Introduction
The Company, as data controller, informs you of the manner in which information about you is collected and processed.
Personal data (PD) is any information relating to natural persons whose identity is known or can be established. The protection of your personal data is very important to us, and we take measures in this direction every time you visit our website.
When you voluntarily provide us with personal information, we treat it with absolute confidentiality. Subject to specific provisions of this Policy, no personal information is rented, sold, publicly posted, or disclosed to other companies, organisations, or websites.
The services provided through the website are intended for a general audience and do not — knowingly — collect personal information from children under the age of 16.
What Information We Collect
When you visit our website, we may collect data from you, some of which may be of a personal nature. This data may include:
- Browsing history and IP address
- Screen resolution, browser type, and operating system
- Access times and referring URL
- Device data and location (for mobile devices)
We also reserve the right to monitor IP addresses using cookies — small text files stored locally to facilitate access and for statistical purposes.
If you contact us via the contact form, we collect your name, phone number, and email address. If you subscribe to our newsletter, we collect your email address.
How We Collect Your Data
We collect your personal data directly from you. You provide it to us when you complete the forms available on our website — the contact form or the newsletter subscription request.
Use & Disclosure
We use your personal data solely to respond to your requests, such as:
- Keeping you regularly informed through our newsletter
- Communicating on matters relating to ESPA programmes and subsidy schemes
Cookies
Cookies are small text files that a website stores on your device. We only use the necessary ones, unless you give us your consent for the "Statistics" and "Marketing" categories. Without consent, the tools in those categories do not load at all.
You can change or withdraw your consent at any time from "Cookie settings" at the bottom of every page. Your choice lasts 6 months; after that we ask again.
Google and Meta may process this data outside the European Union, under their own privacy policies.
So that we can prove your consent, we record each choice you make (date, categories, page and your IP address without its last part) and keep it for 2 years.
Data Retention
The retention period of your personal data is determined as follows:
- Contact form: your data will be retained until 31-12-2026.
- Newsletter: your data will be retained until 31-12-2026. You may inform us at any time that you no longer wish to receive our newsletter by emailing info@espa.io, upon which your data will be deleted.
After the expiry of any applicable legal or tax obligation, your personal data will be deleted.
Your Rights
Under applicable law, you have the following rights:
- Access: To obtain information about the data we hold about you, free of charge.
- Rectification: To request the correction or updating of your details.
- Erasure: To request the deletion of your data, unless prohibited by legal obligations.
- Cessation: To request that we cease processing your data.
- Restriction: To request the restriction of processing.
- Portability: To request the transfer of your data to another organisation.
In the event of a data breach causing you damage, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).
To exercise the above rights or for any questions, please contact us at info@espa.io.
Policy Changes
The Company may amend this Policy at any time. Please check the Effective Date at the top of this page to see when it was last revised. Each revision takes effect as soon as it is posted.
If we make material changes that expand our rights to use your data, we will notify you and provide you with an option regarding the future use of that data.