Privacy Policy

(in accordance with the GDPR)

The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation is SPEC MEDIA GREECE – SPEC MEDIA M. I.K.E., located at Agias Varvaras 4, Ellinikou – Argyroupolis, Southern District of Athens, 16452 Athens, Greece, and reachable at spec@specmediagreece.com. Personal data is processed on the basis of Regulation (EU) 2016/679 (GDPR) as well as the applicable Greek implementation law, in particular Law 4624/2019, each in its current version.

We process only the personal data you provide to us, including identification details such as your name, contact details such as your e-mail address and telephone number if supplied, information related to your request including subject, content and description of your situation, and where necessary your date of birth, insofar as this information is required to perform the service you have requested. We collect no more data than is strictly necessary for each specific purpose.

Your personal data is used exclusively to process and answer your inquiries, to prepare, carry out and complete the services you have requested, to fulfill legal obligations including tax and commercial record-keeping requirements, and to establish, exercise or defend legal claims. The legal basis for processing depends on the needs of the individual case. Processing may be carried out for the performance of a contract or pre-contractual steps such as communication, preparation of offers or appointment coordination. It may be required for compliance with legal obligations such as tax documentation. It may be based on legitimate interests including IT security, prevention of misuse or legal enforcement. It may rely on your explicit consent whenever such consent is required.

Your personal data is only shared with third parties when necessary or when a legal obligation exists. This may include technical service providers such as hosting or e-mail providers acting on our behalf, tax advisors, lawyers or other professionals who are bound by confidentiality obligations, as well as public authorities when required by law. All service providers acting as processors within the meaning of Article 28 GDPR operate under written data processing agreements.

Transfers of personal data to countries outside the European Union or the European Economic Area do not generally occur. If in exceptional circumstances such a transfer becomes necessary, it will only be carried out in accordance with Articles 44 and following of the GDPR, for example on the basis of an adequacy decision or standard contractual clauses.

Personal data is stored only for as long as necessary for the respective purpose or as required by statutory retention periods. When the purpose of processing ceases to apply and any mandatory retention periods have expired, the data is deleted or anonymized.

As a data subject you have, within the limits of the applicable law, the right to access your personal data, the right to rectification of inaccurate data, the right to erasure including the so-called right to be forgotten, the right to restrict processing, the right to data portability where applicable, and the right to object to processing. Where processing is based on consent, you have the right to withdraw that consent at any time with effect for the future. To exercise your rights you may contact us at any time at spec@specmediagreece.com.

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. For SPEC MEDIA GREECE, the competent supervisory authority is the Hellenic Data Protection Authority in Athens, Kifisias 1–3, 115 23 Athens, Greece, www.dpa.gr.

We take all appropriate technical and organizational measures in accordance with Articles 24 and 32 GDPR to protect your personal data from loss, alteration, unauthorized access or any form of unlawful processing.