PRIVACY POLICY OF THE PROGETTO FARMA WEBSITE
LAST UPDATE: [06/02/Ε2026]
1. INTRODUCTION
PROGETTO FARMA – SAMPANIS DIMITRIOS KAI SIA E.E (hereinafter the “Company”) recognizes the importance of protecting personal data and is committed to processing it securely, transparently and in compliance with applicable legislation, in particular Regulation (EU) 2016/679 (GDPR) and Law 4624/2019, as in force.
This Privacy Policy describes which categories of data may be collected when visiting and using the website https://www.progettofarma.gr and https://www.progettofarma.gr/en/it (hereinafter the “Website”), for what purposes, on what legal basis, for how long they are retained, as well as the rights of data subjects.
2.DATA CONTROLLER CONTACT DETAILS
The Data Controller is the company PROGETTO FARMA – SAMPANIS DIMITRIOS KAI SIA E.E, with registered seat at SPERCHEIOU 57 – PC 12137 – PERISTERI – Greece – VAT No. 998128599 – Tax Office: KE.FO.DE ATTIKIS – GEMI 008557701000.
Contact email for personal data matters: progetto@progettofarma.gr
Telephone: 2105324921
Postal address for requests: Spercheiou 57 – Peristeri PC 12137, Attention “Personal Data Department” or “Data Protection Officer” (if a DPO exists).
3.WHO WE ARE AND WHAT THE WEBSITE DOES
The Website is informational and presents information about the Company, its services, and indicative projects/portfolio. The Website is not an e-shop and does not carry out purchases through it, unless expressly stated otherwise in a specific section.
4.WHAT DATA WE COLLECT
4.1 Data you provide
You may browse the Website without providing us with personal data. However, we may collect data that you voluntarily provide when you contact us, such as:
a) contact details (name, email, telephone) if you include them in your message
b) the content of the message/request you send to us via email or contact form (if available)
c) any other information you choose to include (e.g. company, role, project location, etc.)
IMPORTANT: Please do not send us special categories of data (sensitive data) such as health data, political/religious beliefs, etc. If such data are sent to us, we may delete them without delay, to the extent feasible and lawful.
4.2 Data collected automatically (browsing data)
When visiting the Website, technical data may be collected such as:
a) IP address (or part of it) and general geographic indication (e.g. city/country, depending on settings)
b) device type, operating system, browser type
c) pages you visit, time spent, referral source, clicks and similar technical information
The above may be collected through cookies and similar technologies, as described in the Cookie Policy.
5. PURPOSES OF PROCESSING AND LEGAL BASES
We process personal data for the following purposes:
5.1 Communication and responding to requests
Purpose: to respond to questions/requests and communicate with you.
Data: contact details and message content.
Legal basis: Article 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and/or Article 6(1)(f) GDPR (legitimate interest in effective communication).
5.2 Operation and security of the Website
Purpose: technical operation, security, prevention of malicious actions.
Data: technical browsing data (e.g. IP, logs).
Legal basis: Article 6(1)(f) GDPR (legitimate interest in systems security and smooth operation).
5.3 Statistical analysis and improvement of user experience
Purpose: traffic analysis and improvement of content/functions.
Data: usage data and technical data, usually in aggregated/statistical form.
Legal basis: Article 6(1)(a) GDPR (consent) where required via the cookies banner (e.g. analytics/marketing cookies) or Article 6(1)(f) GDPR for strictly necessary technical cookies and basic operation.
6. COOKIES AND RELATED TECHNOLOGIES
The Website may use cookies and similar technologies. For detailed information (types of cookies, purposes, duration, how to manage/withdraw consent) please see the Website Cookie Policy.
You can also set your browser to reject or delete cookies. Please note that certain functions of the Website may be affected.
7. DATA RECIPIENTS AND PROCESSORS
The Company does not sell, trade or transfer your personal data to third parties for their own commercial purposes.
We may disclose data only:
a) to authorized staff/partners who need it to serve the purpose
b) to service providers (processors) such as hosting providers, technical support, email services, analytics, who are contractually bound to protect data and act under our instructions
c) to public authorities/judicial authorities, if required by law or by court/prosecutor order.
8. TRANSFERS OUTSIDE THE EU/EEA
As a rule, we do not seek to transfer data outside the European Economic Area. However, if third-party services are used (e.g. specific analytics tools or platforms) that may involve transfers outside the EU/EEA, then the transfer will take place only with appropriate safeguards in accordance with Article 46 GDPR (e.g. Standard Contractual Clauses) and where required, through consent mechanisms via the cookies banner.
Details on any such services must be confirmed by the Website’s technical provider and reflected in the Cookie Policy.
9. DATA RETENTION PERIOD
We retain data only for as long as necessary for the purpose for which they were collected and/or as required by law.
Indicatively:
a) contact data and correspondence: as long as needed to respond/complete your request and for a reasonable archiving period, unless longer retention is required for legal reasons (e.g. establishment/support of legal claims)
b) security technical logs: for a limited period, according to security needs and best practices
c) cookies: according to the duration defined in the Cookie Policy and consent settings.
RIGHTS OF DATA SUBJECTS
You have, as applicable, the rights provided by the GDPR:
a) access to your data
b) rectification of inaccurate/completion of incomplete data
c) erasure (right to be forgotten), where applicable
d) restriction of processing
e) data portability, where applicable
f) objection to processing based on legitimate interest
g) withdrawal of consent, where processing is based on consent (e.g. cookies)
h) lodging a complaint with the competent supervisory authority.
HOW TO EXERCISE YOUR RIGHTS
You can exercise your rights by sending a request to: [privacy@progettofarma.gr or info@progettofarma.gr]
For security reasons we may request information to verify identity, only to the extent necessary.
The Company will respond within one month of receiving the request, with the possibility of a two-month extension when required due to complexity or number of requests, in accordance with Article 12 GDPR.
SUPERVISORY AUTHORITY COMPLAINTS
The competent supervisory authority in Greece is the Hellenic Data Protection Authority (HDPA).
Address: 1-3 Kifisias Ave., PC 115 23, Athens
Telephone: +30 210 6475 600
Email: contact@dpa.gr
Website: www.dpa.gr
You have the right to lodge a complaint with the HDPA if you believe that the processing of your data violates applicable legislation.
LINKS TO THIRD-PARTY WEBSITES
The Website may contain links to third-party websites. This Policy applies only to the Company’s Website. We are not responsible for the content or privacy practices of third-party websites. We recommend that you read the privacy policies of third-party websites you visit.
DATA SECURITY
The Company implements appropriate technical and organizational security measures to protect data from loss, unauthorized access, alteration or leakage, taking into account the nature of the data and the relevant risks. No method of transmission or storage can guarantee absolute security, however we take all reasonable measures in accordance with best practices.
CHANGES TO THIS PRIVACY POLICY
This Policy may be amended from time to time. The updated version will be posted on the Website with a new “Last Update” indication and will apply from the date of publication. You are advised to check it periodically.
CONTACT
For questions regarding this Privacy Policy or for requests to exercise rights, you may contact:
Email: progetto@progettofarma.gr
Telephone: 2105324921
Address: Spercheiou 57 – Peristeri PC 12137