2. What data we collect and why

2.1 Contact form

When you fill in our contact form we collect your name, email address, mobile number (optional) and your message about your project.

• Purpose: to answer your request and, if you ask for it, to send you a technical or commercial proposal.
• Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Art. 6(1)(f)).
• Retention: up to 24 months after our last communication, unless we start working together (see 2.3).

2.2 Email and phone

If you email or call us, we process your contact details and the content of the communication for the same purposes, on the same legal basis and for the same period as in 2.1.

2.3 Clients, partners and suppliers

To carry out projects and contracts we process identification and contact details, tax details, project data (for example installation site, supply number, electricity bills, permits) and invoicing and payment data.

• Legal basis: performance of a contract (Art. 6(1)(b)) and compliance with legal obligations, in particular tax and accounting law (Art. 6(1)(c)).
• Retention: for the duration of the relationship and afterwards for as long as tax and accounting law requires, or as needed to establish or defend legal claims.

2.4 Browsing data and cookies

The website uses cookies and similar technologies:

Statistics cookies are switched on only if you accept them in the cookie notice. You can change or withdraw your choice at any time through the “Cookie settings” link at the bottom of every page, or by deleting cookies in your browser. Google Analytics data is kept for the period set in our account and never longer than 14 months; Google Analytics 4 does not store your IP address.

3. Who receives your data

We do not sell or rent personal data. Your data is available only to authorised OMNIPHOS staff and to the providers below, who act on our behalf under a data processing agreement and only for the purposes of this Policy:

• HOSTING PROVIDER: website hosting and storage of contact-form messages.
• Cloudflare, Inc.: website speed and security.
• Google Ireland Ltd / Google LLC: company email (Google Workspace) and, with your consent, website statistics (Google Analytics).
• Accountants, legal advisers and public authorities, where the law requires it or a contract needs it.

4. Transfers outside the European Economic Area

Some of these providers (Google, Cloudflare) may process data in the United States. Such transfers rely on the EU–U.S. Data Privacy Framework or on the European Commission’s Standard Contractual Clauses.

5. Internal tools that use Google services

OMNIPHOS may use internal tools for its own use only. These tools are used only by OMNIPHOS and only for its own accounts.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. 

6. Your rights

You have the right to:

• access your data and receive a copy;
• have inaccurate or incomplete data corrected;
• have your data erased (“right to be forgotten”);
• restrict processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise your rights, email [email protected]. We will reply within one month and may ask for information to confirm your identity.

You may also lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens, www.dpa.gr).

7. Security

We take appropriate technical and organisational measures to protect your data, such as encrypted connections (HTTPS) and access limited to authorised staff.

8. Children

This website is aimed at businesses and adults. We do not knowingly collect data from anyone under 15.

9. Automated decisions

We do not make decisions based solely on automated processing or profiling that produce legal effects for you.

10. Changes to this Policy

We may update this Policy. The current version is always published on this page with its last-updated date.