greeksteel logo

Privacy Policy

Draft: 10-12-2025

General Information

  1. The applicable law for the protection of personal data is the General Regulation (EU) 2016/679 (hereinafter GDPR) of the European Parliament and the Council, Law 4624/2019 «on the protection of individuals from the processing of personal data,» as in force, Law 3471/2006 («Protection of personal data and privacy in the electronic communications sector and amendment of Law 2472/1997»), as in force, as well as the guidelines of the Personal Data Protection Authority.
  2. Personal data is defined by the GDPR as any information that can identify a natural person directly or indirectly («data subject»). Such data includes, but is not limited to, name, surname, residential address, email address, tax identification number, equipment or terminal device identifiers, online search history, etc. Information concerning legal entities and groups of individuals or statistical information from which it is not possible to identify a specific or identifiable natural person does not fall into this category and is excluded from the scope of the relevant legislation.
  3. This policy is fully compliant with the General Regulation for the protection of natural persons against the processing of personal data (EU/2016/679) and Greek legislation (Law 4624/2019).
  4. It is clarified that our Company may modify this policy at any time and without notice. Therefore, it is deemed necessary to study this policy before the user/visitor navigates and any registration of their personal data.

By navigating and using the services of the website, the user/visitor accepts the content of this policy.

Data Controller

The Company named «Greek Steel,» based at Patission 21, Athens, phone +30 216 001 1551, email info@greeksteel.gr, is the data controller (hereinafter «The Company» or «We»).

Contact details:

For more information about us, please do not hesitate to contact us and we will respond as soon as possible.

Purpose of Data Collection

  1. When visiting our website, the user/visitor is not obliged to provide us with personal information unless they wish to: i. contact us, ii. participate in our Company's competitions, iii. subscribe to the newsletter service.
  2. We also collect data to analyse the usability, quality and promotion of our services so that we can improve our products and individual offerings (e.g. prefabricated steel homes and safe rooms).
  3. We collect data for purposes related to the detection of online fraud and the security of electronic communications.
  4. Our Company guarantees that the personal data it processes remains highly confidential and cannot be used for any purpose other than that for which it was provided.

What Kind of Data We Collect and on What Legal Basis

  1. In the Contact section/contact form, we collect the following: first name, last name, email address (e-mail), phone number, and website. The contact details are collected so that we can respond either to your requests, in accordance with Article 6(1)(c) GDPR, or to provide you with information about our products and services, in accordance with Article 6(1)(f) GDPR.
  2. In the context of conducting competitions, we collect the following data from participants: first name, last name, mobile phone number, and e-mail in accordance with Article 6(1)(a) GDPR. Specifically, participants in each competition may further provide their explicit consent to our Company for the publication of the competition results through printed and/or electronic media and/or the Internet, including our Company's social media, and specifically the publication in the above media in any appropriate manner of the full name of each lucky winner.
  3. In the newsletter form, we collect the email address (e-mail). The collection of the user's/visitor's e-mail occurs only if they enter it in the relevant field, thereby giving us their consent, in accordance with Article 6(1)(a) GDPR. It is clarified that at any time the user/visitor can unsubscribe at no cost and no longer receive such messages by informing our Company through any appropriate means of communication or by clicking the “unsubscribe” option in the forwarded message.
  4. We may also automatically receive certain information contained in log files, such as the IP address, geolocation data, date and time of visit to the website, etc., for which we consider we have a legitimate interest, in accordance with Article 6(1)(f) GDPR, to safeguard the security of networks, information, and services from accidental events or illegal or malicious actions (e.g., online fraud) related to the availability, authenticity, integrity, and confidentiality of data and at the same time to provide from our side, in accordance with Article 6(1)(c) GDPR, a safer environment for the processing of the user's/visitor's personal data.

Recipients of the Data – Transfers

  1. In order to provide our services, we inform the user/visitor that access to certain data may be granted, under strict conditions, such as e.g. encryption, contractual confidentiality clauses, etc., to partners contracted with us, such as companies or professionals providing logistical support and software/cloud services.
  2. We require all of the above recipients to implement enhanced organizational and technical measures that ensure the optimal level of security.
  3. Our Company does not transfer the personal data of the user/visitor to third countries, that is, outside the EU. For Cookies, see the relevant policy (if you have a separate Cookies Policy page, add link here).

Data Retention Period

  1. In the event of data entry in the context of a competition, our Company retains the personal data of the participants for a period of 2 years from the end of the competition.
  2. If the user/visitor has subscribed to the newsletter service, the data provided for receiving the newsletters is retained for the entire duration of their subscription. Upon unsubscribing from the above service, which can be done in any appropriate way (e.g., by sending an email), the data provided is immediately deleted.
  3. For cookie configuration, the user/visitor can consult the website's cookie policy.
  4. Data from contact forms is retained for as long as necessary to fulfill the purpose of processing and up to 5 years, unless a longer period is required by legal obligation.

Rights of Data Subjects

According to the GDPR, you have the following rights:

  1. Right of access: You can request information about your data that we process.
  2. Right to rectification: You can correct inaccurate or incomplete data.
  3. Right to erasure (“right to be forgotten”): You can request the deletion of your data under certain conditions.
  4. Right to restriction of processing: You can request restriction of processing.
  5. Right to data portability: You can receive your data in a structured format.
  6. Right to object: You can object to processing, including direct marketing.
  7. Right to withdraw consent: If processing is based on consent, you can withdraw it at any time.

To exercise your rights, please contact us using the details provided above. You also have the right to lodge a complaint with the Data Protection Authority (www.dpa.gr).

Data Security

We take all necessary technical and organizational measures to protect your data from loss, misuse, or alteration. We use secure servers and encryption where required.

Cookies

Our website uses cookies to enhance the user experience. For details, see the Cookies Policy (add link if a separate page exists).

Third-Party Websites

The website may contain links to third-party websites. We are not responsible for their privacy policies.

© 2026 Greek Steel. All rights reserved.