing your data
The Company does not sell or rent Users’ data. We may share personal data only with trusted service providers who support our Website and operations (such as hosting or analytics), always under written agreements ensuring data protection. Data may also be shared when required by law or with your consent.
Data Retention Period
The data the Company collects are retained only for as long as necessary to achieve the purpose of collection, unless otherwise required by law.
Your Rights
The Company facilitates the exercise of your rights and fulfils them where there is a corresponding legal obligation. You may view more information regarding your rights and how to exercise them here.
Right to be Informed
You have the right to be informed about how the Company collects and processes data, including the categories of data the Company processes and the purpose for which they are processed, the lawful basis of the process, the retention period, whether the data will be shared with any third parties and the reasons for such sharing.
This right is and fulfilled through the present Privacy Policy.
Right of Access
You have the right to access your personal data.
This means that you are individually entitled to request confirmation from the Company as to whether the Company processes your data. If said processing does take place, you may request information about the purpose of the processing, the types of data the Company holds, recipients to whom your data is disclosed, the retention period, whether automated decision-making takes place, as well as information about your other rights, such as rectification, erasure and restriction of processing.
Right to Rectification
If you discover that any of your personal data is inaccurate or incomplete, you may submit a request for correction (e.g., to update your name or address).
Right to Erasure / Right to Be Forgotten
You may request the deletion of your data when it is no longer necessary for the purposes mentioned above or if you wish to withdraw your consent.
Right to Data Portability
You may request to receive the data you have provided to the Company in a structured, commonly used, and machine-readable format, or request that the Company transmits the data to another data controller.
Right to Restriction of Processing
You may request that the Company restricts the processing of your data for as long as the examination of your objections to processing is pending. When you exercise this right, the Company is not obliged to delete your data but remain obliged to proceed with the necessary changes for the restriction of processing.
Right to Object and to Withdraw Consent
You have the right to object to the processing of your data. The Company will cease processing unless there are compelling and legitimate grounds that override your right.
If you have given your consent to the collection, processing, and use of your personal data, you may withdraw your consent at any time with future effect.
Opting Out of Marketing Communications
You may choose not to receive marketing communications by updating your email and SMS preferences, clicking the unsubscribe link, or following the instructions included in each message.
If Processing Is Based on Legitimate Interest
In cases where the Company processes your personal data based on our legitimate interest, you may request that the Company stops such processing for reasons relating to your particular situation. The Company will comply with your request unless the Company believes there are compelling legitimate grounds to continue processing your personal data.
How You Can Exercise Your Rights
To exercise your rights, you may submit a relevant request by e-mail to contact@elxis.com, with the subject line “Exercise of Rights.”
Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.
The Company responds to your requests free of charge and without undue delay, and in any case within one (1) month from the date the Company receives your request. However, if your request is complex or if the Company has received a large number of requests from you, the Company will inform you within that month should it needs to extend the response period by an additional two (2) months, within which you will receive our reply.
Changes to this Privacy Policy
The Company may amend this Policy whenever necessary and will publish the updated version on this Website. Changes take effect upon posting. In the event of substantial modifications, the Company will provide clear notice and, where required, request renewed consent.
Third-Party Websites
This Website provides access to third-party websites through appropriate links. The websites to which they refer are subject to their own Terms of Use and Privacy Policies, on which the company has no control or responsibility.
International Data Transfers
If we transfer personal data outside the EEA, such transfer is made in compliance with applicable data protection law, using appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.
Supervisory Authority
Users have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) or with their local supervisory authority if they consider that their data protection rights have been infringed. HDPA contact details: www.dpa.gr, inbox@dpa.gr, Kifisias 1–3, 11523 Athens, Greece.
