Terms of use & privacy policy

1. Who we are

The website polymechano.gr belongs to the company below, which is also the controller of the personal data collected through it, within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”).

Legal name

ANASTASIOS D. SARAKATSANOS KAI SIA EE (ΑΝΑΣΤΑΣΙΟΣ Δ. ΣΑΡΑΚΑΤΣΑΝΟΣ ΚΑΙ ΣΙΑ Ε.Ε.)

Trading name

ΠΟΛΥΜΗΧΑΝΟ (POLIMIHANO)

Legal form

Limited partnership (E.E.)

Legal representative

[To confirm]

G.E.MI. no. (General Commercial Registry)

000169801000

EUID

ELGEMI.000169801000

Tax ID (ΑΦΜ)

081760952 (EL081760952)

Registered office

Andrea Kalvou 53, 14231 Nea Ionia, Attica, Greece

Email

info@polymechano.gr

Phone

+30 210 2772984

Registry record

businessportal.gr

We have not appointed a Data Protection Officer (DPO) [To confirm]. For anything about your data, write to us at info@polymechano.gr.

2. Our privacy policy in brief

This policy explains which personal data we collect through the website and its forms, why, how long we keep them and what rights you have. It is written in line with the GDPR and Greek Laws 4624/2019 and 3471/2006.

• You can read the whole website without giving us any details.
• The website sets no cookies and uses no analytics or advertising tools. That is why no cookie consent banner is shown.
• You only give us data when you write to us, fill in a form or ask for remote support.
• We do not sell data or use them for advertising or automated decisions.
• For the data of your own customers held on your business systems (for example during remote support or in Poly-Cloud), we are not the controller but a processor acting on your behalf. See Remote support.

3. What data we collect

• Technical visit data. As with any website, our hosting provider’s server automatically records in its logs your IP address, the date and time, the page requested, the page you came from, and your browser and device type. The hosting control panel (Plesk) can produce aggregate visitor statistics from these logs (for example AWStats or Webalizer); whether this is switched on, and how it is used, is still to be confirmed [To confirm].
• Contact form. Name, company (optional), email, phone (optional), topic, your message and your confirmation that you have read this notice. To prevent abuse, the server uses a pseudonymised form of your IP address for one hour. Details under Contact form.
• Fault report form. Name, business name, Tax ID (ΑΦΜ), area, phone, email, type and description of the fault, urgency, device model or serial number (optional), your confirmation that you have read this notice and, only if you tick it, your consent to updates and newsletters. Details under Fault report form.
• Remote support (Poly Remote). Technical connection data, and whatever is shown on your screen during a session you allow. Details under Remote support.
• Email and phone. Whatever you send us when you email or call us directly.

If sending the form fails, the server logs only a technical error message, without the details you entered. We do not ask for special categories of data (such as health data); please do not include them in your messages. The website is not aimed at children.

4. Why we use them

• To answer your request and give you the quote or information you asked for.
• To log and repair a fault, or to help you remotely.
• To run the website securely, find errors and protect the forms from spam and abuse.
• To meet our legal obligations if your request leads to a transaction (for example, tax documents).

We send you updates and newsletters only if you ask for them, by ticking the optional box in the fault report form. Without that choice, we do not send you newsletters or marketing messages.

5. Legal basis

• Steps prior to a contract, or performance of a contract (Art. 6(1)(b) GDPR): when you, as a customer or prospective customer, ask for a quote, report a fault or ask for support.
• Legitimate interests (Art. 6(1)(f) GDPR): when you write to us or report a fault on behalf of a business customer, as its representative or employee, so that we can serve that business; running the website securely, through the server logs; and protecting the forms from abuse.
• Legal obligation (Art. 6(1)(c) GDPR): when the law requires us to keep records, for example for tax purposes.
• Consent (Art. 6(1)(a) GDPR): only for sending updates and newsletters, if you tick the optional box in the fault report form. You can withdraw it at any time.

Apart from updates and newsletters, we do not base the processing on your consent. The required box you tick in the contact form and the fault report form confirms that you have read this notice; it is not consent [To confirm].

6. Who has access

Only the POLYMECHANO staff who need your data to help you can access them. We also use the following providers, who act as processors on our behalf:

• Website hosting provider: webo.hosting (shared Plesk hosting). It serves the pages and keeps the server logs. The provider’s legal name and server location are still to be confirmed [To confirm].
• Email provider: through which contact-form messages and fault reports reach info@polymechano.gr. Its name and location are still to be confirmed [To confirm].

A data processing agreement under Art. 28 GDPR is in place, or will be signed, with each processor [To confirm]. Data may also be given to public authorities, but only where the law requires it. If you ask for a third-party product or service (for example, software), we pass on only what is needed, after telling you.

7. How long we keep them

We keep data only as long as needed for the purpose we collected them for. The periods below are proposals and will be finalised after the legal review:

• Contact-form messages and emails: up to 24 months after the last contact, unless we start working together [To confirm].
• Pseudonymised IP address used to protect the forms: used for one hour, deleted at the next request to the forms.
• Fault reports (emails from the fault report form): up to 24 months after the fault is closed [To confirm].
• Consent to updates and newsletters: until you withdraw it. After that we keep only the dates of the consent and of its withdrawal, for as long as we need to show that we complied with the law [To confirm].
• Server logs: as set by the hosting provider, usually a few weeks [To confirm].
• Remote support session records: the retention period is still to be settled [To confirm].
• If a transaction follows, invoicing and warranty records are kept for as long as tax and commercial law requires.

8. Transfers outside the EU

The website, the contact form and the fault report form are not meant to transfer data outside the European Economic Area, and they use no third-party form services. This also depends on where the hosting and email providers keep their servers [To confirm].

9. Your rights

As a data subject, under Articles 15–22 GDPR you have the right to:

• access: find out whether and which of your data we process, and get a copy;
• rectification of inaccurate or incomplete data;
• erasure, when there is no longer a reason for us to keep them;
• restriction of processing;
• portability: receive the data you gave us in a common electronic format;
• object to processing based on our legitimate interests.

To exercise a right, write to us at info@polymechano.gr or at our registered office. We may ask you to confirm your identity. We reply without undue delay and within one month at the latest; in complex cases this can be extended by two months, and we will tell you if so. Exercising your rights is free of charge.

If you believe that the processing of your data breaks the law, you have the right to lodge a complaint with the Greek supervisory authority, the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Kifisias Ave. 1-3, 115 23 Athens, Greece, tel. +30 210 6475600, complaints@dpa.gr, www.dpa.gr, or with the supervisory authority of the EU member state where you live or work. We would welcome the chance to sort it out with you first.

10. Security

• The website is served only over an encrypted HTTPS (TLS) connection [To confirm].
• Contact-form messages and fault reports are sent from our server encrypted over TLS.
• Only authorised staff, with personal credentials, can access the mailbox and the support tools.
• The website has no user accounts and no database of visitor data.

No system is completely secure. If a data breach occurs, we will notify the Authority and, where required, you, under Articles 33 and 34 GDPR.

11. Cookies

The website sets no cookies at all, neither our own nor third-party ones. We do not use Google Analytics or any other analytics tool, advertising pixels or embedded social media content. That is why we do not ask for cookie consent.

• Fonts are loaded from our own server; no requests are made to Google Fonts.
• Maps are drawn in advance and embedded in the page; no third-party map service is loaded.
• The Facebook, Instagram, LinkedIn and Google Maps buttons are plain links. The website does not contact these services; if you follow a link, that service’s privacy policy applies.

Visitor statistics in the future. We may add Google Analytics later. Before it goes live, we will update this page and show a consent banner; statistics will run only if you accept them.

12. Local storage & cache

The website stores a single setting in your browser (in localStorage), and only one you choose yourself:

• pm-motion, set to full or calm: whether you prefer full or calm animation on the pages. It is stored only when you choose “Full” or “Calm” on the “Motion effects” switch at the bottom of the page, has no expiry date, is never sent to the server and contains no personal data.

This storage is strictly necessary to provide the feature you explicitly asked for, so it does not require consent (Art. 4(5) of Greek Law 3471/2006, implementing Art. 5(3) of the ePrivacy Directive 2002/58/EC). You can delete it at any time in your browser settings (clear site data).

If you have not chosen, the page checks inside your browser whether you have asked for reduced motion or data saving, or the device has little memory or few processor cores, so it can show calm animation. This information is read locally only; it is not stored or sent anywhere.

The language is part of the page address (for example /en/, /nl/) and is not stored. Your browser also keeps website files such as images, fonts and styles in its cache so pages load faster. The cache contains no personal data and is controlled by your browser.

13. Contact form

• What we collect: name, company (optional), email, phone (optional), topic, message and your confirmation that you have read this notice.
• How: our server sends the message by email, encrypted over TLS, to info@polymechano.gr, together with the page language and the time of sending. The website keeps no copy of the message.
• Purpose: answering your request.
• Legal basis: steps prior to entering into a contract, or its performance, when you ask for a quote or a service for yourself (Art. 6(1)(b) GDPR); our legitimate interest in replying, when you write on behalf of a business or with a general question (Art. 6(1)(f) GDPR).
• Read confirmation: the required box in the form confirms that you have read this notice. It is not consent, and the processing is not based on it.
• Abuse protection: to protect against spam, the server temporarily keeps a pseudonymised form of your IP address (hashed with a secret key) and the time of sending. These are not used after one hour and are deleted automatically at the first request to the form after that. Legal basis: our legitimate interest in protecting the form from abuse (Art. 6(1)(f) GDPR).
• Retention of messages: up to 24 months after the last contact, unless we start working together [To confirm].

The required fields are needed for us to reply. If you would rather not use the form, you can email or call us directly. The form does not currently use a third-party CAPTCHA service; if we add one (such as Cloudflare Turnstile), we will update this page first [To confirm].

14. Fault report form

• What we collect: name, business name, VAT number, area, phone, email, type of fault, description of the fault, urgency, device model or serial number (optional), your confirmation that you have read this notice and, only if you tick it, your consent to updates and newsletters.
• How: the form is our own and works like the contact form. Our server sends the report by email, encrypted over TLS, to info@polymechano.gr, together with the page language, the time of sending and, if you tick the updates box, the wording of the consent you ticked. The website keeps no copy of the report. The form sets no cookies and does not currently use a third-party service; if we add a CAPTCHA service (such as Cloudflare Turnstile), we will update this page first [To confirm].
• Purpose: to log and repair the fault and to contact you about it. We need the business name and VAT number to identify the customer business.
• Legal basis: the performance of a contract or steps prior to one (Art. 6(1)(b) GDPR) or, when you report the fault on behalf of a business customer, our legitimate interest in serving it (Art. 6(1)(f) GDPR).
• Read confirmation: the required box in the form confirms that you have read this notice. It is not consent, and the processing is not based on it.
• Updates and newsletters (optional): a separate box, not ticked in advance and not needed to send the report. If you tick it, the legal basis for sending you updates is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time, free of charge, by writing to info@polymechano.gr; withdrawing does not affect the lawfulness of processing before it. The tool used to send the updates will be decided [To confirm].
• Abuse protection: as with the contact form, the server temporarily keeps a pseudonymised form of your IP address and the time of sending. These are not used after one hour and are deleted automatically at the first request to the form after that.
• Retention: fault reports up to 24 months after the fault is closed [To confirm]; consent to updates until you withdraw it.

The required fields are needed for us to log the fault and contact you. If you would rather not use the form, you can report the fault by phone or email.

15. Remote support (Poly Remote)

Poly Remote is our remote support app. Connections are set up by our own servers (connection and relay). The session runs either directly between the two devices or through our own relay server, never through a third-party service [To confirm].

• Our technician connects only after you allow it on your device, in a session you start or accept, and you can end it at any time. This permission concerns the connection; it is not consent under the GDPR.
• During the session the technician sees your screen and may operate the device as needed for the support. We suggest you close anything confidential that does not need to be visible before connecting.
• Our servers process technical connection data such as the device ID, IP address and start and end times. Exactly which data are logged, and for how long, is still to be settled [To confirm]. We do not record video of the session [To confirm].
• Legal basis for your own details and the connection data: performance of the support contract (Art. 6(1)(b) GDPR) or, where our customer is a business, our legitimate interest in serving it (Art. 6(1)(f) GDPR).

Your own customers’ data. Any data of your own customers or patients shown on your systems during support (or stored in Poly-Cloud, our backup service) is processed by us as a processor on behalf of your business, which remains the controller, under the support contract and a data processing agreement (Art. 28 GDPR) [To confirm]. At pharmacies these data may include health data (Art. 9 GDPR); the additional terms and measures this requires are still to be settled [To confirm].

More about downloading the app on the Remote support page.

16. Using the website

By using polymechano.gr you accept the terms below. If you do not agree, please do not use the website.

• Information about products and services on the website is general and for information only. It is not a binding offer, nor advice for your particular situation.
• Prices and availability are not published on the website; we give them in a written quote. A contract is formed only when a quote is accepted or an order is confirmed by us.
• Some images are illustrative and may differ from the products supplied.
• You may not use the website in a way that harms its operation or other people, or scrape its content in bulk by automated means.

17. Liability & links

We do our best to keep the information correct and up to date, but we do not guarantee that it is always complete or error-free, or that the website will be available without interruption. To the extent permitted by Greek law, we are not liable for loss arising from the use of, or inability to use, the website. This does not apply to loss caused by intent or gross negligence, and it does not limit your rights under consumer protection law [To confirm].

The website contains links to third-party websites (such as manufacturers, social networks and the business registry). We do not control their content or privacy practices and are not responsible for them.

18. Intellectual property

The texts, images, design, logo and the trading name “ΠΟΛΥΜΗΧΑΝΟ” (POLYMECHANO) belong to us or are used under licence, and are protected by intellectual and industrial property law. You may not copy, republish or modify them without our written permission, beyond what the law allows for personal use.

Third-party product and manufacturer names and trademarks (for example, of software and devices) belong to their owners and are mentioned only to describe our products and services.

19. Governing law

These terms are governed by Greek law. The courts of Athens have jurisdiction over any dispute [To confirm], without prejudice to mandatory rules that protect consumers.

20. Changes to this page

We may change these terms and the privacy policy, for example when we add visitor statistics. The current version is always this page, with the last-updated date at the top. Significant changes will be published here before they take effect.

21. Contact

For questions about this page or your data: info@polymechano.gr, tel. +30 210 2772984, or by post to ANASTASIOS D. SARAKATSANOS KAI SIA EE, Andrea Kalvou 53, 14231 Nea Ionia, Greece. All our contact details are on the Contact page.