1. Data controller

The controller of your personal data is [COMPANY LEGAL NAME], trading as CyberSpace Dynamics ("we" or the "Company").

Registered office: 122 Alexandras Avenue, 114 71 Athens. VAT number (ΑΦΜ): [VAT NUMBER], tax office (ΔΟΥ): [TAX OFFICE], GEMI number: [GEMI NUMBER]. Phone: (+30) 211 003 0854, email: info@csdynamics.gr.

For data protection matters, you can contact [DATA PROTECTION EMAIL]. If a Data Protection Officer (DPO) has been appointed, their details are: [DPO DETAILS, IF ANY].

2. What data we collect

Contact details you give us through the forms, by email or by phone: first name, surname, company name, email, phone number and the content of your message.

Client data needed to provide our services and to invoice: contact person details, installation address, VAT number and billing details, support request history and user accounts on the client platform.

Technical data from your visit to the website: IP address, device and browser type, pages you visited and time of visit. Some of this is collected through cookies, as described below.

When we provide services such as IT support, remote access, web hosting or CCTV systems, we may have access to data that belongs to the client. In these cases we act as a processor, following the client's instructions and the contract between us.

3. Purposes of processing

We use your data to answer your requests and questions, prepare quotes and book appointments or site surveys.

For our clients, we use it to provide and support the agreed services, manage support requests, issue invoices and meet our accounting and tax obligations.

We also process technical data to keep the website secure and working properly and, where you have consented, to measure traffic and send you newsletters.

4. Legal basis

Performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR): when you request a quote or when we provide services to you.

Compliance with a legal obligation (Article 6(1)(c) GDPR): for invoicing, sending data to AADE's myData and keeping accounting records.

Legitimate interest (Article 6(1)(f) GDPR): for the security of the website and our systems, preventing misuse and contacting existing clients about similar services.

Consent (Article 6(1)(a) GDPR): for statistics and marketing cookies and for sending newsletters. You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Recipients of the data

We do not sell or rent your personal data. We share it only where necessary, with partners who act on our behalf and are bound by contract to keep it confidential and secure.

These recipients may include: hosting and cloud infrastructure providers, email and collaboration tool providers, traffic analytics and mapping providers (e.g. Google), our accountant and e-invoicing providers. The full list: [LIST OF PROCESSORS].

Data may be passed to public authorities, such as AADE, when the law requires it. If a recipient is located outside the European Economic Area, the transfer takes place only with the safeguards of the GDPR, such as an adequacy decision or standard contractual clauses.

6. Retention period

Data from contact forms and quote requests is kept for [PERIOD, e.g. 24 months] from the last contact, if no business relationship follows.

Client data is kept for as long as the relationship lasts, and then for as long as tax and accounting law requires or as needed to support legal claims. Newsletter data is kept until you unsubscribe from the list.

When the retention period ends, the data is securely deleted or anonymised.

7. Cookies

The website uses cookies, which are small files stored on your device. Essential cookies are needed for the basic operation and security of the website and do not require consent.

Statistics cookies (e.g. Google Analytics through Google Tag Manager) and third-party cookies, such as the embedded Google Maps map, are activated only if you give your consent through the cookie banner.

You can change your preferences at any time through the [COOKIE SETTINGS] link at the bottom of the page or in your browser settings. The detailed list of cookies: [COOKIE TABLE].

8. Data security

We apply appropriate technical and organisational measures to protect your data, such as encrypted connections (SSL/TLS), access control, backups and limiting access to those who need it.

No method of transmission or storage is completely secure. If a breach occurs that poses a risk to you, we will notify the competent authority and you, as the GDPR requires.

9. Your rights

You have the right to access your data, to have inaccurate data corrected, to erasure, to restriction of processing and to data portability (Articles 15 to 20 GDPR).

You also have the right to object to processing based on our legitimate interest or carried out for marketing purposes (Article 21 GDPR), and to withdraw your consent at any time. We do not make decisions based solely on automated processing.

To exercise your rights, email us at info@csdynamics.gr. We will reply within one month, as the GDPR requires, and we may ask you for information to confirm your identity.

10. Hellenic Data Protection Authority

If you believe that the processing of your data breaches the law, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA), 1-3 Kifisias Avenue, 115 23 Athens, www.dpa.gr.

We suggest that you contact us first, so we can try to resolve the matter promptly.

11. Changes to this policy

We may update this policy when our services or the law change. The date of the last update appears at the top of the page, and we will inform you in an appropriate way about significant changes.

12. Contact

For any question about this policy or the processing of your data, contact us at info@csdynamics.gr, on (+30) 211 003 0854 or by post at [COMPANY LEGAL NAME], 122 Alexandras Avenue, 114 71 Athens.

Privacy Policy