Personal Data

Privacy Policy — Personal Data Protection

This Privacy Policy explains how MALELIS SA (“we,” “our,” or “the website”) collects, uses, stores, and protects personal data provided when using our website. Data processing is carried out in accordance with the General Data Protection Regulation (EU Regulation 2016/679 – GDPR), Greek Law 4624/2019, the relevant provisions of Greek Law 2472/1997, and under the supervision of the Hellenic Data Protection Authority (HDPA).

1. Data We Collect

We do not accept payments or credit cards and do not store any financial data. We only collect:

  • Business name / organization
  • Contact names (if provided)
  • Phone numbers
  • Email addresses
  • Optional messages or requests through contact forms

We also collect technical data (e.g., IP address, browser type, cookies) for website security and operation.

2. Purpose of Processing

  • Communication and support of partners
  • Management of B2B commercial relationships
  • Legal compliance and accounting obligations
  • Website improvement and security (e.g., fraud prevention)

3. Legal Basis for Processing

  • Execution of a contract or pre-contractual actions
  • Legal obligation
  • Legitimate interest (e.g., security, dispute resolution)
  • Consent for optional services (e.g., newsletters)

4. Data Retention

Contact information is retained as long as needed to serve the collaboration or legal obligations, generally up to 5 years from the last interaction, unless deletion is requested.

5. Cookies and Technical Data

We use essential cookies for website operation and, with your consent, analytical cookies. No financial data is stored via cookies.

6. Data Sharing

We do not sell data. We may share data with:

  • Service providers under confidentiality agreements
  • Authorities or legal advisors when required by law

7. Data Security

We implement technical and organizational measures to protect data, but no transmission or storage method is completely secure.

8. Your Rights

  • Access your data
  • Correct inaccuracies
  • Request deletion (unless legally required to retain)
  • Restrict processing
  • Data portability
  • Object to processing based on legitimate interest
  • Withdraw consent

Contact: [email protected]

Complaint: Hellenic Data Protection Authority (HDPA)

9. Policy Updates

Any significant changes will be published on the website with the update date.