PRIVACY & PERSONAL DATA PROTECTION POLICY
ORTHOPRO PC (hereinafter referred to as the “Company”, “we” or “us”), having its registered office in Moschato, Attica, at 54 Kapodistriou Street, Postal Code 18344, fully understands and respects the importance of safeguarding the privacy and protecting the personal data of its customers, business partners, employees and website visitors. This Privacy Policy describes how we collect, use, store and protect your personal data in accordance with Regulation (EU) 2016/679 (the “GDPR”) and applicable national legislation.
Key Concepts Relating to the Processing of Personal Data
- Data Controller: means the person who determines the purposes for which personal data are processed and the way personal data are, or are likely to be, processed. In this case, the Data Controller is ORTHOPRO PC. A Data Controller may appoint a Data Processor to process personal data on its behalf.
- Personal Data: means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person. Natural persons whose personal data are subject to processing are referred to as Data Subjects. A particular category of personal data comprises special categories of personal data, sometimes referred to as “sensitive personal data”. These include data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data processed for the purpose of uniquely identifying a natural person, data concerning health, and data concerning a natural person’s sex life or sexual orientation. This category of personal data is subject to additional safeguards and must be handled with particular care in accordance with the GDPR.
- Processing: means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
- Data Subject: means the identified or identifiable natural person to whom the personal data relate.
- Consent: Article 7 of the General Data Protection Regulation (“GDPR”) sets out the conditions applicable to consent as a legal basis for the processing of personal data and provides the requirements that must be satisfied for such consent to be considered valid.
1. DATA CONTROLLER
The Data Controller responsible for the processing of your personal data is:
ORTHOPRO PC
Registered Office: 54 Kapodistriou Street, Moschato, Postal Code 18344, Greece
Tax Identification Number (TIN): 800544160
General Commercial Registry (G.E.MI.) No.: 128525307000
Email: info@orthopro.gr
Telephone: (+30) 2104511706
2. WHAT PERSONAL DATA WE COLLECT
We collect only the personal data that are necessary to fulfil our purposes and provide our services. Such data may include:
- Full name
- Contact details (email address, telephone number)
- Residential or business address
- Billing information
- Technical data (e.g. IP address and cookies, when you visit our website)
- Project and/or business relationship information
3. PURPOSES AND LEGAL BASIS FOR PROCESSING
We process your personal data for the following purposes:
- Providing products and related technical support
- Invoicing and performing contractual obligations
- Communicating with customers and business partners
- Complying with our legal obligations
- Ensuring the security and functionality of our website
The legal basis for the processing of your personal data may be one of the following, as applicable.
4. HOW LONG WILL YOUR PERSONAL DATA BE RETAINED
As a general rule, we retain your personal data for as long as necessary for the duration of our business relationship and for the purposes for which the data are processed.
We retain the identifiable data we collect directly for targeting purposes for the shortest period reasonably necessary and thereafter take appropriate measures to permanently delete such data.
We actively review the personal data we hold and securely delete or, in certain circumstances, anonymise such data when there is no longer a legal or business need to retain them.
Regardless of how we process your data during the period strictly necessary to achieve the relevant purpose, we will thereafter retain them in a duly stored and protected manner for the period during which any liability arising from the processing may potentially arise, in accordance with the applicable legislation in force from time to time. Once the applicable limitation period for any claim has expired, we will proceed with the deletion of the relevant personal data.
5. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
Your personal data may be disclosed or made available, where necessary and in accordance with applicable data protection legislation, to:
- Accountants or legal advisors
- Website hosting providers or IT infrastructure providers
- Public authorities, where required by law
We do not sell, rent, or otherwise trade your personal data to third parties.
6. YOUR RIGHTS
The General Data Protection Regulation (“GDPR”) grants data subjects a number of rights in relation to their personal data. An overview of these rights is provided below. You may exercise your rights by sending an email to: info@orthopro.gr
- The right to be informed. You have the right to receive clear, transparent and understandable information about how we use your personal data.
- The right of access and rectification. You have the right to access your personal data and to request that inaccurate or incomplete personal data be corrected or updated.
- The right to data portability. Under certain conditions, the personal data you have provided to us are portable. This means that you may request that your personal data be transferred, copied or transmitted electronically to you or to another organisation, where the applicable legal requirements are met.
- The right to erasure (the “right to be forgotten”). Under certain circumstances, you have the right to request the erasure of your personal data. If you wish us to delete the personal data we hold about you, please notify us and we will take the appropriate steps to respond to your request in accordance with applicable legal requirements. Where the personal data we collect are no longer necessary for any purpose and we are not legally required to retain them, we will take the necessary measures to securely delete or permanently destroy such data.
- The right to restriction of processing. Under certain circumstances, you have the right to request the restriction of the processing of your personal data.
- The right to lodge a complaint with a supervisory authority. You have the right to lodge a complaint with a competent supervisory authority concerning the manner in which we process your personal data.
- The right to withdraw consent. Where you have provided your consent to the processing of your personal data (i.e. where we rely on your consent as the legal basis for processing your personal data), you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. You may withdraw your consent to the processing of your personal data at any time by contacting us at: info@orthopro.gr.
Further information and guidance regarding your rights may be obtained from the Hellenic Data Protection Authority (HDPA) at www.dpa.gr, telephone: +30 210 6475600, fax: +30 210 6475628, email: contact@dpa.gr.
7. DATA SECURITY
We implement all necessary technical and organisational measures to ensure the security and protection of your personal data against loss, unauthorised access, unauthorised disclosure, alteration or processing.
8. VIDEO SURVEILLANCE SYSTEM (CCTV)
The Company may operate a video surveillance system (CCTV) in selected areas of its premises, exclusively for the following purposes:
- protection of individuals;
- security of premises and equipment;
- protection of property and inventory;
- access control; and
- prevention of unlawful activities.
The operation of the system is carried out in accordance with Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019, and the guidelines issued by the Hellenic Data Protection Authority (HDPA).
Video recording is limited to areas that are strictly necessary for the above purposes and is not carried out in areas where it would disproportionately interfere with individuals’ privacy, such as restrooms or staff break areas.
We retain the recorded data for fifteen (15) days, after which they are automatically deleted. Where an incident is identified during this period, the relevant part of the recording may be isolated and retained for an additional period of up to one (1) month, for the purposes of investigating the incident and initiating legal proceedings for the establishment, exercise or defence of our legitimate interests and legal claims.
You may exercise your rights by sending an email to: info@orthopro.gr.
For further information regarding your rights, please refer to the Privacy and Personal Data Protection Policy, page 3.
Further information and guidance regarding your rights may be obtained from the Hellenic Data Protection Authority (HDPA) at www.dpa.gr, telephone: +30 210 6475600, fax: +30 210 6475628, email: contact@dpa.gr.
Appropriate informational signage is displayed in areas where the video surveillance system operates.
9. CHANGES TO THE PRIVACY POLICY
This version of the Privacy and Data Protection Policy shall enter into force as of the date stated at the end of this Policy. We may amend the information contained in this Privacy Policy whenever we consider it necessary, in order to ensure that its provisions remain aligned with developments and changes in applicable legislation and with the guidelines issued by the competent supervisory authority. Any amendments will be made available promptly on the Company’s website, and we encourage you to review this Privacy Policy periodically. Previous versions of the Policy will be retained in our records so that you may refer to them, where necessary.
10. CONTACT US
We remain at your disposal should you wish to submit any question or comment relating to this Privacy Policy or its implementation. Any such question or comment should be submitted by email to info@orthopro.gr, for the attention of the Data Protection Officer (DPO), once appointed, who will review and respond to the matter.
If you are not satisfied with the Company’s response, or if you consider that the processing of your personal data does not comply with applicable data protection legislation, you may lodge a complaint with a competent supervisory authority.
The competent supervisory authority in Greece is the Hellenic Data Protection Authority (HDPA): www.dpa.gr, Telephone: +30 210 6475600, Fax: +30 210 6475628, Email: contact@dpa.gr
Last updated: 16 July 2026
