Respecting your privacy and the management, protection, and security of your personal data is a priority for us. Our Company has established this Privacy Policy, which should be read as a single text with the Cookies Policy, forming an integral part of this document (hereinafter the ‘Data Policy‘ or the ‘Policy‘). This document aims to inform visitors to http://www.mentalit.gr/ (hereinafter referred to as the ‘Website‘) as they navigate, view its content, as well as how to communicate with users of the Website or with the Company’s customers or third parties (hereinafter referred to as the ‘User’ or ‘the Customer,’ as the case may be, and collectively ‘you’ or ‘your’).

1. Who is the Processing Manager?

   1. Responsible for the processing of your personal data is “MENTAL INFORMATICS IKE“, which is located in Ilion, Attica, at 13 Astros Street, P.O.Box 13121, with VAT number 998404666, D.O.Y. AG. ANARGYRON, telephone no. +30 2106717237 e-mail address informatics@mental.gr (hereinafter referred to as the “Company” or “we“, “our“).

   2. Contact details: For any matter concerning this privacy policy and the processing of your personal data, you can contact us in the following ways:

α) By telephone service at +30 2106717237, Monday to Friday 09:00 am – 17:00 pm.

β) By emailing informatics@mental.gr

γ) By sending by ordinary mail to the Post Office: 13 Astros 13, P.C. 13121, Ilion

2. Which personal data do we process and how?

Your personal data includes any information that allows, either alone or in combination with others, your unique identification, in accordance with the provisions of the General Data Protection Regulation (GDPR 2016/679 or General Regulation), the applicable Greek legislation and the decisions of the Hellenic Data Protection Authority (HDPA).

We process your personal data when you browse the Website, contact the Company through the contact form available on the Website, or otherwise, we collect various types of personal data about you, either directly from you, or from third parties, and/or through automated means.

Indicatively, we collect the following personal data for you:

– Identity Data: (full name) that you provide to us when you fill in the contact form on the Website.

– Contact Data: (email address) which you provide us with when you fill in the contact form on the Website.

– Contact Data: This includes your email address and/or telephone number, which you provide to us, for example, when you fill in the relevant field on our website to receive our newsletter or when you are our customer.

– Data via Cookies as detailed in the Cookies Policy.

3. What is the purpose and legal basis of each processing operation;

This policy specifically applies to the processing carried out by the Company through the Website or the means of communication we use to interact with you for the purposes outlined below.

Purpose of Processing	Data	Legal Basis of Processing
We process your data: (a) to facilitate the management of contact requests that you voluntarily submit to us through the contact form available on our Website; and (b) to follow up with you in response to your request, as described above, using the contact form.	Identity Data: Your full name Contact Details: Your email address (email address) Data You Provide Us in the Content of Your Message: The contact form available on the Website includes a field where users can freely fill in their messages to the Company. We encourage you to provide only the data that are strictly necessary for contacting the Company. Please avoid including special categories of personal data (e.g., health data) or any other data that are not essential for our communication with you. We are not obligated to verify the legality of the content of your message, and the Company will not be liable in case the content of your message is unlawful or if you provide us with personal data that is either unrelated to our communication or exceeds what is strictly necessary for that purpose.	Your consent is required for the processing of your personal data to manage your request through the contact form and to contact you. You have the right to withdraw your consent at any time by contacting the Company using the contact details provided in Article 1. Please note that submitting a contact request, as described above, does not constitute a subscription to a newsletter database.
Contact on our own initiative due to an existing relationship with you We process your data for the following purposes: 1) to contact you as part of our existing relationship, aiming to provide further assistance and resolve any issues. 2) to contact you for commercial purposes, such as promoting materials and information directly related to our existing legal relationship. This may include updates on seminars, new publications, or news about our services. 3) to promote our newsletter, which contains news regarding our services, products, and developments in the accounting field. You can easily unsubscribe from the newsletter by selecting the relevant unsubscribe option in the emails you receive.	Identity data Full nameContact details Your email address and telephone number, if you have provided it to us under our existing legal relationship.We have received these data from you, following, indicatively, an existing professional relationship for the provision of accounting support services by our company to you, your previous participation in seminars organized by our company alone or in cooperation with third parties, the purchase of our books, etc.	For a) the performance of our contractual relationship for the provision to you of our services For b) and c) the legitimate interest of our Company in sending commercial communications on matters directly related or incidental to our working relationship, including informing you about our events, conferences, our participation in institutions and programs, our interventions, articles and books, etc. You may request not to receive any commercial communication from us as referred to in b) and c) at any time by contacting us at the Company’s details listed in Article 1 or (where applicable) by activating the unsubscribe option at the bottom of the e-mail you receive from us.
(Commercial) Communication on our own initiative from publicly accessible sources We process your personal data in order to contact you for business purposes, but also for the purpose of commercially promoting our services and products, following your voluntary registration in professional directories or following our lawful collection of data available in publicly accessible sources. This communication includes communication for commercial purposes (promotion of material and information) directly related to your professional activity, such as accounting/tax/financial seminars, publications of our books or news about our services and products.	Identity data Full nameContact details Your email address and telephone number, if it is on these lists or publicly accessible sources.	Our legitimate interest in obtaining the information contained in professional directories to which you have lawfully and voluntarily subscribed and to which our company has lawful access or which are available from publicly accessible sources You may request not to receive any commercial communications from us as referred to in b) and at any time by contacting us at the Company’s details set out in Article 1 or (where applicable) by activating the unsubscribe option at the bottom of the email you receive from us.
Commercial Communication on our own initiative, after you subscribe to our Newsletter We process your personal data in order to send you our Company’s newsletter, with news about our services and products, as well as news from the accounting field, which are directly related to your professional activity, such as accounting/phototechnical/financial seminars, publications of our books or news about our services and products.	Communication data Your email address.	Your consent to the processing of your personal data for the sending of our Company’s newsletter by us, after registering on our mailing list by entering your e-mail address in the relevant field on our Website. You can withdraw your consent at any time, either by contacting us at the contact details in article 1 or by clicking on the unsubscribe option in the email you receive.

4. How long do we keep your personal data?

   1. We will retain your personal data for as long as you continue to interact with us and for as long as such data is necessary for the fulfilment of the processing purposes described herein (e.g. when you contact the Company through the Website, the data will be retained only for as long as necessary to complete the communication between us) or until you exercise your right to withdraw your consent or erasure (if applicable).

   2. Furthermore, we keep your personal data for our legal coverage in the event of a dispute in the context of the use of the Website as well as for the management by the Company of any legal claims (e.g. out-of-court dispute, dispute before courts and/or prosecutors or other authorities), for the period of time during which liability could arise from the processing, in accordance with the applicable legislation.

   3. To determine the retention period of your personal data, we take into account the nature of your data, its quantity, the purpose of its processing, its security, etc. You have the right to ask us to delete your data provided that the legitimate interests of the Company are not affected and/or there is no legal obligation to keep them as described above. To exercise your right, please visit the relevant section in this Policy.

   4. In any case, for as long as we keep your data, it is stored securely in accordance with the security measures set out in Article 8 below.

5. What are your rights and what are the procedures for exercising them?

   1. You can exercise your rights at the Company’s contact details mentioned in article 1.2.

   2. The rights you can exercise (where applicable and in accordance with the conditions set out in the General Regulation) are: right of access (Article 15), right of rectification (Article 16), right of erasure (Article 17), right to restriction of processing (Article 18), right of portability (Article 20), right to object (Article 21), right of human intervention in automated individual decision-making, including profiling (Article 22).

   3. We take the confidentiality of all records containing personal data seriously and we reserve the right to ask you for proof of your identity if you make a request to exercise your rights in relation to those records.

   4. We will not charge you a cost for exercising your rights in relation to your personal data unless, as provided by law, your request for access to information is unfounded or excessive, in which case we are entitled to charge a reasonable fee in the circumstances. In any event, we will inform you of any charges before we complete your request.

   5. We aim to respond to any valid requests no later than one (1) month after receiving them, unless they are particularly complex or you have submitted several requests. We will let you know if we are going to take longer than one (1) month for the reasons set out above.

   6. Complaint to a supervisory authority: You also have the right to lodge a complaint with your local supervisory authority about the processing of your personal data, after contacting us to find a solution to any problem you may have. In Greece, the supervisory authority for data protection is the Data Protection Authority (www.dpa.gr), Kifissias 1-3, 11523 Athens, Greece, 2106475600, fax. 210 6475628.

6. Who are the third party recipients of your data?

1. 1. For the smooth and uninterrupted operation of the Website, the Company cooperates with third party companies which have access only to the data that is absolutely necessary for the operational and computerized organization of our Website, the optimization of the User’s experience, the submission of the contact form with the Company, etc. Indicatively, the companies cooperating with us include the company that technically supports and technically hosts the Website.

   2. When transmitting your personal data in accordance with the above, we continuously ensure the highest possible level of security. Therefore, your data will only be transmitted to service providers and partner companies that have been carefully selected and bound by contract in advance.

   3. We clarify that in the event that through our Website you are directed to the websites of third parties, partners or not of our Association, the Company has no involvement in any collection and processing of your data carried out by the administrators of the third party websites you enter. Therefore, you are invited to consult the respective privacy policy of the website you are visiting.

   4. The Company generally keeps your personal data within the European Economic Area (EEA).In the event that data is to be transferred to third countries outside the European Economic Area for which there is no adequacy decision of the European Commission or to International Organisations, all appropriate safeguards provided for in the applicable legislation for the protection of personal data regarding transfers to third countries will be taken and the relevant information will be posted on the Company’s Website.

   5. Finally, we may need to provide personal data to law enforcement agencies in order to comply with a legal obligation or court order.

7. How is the security of your data ensured?

   1. The Company takes all necessary technical and organizational security measures to protect and ensure the confidentiality of your personal data and their protection from accidental or unlawful destruction/loss/alteration, unauthorized dissemination or access and any other form of unlawful processing (e.g. firewalls, access rights control, domain controller, lan segmentation, antivirus, partially encrypted information).

   2. The information you submit to the Company is managed exclusively by specially authorized personnel of the Company who are under its control and only on its instructions and by the recipients, where necessary. To carry out the processing, the Company selects persons with corresponding professional qualifications who provide sufficient guarantees in terms of technical knowledge and personal integrity to ensure confidentiality. The Company, through both its respective contractual commitments and its partners, takes all those security measures necessary to protect and ensure the privacy, confidentiality and integrity of personal data. In any case, the security of such data in the environment of the Website is subject to reasons beyond the Company’s sphere of influence, as well as reasons due to technical or other network weaknesses beyond the Company’s control or reasons of force majeure or fortuitous events.

8. Applicable law

For any dispute arising from the use of this Website, the Greek courts of the city of Athens shall have exclusive jurisdiction, based on Greek law.

9. Changes to this Policy

We reserve the right to modify this Policy, for example to comply with new requirements imposed by applicable laws, directives, or technical requirements or in the event of a revision of our procedures or practices. We will notify you of any revision to our Privacy Policy by posting it on our website. We also encourage you to check this page periodically.