1. Introduction 

“APELLA S.A.” (hereinafter referred to as “the Company” or “We”)takes a highly responsible approach to the protection of personal data and to privacy. As part of this approach and in compliance with the transparency and notification requirements of the General Data Protection Regulation (hereinafter referred to as “GDPR”), the Companyaddresses the present notice to you about the use of your personal data.

More specifically, this privacy notice describes the type of personal data being collected, the purposes for which your personal data are being processed as well as the legal basis, and their rights as data subjects. 

If you have any questions regarding this Notice and the way your personal data are processed, please contact us to the following email:info@apella.gr

2. Controller

The following Company acts asController, by determining the purposes and means of the processing of your personal data. Its contact details are the following: 

3. Collection and Process of Personal Data 

(a) When visiting our Website 

We  automatically collect information about the device you use to visit our website. This information is called “log data”. Such data may includeinformation, such as your computer’s Internet Protocol (“IP”) address you used to connect your device on the internet, your browser and its version, the URL, the pages you visited, the services or products you searched for, the time and date of your visit, the time spent on those pagesand other statistical information, For more details, you can read our Cookies Policy at: www.apella.gr

(b) When submitting a contact form 

The above personal data, which are provided to us by yourself, through the completion of the 

relevant contact formis processed by the Company, for as long as it is required in order for us to reply in your message/comment and stored in our database, solely for reasons related to the establishment, exercise or defense of legal claims. 

(c) When using social plugins 

Our website uses social media plugins of various social networks (i.e.Facebook, Twitter, YouTube, …….), which can be recognized by the logo of the respective social network. 

When you click on this logo, your browser creates a direct connection to the servers of the above social networks. The content of the plugin is transmitted directly from the social network to your browser and is integrated into the website. Through the integration of the plugin, the operators of the social networksreceives the information that your browser has accessed the respective pages of our online presence, even if you do not have an account on the social network or you are not logged in to it.  This information (including IP Address) is transmitted by your browser and stored directly to a social network server that may be located in third countries (i.e. countries outside the European Union and the European Economic Area). 

If you are at the same time logged in to the respective social network, then by activating the plugin, you will be connected to our website directly from your personal account on the social network. If you,then go on to interact with the social media plugins, e.g., clicking the Facebook "Like" button or writing a comment on twitter, that information is also transmitted and stored to a server of the respective social network. This information will be displayed on the social network and will be visible to your contacts there. The social network can use this information for advertising, market research and designing its websites according to the requirements of the users. If you do not want the social network to collect your data and associate it with your personal profile, when you visit our website, you must log out of it, before visiting our website.

For more information on the purpose and scope of the data collection and its further processing and use by the social network, as well as your rights and deactivation options for the protection of your personal privacy, we advise you to carefully read the respective Data Protection and Website Policies of social networks and adjust the settings regarding the protection of your personal data,in accordance with the requirements in your personal account.

4. Data Processing Purposes & Legal basis 

The following table sets out the purposes of processing personal data collected through our website, categories of personal data processed, as well as the legal basis of the processing:

5. Data transfers 

The Company does not in any way transfer your personal data, nor does it interconnect its files for any financial or other consideration with any third-party private enterprises, natural or legal persons, public authorities or services or other organizations. 

The Company may disclose the above personal data to IT support services providers and web support companies and web hosting companies.

In addition, our website may contain links to other websites that are not operated by us. If you click on a

third party link, you will be directed to that third-party’s website. We strongly advise you to read theTerms and Conditions and Privacy Policies of any third-party websites or services that you visit. We haveno control over and assume no responsibility for the content, privacy policies or practices of any third-party websites or services.

6. Data Security 

The Company collects, keeps and processes your personal data in a way that ensures its confidentiality. 

The Company has put in place appropriate organizational and technical measures to prevent your personal data from being accidentally or unlawfully destroyed, lost, altered, disclosed or accessed in an unauthorized way or otherwise processed, while your personal data are processed solely by specifically authorized personnel, who have a need to know for executing the tasks assigned to them (“restricted access to authorized personnel”). 

Although the Company takes appropriate security measures to safeguard the confidentiality, integrity and availability of personal data, transmission of information over the Internet is never completely safe. As a result, the Company cannot guarantee the security of information, when it is transmitted by any electronic means. Because of this, any such transfer is carried out at the sender’s responsibility.

7. Data Storage 

Your personal data are stored in servers located in countries within the European Economic Area (EEA) and they are not transferred to third counties (countries outside the EU/EEA).  

The countries of the European Economic Area are considered to provide the same level of personal data protection as Greece. If we transfer your personal data outside of the European Economic Area, the Company is legally required to notify the purposes of this data transfer to the third parties and to ensure the appropriate safeguards for the protection of their personal data being transmitted. 

8. Data Retention 

The personal data that you submit in our website are kept only for as long as it is required for the purposes for which were collected or as required by law or for the defense of the Company against possible legal action to pursue claims. 

Definitions

For the purposes of the present Notice: