Privacy Statement

Who We Are

The data controller of your personal data is the company DIMITROULA PAPPA & SIA E.E. (APSTAGE), with VAT number 998992945, located at Filadelfias 170, 13671 Acharnes, Athens, Greece, and contact email: info@apstage.gr.

What Data We Collect

We only collect data that is necessary for presenting our services (design and construction of exhibition stands) and for managing inquiries from interested parties through the contact form.

Specifically, we may collect:

Data you provide through the contact form: company, full name, email address, phone number, exhibition/event, booth details, and your message.

Technical operation and security data: IP address, browser type/version, basic device information, and technical data necessary for the proper functioning and protection of the website.

Cookie consent preferences: we record your choices regarding cookies through the consent management system we use, in order to implement your choices and demonstrate our compliance.

Usage data through measurement tools: if you provide consent, usage and interaction data with the website are collected through measurement technologies (such as cookie identifiers and similar identifiers), for statistical analysis and improvement of the experience.

Advertising measurement data: if you provide consent for advertising/marketing purposes, pseudonymous identifiers and device information may be collected for measuring conversions and evaluating the effectiveness of advertising actions.

Data sources:
We receive data directly from you when you fill out and submit the contact form.
We receive data automatically during your visit (e.g., IP address and technical operation data).
We receive data through cookies and similar technologies only to the extent permitted by your consent choices for non-essential cookies.

Providing the contact form data is optional; however, without it, we will not be able to respond to your request or prepare an offer. Cookie preferences are your choice and can be changed at any time.

How We Use Your Data

We use your personal data for the following specific purposes and with the corresponding legal bases:

Management and response to inquiries through the contact form and preparation of an offer for design/construction services of an exhibition stand: performance of a contract or taking steps at your request prior to entering into a contract.

Operation, security, and protection of the website from malicious actions: our legitimate interest in ensuring the security of our systems and preventing fraud or misuse.

Statistical measurement and analysis of website usage through Google Tag Manager and Google Analytics 4: consent, which is requested before activating the relevant technologies.

Measurement of advertising actions and conversions through Google measurement technologies (Conversion Linker): consent for advertising/marketing purposes, which is requested before activating the relevant technologies.

You can withdraw your consent at any time through the website's cookie settings. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Who We Share Your Data With

We do not sell your personal data. We only share data to the extent necessary for the purposes described in this policy and with appropriate contractual commitments.

Website hosting provider: the hosting provider processes data on our behalf to operate and make the website available.

Google (Google Tag Manager, Google Analytics 4): used for measuring and analyzing traffic and interaction, only after your consent. Processing is done in accordance with Google's privacy policy.

Google (conversion measurement/Conversion Linker): used for measuring advertising performance, only after your consent for advertising/marketing purposes. Processing is done in accordance with Google's privacy policy.

WPML: used for the linguistic functionality/multilingual presentation of the website. Processing is done in accordance with the privacy policy of the respective provider/manufacturer.

Cookie consent management (Trustwards): we use our own consent management system (Trustwards) to record and manage your choices regarding cookies. This data is processed internally and is not shared with third parties.

International Data Transfers

Some of our service providers are located outside the EU/EEA, specifically in the United States.

Google: when you have given consent for analytical and/or advertising measurement, pseudonymous identifiers and device information collected through analytical and advertising measurement technologies may be transferred to the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF).

The consent management system (Trustwards) is based in Spain (EU), therefore consent data is not transferred outside the EU/EEA.

How Long We Retain Your Data

Enquiry form data: kept for up to 2 years from the last communication, unless the enquiry leads to a contract, in which case it is kept for the duration of the contract and for as long as Greek tax and accounting law requires. Enquiries are received by email and also stored in the website database, and are deleted from both on the same schedule. Analytics data: 14 months. Advertising measurement data: until consent is withdrawn.

Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).

Security and technical records: 12 months.

Analytical data: until your consent is withdrawn or according to the retention settings of the analytical tool.

Tracking data for advertising/marketing: until your consent is withdrawn.

Your Rights

If you are in the EU/EEA, the UK, or Switzerland, you have the following rights regarding your personal data:

Right of access to your data and to receive a copy.

Right to rectify inaccurate or incomplete data.

Right to delete your data when the conditions are met.

Right to restrict processing when the conditions are met.

Right to data portability, for data you have provided to us and which we process by automated means, when the processing is based on consent or a contract.

Right to object to processing when it is based on legitimate interest.

Right to withdraw your consent at any time for processing based on consent.

Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

To exercise your rights, you can contact us at info@apstage.gr. We will respond without undue delay and, in principle, within one month.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you or significantly affects you in a similar way.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at info@apstage.gr.

Data Security

We implement appropriate technical and organizational measures to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security. We take reasonable precautions to mitigate risks.

Data Breach Notification

In the event of a personal data breach that may pose a high risk to your rights and freedoms, we will inform you without undue delay. The notification will include, to the extent possible, the nature of the breach, the potential consequences, and the measures that have been taken or proposed to address it. We maintain procedures for detecting, reporting, and investigating security incidents. If you suspect a security issue, you can contact us at info@apstage.gr.

How to File a Complaint

You have the right to file a complaint with the competent data protection supervisory authority in your jurisdiction. In Greece, the competent authority is the Hellenic Data Protection Authority. We encourage you, before filing a complaint, to contact us at info@apstage.gr so that we can try to resolve any issue.

Updates to This Policy

We periodically review and update this Privacy Policy. The indication "Last updated" at the beginning of the text shows when the most recent changes were made. In the case of significant changes, we will notify users with a prominent announcement on the website and/or via email, where appropriate. Changes take effect from the date stated at the top of this policy. When processing is based on consent, we will seek new consent when required.

Contact

VAT number: 998992945
Email: info@apstage.gr
Address: Filadelfias 170, 13671 Acharnes, Athens, Greece
Data controller: DIMITROULA PAPPA & SIA E.E. (APSTAGE)