Privacy Policy

1. Data controller

The data controller is VERITRON MEMBER P.C., 24 Vassilissis Olgas, Marousi 151 24, Greece, tel. +30-210-700-2064, email info@veritron.co.

For any data protection concerns, please contact info@veritron.co with the subject 'GDPR'.

2. What data we collect

• Identification and contact details: full name, email, phone, company.
• Request and booking data: service, preferred date/time, message, and notes.
• Newsletter subscription data: email, topic preferences, status, and time of consent.
• Technical security data: anonymized IP fingerprint, user-agent, timestamp, and event ID.
• Communication data: email delivery status (delivered, bounced, complained, unsubscribed).

3. Purposes and legal bases

• Contract execution or pre-contractual measures (Article 6.1.b): management of consulting requests and bookings.
• Consent (Article 6.1.a): newsletter and commercial communications, non-essential cookies.
• Legitimate interest (Article 6.1.f): information system security, abuse prevention, service improvement.
• Legal obligation (Article 6.1.c): tax and accounting obligations.

4. Retention periods

• Requests and bookings: up to 5 years from last communication, unless longer period is required by tax legislation.
• Newsletter data: until consent is revoked; consent records are retained as proof of compliance.
• Security files and events: according to the system's regulated retention policy (default 90–365 days).
• Upon expiration, data is deleted or irreversibly anonymized.

5. Recipients and processors

We use reliable cloud, database, and email providers within the EU or with adequate safeguards (Standard Contractual Clauses). We do not sell or rent personal data to third parties.

6. Data security

We implement in-transit encryption (HTTPS/TLS), strict role-based access policies, application firewall, rate limiting, 24/7 certificate monitoring, and logging of all administrative actions.

7. Your rights

• Access and portability (Articles 15, 20): receive a copy of your data in a machine-readable format.
• Rectification (Article 16) and erasure/"right to be forgotten" (Article 17).
• Restriction (Article 18) and objection to processing (Article 21).
• Withdraw consent at any time, without affecting the legality of prior processing.
• Complaint to the Hellenic Data Protection Authority (www.dpa.gr).

8. How to exercise your rights

Submit a request via the data requests page or at info@veritron.co. We respond within one month, with a possible extension of two additional months for complex requests, notifying you in due course.

9. Cookies

We use strictly necessary cookies for operation and security. Any non-essential cookie is activated only after explicit consent. Details in the Cookie Policy.