Privacy Policy

The protection of personal data is very important to us. We ensure full compliance with Regulation (EU) 679/2016 “on the protection of natural persons with regard to the processing of personal data and on the free movement of such data”.

This personal data protection policy (the “Privacy Policy”) - and the “Terms of Use” explain how we use your personal data:

• when you register to or visit our website https://www.onisisconsulting.gr/ or
• when you communicate with us or ask us for information.

Registered office

Our Company details are: Onisis Consulting IKE, Agias Glikerias 5, 11147, Athens, Greece, Tel.: +30 210 300 1803.

Lawful processing of personal data

In compliance with the provisions of the related EU and national legislation, we manage all Personal Data with which it is provided with the greatest possible care, ensuring, in any case, their protection and confidential nature. To ensure the confidentiality and security of the Personal Data, we have adopted all necessary organizational and technical measures, establishing internal security policies, using suitable electronic means, adequately informing, and training our people.

We shall lawfully process all Personal Data, as we may collect and process such data exclusively for specific, explicit, and legal purposes and only to the extent that such processing is necessary for the fulfilment of such purposes. We ensure that the data kept are accurate and updated, seeking for this purpose the assistance of the data subjects, i.e., of the natural persons whom these data concern, and we shall retain such data for the time necessary for the fulfilment of the specific purposes.

We will use and disclose Personal Data as we believe to be necessary or appropriate:

• To comply with applicable laws
• To comply with legal process
• To respond to requests from public and government authorities
• To enforce our terms and conditions
• To protect our services
• To protect the rights, privacy, safety, or property of our own, or others and
• To allow us to pursue available remedies or limit the damages that we may sustain.

Personal data being processed

We collect personal information entered in the data fields in the corresponding sections of our website and personal information received either because of doing business with you, at some previous event, or from some other transactions you had with us in general. We do not intentionally request sensitive personal information as defined by applicable laws.

You can put your data, in our website, if you want to communicate with us. These requested data are:

• Name
• Surname
• Email
• Company name
• Telephone
• Kind of required service
• Additional info (free text)

Collection of technical information

When you visit our website, certain technical information may be processed for reasons related to the operation, security, protection, and maintenance of the website. This may include information such as browser type, device type, operating system, date and time of access, and security or error logs.

Such technical information is used only to the extent necessary for technical operation, website security, prevention of misuse, troubleshooting, and protection of our systems.

For website traffic statistics, we use Plausible Analytics. Plausible does not set cookies, does not use advertising identifiers, does not create visitor profiles, and provides us only with anonymous, aggregated statistics about website usage, such as page visits, referral sources, device type, browser type, and country-level location.

We do not use Google Analytics.

Social media links

Our website may include simple links to our social media pages or profiles.

These links do not, by themselves, transmit personal data to the relevant social media platforms. A transfer to a third-party platform may occur only if you choose to click such a link and leave our website.

We do not use social media tracking plugins, Facebook Pixel, LinkedIn Insight Tag, Google tracking technologies, Google Analytics, or similar third-party profiling tools on our website.

If you choose to visit a third-party platform, your use of that platform is governed by the privacy policy and terms of use of that platform.

Use of personal data

We collect, process, and use Personal Data only where this is necessary for a specific lawful purpose, such as responding to your request, communicating with you, providing our services, complying with legal obligations, protecting our rights, or ensuring the security and proper operation of our website.

Anonymous and aggregated website statistics collected through Plausible Analytics are used only to understand and improve the performance, structure, and content of our website.

We store and use all Personal Data that concern you whenever you make contact over the phone, by e-mail or other means of communication. Such personal data will be used exclusively for the purpose of handling your request at any given time and/or to provide you with a service by executing the request that you made, and for the issuance of all necessary documents.

Furthermore, we store and use personal data and technical information to the extent necessary for the prevention and handling of any malicious use or other illegal behavior on our website, e.g., to keep the data secure in case of an attack on our IT systems. Lastly, we store and use your data to the extent that we are legally obliged to do so, e.g., as foreseen by specific provisions of the related legislation or a court judgment or another decision by the Authorities, as well as to safeguard our rights and claims, and to defend our rights before the courts.

Third parties to whom the personal data will be transferred

We may transfer these data to companies with which we collaborate, within the European Union, which will process the data on behalf of us, as data processors, exclusively for the purposes mentioned above. When transferring the data, we shall adopt all necessary measures to ensure the highest possible security level.

We assure that such companies provide all the necessary guarantees for the protection of all Personal Data and that they adopt suitable technical and organizational measures so that the processing is lawful and that the protection of the Personal Data and the rights of the natural persons they concern are safeguarded.

For privacy-friendly website analytics, we use Plausible Analytics. Plausible is used without cookies, without advertising identifiers, and without visitor profiling. The information available to us is anonymous and aggregated and is used only for website statistics and improvement.

Data security

The security of your personal data is a high priority for the us. We, therefore, protect your data which are stored by us by adopting technical and organizational measures for the efficient prevention of loss or abuse thereof by third parties. Our people who oversee the processing of personal data undertake to keep such data secret. The data you send us via our website are transferred encrypted for the protection of your personal data. To ensure the long-term protection of your data, the technical security measures are monitored regularly and, if necessary, are adjusted to the relevant technological standards.

Cookies and analytics

The use of cookies is regulated by our Cookies Policy.

Our website uses only strictly necessary cookies, where required for the technical operation, security, and proper functioning of the website.

We do not use advertising cookies, marketing cookies, profiling cookies, Google Analytics, Facebook Pixel, LinkedIn Insight Tag, or other third-party tracking technologies.

For website analytics, we use Plausible Analytics, which does not set cookies and provides anonymous, aggregated usage statistics.

Consent and rights of the subject of the personal data

Where processing is based on your consent, you may withdraw that consent at any time. Where processing is based on another lawful basis, such as compliance with a legal obligation, performance of a contract, legitimate interest, or the handling of your request, you may exercise the rights provided by applicable data protection law.

Under the Data Protection legislation, you have the following rights with regards to their personal information:

• the right to be informed about the collection and the use of your personal data
• the right to access your personal data and supplementary information
• the right to have inaccurate personal data rectified, or completed if it is incomplete
• the right to erasure (to be forgotten) in certain circumstances
• the right to restrict processing in certain circumstances
• the right to data portability, which allows you to obtain and reuse your personal data for your own purposes across different services
• the right to object to processing in certain circumstances
• rights in relation to automated decision making and profiling
• the right to withdraw consent at any time (where relevant)
• the right to complain to the relevant Authority.

We will handle your requests with due care, to safeguard the security of your data and the protection of your rights. For this reason, in case of doubts regarding the person who requests the disclosure of Personal Data, we may ask you for additional information that is necessary for your identification.

In case we are unable, due to the large number of requests, to fulfil your request immediately, you will be informed you as soon as possible and in any case within one month from the submission of your request of its progress and of the reason for any delay in its fulfilment. If your requests are clearly unfounded or excessive, in particular because of recurrence, we may either impose a reasonable fee, considering the administrative costs of providing the information or communicating or executing the requested action, or refuse to follow up on your request.

In case of a data breach which may put your rights and freedoms at high risk, if this does not fall under one of the exceptions provided for in the law, we undertake to inform you of the breach without unjustifiable delay.

You may direct all questions or requests regarding the protection of your personal data kept by us to the following e-mail address: onisis@onisisconsulting.gr.

In any case, if you believe that your privacy is violated in any way, you have the right to lodge a complaint with the Hellenic Data Protection Authority, using the following contact details: Website: www.dpa.gr , Postal address: 1-3 Kifisias Ave., 115 23 Athens, Tel: +30 210 6475600, Fax: +30 210 6475628, E-mail: contact@dpa.gr .

Amendments to the information contained in this policy

Any future related regulations that may take effect will form part of this announcement. In any case, ONISIS Consulting shall reserve the right to change the terms related to the protection of personal data in accordance with the applicable legal framework.

Therefore, these Personal Data protection terms may be revised and updated at any time without prior notice. The users of the website are invited to observe the examined terms for changes at regular intervals, since the continuous use of the website suggests that they accept all possible modifications thereof.

The current version of the Personal Data Protection Policy entered into force in June 2026.