Privacy Policy
WEBSITE & PERSONAL DATA PRIVACY POLICY
The Website https://arrowheadengineers.com, hereinafter referred to as the “Website”, is managed under the name “ArrowheadEngineering” based in Sosandra, Aridaia, Municipality of Almopia, Prefecture of Pella, tel. (+30) 2384028324, which is the Data Controller of the personal data collected from you during your visit to our Website and the use of our online services, namely all information that identifies you as a person or can identify you directly or indirectly.
Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for his or her designation may be provided for by Union or Member State law.
Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
Processing of personal data means any operation or set of operations which is performed upon personal data or upon sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction, whether in electronic form (electronic file) or in paper form (physical file).
Processor means any natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller.
The Controller has appointed a Data Protection Officer with the responsibilities and duties described in the General Data Protection Regulation, who can be contacted via email at info@arrowheadengineers.com
The Company takes the protection of your privacy and personal data very seriously and has taken all necessary measures to safeguard the security and confidentiality of information concerning visitors/users of its Website.
Please read this Privacy and Personal Data Protection Policy of our Website carefully, in order to be informed about the information collected from you when you visit it and when you make use of its online services, the information posted on it, the use of such information and your rights.
This Policy serves to inform data subjects in accordance with Articles 13 of the General Data Protection Regulation of the EU 679/2016.
What personal data does the website collect and for what purpose
Simply browsing our Website does not require the visitor/user to provide/enter personal data. However, by simply visiting and browsing the Website, certain information may be automatically collected that can directly or indirectly identify you, such as: the Internet Protocol (IP) address of your computer, the type of browser and operating system, the websites you visited immediately before and after your visit to the page, the connection speed and information about the software programs installed on the computer, basic server connection information and information collected through HTML cookies, Flash cookies, web beacons and other similar technologies. This data is used for statistical analysis. To learn more about how our Website is used by its visitors, we aggregate and analyze the data we collect. We may use this information, for example, to track and analyze the use of the Website, to enhance its functionality, and to better tailor its content and design to the needs of our visitors.
The Company also collects the following personal data: name, email address, landline, mobile phone.
These data are used exclusively for communication purposes. The collection is done through the contact form on the website in the “Contact” section and advertising promotions, and is done only if the user fills in his/her details, consenting to the said data collection (there is a special consent button). Additionally, on the same page, the visitor/user has the option to choose to receive newsletters from the company directly to his/her email, from which he/she can unsubscribe at any time.
Legal Basis
In order for the processing to be lawful under the General Regulation, the Company relies on the fulfillment of a condition, the lawfulness of the processing, before processing personal data. The legal basis for this processing is your consent.
Regarding the information collected automatically from your browsing on our website, please refrain from visiting it if you do not wish for this information to be collected and processed.
Data retention period
The Company will retain your personal data collected through the Website for a period of two (2) years.
Information security
The Company implements reasonable technical and organizational security policies and procedures in order to protect your personal data and information from loss, misuse, alteration or destruction.
The security of your personal data is an absolute commitment for us. In order to achieve this, we implement all modern and appropriate technical and organizational measures for the purposes of processing, the responsiveness and adequacy of which we regularly monitor. The above measures include, but are not limited to, the installation of virus protection systems (antivirus, firewall, etc.) from external malicious users.
The Company respects your right to have your privacy and information about you protected and therefore uses this information for the aforementioned purposes. For this reason, it does not disclose, transfer or make your information accessible to third parties, except to the extent necessary to fulfill the processing purposes described in this Policy.
Our company applies strict security rules regarding the management of personal data and access by third parties to its registers and files. The Company shares your personal data only when this is necessary to carry out applicable procedures or to fulfill an obligation imposed by law.
Recipients of personal data are the Company’s authorized employees, who are responsible for conducting your affairs on the Website and for fulfilling its obligations imposed by law, natural or legal persons who provide services to our Company, including but not limited to IT and maintenance companies, etc., and who must comply with the legislative framework.
Our Company may from time to time assign the processing of your data to third parties referred to as the “Processor”. In this case, the relevant information that will be transmitted will be kept to a minimum and will be used for the specific purpose. Furthermore, the processor in each case provides our Company with sufficient assurances that it processes your personal data in accordance with the Regulation, while also ensuring your rights as they arise from the Regulation (e.g. by signing confidentiality and data protection agreements).
Your rights
You can exercise, as appropriate, the following rights:
• Right to information/Transparency: You have the right to information, that is, to know who is processing your data, what it is and for what reason, as we mentioned above in plain language
• Right to withdraw consent: You have the right at any time to withdraw your consent for the collection and processing of your personal data.
• Right of access to data: You have the right to request access, i.e. to be informed about the purposes of the processing, the relevant categories of personal data, the recipients to whom the data have been or will be disclosed, the period for which they will be stored, the existence of a right to rectify or delete data or to restrict their processing or a right to object to processing, information on the origin of the data and the existence of automated decision-making, including profiling and information on the logic followed.
• Right to rectification, You have the right to demand the correction of inaccurate data as well as the completion of incomplete data concerning you.
• Right to erasure (right to be forgotten): You have the right to request that your personal data be deleted from our files, provided that their processing is no longer necessary or the retention of your data is not required in order to defend our legitimate interests before the Courts.
• Right to restriction of processing: You have the right to request the restriction of the processing of your personal data.
• Right to portability: You have the right to request the transfer of your data in a structured and commonly used format to another controller.
• Right to object: You have the right to object to the processing of your data at any time and for reasons relating to your particular situation, to the processing of personal data concerning you.
• Right to human intervention: You have the right to object where a decision concerning you is based solely on automated processing, including profiling, and that decision produces legal effects or significantly affects you.
To exercise your above rights, you may contact the Company in writing by sending a letter to the following address: 4 Anoixeos Avenue, Aridaia, 58400, or by sending an e-mail to the following address: arrowheadengineers@yahoo.com.
The Company will make every effort to respond to any relevant request within thirty days of receipt. However, in the event that due to the complexity of your request or the volume of information it is not possible to satisfy your request within thirty days, the Company undertakes to inform you in writing within the above deadline of the reasons for the delay and to make every effort to satisfy your request as soon as possible and in any case within two additional months.
The Company reserves the right not to satisfy your request, in the event that it is deemed manifestly unfounded or excessive, informing you of the reasons for not satisfying it.
The Company has appointed a Data Protection Officer with the responsibilities and duties described in the GDPR, whom you can contact via email arrowheadengineers@yahoo.com.
In any case, you have the right to submit a complaint to the Personal Data Protection Authority, in writing (Kifissias 1-3, P.C. 115 23, Athens) or electronically (www.dpa.gr or by email to complaints@dpa.gr) or in other ways detailed on the website of the Personal Data Protection Authority (www.dpa.gr).
This privacy policy and the rights and obligations arising from it are governed by the provisions of Greek Law on the protection of personal data and Regulation (EU) 479/2016 and its amendments by subsequent legislation and directives.
The Courts of the company’s registered office are exclusively competent to resolve any disputes arising from this privacy policy, its validity, its interpretation and the operation of the Website. The company reserves the right to exercise any legal rights. If any term in the privacy policy is deemed invalid or voidable, it automatically ceases to be valid, without affecting the validity of the other terms.
Which cookies are collected and for what purpose?
Specifically, the website uses cookies to identify the visitor-user, as well as to remember his preferences (session cookies). Thus, the visitor during his browsing of the website or his visit at a later time does not need to re-enter information. These cookies are used exclusively for the above purposes and in order to facilitate the use – visitor of the page.
Finally, third-party cookies are also used, such as:
– GoogleAds and GoogleAnalyticscookies, Metapixelcookies (Facebook, Instagram), MailChimpcookies, always with the explicit consent of the user: GoogleAdwords and GoogleAnalyticscookies. These cookies are used for the promotion and advertising of the website on the internet, and belong to the GoogleAds service as well as to the GoogleAnalytics application, which collects statistical data. However, in the GoogleAnalytics application, the visitor’s IP anonymization feature is used, so that the IP of each user cannot be identified and therefore the user cannot be identified.
– Meta Pixel cookies (Facebook, Instagram). These cookies are used to promote and advertise the website, so that we can have performance data for our respective advertising campaign.
– MailChimpCookies. They are necessary for the function of registering the interested party in the company’s newsletter lists and identifying them in case of unsubscription.
How is the acceptance/installation and control/deletion of cookies done?
The acceptance, rejection or modification of cookies by the visitor occurs during his first visit to the website, through a special mechanism fully harmonized with the requirements of the GDPR. Specifically, a pop-up cookie policy window appears, in which the user can choose to accept (partially or fully) the cookies used by the page, while they can modify them later, at any time, by opening the special selector. In any case, the cookies on a user’s computer can be deleted by the user himself through the browser settings he uses, at any time and regardless of the time of his visit to a specific website.
Changes to the Cookies Policy
Any change that takes place in the Cookies Policy will be announced to the visitors/users of the Website through this Cookies Policy.