Last Updated: January 2025

1. Introduction

GTPR ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website gtpr.gr or use our services.

We comply with the General Data Protection Regulation (GDPR) and Greek data protection laws.

2. Data Controller

GTPR is the data controller for the personal data collected through this website. For questions about this policy or your personal data, contact us at:

• Email: privacy@gtpr.gr
• Phone: +30 218 218 4869
• Address: Athens, Greece

3. Information We Collect

We may collect the following types of information:

3.1 Information You Provide

• Name and contact information (email, phone number, address)
• Service inquiry details
• Property information for site assessments
• Payment information for completed transactions
• Communication records (emails, phone calls)

3.2 Automatically Collected Information

• IP address and browser type
• Device information
• Pages visited and time spent on site
• Referring website
• Cookies and similar technologies

4. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To provide, maintain, and improve our security and photovoltaic services
• Communication: To respond to inquiries, send quotes, and provide customer support
• Legal Obligations: To comply with legal requirements and protect our rights
• Marketing: With your consent, to send promotional materials about our services
• Analytics: To analyze website usage and improve user experience

5. Legal Basis for Processing

We process your personal data based on:

• Contract Performance: Processing necessary to provide our services
• Legitimate Interests: For business operations, fraud prevention, and service improvement
• Legal Obligations: To comply with tax, warranty, and regulatory requirements
• Consent: For marketing communications and non-essential cookies

6. Data Sharing

We may share your information with:

• Service Partners: Equipment manufacturers and installation subcontractors
• Regulatory Bodies: DEDDIE, energy authorities for grid connections
• Professional Advisors: Accountants, lawyers, and auditors
• Technology Providers: Hosting, email, and analytics services

We do not sell your personal data to third parties.

7. International Transfers

Your data is primarily processed within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

8. Data Retention

We retain personal data for:

• Customer records: Duration of service relationship plus 10 years (warranty period)
• Financial records: 10 years as required by Greek tax law
• Marketing contacts: Until consent is withdrawn
• Website analytics: 26 months

9. Cookies

Our website uses cookies to enhance your experience. Types of cookies we use:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how visitors use our site
• Marketing Cookies: Used to deliver relevant advertisements

You can manage cookie preferences through your browser settings or our cookie consent banner.

10. Your Rights

Under GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limited processing of your data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time for consent-based processing

To exercise these rights, contact us at privacy@gtpr.gr. We will respond within 30 days.

11. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• SSL encryption for data transmission
• Secure servers and access controls
• Employee training on data protection
• Regular security assessments

12. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be communicated via email or website notice.

14. Complaints

If you have concerns about our data processing practices, you may:

• Contact us directly at privacy@gtpr.gr
• Lodge a complaint with the Hellenic Data Protection Authority (HDPA):

Hellenic Data Protection Authority
Kifisias 1-3, 115 23 Athens
Tel: +30 210 6475600
Website: www.dpa.gr

15. Contact Us

For questions about this Privacy Policy or our data practices:

• Email: privacy@gtpr.gr
• Phone: +30 218 218 4869
• Address: Athens, Greece