Privacy Notice (Πολιτική Απορρήτου)
This template describes how the platform processes personal data. Have it reviewed by your legal counsel/DPO before going live.
1. Data we process
Account data (name, e-mail, phone, role), company KYB data (company name, VAT/ΑΦΜ, GEMI/ΓΕΜΗ, address, contact person, certifications), procurement data (RFQs, technical files, quotations, collaborations, reviews), sourcing preferences, search history, and security logs (sign-ins, IP address, document access, NDA acceptances).
2. Purposes & legal bases
Operating the marketplace and intermediated procurement (contract), business verification and fraud prevention (legitimate interest / legal obligation), IP protection and audit trails (legitimate interest), and product notifications according to your preferences (consent, which you can withdraw at any time in your settings).
3. Sharing
Contact details of buyers and suppliers stay hidden until an offer is selected and a Match is created. Confidential RFQ documents are only available to invited suppliers that accept the NDA.
4. Security
Traffic is encrypted with TLS; confidential RFQ files and multi-factor secrets are encrypted at rest; access is role-based and logged; multi-factor authentication is available for every account.
5. Retention
Search history is kept for 180 days, product view statistics for 365 days, notification logs for 365 days and security audit logs for 730 days. Business records are retained as required by law.
6. Your rights
You can access and export your data, rectify it, and request erasure from Account & Security → Privacy & Data (GDPR) in the portal. You may also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).