For us, maintaining your privacy online is a fundamental right, and as a Data Controller under the General Data Protection Regulation 679/2016 (GDPR), we are committed to ensuring the confidentiality of your personal data, which we collect during our commercial transactions.

The processing and protection of your personal data is subject to the terms of the Privacy Policy, as well as the provisions of the GDPR, and other provisions of national, EU, and international law relating to the protection of individuals with regard to the processing of personal data, as applicable.

WHAT DOES THE GDPR DEFINE AS PERSONAL DATA?

Any information that can be used to directly or indirectly identify a natural person, such as name, identity number, location data, online identifier, or one or more factors specific to the physical, genetic, mental, economic, cultural, or social identity of that natural person.

WHAT DATA DO WE COLLECT AND FOR WHAT PURPOSE?

The personal data we collect during your visit and when you use the features offered by our website include:

Data you provide to us when you register or fill out the contact form: name and email address, as well as

WHAT DATA DO WE COLLECT AND FOR WHAT PURPOSE?
The personal data we collect during your visit and when you use the features offered by our website include:

Data you provide when registering or filling out the contact form: name and email address, as well as contact address and telephone numbers, and
Technical data, such as your IP address and the browser you use when visiting our website.
By registering on our website, you agree to the general terms of use and any amendments thereto, as described herein.

CONSENT
In cases where we need to process your personal data based on the consent you have given us, a copy of the consent statement provided, with all the information contained therein, is kept as proof of consent and for convenience in case of a request for its revocation. Consent is given for clear and distinct processing purposes, which have been communicated in advance and, once you have given your consent, you have been fully informed of them.

YOUR RIGHTS
As subjects of the data we process, you can access the file of personal data we have collected about you. You may also request the deletion or correction or restriction of the processing or object to the processing of such data, except in cases where we are required to retain your data for administrative, legal, or security reasons. In addition, as data subjects, you have the right to withdraw your consent to the processing of your data.

In summary, your rights regarding your personal data under the GDPR are as follows:

Right of access
Right to rectification
Right to erasure (“Right to be forgotten”)
Right to restriction of processing
Right to data portability
Right to object
Right to object to automated individual decision-making, including profiling

SUBMITTING REQUESTS – EXERCISING RIGHTS
To exercise your rights as set out below, you may submit a request. We undertake to respond and provide you with the relevant information without delay, within one month of proven receipt of the request.

This deadline may be extended by two additional months, if necessary, taking into account the complexity of the request and the number of requests. In this case, you will be notified within one month of the proven receipt of the request.

If we are unable to respond within the specified time frame, you will be informed of the reasons for this within one month of the proven receipt of the request.

Requests are checked for size and repeatability per applicant for possible abuse, in order to provide the rights of Article 12(3) of the GDPR.

HOW DO WE PROCESS YOUR PERSONAL DATA?
In compliance with the requirements of the GDPR, we process your personal data in a legitimate and transparent manner, ensuring the legality, objectivity, and transparency of the processing.

We collect data for specified, explicit, and legitimate purposes and do not process it in a manner incompatible with those purposes.

We collect data that is necessary and appropriate for the purposes of processing and only what we need.

We keep the data up to date and ensure its accuracy or delete and correct it when it is inaccurate in relation to the purpose of processing.

We retain data for as long as necessary for the purpose of processing and then ensure its secure destruction.

We ensure that personal data is protected against loss, misuse and abuse, unauthorised access and disclosure, by ensuring that appropriate technical and organisational measures are in place to protect it.

LEGAL BASIS FOR PROCESSING
For all of the processing purposes described above, the legal basis for processing is a legal obligation: the processing of your personal data is necessary to comply with our legal obligation, i.e., an obligation arising from the law. Failure to process the necessary data will result in a breach of the law and the corresponding penalties, as well as incomplete service to you.

In particular, the purpose and functions performed by the company are determined by the relevant legislation and by individual regulations, provisions, and circulars issued for its implementation, and the manner in which it performs them, with all necessary actions taken in implementation thereof, is determined and carried out in accordance with the relevant legislation.

SHARING YOUR PERSONAL DATA
Your personal data is treated with complete confidentiality and security and is not shared further, except in cases where disclosure is required.

HOW LONG WE KEEP YOUR DATA
Your personal data is kept for no longer than is reasonably necessary for the purposes of the individual processing operations carried out on it, and there are certain criteria that determine this. In cases where the processing of your personal data is based on a legal obligation, as described above, the retention period is determined based on the requirements of the law, the period during which checks may be carried out by the competent authorities, the applicable limitation periods, and your own legitimate interests.

In cases where your personal data will be processed on the basis of your consent, whether simple or explicit, the retention period is determined by the possibility of revoking that consent. Once you withdraw your consent, the relevant personal data will be deleted.

FURTHER PROCESSING
We reserve the right to amend this Privacy Policy whenever there is a change in its content that needs to be disclosed. If we need to use your personal data for a new purpose that is not covered by this Policy, we will notify you again of the Privacy Policy before processing begins, which will include the new use and specify the relevant purposes and conditions of processing. Where and when necessary, your consent will be sought in advance for the new processing.

OTHER TERMS
We collect the personal data relating to this from you, the data subjects.

As the controller of your data, we declare that we have taken all necessary organizational measures to protect your personal data and that we comply with a comprehensive security plan in accordance with the requirements of the GDPR.

The collection and processing of personal data, within the framework of this Privacy Policy, is carried out by legitimate means and in a manner that ensures respect for privacy, personality, and human dignity.

Compliance with the Privacy Policy is carried out in good faith and in accordance with transactional ethics and the free will of the parties, with the aim of good and efficient cooperation with the protection of all.

In the event that you are unable to exercise your rights under the GDPR, or more generally, in the event of questions, clarifications, or complaints, you have the right to contact the Personal Data Protection Authority for support and assistance.