Privacy Policy

The Company, as data controller, informs you of the manner in which information about you is collected and processed.

The controller is Differend Business Solutions MON IKE, Ethnikis Antistaseos 84, Chalandri, 15231, email: info@espa.io.

Personal data (PD) is any information relating to natural persons whose identity is known or can be established. The protection of your personal data is very important to us, and we take measures in this direction every time you visit our website.

When you voluntarily provide us with personal information, we treat it with absolute confidentiality. Subject to specific provisions of this Policy, no personal information is rented, sold, publicly posted, or disclosed to other companies, organisations, or websites.

The services provided through the website are intended for a general audience and do not — knowingly — collect personal information from children under the age of 16.

When you visit our website, we may collect data from you, some of which may be of a personal nature. This data may include:

• Browsing history and IP address
• Screen resolution, browser type, and operating system
• Access times and referring URL
• Device data and location (for mobile devices)

We also reserve the right to monitor IP addresses using cookies — small text files stored locally to facilitate access and for statistical purposes.

If you contact us via the contact form, we collect your name, phone number, and email address. If you subscribe to our newsletter, we collect your email address.

If you fill in an interest form in one of our ads on Facebook or Instagram, we collect your full name, phone number, email address and your answers to the form's questions (for example, whether your business has a closed financial year).

We collect your personal data directly from you. You provide it to us when you complete the forms available on our website — the contact form or the newsletter subscription request.

Also through the interest forms in our ads on Facebook and Instagram: you fill in the details yourself, and Meta Platforms Ireland Ltd passes them to us.

We use your personal data solely to respond to your requests, such as:

• Keeping you regularly informed through our newsletter
• Communicating on matters relating to ESPA programmes and subsidy schemes
• A phone call for free information and a pre-check, when you ask for it through a form
• Emails about the programme you asked about: a confirmation of your request, an update when something in the programme changes, and a reminder before the application deadline

The processing of form details is based on your consent, which you give by ticking the box in the form. You can withdraw it at any time by replying to any of our emails or writing to info@espa.io.

For these purposes we use the following providers, which process the data on our behalf and on our instructions:

• Zoho Corporation (Zoho CRM), to organise your requests and send the emails about the programme. The data is kept in data centres in the European Union.
• Intuit Mailchimp, to send the newsletter. The data may also be processed in the United States, with the safeguards the GDPR requires for transfers outside the European Union.

We do not sell your details or give them to anyone else.

Cookies are small text files that a website stores on your device. We only use the necessary ones, unless you give us your consent for the "Statistics" and "Marketing" categories. Without consent, the tools in those categories do not load at all.

You can change or withdraw your consent at any time from "Cookie settings" at the bottom of every page. Your choice lasts 6 months; after that we ask again.

Google and Meta may process this data outside the European Union, under their own privacy policies.

So that we can prove your consent, we record each choice you make (date, categories, page and your IP address without its last part) and keep it for 2 years.

Cookie settings

The retention period of your personal data is determined as follows:

• Contact form: your data is kept while we are in contact with you and deleted 2 years after the last contact, or sooner if you ask us at info@espa.io.
• Newsletter: your data is kept while we are in contact with you and deleted 2 years after the last contact. You may inform us at any time that you no longer wish to receive our newsletter by emailing info@espa.io, upon which your data will be deleted.
• Interest forms in our ads on Facebook and Instagram: your data is kept while we are in contact with you and deleted 2 years after the last contact, or sooner if you ask us at info@espa.io.

After the expiry of any applicable legal or tax obligation, your personal data will be deleted.

Under applicable law, you have the following rights:

• Access: To obtain information about the data we hold about you, free of charge.
• Rectification: To request the correction or updating of your details.
• Erasure: To request the deletion of your data, unless prohibited by legal obligations.
• Cessation: To request that we cease processing your data.
• Restriction: To request the restriction of processing.
• Portability: To request the transfer of your data to another organisation.

In the event of a data breach causing you damage, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).

To exercise the above rights or for any questions, please contact us at info@espa.io.

The Company may amend this Policy at any time. Please check the Effective Date at the top of this page to see when it was last revised. Each revision takes effect as soon as it is posted.

If we make material changes that expand our rights to use your data, we will notify you and provide you with an option regarding the future use of that data.