Privacy Policy
How Winsolv collects, uses and protects personal data under the GDPR.
Effective date: · Cookie Policy
1. Who we are
This Privacy Policy explains how Winsolv (“we”, “us”) collects and uses personal data when you visit winsolv.com, contact us or work with us. We act as the data controller under the EU General Data Protection Regulation 2016/679 (GDPR) and Greek Law 4624/2019.
- Company: Winsolv
- Address: 17 Siggrou Str., 15126 Marousi, Athens, Greece
- Email: info@winsolv.com · Phone: +30 21 1234 1911
We are not required to appoint a Data Protection Officer. For any privacy question or request, contact us at info@winsolv.com.
2. What personal data we collect
- When you contact us (contact form, email or phone): your name, company, business email, phone number if you give it, the service you are interested in and the content of your message.
- When you become a client or supplier: contact details of your representatives, contract, project and invoicing information.
- When you visit the website: technical data that your browser sends automatically – IP address, date and time, pages visited, browser and device type – recorded in the server logs for security and operation.
- Cookies: see our Cookie Policy.
We do not ask for special categories of personal data (such as health data) and we ask you not to send them to us.
3. Why we use your data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Reply to your enquiry and prepare a proposal | Steps at your request before a contract – Art. 6(1)(b); our legitimate interest in answering business enquiries – Art. 6(1)(f) |
| Deliver our services and manage the client relationship | Performance of a contract – Art. 6(1)(b) |
| Invoicing, accounting and tax obligations | Legal obligation – Art. 6(1)(c) |
| Website operation, security and prevention of misuse (server logs) | Legitimate interest – Art. 6(1)(f) |
| Protecting the contact form against spam and bots (Cloudflare Turnstile) | Legitimate interest in the security of our website and in receiving genuine enquiries – Art. 6(1)(f) |
| Website statistics (only if analytics cookies are used) | Your consent – Art. 6(1)(a); you can withdraw it at any time |
| Information about similar services to existing clients | Legitimate interest – Art. 6(1)(f) and Art. 11 of Law 3471/2006; you can opt out at any time with one click or email |
We do not sell your data and we do not use it for automated decision-making or profiling that has legal or similarly significant effects on you.
4. Who receives your data
Only people at Winsolv who need it, and the following service providers (“processors”) who act on our instructions under a data processing agreement (Art. 28 GDPR):
- Our website hosting provider
- Spam protection of the contact form: Cloudflare Turnstile (Cloudflare, Inc., USA). When a page with the contact form loads, Turnstile receives your IP address and technical signals from your browser and device (such as browser type and TLS details) to tell people from bots. It does not show ads or build a profile of you. Cloudflare also uses these signals as an independent controller to improve its bot detection – see the Turnstile Privacy Addendum.
- Email and office software: Microsoft 365 (Microsoft Ireland Operations Ltd)
- Our external accountant and, where needed, legal advisers (bound by professional confidentiality)
- Public authorities, only when the law requires it
When you click our links to LinkedIn or Google Maps, you leave our website and the privacy policies of those companies apply.
5. Transfers outside the EU
We store data in the European Union wherever possible. If a provider processes data outside the European Economic Area, we make sure the transfer is protected by an adequacy decision of the European Commission (for example the EU–U.S. Data Privacy Framework) or by the Commission’s Standard Contractual Clauses with additional safeguards where needed. Cloudflare, Inc. (Turnstile) is based in the USA and is certified under the EU–U.S. Data Privacy Framework.
6. How long we keep your data
| Data | Retention period |
|---|---|
| Enquiries that do not lead to a contract | Up to 2 years after our last contact |
| Client and supplier contract data | For the duration of the contract and up to 5 years after it ends, for possible legal claims |
| Invoices and accounting records | As required by Greek tax law (as a rule 5 years, longer in specific cases) |
| Server logs | Up to 90 days, unless needed to investigate a security incident |
| Cookies | As listed in the Cookie Policy |
7. How we protect your data
We use appropriate technical and organisational measures: encrypted connections (HTTPS), access only for authorised staff, multi-factor authentication, regular updates and backups, and contracts with our processors that require the same level of protection.
8. Your rights
Under the GDPR you have the right to:
- access your data and receive a copy;
- rectify inaccurate or incomplete data;
- erase your data (“right to be forgotten”), where the law allows;
- restrict processing in certain cases;
- data portability for data you gave us on the basis of consent or contract;
- object to processing based on legitimate interest, and to direct marketing at any time;
- withdraw your consent at any time, without affecting earlier processing.
Send your request to info@winsolv.com. We reply within one month (extendable by two months for complex requests) and may ask you to confirm your identity. Exercising your rights is free of charge.
9. Right to complain
If you believe we process your data unlawfully, you can lodge a complaint with the Hellenic Data Protection Authority, Kifissias 1-3, 115 23 Athens, Greece – www.dpa.gr, complaints@dpa.gr. We would appreciate the chance to resolve your concern first, so please contact us before you do.
10. Children
Our website and services are intended for businesses. We do not knowingly collect data from children under 15.
11. Changes to this policy
We may update this policy when our services, the law or the tools we use change. The current version is always on this page, with its effective date at the top.