Privacy Policy

Last updated: 1/10/2025

The company “MARMOURIS S.A.” (hereinafter the “company”) respects the privacy of individuals and takes very seriously the need to protect their personal data.

This information notice provides every person interested in receiving our services and every visitor/user of the company’s website and e-shop with concise, fully defined, and transparent information regarding the practices followed for the management and protection of personal data.

Relying on its experience and expertise, the company aims at the continuous expansion of its products and services, always focusing on the quality, safety, and full satisfaction of its customers’ needs and requirements.

The company is committed to:

• Ensuring customer satisfaction by providing high-quality products and services in line with their requirements.
• Safeguarding the confidentiality, integrity, and availability of information processed, transmitted, and maintained through the company’s personnel and information systems.
• Timely and effectively identifying and addressing emergency situations related to security breaches (or suspected breaches) of company information.
• Protecting its investment in information and communication technologies.
• Complying with the requirements of Greek and European legislation regarding personal data management, confidentiality of communications, intellectual property rights, etc.
• Continuously improving the Personal Data Protection System, its effectiveness, and performance in safeguarding integrity, confidentiality, and availability of information for the benefit of the business itself, its employees, customers, and partners.

It is important for the company to allocate the necessary resources to support the Personal Data Protection System and to ensure that its staff and executives are equipped with the required knowledge in information security, making use of their skills and abilities.

The company fully recognizes the objectives of the Personal Data Protection System and supports their implementation.

The company’s executives and staff are committed to:

• Complying with all policies and procedures relating to personal data protection.
• Ensuring the fulfillment of the requirements of other interested parties.

This Privacy and Data Protection Policy is already known to all executives and staff and is available to all interested parties, as it has been published on the company’s website.

Its review is conducted annually, or earlier, if deemed necessary by the company’s management.

What is the purpose of this Policy?

The purpose of this Policy is to inform how customers’ personal data are collected, stored, used, and possibly disclosed; the security measures taken to protect personal data; the reasons and retention period of such data; and the type of personal data collected. It concerns any act or series of acts carried out, with or without the use of automated means, on personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or any other form of making available, alignment or combination, restriction, erasure, or destruction.

The company reserves the right to update, modify, add, or amend its services and this Policy, at any time, whenever deemed necessary, without prior notice, always within the applicable legal framework and in line with changes in data protection legislation.

The company encourages every interested party to check this Policy periodically to stay informed about any changes.

What are personal data?

Personal data is any information that relates to an identified or identifiable natural person (e.g., name, ID number, address, etc.). Data concerning health (physical or mental condition, medical services received, etc.) are included in the general term “personal data” but constitute a special category of data.

The company will not process your personal data without your consent. Specifically, the processing of special categories of data (such as health data) will only be carried out under the conditions of Article 9(2) of the General Data Protection Regulation (GDPR). However, the company reserves the right to process your personal data to the extent permitted or required by law, or by a contract you have signed with the company, or by court orders or prosecutorial directives.

How are personal data collected?

Your personal data are collected in the following ways:

1. Provided directly by you when you or your company use our services, when you contact us to receive products or services for yourself or a third party, when you participate in a company event, when you submit a job application, when you fill out online forms, send emails, or use social media to learn about or obtain products/services available on the company’s website and e-shop.
2. Automatically through your browser or mobile device (e.g., smartphone, tablet) used to access the website or e-shop.
3. Provided by a third-party partner with your consent (e.g., subsidiary, partner company).

During registration for services offered through the company’s website and e-shop, you may be required to provide details such as full name, telephone number, and email. In cases where your consent is required to collect further data (e.g., for newsletter subscriptions), this will be expressly requested, and you will retain the right to withdraw your consent at any time.

Which personal data are collected?

In summary, the personal data collected (depending on your relationship with us) and further processed include:

• Name, address, company name, VAT number, and general contact information (including email address and phone number).
• Information derived from the use of our websites and digital platforms (e.g., newsletter subscription, email communications, inquiries).
• Technical information such as your device’s IP address, browsing history, geolocation data, and HTTP protocol information.

Further details on technologies used (cookies, internet tags, etc.) are available in the Cookies Policy.

On what principles is personal data processing based?

The company processes your personal data lawfully, fairly, and transparently for specific purposes as set out in this Policy. The data collected are:

• limited to what is necessary,
• accurate and up to date,
• retained only for as long as necessary,
• protected by appropriate security measures,
• not transferred to countries lacking adequate protection.

Who processes the data and are they shared with third parties?

Personal data are processed by authorized company staff for service delivery purposes only and may be disclosed to authorized third parties bound by confidentiality obligations, where access is necessary.

The company explicitly commits not to sell, rent, transfer, or disclose your personal data for purposes other than those stated, unless required by law, court order, administrative decision, or contractual necessity for the smooth operation of its website/e-shop and services.

When shared with third parties (e.g., partners, service providers), such parties are contractually bound to use the data solely for agreed purposes and to ensure confidentiality and security.

How long is data retained?

Personal data are kept only for as long as required by the nature of the service you selected and in accordance with applicable law. Retention periods also take into account statutory requirements (e.g., tax audits), potential claims, and business needs.

When no longer needed, data are securely deleted or anonymized.

What are my rights?

You have the right to:

1. Request information about your personal data being processed and for what purpose.
2. Receive a free copy of your data.
3. Request updates, corrections, suspension, restriction, or deletion of your data, unless retention is legally required.
4. Exercise your right to data portability or object to processing.

For newsletter services, you may unsubscribe at any time via the link provided in each newsletter.

Requests can be sent to: info@marmouris.gr
For questions, you can also call +30 23940 52410 (ext. 34).

You also have the right to file a complaint with the Hellenic Data Protection Authority (www.dpa.gr) or seek legal remedies.

Is my data safe?

The company takes privacy seriously and applies industry best practices, organizational and technical measures to prevent unauthorized access, misuse, loss, disclosure, alteration, or destruction of personal data.

Data access is restricted to authorized staff and partners bound by confidentiality.

The company ensures compliance with Regulation (EU) 2016/679 (GDPR), as well as Greek and international laws.

For security purposes, the company also uses CCTV cameras at its entrance.

How is data collected and used through the website?

Data collection through the website and e-shop occurs when you:

• Request information about company services.
• Subscribe to newsletters or news updates.
• Use the website or e-shop services.
• Voluntarily participate in company activities.
• Interact with company promotions on social media.
• Accept the use of cookies or similar technologies.

Collected data may include:

• Email address (for newsletters).
• Contact details (address, email, phone).
• Technical information (IP address, browsing patterns, geolocation).

These are used exclusively for:

• Personalized information and product/service provision.
• Delivery of services tailored to user preferences.
• Statistical analysis of website traffic.
• Customer support and communication about new services (with prior consent).

Further disclosure to third parties will only occur with your explicit consent.