At Piyèas (GERAKOUDIS I.K.E.), our goal is to protect and secure the privacy of the information you provide to us, always respecting the trust of our customers and website users. We fully comply with the applicable national and European legislation on Personal Data Protection and have implemented a series of actions and procedures to ensure full compliance with the new General Data Protection Regulation (GDPR) of the European Union.

Please take the time to review this Privacy and Personal Data Protection Policy. This Policy establishes the basis for the processing of all personal data we collect from you or that you provide to us through our website. We retain certain key information when you visit our website and recognize the importance of keeping this information secure while also keeping you informed about how we intend to use it. Please read this Policy to learn more about how we collect, store, use, transfer, and protect the personal data and information we receive. Additionally, learn about your rights regarding this collection and processing, how you can exercise these rights, and how to contact us for any questions.

1. Principles Governing Data Processing

2. Legitimacy of Processing

3. Minors

4. Collection and Use of Personal Data

5. Transfer of Personal Data to Third Parties

6. Rights and How to Exercise Them

7. Links to Other Websites

8. Provision of Professional Services

9. Changes to the Personal Data Protection Policy

10. Contact

Principles Governing Data Processing

a) Legality and Transparency
All personal data we collect is processed lawfully and fairly, always in accordance with applicable legislation and in a transparent manner regarding the information we collect about you.

b) Purpose Limitation and Data Minimization
Gerakoudis I.K.E. collects your personal data for specific, explicit, and lawful purposes, and these are not further processed in a manner incompatible with these purposes. Only appropriate and necessary data is collected for the purpose for which it is processed.

c) Accuracy
Your personal data is accurate and updated when necessary. Gerakoudis I.K.E. takes reasonable steps to promptly delete or correct inaccurate personal data through the data processing form and immediate email communication as detailed below.

d) Storage Limitation
Gerakoudis I.K.E. retains your personal data only for the duration necessary for the purposes of its processing or to comply with an individual’s request, or until their deletion is requested by the subject (and in any case no longer than one year unless required by current legislation).

e) Integrity, Confidentiality, and Data Security
Gerakoudis I.K.E. implements appropriate security policies and procedures to ensure that your personal data is processed securely, preventing unauthorized or unlawful processing, accidental loss, destruction, or damage through the use of suitable technical and organizational measures. Despite efforts made by Piyèas, security cannot be absolutely guaranteed against all threats.

In the event of personal data loss or breach, we have a specialized incident response team and a process to address such incidents to restore the breach as quickly as possible, limit potential consequences, and comply with our legal obligations. Access to your personal data is limited to those who need to know it. Individuals with access to data are obligated to maintain confidentiality. In the event of a personal data breach, we will notify you immediately and by all appropriate means.

Legitimacy of Processing

For the processing of your personal data and information to be lawful, certain conditions must be met. Gerakoudis I.K.E., always aligned with Greek and EU legislation, collects only the necessary personal data under the following legal conditions:

a) **Your Consent**
The processing of your data requires your explicit consent. You can withdraw your consent at any time by contacting us at hello@piyeas.com.

b) **Contractual Performance**
Processing is necessary to fulfill obligations arising from a contract or upon your request prior to entering into a contract.

c) **Legal Obligation**
Processing is required to comply with a legal obligation, such as keeping records for tax purposes.

d) **Legitimate Interest**
Processing may be based on legitimate interests pursued by the company, provided it does not override your rights and freedoms.

Minors

Gerakoudis I.K.E. understands the importance of protecting the personal data of minors, especially online. If the minor is over 16 years old, processing is lawful. If under 16, consent must be provided or approved by a parent or guardian.

Collection and Use of Personal Data

4.1 **What Data We Collect**
We collect personal data when you choose to provide it, such as through email or subscription services.

4.2 **Automatic Collection of Personal Data**
We may collect certain data automatically via cookies and similar technologies.

Transfer of Personal Data to Third Parties

We do not share personal data with unrelated third parties unless required for legal, business, or professional reasons.

Rights and How to Exercise Them

If you have submitted personal data to Gerakoudis I.K.E., you have the following rights:

– **Access:** Right to view and obtain a copy of your personal data.
– **Correction:** Right to correct inaccuracies.
– **Erasure:** Right to request data deletion in specific circumstances.

Links to Other Websites

The Piyèas website may include links to external sites for convenience. These sites operate independently, and Gerakoudis I.K.E. is not responsible for their content or data protection practices.

Provision of Professional Services

Gerakoudis I.K.E. processes personal data in compliance with Greek and EU laws when providing professional services.

Changes to the Personal Data Protection Policy

Gerakoudis I.K.E. reserves the right to update this Policy to reflect changes in the law or company practices.

Contact

If you have any questions or wish to exercise your data protection rights, contact us at hello@piyeas.com.

This policy was revised and is effective as of December 10, 2024.