Privacy Policy

This page explains what happens to personal data when you visit this website or write to us.

We have tried to write it in plain language. If anything is unclear, please ask us — the explanation should not be harder to read than the practice it describes.

Who is responsible

The controller of any personal data described here is:

Our full statutory details, including our tax and commercial registry identifiers, are on the Company information page.

What this website collects

This site sets no cookies. It uses no analytics, no tracking pixels, no advertising tags and no social media buttons. There is nothing on this site that follows you to another one.

It loads nothing from other companies. Web fonts are served from our own domain rather than from a font service, so that your visit is not reported to a third party before the page appears.

The site runs one small script, and it does only one thing: it joins up the parts of our email address so that the address becomes a working link. We split it because programs that collect addresses for spam read web pages looking for them. The script sends nothing anywhere, stores nothing on your device, and runs entirely in your browser. If you block scripts, the address is still shown on the page — just not as a link.

In practice, this means you can read every page of this site without giving us anything that identifies you.

What our hosting provider records

Our website is served by a hosting provider. Like every web server, theirs keeps short-term technical records of requests, which can include your IP address, the time of the request, the page requested, and your browser type.

• Purpose: to deliver the site, keep it available, and protect it from attack and abuse.
• Legal basis: our legitimate interest in operating and securing our own website (Article 6(1)(f) GDPR).
• Provider: TODO_HOSTING_PROVIDER, acting as our processor.
• Retention: TODO_LOG_RETENTION.

We do not use these records to build a profile of you, and we do not combine them with anything else.

When you email us

If you write to us, we receive your message, your email address, and whatever you choose to put in it.

• Purpose: to read your message and reply to it.
• Legal basis: your enquiry is a step towards a possible contract (Article 6(1)(b) GDPR), or our legitimate interest in answering correspondence (Article 6(1)(f)).
• Retention: we keep business correspondence for as long as the matter is live, and afterwards only where a law requires it — TODO_CORRESPONDENCE_RETENTION.

Please do not send confidential or sensitive information in a first email. If your question involves something sensitive, keep the first message general and we will agree a safer way to continue, including a non-disclosure agreement if you want one.

Client data we handle during a project

When we work on a client's systems we sometimes process personal data that belongs to that client — for example data inside an ERP or banking system.

In that situation the client is the controller and Panfidea is the processor. We act only on the client's written instructions, under a data processing agreement that covers confidentiality, security, sub-processors, and what happens to the data at the end of the work.

We do not use client data for our own purposes, and we do not copy live personal data into a test system without first removing what identifies people.

Who else sees your data

We do not sell personal data, and we do not share it for marketing.

We share it only with service providers who help us run the business — such as our hosting and email providers — and only as far as they need it to do that work. Where a provider processes data outside the European Economic Area, we rely on the transfer safeguards permitted by GDPR, such as the European Commission's standard contractual clauses.

Your rights

Under GDPR you may ask us to:

• tell you what personal data about you we hold, and give you a copy;
• correct data that is wrong or incomplete;
• delete data we no longer have a reason to keep;
• restrict how we use it, or object to our use of it;
• provide it in a portable form, where that right applies.

Write to info at panfidea.com and we will reply within one month. There is no charge.

If you are not satisfied with our answer, you may complain to the Greek data protection authority, the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), at www.dpa.gr.

Children

This site is aimed at businesses and public organisations. We do not knowingly collect data about children.

Changes to this page

If we change how we handle personal data, we will update this page and change the date below. If a change is significant and we hold your contact details for an ongoing matter, we will tell you directly.

Last updated: TODO_PRIVACY_UPDATED

Back to Company information