Personal data


Notification on the processing of personal data on the website

(This information is specifically for the processing of personal data of visitors-users of the website, and the general information Form of the Papadakis Group for the processing of personal data of customers, guarantors, business partners, partners, suppliers, beneficial owners of legal of persons or entities etc. click here.)

The Anonymous Company (hereinafter SA) with the name “Papadakis Group” informs you, the visitors / users of this website (hereinafter the Website), that the processing of your personal data is governed by the following conditions and by the relevant provisions of Regulation (EU) 2016/679 and the relevant current Greek and EU legislation on the protection of personal data.


The controller is the SA with the name “Papadakis Group”, 29 Gelas Ave., 19200 Elefsina, General Business Registry Number 121836207000.

Data Protection Officer

You can contact the data protection officer about your personal data processing issues at 29 Gelas Avenue, 19200, Elefsina or by email at

What personal data does Papadakis Group collect from you and from where?

The personal data collected and processed by the Papadakis Group mainly belong to the following categories and may not concern you in their entirety:

Personal data that we collect directly from you by the online completion, by you, and submission of the forms available on the Website (complaint submission forms, positive feedback forms, contact forms, etc.) or through your requests to receive newsletter updates, financial analyzes etc. Examples of such data are: first name, last name, landline or mobile phone, e-mail address, customer relationship with Papadakis Group, status (individual-business), and in general data that you fill in the free text fields. Especially for the free text fields, we draw your attention not to record in them any special categories of data, such as your racial or ethnic origin, your ideology or political, religious, or philosophical beliefs, information about your physical or mental health, your biometric or genetic characteristics, your sexual orientation, etc. You should also ensure that the personal data you fill in the forms on the Website are correct and accurate and you undertake to notify Papadakis Group of any change or modification to them. Any damage caused to the Papadakis Group or to any third party through the communication of incorrect, inaccurate, or incomplete data-information in the forms of the Website is solely your responsibility.

Personal Data Collected Automatically by the Website. When you visit and interact with the Website, certain data may be automatically collected, such as: your computer’s Internet Protocol (IP) address, your browser type and operating system, your connection speed, and information about the software programs installed on your computer, basic server connection information and information collected through Cookies.

For more information on the use of cookies by Papadakis Group, read the Cookies Policy.

The concept of data collection from you as described above also includes collection by a third party, natural or legal person, acting on your behalf. Also, if you provide Papadakis Group with personal data of third parties, you must have previously informed them appropriately (indicatively and by referring to this information) and have secured their consent, where it may be required.

For what purposes does Papadakis Group collect your data and on what legal basis does it process it?

Papadakis Group collects and processes your personal data each time this is necessary:

A. With your consent

This processing serves purposes such as communicating with you if you have filled out the forms available on the Website electronically (complaint submission forms, positive comment forms, contact forms, etc.) or you have requested to receive updates via newsletter, financial analysis, etc. It is clarified that by filling in your data in the forms of the Website and the financial analysis newsletters this constitutes a declaration of consent on your part for Papadakis Group to communicate with you and to send you financial analysis newsletters. Papadakis Group may also process your data for promotion/advertising purposes, provided you have given us your consent. In these cases, you have the right to withdraw your consent at any time, without, however, affecting the legality of the processing based on your consent until its withdrawal (regarding how to withdraw consent, see below in the section “How you can exercise your rights” and, as the case may be, we may also inform you of other ways of revocation depending on the way in which consent was given, e.g. an electronic link to withdraw consent/delete from the recipient list is provided in each newsletter, etc. .).

B. For Papadakis Group compliance with his legal obligations

This processing serves purposes such as:

Papadakis Group’s compliance with the obligations imposed by the applicable legal, regulatory, and supervisory framework, as well as the decisions of any authorities (public, supervisory, prosecutorial, independent, etc.) or courts (ordinary or arbitral).

The protection and security of IT systems, the prevention, prevention and suppression of illegal acts.

This processing as described in section B also serves the legal interests of the Papadakis Group or a third party (as described below in section C).

C. For purposes of legitimate interests of Papadakis Group or a third party

This processing also serves purposes, such as upgrading the services provided, defending the legal rights and legitimate interests of Papadakis Group or a third party. This processing is preceded by a weighting from which it emerges that it does not affect your fundamental rights and freedoms to the extent that they outweigh the legitimate interests of the Papadakis Group or a third party and make processing on this basis prohibited.

Personal data of minors

Papadakis Group understands the importance of protecting the personal data of minors. The Website is neither directed at nor is it intentionally designed to be directed at minors. Papadakis Group’s intention is not to collect or knowingly keep personal data of minors who may have access to its website.

If it is established that any personal data has been collected from a minor without the assistance of the respective legal conditions, this data will be deleted immediately.

For how long Papadakis Group will keep your data?

The data is kept only for the period required to carry out the purposes of its collection and processing, otherwise for the period required by the applicable legal and/or regulatory framework or the exercise of claims or the defense of rights and legitimate interests.

Who are the recipients of your data?

When fulfilling Papadakis Group’s legal and regulatory obligations, serving its legal interests, as well as in cases where Papadakis Group is authorized or has received your consent, recipients of your data may be, for example, the following:

The relevant employees and management members of Papadakis Group and, if the legal requirements are met, the relevant employees of subsidiaries of Papadakis Group and related companies based in Greece or the other countries of the European Union in the context of their activities and duties.

Providers of IT products and/or services and/or support of all kinds of information and electronic systems and networks, including online systems and platforms

File and data storage, archiving, management and destruction companies.

Telephone service companies.

Customer satisfaction or market research companies in general.

Product and/or service promotion companies – advertising companies.

Lawyers, law firms, bailiffs, experts, experts, providers of advisory services within the framework of their competences.

Supervisory, independent, judicial, prosecutorial, police, public and/or other authorities or bodies or parties entrusted with the control/monitoring of Papadakis Group activities within the framework of their competences, accredited mediators and mediation service centers, arbitral tribunals, and bodies alternative dispute resolution.

Can Papadakis Group transfer your data to third countries (outside the EEA)?

Papadakis Group may transfer your personal data to third countries, outside the European Economic Area (EEA), if:

a) An adequate level of protection is ensured in accordance with a relevant decision of the European Commission by the third country, by territory or by one or more specific sectors in said third country or

b) Adequate guarantees have been provided for their processing by the recipient, based on EU and/or national legislation.

If none of the above conditions apply, a transfer can be made if the exceptions mentioned by the Union and/or national legislation are present, among which the following are indicative:

a) if you have provided Papadakis Group with your express consent to this end or

b) if the transmission is necessary for the establishment or exercise of legal claims or the defense of the rights of Papadakis Group or

c) if there is a relevant obligation of Papadakis Group from a provision of the law or an international agreement.

Linking to third-party websites

Any interconnection of the Website through special hyperlinks (links, hyperlinks, banners) with any other website belonging to third parties does not imply that Papadakis Group assumes any responsibility for the policy followed by these websites regarding the protection and management of the personal data.

You should yourselves ensure that you are informed about the protection and management of your data from the above websites.

What rights do you have to protect your data?

You have the following rights:

a) Ask to be informed of the categories of your personal data that we keep and process, their origin, the purposes of their processing, the categories of their recipients, the period of their retention as well as your relevant rights (right of access).

b) Request the correction and/or completion of your personal data, so that it is complete and accurate (right to correction), providing any necessary document from which the need for correction or completion arises.

c) Request the restriction of the processing of your data (right to restriction).

d) Object to any further processing of your personal data held by us (right to object).

e) Request the deletion of your personal data from the files we keep (right to be forgotten) under certain conditions, such as when the data is no longer necessary, you have withdrawn your consent, the data has been processed illegally, etc.

f) Request the transfer of your data from the Papadakis Group to any other controller (right to data portability).

g) Withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on the consent before its withdrawal and the re-granting of withdrawn consent is permissible.

h) Right to Appeal to the Authority: You have the right to appeal to the Personal Data Protection Authority if you believe that your rights are violated in any way. For the Authority’s competence and how to submit a complaint, you can visit its website ( – My rights – Submit a complaint) where there is detailed information.

Please note the following in relation to your rights above:

Your rights under c, d and e may not be satisfied, in part or in whole, if they concern data that is necessary for the drawing up and/or continued operation of the contract, regardless of the source of their collection.

Papadakis Group has in any case the right to refuse your request to limit the processing or delete your personal data if the processing or keeping of the data is necessary for the establishment, exercise or support of its legal rights or the fulfillment of its obligations.

The exercise of the right to portability (above under f) does not entail the deletion of your data from Papadakis Group files, which is subject to the conditions of the immediately preceding paragraph.

The exercise of the above rights acts for the future and does not concern already performed data processing.

How you can exercise your rights

To exercise your rights, you can contact the Group Customer Relations Department, 29 Gelas Ave., 19200, Elefsina or via e-mail at

Papadakis Group will make every effort to respond to your request within thirty (30) days of receipt of the request. This deadline can be extended for an additional sixty (60) days, if this is deemed necessary at the absolute discretion of the Papadakis Group, considering the complexity of the request and the number of requests. Papadakis Group will inform you in any case of extension of the deadline within thirty (30) days of receipt of the request.

The above service is provided by Papadakis Group free of charge. However, if your requests are manifestly unfounded, excessive, or repetitive, Papadakis Group may either charge you a reasonable fee, informing you accordingly, or refuse to respond to your request(s).

How Papadakis Group protects your personal data

Papadakis Group implements appropriate organizational and technical measures for the security of your data, ensuring its privacy, its processing, and its protection against accidental or unlawful destruction, accidental loss, alteration, prohibited dissemination or access and any other form of unlawful processing.

Although every effort is made to protect personal data, Papadakis Group cannot guarantee the security of data transmitted on its Website, as the transmission of information over the Internet is not completely secure.