1. General

Our Company created this website with the sole purpose of serving our customers. Our website is simple and user-friendly, designed to meet the specific needs of each user. In order to achieve the best user service, it is important for users to understand that they must provide certain information that ensures safe and efficient use, and which is protected by us. This Privacy Policy outlines how personal data is collected from users of our website and how this data is used by our Company. This Privacy Policy refers exclusively to the personal data provided by users during their registration and access to the website.

2. Data Controller

The data controller for personal data is our Company, specifically the company named “OFAKOGLOU I. AND SIA E.E.” operating under the trade name “RISTART”, located in Thessaloniki at Monastiriou Street No. 49 (5th floor), with VAT number: 800803081, as legally represented, with phone number +30 2310 530650. For matters concerning personal data, users can contact Mr. Ioannis Ofakoglou via email at hello@ristart.gr, through the website www.ristart.gr, or by phone at 2310 530650, in order to exercise all their relevant legal rights.

3. Data Collected – User Rights

3.1. Our Company designed the website so that users can visit it without needing to disclose their identity. During a user’s visit and navigation of our website, we collect only the data gathered from cookies, based on the user’s consent. Additionally, ristart.gr uses [program name] to track user activity in order to determine the number of individuals using our website, understand how they find and use our website, and know their navigation path within the site. Although [program name] records data such as users’ geographical location, their device, browser, and operating system, none of this data makes users personally identifiable to us.

Further, our Company collects two types of information about users: i) Data provided by the user during registration for the Company’s newsletter. During newsletter registration on our website, the user is asked for their email address. ristart.gr uses the information provided by users during their registration for the newsletter to send them promotional materials related to our services. ii) The website hosts an electronic contact form, allowing users to directly communicate with our Company if they wish. In this case, the data collected by our Company includes the user’s name, phone number, and email address.

Any personal document, certification, or document verifying the identity of the user remains strictly confidential and is only accessed by the authorized employee of our Company. The provision of personal data by the user implies their consent for these data to be used by our employees for the purposes outlined above. Our Company also requires its employees and website maintainers to ensure the security level described in this Privacy Policy. Under no circumstances can our Company share users’ personal details with others without their prior consent, unless required by legal procedures, as certain conditions allow or require the collection, use, and disclosure of personal data of users, which has been collected online, without their prior consent.

3.2. The processing of the above user data is based on the user’s consent. Recipients of the data are the essential employees of our Company or the external website maintainers, who are committed to confidentiality, in order to provide users with the security level mentioned in this Privacy Policy. Our Company has taken appropriate technical and organizational measures to ensure the security and protection of user data from any form of accidental or unlawful processing.

3.3. The rights of users regarding the data collected by our website are as follows: (a) The right of access to their personal data, i.e., the right to obtain confirmation from our Company as to whether or not their data is being processed, and if so, the right to access it along with the following information, subject to the provisions of Article 15 of Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR): – the purposes of the processing, – the relevant categories of data, – the recipients or categories of recipients to whom the data has been or will be disclosed, particularly recipients in third countries or international organizations, – the retention period or, where that is not possible, the criteria used to determine that period, – the existence of the right to request correction or deletion of the data or the restriction of its processing, or the right to object to such processing, – the right to lodge a complaint with a supervisory authority. (b) The right to rectification, i.e., the right to demand that our Company promptly correct any inaccurate data related to the user. (c) The right to erasure (“right to be forgotten”), i.e., the right to request that our Company delete user data without undue delay under the following circumstances and in accordance with Article 17 of the GDPR: – the data is no longer necessary for the purposes for which it was collected or otherwise processed, – the user withdraws consent on which the processing is based and there is no other legal basis for processing, – the user objects to the processing and there are no compelling legitimate grounds for the processing, or objects to processing for direct marketing purposes, – the data has been processed unlawfully, – the data must be erased to comply with a legal obligation under EU or national law, – the data was collected in connection with the provision of information society services as referred to in Article 8(1) of the GDPR. (d) The right to restrict processing of user data for as long as the examination of their objections to processing is pending, in accordance with Article 18 of the GDPR. (e) The right to data portability, i.e., the right for the user to obtain the data provided to our Company in a structured, commonly used, and machine-readable format, and to transmit those data to another Company without hindrance from our Company, in accordance with Article 20 of the GDPR. (f) The right to object to the processing of their data by our Company or to withdraw their consent where there are no other compelling legitimate grounds outweighing their right, in accordance with Article 21 of the GDPR. Users of our website can exercise the above rights by submitting a relevant request to the postal address of our Company (Monastiriou 49, P.C. 54627, Thessaloniki) or to the email address (hello@ristart.gr) with the subject “Exercise of Access/ Rectification/ Deletion/ Restriction/ Objection Right.” For more information, users can call +30 2310 530650.

3.4. The user data collected on our website is processed in accordance with the GDPR and the applicable national and EU laws and regulations for the protection of personal data. In case our Company violates these provisions, the user has the right to file a complaint with the Hellenic Data Protection Authority (postal address: Kifisias 1-3, P.C. 115 23, Athens, phone: 210-6475600, email: contact@dpa.gr).

4. Cookies

Our Company may use cookies as part of facilitating and functioning of the services provided through our website. Cookies are small files (text files) that are sent and stored on the user’s computer, allowing websites like this one to operate smoothly and without technical issues, collect user preferences, recognize frequent users, ease their access, and collect data to improve their content. Cookies do not harm users’ computers or files stored on them. Upon users’ exit from our website, cookies may be automatically deleted. The user should know that cookies are essential for the proper functioning of our website.

5. Periodic Changes – Acceptance of Privacy Protection Procedures

Our Company expands, updates, and improves its website and may, if necessary, update this Privacy Policy. Therefore, we recommend that users read this process periodically to stay informed of any changes to the content of this Privacy Policy, which will be modified from time to time without prior notice. The use of this website by each user signifies full knowledge and unconditional acceptance of this Privacy Policy.