1. DATA CONTROLLER
“NOKELA PRIVATE LIMITED COMPANY”
KALVOU 55, 11474 ATHENS

2. PROCESSING OF PERSONAL DATA

a) Personal data processed for the purposes of operating the Website.

The information systems and software processes used to operate the Website acquire, during normal operation, certain personal data whose transmission is implicit in the Internet communication protocols. It concerns information that is not collected to be linked to specific individuals, but by its very nature could, through processing and association with data held by third parties, allow the identification of users. This category of data includes the electronic addresses or domain names of the computers used by users connecting to the Website and the application, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the server request, the size of the file received in response, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters related to the operating system and users.
The information collected in this way could be used to ascertain liability in the event of any computer-related offenses that harm the Website and the Application.

b) Data provided directly by users.

The optional, explicit and voluntary sending of data, as requested by the various sections of this Website and the application, is used to process the user’s requests (including, without limitation, in cases where information or clarifications are requested, the email addresses located on the Website and the application).
Specific summary information for specific services upon request will be provided or displayed on the pages of the Website and the application.

c) Cookies

This website uses cookies and similar technologies to ensure the proper functioning of the processes and to improve the experience of online applications.
For the use of cookies, read all the information by clicking here.

3. PURPOSE OF DATA PROCESSING

Operation of the website

Personal data collected during browsing is used to obtain anonymous statistical information about the use of the Website and to monitor its proper functioning.

a) Legal basis for data processing
Execution of the contract concerning the person to whom the data refers (use of the website).

b) Data retention period
Throughout the session on the website.

Contacts
Personal data provided directly by the user is applied to the latter’s requests (e.g. registration on the Website or contact request).

a) Legal basis for data processing
Execution of the contract concerning the person to whom the data refers (use of the website).

b) Data retention period
According to the information provided during data collection.
After the expiration of the above retention terms, the Data will be destroyed, deleted or anonymized, in accordance with the technical deletion and backup procedures.

4. OBLIGATION TO PROVIDE DATA
With the exception of browsing data required for the implementation of IT protocols, the provision of personal data by users is free and optional. However, failure to provide such data will make it impossible to carry out the requests made or intended by the user.

5. DATA RECIPIENTS
Personal data may be disclosed to parties acting as data controllers (such as supervisory bodies and authorities and public bodies authorized to request data) or processed on behalf of the company by parties designated as data processors, who have appropriate operating instructions. These parties include the following categories:
a) Companies working as data processors or for administrative and accounting purposes (e.g. purposes related to internal, administrative, financial and accounting activities).
b) Natural and/or legal persons providing different services to the Company (e.g. service providers for the management of the Website, such as system partners, companies providing Internet connectivity services, etc.).
These parties may also act as data processors.
c) The parties or public and private bodies that will communicate the data in order to fulfill or enforce the fulfillment of specific obligations provided for by laws, regulations and EU legislation.
These subjects will act as independent data controllers or data processors.

6. AUTHORIZED DATA PROCESSING PARTIES
Personal data will be processed by employees, associates of the Company or external bodies, in their capacity as processors and employees, who perform technical and organizational tasks on behalf of the Company on the Website.

7. TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION
Personal data may be transferred to countries outside the EU, namely:
a) Non-EU countries whose level of data protection is considered adequate by the European Commission in accordance with Article 45 of the GDPR.
b) Non-EU countries, other than those referred to in the previous paragraph a), after signing the standard contractual clauses approved/certified by the European Commission in accordance with Article 46, paragraph 2, letters c) and d) of the GDPR.
A copy of the aforementioned safeguards may be obtained by sending a specific request to the controller, in accordance with the modalities specified in the following paragraph “Data rights – Complaint to the supervisory authority”.

8. RIGHTS OF PERSONAL DATA SUBJECTS – COMPLAINT TO THE SUPERVISORY AUTHORITY
By contacting the company via e-mail sent to info@nokela.gr , data subjects may request from the controller access to personal data, as well as the correction or deletion of personal data and also have the right to restrict the processing of such data in the cases specified in Article 18 of the GDPR, and to object to processing in the event of legitimate interests of the controller.
Furthermore, where the processing is based on consent or a contract and is carried out by automated tools, data subjects have the right to receive personal data in a structured, commonly used and machine-readable format and to transmit the data to another data controller without hindrance.
Data subjects have the right to lodge a complaint with the competent supervisory authority of the Member State where they reside or work or of the Member State in which the alleged infringement took place.

INFORMATION ON THE PROCESSING OF USERS’ PERSONAL DATA IN ACCORDANCE WITH EU REGULATION 2016/679 (“GDPR”) – “CONTACT US”

1. DATA CONTROLLER
“NOKELA PRIVATE LIMITED COMPANY”
KALVOU 55, 11474 ATHENS

2. PURPOSE OF DATA PROCESSING

The data provided by completing the form will be processed by the company to handle the request for information about the same company and/or its products/services.

a) Legal basis for data processing
Performance of the contract to which the data subject is subject

b) Data retention period
This data will be retained until the withdrawal of consent or the termination of the relationship with the customer.
After the expiration of the above retention terms, the Data will be destroyed, deleted or made anonymous, in accordance with the technical deletion and backup procedures.

3. OBLIGATION TO PROVIDE DATA
The provision of the data requested in the data collection form is required to provide the requested information and therefore failure to provide this data will not allow the company to satisfy the request.

4. DATA RECIPIENTS
Personal data may be disclosed to parties acting as data controllers (such as supervisory bodies and authorities and public bodies authorized to request data) or processed on behalf of the company by parties designated as data processors, who have appropriate operating instructions. These parties include the following categories:
a) Companies providing management and/or maintenance services for the company’s website.
b) Companies providing postal services.

5. AUTHORIZED DATA PROCESSING PARTIES
Personal data may be processed by employees of the company’s services who are responsible for carrying out the activities described above and who have been authorized to process the data and have received appropriate operating instructions.

6. TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION
Personal data may be transferred to countries outside the EU, namely:
a) Non-EU countries whose level of data protection is considered adequate by the European Commission in accordance with Article 45 of the GDPR.
b) Non-EU countries, other than those referred to in the previous paragraph a), after signing the standard contractual clauses approved/certified by the European Commission in accordance with Article 46, paragraph 2, letters c) and d) of the GDPR.
A copy of the aforementioned safeguards may be obtained by sending a specific request to the controller, in accordance with the modalities specified in the following paragraph “Data rights – Complaint to the supervisory authority”.

7. RIGHTS OF PERSONAL DATA SUBJECTS – COMPLAINT TO THE SUPERVISORY AUTHORITY
By contacting the Company via e-mail sent to info@nokela.gr , data subjects may request from the controller access to personal data, as well as the correction or deletion of personal data and also have the right to restrict the processing of such data in the cases specified in Article 18 of the GDPR, and to object to the processing in case of legitimate interests of the controller.
Furthermore, in the event that the processing is based on consent or a contract and is carried out by automated tools, data subjects have the right to receive the personal data in a structured, commonly used and machine-readable format and to transmit the data to another data controller without hindrance.
Data subjects have the right to lodge a complaint with the competent supervisory authority of the Member State where they reside or work or of the Member State in which the alleged infringement took place.

INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA IN ACCORDANCE WITH EU REGULATION 2016/679 (“GDPR”) – “RESERVED SPACE”

1. DATA CONTROLLER
“NOKELA PRIVATE LIMITED COMPANY”
KALVOU 55, 11474 ATHENS

2. PURPOSE OF DATA PROCESSING

• Activate your registration in the reserved areas of the Website to access the news, information and content available from the company through a personal account issued by the company to users.

The legal basis for data processing is the performance of the contract to which the data subject is subject.

• General marketing: for example, sending – by automated methods (such as text messages and emails) and traditional (such as telephone calls) – commercial information about services/products offered by the company or reporting on company events and conducting market research and statistical analysis. Consent (which is optional and can be withdrawn at any time).
• Marketing profiling: analysis of the preferences, habits, behaviors, interests of the data subject in order to provide personalized commercial information / targeted actions / offers and services tailored to the needs / preferences of the data subject. Consent (which is optional and can be withdrawn at any time).
• Fulfillment of obligations provided for by regulations and applicable national and international legislation.

The legal basis for data processing is the need to fulfill legal obligations.

• If necessary, for the determination, exercise or defense of the controller’s rights in legal proceedings.

The legal basis for data processing is legitimate interest.

3. DATA RETENTION PERIOD
Contractual duration and after the end of the collaboration, for a period of 15 years.
After the expiry of the aforementioned retention terms, the Data will be destroyed, deleted or anonymized, in accordance with the technical procedures for deletion and backup creation.

4. OBLIGATION TO PROVIDE DATA
The provision of personal data marked with an asterisk (*) on the registration form is mandatory for the completion and execution of the contract. Any refusal to provide the above data therefore does not allow registration in the areas that have been committed.

5. DATA RECIPIENTS
Personal data may be processed by external entities in the capacity of data controllers, such as, for example, authorities and supervisory authorities and, in general, public or private entities that have the right to request the data.
Personal data may also be processed, on behalf of the company, by external contractors designated as data processors, who have been assigned adequate operating instructions.
These subjects are essentially included in the following categories:
a) IT support companies and hosting companies.
b) Companies offering website management and maintenance services
c) Subsidiaries of the Company, if consent is given

6. AUTHORIZED DATA PROCESSING PARTIES
Personal data may be processed by employees of the company’s services who are responsible for carrying out the activities described above and who have been authorized to process the data and have received appropriate operating instructions.

7. TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION
Personal data may be transferred to countries outside the EU, namely:
a) Non-EU countries whose level of data protection is considered adequate by the European Commission in accordance with Article 45 of the GDPR.
b) Non-EU countries, other than those referred to in the previous paragraph a), after signing the standard contractual clauses approved/certified by the European Commission in accordance with Article 46, paragraph 2, letters c) and d) of the GDPR.
A copy of the aforementioned safeguards may be obtained by sending a specific request to the controller, in accordance with the modalities specified in the following paragraph “Data rights – Complaint to the supervisory authority”.

8. RIGHTS OF PERSONAL DATA SUBJECTS – COMPLAINT TO THE SUPERVISORY AUTHORITY
Data subjects may require the data controller to have access to their personal data, to erase them, to correct inaccurate data, to integrate incomplete data, to restrict processing in the cases provided for by art. 18 GDPR, as well as to object to processing in cases of legitimate interest of the data controller, by contacting the company by e-mail at info@nokela.gr .
In addition, data subjects have the right, if the processing is based on consent or a contract and is carried out by automated tools, to receive the data in a structured, commonly used and machine-readable format and, where technically feasible, to transfer them to another controller without hindrance.
Data subjects have the right to withdraw their consent at any time for marketing and/or profiling purposes and to object to the processing of their data for marketing purposes, including profiling related to direct marketing. However, if a data subject prefers to be contacted for this purpose exclusively by traditional means, they will be able to express their objection only by receiving communications by automated means.
Data subjects have the right to lodge a complaint with the competent supervisory authority of the Member State in which they have their habitual residence or place of work or in the Member State in which the alleged infringement occurred. INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA IN ACCORDANCE WITH EU REGULATION 2016/679 (“GDPR”) – “INFORMATION LETTER”
 

1. DATA CONTROLLER
“NOKELA PRIVATE LIMITED COMPANY”
KALVOU 55, 11474 ATHENS

2. PURPOSE OF DATA PROCESSING
a) Send by e-mail the informative communications (“Newsletter”) to those who submit an explicit request by entering their e-mail address in the appropriate data collection form. The legal basis for data processing is the performance of the contract to which the data subject is subject.
b) General marketing: for example, sending – by automated methods (such as text messages and e-mails) and traditional (such as telephone calls) – commercial information about services/products offered by the company or reporting on corporate events and conducting market research and statistical analysis. Consent (which is optional and can be withdrawn at any time).
c) Marketing profiling: analysis of the preferences, habits, behaviors, interests of the data subject in order to provide personalized commercial information / targeted actions / offers and services tailored to the needs / preferences of the data subject. Consent (which is optional and can be withdrawn at any time).

3. DATA RETENTION PERIOD
The collected personal data will be retained until the consent is withdrawn (“deletion” from the newsletter service). After the expiration of the aforementioned retention terms, the Data will be destroyed, deleted or made anonymous, in accordance with the technical deletion and backup procedures.

4. OBLIGATION TO PROVIDE DATA
The provision of the data marked with an asterisk (*) on the registration form is mandatory for the completion and execution of the contract. Any refusal to provide the above data therefore does not allow registration to the newsletter service.

5. DISCONNECTION
The user has the ability to opt out of this service by clicking on the “unsubscribe” link in each email.

6. DATA RECIPIENTS
Personal data may be processed by external entities in the capacity of data controllers, such as, for example, authorities and supervisory authorities and, in general, public or private entities that have the right to request the data.
Personal data may also be processed, on behalf of the company, by external contractors designated as data processors, to whom adequate operating instructions have been assigned.
These subjects are essentially included in the following categories:
a) IT support companies and hosting companies.
b) Companies offering website management and maintenance services.
c) Subsidiaries Affiliated businesses of the Company, if consent is given

7. AUTHORIZED DATA PROCESSING PARTIES
Personal data may be processed by employees of the company’s services who are responsible for carrying out the activities described above and who have been authorized to process the data and have received appropriate operating instructions.

8. TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION
Personal data may be transferred to countries outside the EU, namely:
a) Non-EU countries whose level of data protection is considered adequate by the European Commission in accordance with Article 45 of the GDPR.
b) Non-EU countries, other than those referred to in the previous paragraph a), after signing the standard contractual clauses approved/certified by the European Commission in accordance with Article 46, paragraph 2, letters c) and d) of the GDPR.
A copy of the aforementioned safeguards may be obtained by sending a specific request to the controller, in accordance with the methods specified in the following paragraph “Data rights – Complaint to the supervisory authority”.

9. RIGHTS OF PERSONAL DATA SUBJECTS – COMPLAINT TO THE SUPERVISORY AUTHORITY
Data subjects may require the data controller to have access to their personal data, to erase them, to correct inaccurate data, to integrate incomplete data, to restrict processing in the cases provided for by art. 18 GDPR, as well as to object to processing in cases of legitimate interest of the data controller, by contacting the company by e-mail at info@nokela.gr .
In addition, data subjects have the right, if the processing is based on consent or a contract and is carried out by automated tools, to receive the data in a structured, commonly used and machine-readable format and, where technically feasible, to transfer them to another controller without hindrance.
Data subjects have the right to withdraw their consent at any time for marketing and/or profiling purposes and to object to the processing of their data for marketing purposes, including profiling related to direct marketing. However, if a data subject prefers to be contacted for this purpose exclusively by traditional means, they will be able to express their objection only by receiving communications by automated means.
Data subjects have the right to lodge a complaint with the competent supervisory authority of the Member State in which they have their habitual residence or place of work or in the Member State in which the alleged infringement occurred.