Terms of Use - Data Protection Policy

The website https://www.green-projects.gr, hereinafter the "Website", is managed by the company with the company name " GREEN PROJECTS S.A" (Admitou 15 and Heraklitou 22, Postal Code: 15238 Chalandri), hereinafter "the Company", which is Responsible for processing personal data.

The Company takes the protection of your privacy and personal data very seriously and has taken all the necessary measures in order to safeguard the security and confidentiality of information concerning visitors/users of the Website.

Please read this Privacy Policy of our Website carefully in order to be informed about the information collected from you when you visit it and when you use its online services, the information posted on it, their use and your rights.

This Policy serves to inform data subjects in accordance with articles 13-14 of the General Data Protection Regulation of the EU 679/2016 and Law 4624/2019 (Government Gazette A' 137/29.08.2019), as with regard to the personal data collected by the Company through its Website.

INFORMATION OUR WEBSITE COLLECTS

Our Website has primarily informative content about the activity and services provided by the Company. Therefore, simply browsing our Website does not require the visitor to provide/enter personal data.

WHAT ARE COOKIES?

Cookies are small text files that are stored on your computer or mobile device when you visit a website. The information stored there may be transferred to our servers or the servers of related third parties during a subsequent visit.

1. Information collected through the use of Cookies (Trackers)

The cookies described below are stored in the browser if their use is necessary for the operation of the Website or if you accept their storage in the case of non-necessary cookies. You can view and manage cookies in your browser (however mobile browsers may not offer this visibility). Our website uses the following cookies:

Absolutely Necessary Cookies

These cookies are essential for the proper functioning of the website, they allow you to browse and use its functions, such as access to secure areas. These cookies are necessary for the operation of the website and without them it would not be technically possible to provide website services.

Performance Cookies

These cookies collect information regarding the use of the website, e.g. which pages you visit most often and if you receive error messages from the site. These cookies do not collect information that identifies you, as they collect it in an aggregated way and therefore remain anonymous. They are used only for statistical purposes that will help improve the operation of the website.

2. Information Provided By You Directly

Contact Form

• Question topic (General question, Interest in PV maintenance, Interest in quality systems
• Name
• Telephone
• Email
• Question (free text of the interested party)

CONSENT

By using this Website and without prejudice to the provisions of each more specific legislation, such as for example the legislation on the protection of personal data in the context of electronic communications as applicable from time to time, you provide your express consent for all the above cases of processing of your personal data. You are free to withdraw your consent at any time.

Any withdrawal of your consent does not invalidate the legality of the processing of your personal data until then.

HOW WE USE THE INFORMATION WE COLLECT

1. To Contact You: With your consent, which is provided by your submission of the contact form and your acceptance of this policy, we may use the information we collect to contact you in order to to inform you about the issue, for which you have expressed the corresponding interest.

2. For Statistical analysis: To learn more about how our Website is used by its visitors, we keep in aggregate form and analyze the data we collect. We may use this information, for example, to monitor and analyze the use of the Site, to enhance its functionality, and to better tailor its content and design to the needs of our visitors.

USE AND EXCHANGE OF INFORMATION

The Company respects your right to have your privacy and information about you protected and for this reason uses the information collected through its Website for the aforementioned purposes. For this reason, it does not share, trade or make the information about you accessible to third parties, nor does it transmit this information outside the European Union.

We may make information about you available to other companies, applications or persons in the circumstances listed below:

• We may share aggregated information or information that does not directly identify you with third parties in order to develop our Website content and services.
• We may use or may in the future use third parties to provide services related to our Website, such as database management, maintenance services, analytics, marketing, data processing, and email and text message distribution. These third parties will only have access to the information that identifies you as strictly necessary to perform their above tasks on our behalf and with express contractual commitments to protect your privacy and personal data.
• We may share information about you to investigate, prevent or take action regarding illegal activities, if there are suspicions of illegal behavior or criminal acts against the rights and legal interests of any natural or legal person, in case of violation of the Terms of Use of the Website us or as required by law, and in other cases in which we believe in good faith that disclosure of the information is necessary.
• We may share information about you to respond to subpoenas, search warrants, court proceedings, court orders, legal proceedings or other law enforcement action by any competent authority, including the Personal Data Protection Authority and the Data Protection Supervisory Authorities of others member states of the European Union, as well as to assert and defend our legal rights or to counter claims against us.
• We may provide access to information concerning you to serve the above-described processing purposes to the relevant employees of the Company's staff, always in full compliance with GDPR requirements for safeguarding the security and confidentiality of your personal data.
• Please note that third parties may independently collect data about you, including your IP address and information about the websites you visit and the links you click, through cookies, link clicks or other media during your visit.

INFORMATION RETENTION TIME

The Company will keep the personal data it collects through its Website for the absolutely necessary period of time to fulfill the above processing purposes and to comply with its legal obligations, in accordance with the requirements of the legislation. Once you withdraw your consent to the collection and processing of your personal data, we will delete your data from our electronic and physical records, unless keeping them becomes necessary in compliance with our legal obligation in accordance with the above or for the exercise, establishment or defending our rights or legal interests before judicial or other authorities. The company keeps the personal data from the Contact Form for a period of two years from the last communication or until the interested party himself requests to be deleted.

INFORMATION SECURITY

The security of your personal data is our absolute commitment. To achieve this, we apply all modern and appropriate technical and organizational measures for the purposes of the processing, the responsiveness and adequacy of which we check at regular intervals, such as:

-SSL Protocol (Secure Sockets Layer): The SSL Protocol (Secure Sockets Layer) used by our website is today the global standard on the internet for certifying websites to internet users and for encrypting information between internet users and web servers. An encrypted SSL communication requires that all information sent between a client and a server be encrypted by the sending software and decrypted by the receiving software, thus protecting personal information in transit. In addition, all information sent with the SSL protocol is protected by a mechanism that automatically checks if the data has been corrupted in transit.

-The personal data collected from the contact forms are sent encrypted and stored in the company's e-mail or in the special program available on our website to maintain the history of the communications that have been made through. They are processed only by members of the company and are not given or sold to third parties.

YOUR RIGHTS

You can exercise, as the case may be, the following rights:

• The right of access/information, to find out if we process your data, which data we process, for what purpose and the recipients
• The right to rectification, to correct any omissions or inaccuracies of your data
• The right to erasure (right to be forgotten), to delete your personal data from our records, however, if their processing is no longer necessary or the retention of your data is not required in order to comply with our legal obligations or for the defense of our legal interests before the Courts
• The right to restrict processing, in case of questioning the accuracy of your data
• The right to portability, to receive your data or have it transmitted to another controller in a structured and commonly used format
• The right to object, with which you can object under conditions to the processing of data concerning you
• The right to withdraw your consent to the processing at any time, without prejudice to the lawfulness of the processing based on the consent prior to its withdrawal,
• Your right to be informed of any unwanted and malicious activity on the Company's data systems that may involve unauthorized access to your personal data.

The Company will make every effort to respond to each of your relevant requests within thirty days of receipt. However, in the event that, due to the complexity of your request or the volume of information, it is not possible to satisfy your request within thirty days, the Company undertakes to inform you within the above period in writing of the reasons for the delay and to make every effort to satisfy your request as soon as possible and in any case within two additional months.

The Company reserves the right not to satisfy your request, in the event that it is deemed manifestly unfounded or excessive, informing you about the reasons for not satisfying it.

In any case, you have the right to submit a complaint to the Hellenic Data Protection Authority (www.dpa.gr). Call Center: +30 210 6475600, Fax: +30 210 6475628, Email: contact@dpa.gr

CONTACT

If you have any questions regarding this Policy or in general, regarding our activities concerning your privacy or want to exercise any of your rights, you can contact the Company's Personal Data Manager at this email address: info@green- projects.gr

CHANGES TO THIS POLICY

The Company reserves the right to modify this Policy, always in accordance with the applicable legal rules on the protection of privacy and personal data. Visitors to our Website should read this Privacy Policy at regular intervals in order to be informed of any changes that are made, while the Company undertakes to provide the necessary updates to its visitors and users by any appropriate means, in compliance with the conditions set by the EU General Data Protection Regulation 679/2016.