Privacy Statement

Who We Are

This Privacy Policy explains how we collect and use personal data when you visit https://horeca.apstage.gr.

The data controller is ΔΗΜΗΤΡΟΥΛΑ ΠΑΠΠΑ & ΣΙΑ Ε.Ε. (APSTAGE).
Email: info@apstage.gr
Address: Φιλαδελφίας 170, 13671 Αχαρνές, Αθήνα, Greece
Tax ID: 998992945

What Data We Collect

We collect the following categories of personal data through this website:

Enquiry form data: name, email address, telephone number, and the content of your message.

Cookie consent preferences: your choices about analytics and advertising cookies and similar technologies, recorded through our consent management system (Trustwards).

Device and technical information: IP address, browser type, and similar technical data that is necessary for the website to function and to help protect the website from security threats.

Usage data (only with your consent): information about how you use the website collected through Google Tag Manager and Google Analytics 4, which may include pseudonymous identifiers and device information.

Advertising measurement data (only with your marketing consent): information used to measure advertising performance, including Google conversion measurement (Conversion Linker), which may involve pseudonymous identifiers and device information.

Sources of data:
We collect data directly from you when you submit an enquiry through the contact form.
We collect some data automatically when you access the website (such as IP address and browser information).
We collect data through cookies and similar technologies only where you have given consent for non-essential cookies.

Providing enquiry form data is optional, but if you do not provide it, we will not be able to respond to your enquiry or prepare a proposal.

How We Use Your Data

We use your personal data for the following purposes and legal bases:

Responding to your enquiries and preparing a proposal based on your request.
Legal basis: contract.

Operating and securing the website, including detecting, preventing, and responding to security threats and abuse.
Legal basis: legitimate interest.

Measuring website performance and understanding how visitors use the website through Google Tag Manager and Google Analytics 4, using cookies or similar technologies.
Legal basis: consent.

Measuring advertising performance through Google conversion measurement (Conversion Linker), using cookies or similar technologies.
Legal basis: consent.

Who We Share Your Data With

We share personal data only as needed to operate this website, respond to enquiries, and provide measurement services where you have consented.

Website hosting provider: our hosting provider processes technical and operational data on our behalf to host and deliver the website. This processing is carried out under our instructions.

Google (Google Tag Manager, Google Analytics 4, and conversion measurement): we use Google services to measure website usage (analytics) and to measure advertising performance (conversion measurement). Data is shared with Google only after the relevant consent has been given. Google processes this data in accordance with its own privacy documentation.

WPML: we use WPML to provide multilingual functionality on the website. Data processed for this purpose is limited to what is necessary to display the website in the selected language and to maintain the website’s operation.

We use our own consent management system (Trustwards) to record and manage your cookie preferences. This data is processed internally and not shared with third parties.

International Data Transfers

Some of our service providers are located outside the EU/EEA, specifically in the United States.

Google: where you consent to analytics and/or advertising measurement, transfers to the United States may occur. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF). Transfers are limited to pseudonymous identifiers and device information collected by analytics and advertising technologies, and only where consent has been given.

Our consent management system (Trustwards) is based in Spain (EU), so consent data is not transferred internationally.

How Long We Keep Your Data

Enquiry form data: kept for up to 2 years from the last communication, unless the enquiry leads to a contract, in which case it is kept for the duration of the contract and for as long as Greek tax and accounting law requires. Enquiries are received by email and also stored in the website database, and are deleted from both on the same schedule.
Analytics data: 14 months.
Advertising measurement data: until consent is withdrawn.

Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).
Security logs and technical records: 12 months.

Analytics data (consent-based services): until consent is withdrawn or according to the analytics tool retention settings.
Advertising/marketing tracking data (consent-based services): until consent is withdrawn.

Your Rights

If you are in the EU/EEA, the UK, or Switzerland, you have the right to:

Access your personal data.
Correct inaccurate or incomplete data.
Delete your personal data (the “right to be forgotten”).
Restrict how we use your personal data.
Receive the personal data you provided to us in a portable format and, where possible, have it transmitted to another organization.
Object to our processing of your personal data where we rely on legitimate interests.
Withdraw your consent at any time where we rely on consent (this does not affect processing carried out before you withdrew consent).
Not be subject to automated decision-making that produces legal effects or similarly significantly affects you.

To exercise your rights, contact us at info@apstage.gr.

We will respond within one month. In some cases, this period may be extended where permitted by law, and we will inform you if an extension applies.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Data Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

No method of transmission over the Internet or method of electronic storage is 100% secure. For this reason, we cannot guarantee absolute security, but we take reasonable precautions to protect your data.

Data Breach Notification

If a personal data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

Where notification is required, we will describe the nature of the breach, the likely consequences, and the measures taken or proposed to address it.

We maintain procedures to detect, report, and investigate security incidents. If you suspect a security issue, please contact us at info@apstage.gr.

How to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority in your jurisdiction.

As our establishment is in Greece, you may also lodge a complaint with the Hellenic Data Protection Authority.

We encourage you to contact us first at info@apstage.gr so we can try to resolve your concern directly.

Updates to This Policy

We review and update this Privacy Policy periodically. The “Last updated” date at the top of this policy indicates when changes were last made.

If we make significant changes, we will provide notice on the website and, where appropriate, by email.

Changes take effect from the date indicated at the top of this policy. Where processing is based on consent, we will request new consent when required.

Contact Us

Tax ID: 998992945
Email: info@apstage.gr
Address: Φιλαδελφίας 170, 13671 Αχαρνές, Αθήνα, Greece
Data Controller: ΔΗΜΗΤΡΟΥΛΑ ΠΑΠΠΑ & ΣΙΑ Ε.Ε. (APSTAGE)