Privacy Policy

Privacy and Protection of personal data:

We collect and process your personal data only when it is absolutely necessary. We will never sell, rent, distribute, or publicize in any way your personal data. If you are under 16, you MUST have your parent’s consent before using the services of this site.

Along with “Region of Attica” internal IT systems, this site is designed to comply with the following laws/regulations regarding the protection of user’s personal data:

EU Data Protection Directive (DPD of year 1995)

Regulation on General EU Data Protection (GDPR of the year 2018)

Personal information collected by this site and why we collect it:

This site collects and uses personal information for the following reasons:

A. During the site registration:

B. During the enlisting of a business. The enlisting of a company is not a mandatory field. As an indicative example, we hereby mention in particular the case of enlisting a personal business, where company data are identical to personal data:

Business Title: (For informing the public about the business and the services offered)

VAT number (In order for the Region of Attica to verify, -in the cases that such verification is attainable- that the business holds the necessary permits before the listing of its data in the catalogue of listed businesses in the site is finalized).

Business Address (Street, Number, City, Postal Code): (As to inform the public and enable written communication) Name and Surname of the Business Manager (In order to enable communication by telephone or e-mail a) with the public, as well as b) with the Region of Attica, in the cases that further verification of data is required).

Telephone: (In order to enable communication by telephone or SMS a) with the public, as well as b) with the Region of Attica, in the cases where further verification of data is required)

Business webpage: (As to further inform the public)

Business e-mail address: (In order to enable communication by e-mail (e.g. via MailChimp) : a) with the public, as well as b) with the Region of Attica, in the cases where further verification of data is required))

Like most sites, this site uses Google Analytics (GA) to track user activity. We use this data to determine the number of our site visitors to better understand how they find and use our web pages. Although GA records data such as your geographic location, your device, your web browser, and your operating system, none of this information identifies you to us. GA also records your computer’s IP address, which could be used to identify you, but Google does not provide access to it. We believe that Google is a third data processor that is compliant with the requirements of European legislation.

Contact forms and e-mail links: If you choose to contact us using a contact form or an email link, none of the data you provide will be stored on our site or transferred or processed by any third-party data processor as defined below in the section «Our third-party data processors». Instead, these data will be sent to us via an SMTP protocol (Simple Mail Transfer Protocol). Our SMTP servers are protected by a TLS security protocol (also known as SSL), meaning that email content is encrypted before being sent over the Internet. The content of the email is decrypted by our local computers and devices.

About this site’s web server: All web traffic (file transfer) between this site and your browser is encrypted and transferred via the HTTPS protocol using Secure Sockets Layer (SSL).

Third-party personal data processors: We use a number of third parties to process personal data for us. These Third-party personal data processors have been carefully selected to comply with the legislation mentioned in this document.

Data breaches: For any of your personal information stored in our database, all necessary action will be taken to be as secure as possible. We will report any unlawful violation of our database or any third-party data processing database to all relevant stakeholders as well as authorities within 72 hours of the violation if it is obvious that the personal data stored in recognizable form, have been stolen.