1. Purpose and scope

ECS Informatics respects the privacy of its website visitors, customers, suppliers and business partners. This Policy explains, in a transparent manner, what personal data may be collected, the purposes and legal bases of processing, retention periods and the rights available to individuals.

Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019 and other applicable Greek and European data-protection legislation.

2. Data controller

The data controller is ECS Informatics, whose details appear below. For data-protection matters and the exercise of your rights, please contact dpo@ecs.gr.

Business name: ECS ΠΛΗΡΟΦΟΡΙΚΗ (ECS Informatics)

Business activity: Wholesale trade and servicing of IT equipment

VAT number: 082520167

Tax office: Ilioupoli

Address: 18 Iroos Konstantopoulou Street, Ilioupoli, Greece

Telephone: +30 210 4834328

Website: www.ecs.gr

General email: info@ecs.gr

DPO email: dpo@ecs.gr

3. Categories of data

Depending on your relationship with us and the method of communication, we may collect identification and contact details, professional information, order or support details, message content and basic technical data such as IP address, device type, browser, access date and time.

ECS limits collection to data that are adequate and necessary for the relevant purpose.

4. How data are collected

Data may be provided directly by you through a contact form, email, telephone call, quotation request, order, support request or information campaign. Certain technical data are generated automatically when the website is used for operational and security purposes.

5. Purposes of processing

Data are used to answer enquiries, manage customer and commercial relationships, supply products, repairs and technical support, process orders and contracts, issue accounting documents, comply with legal obligations, protect the website and, where the required consent has been given, send updates or promotional communications.

6. Legal bases

Depending on the circumstances, processing is based on your consent, performance of a contract or pre-contractual steps, compliance with a legal obligation, or ECS’s legitimate interests where these are not overridden by your rights and freedoms. Consent may be withdrawn at any time without affecting processing carried out before withdrawal.

7. Cookies and technical logs

The website may use strictly necessary cookies for operation and security. Analytics or advertising cookies are activated only after the required consent has been obtained. Further details are provided in the website’s applicable Cookie Policy.

8. Recipients and service providers

Access is limited to authorised persons and service providers that require it for their duties, such as hosting, technical-support, information-system, accounting or legal providers. They are bound by confidentiality and data-protection obligations. ECS does not make personal data available to third parties for their own advertising purposes.

9. Data transfers

Data are disclosed only where necessary to provide a service, required by law or a competent authority, needed for legal claims, or covered by consent. Any transfer outside the European Economic Area is subject to the safeguards required by the GDPR.

10. Retention

Personal data are retained only for as long as necessary for the purpose for which they were collected. Routine correspondence may be retained for up to six (6) months after the latest communication. Longer retention may apply where required by tax or other law, necessary for a contract, or needed for legal claims.

11. Minors and special-category data

ECS services are directed to adults and business users. ECS does not seek to collect children’s data or special-category data such as health data, religious beliefs, political opinions, genetic or biometric data. Please do not send such information unless there is a demonstrated need and an appropriate legal basis.

12. Automated decision-making

ECS does not make decisions producing legal or similarly significant effects solely through automated processing and does not carry out related visitor profiling.

13. Your rights

Where applicable, you have the rights to information, access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Send requests to dpo@ecs.gr. Reasonable information may be requested to verify your identity.

Requests are normally answered within one (1) month. This period may be extended by up to two further months due to complexity or volume, with prior notice. Requests are handled free of charge unless manifestly unfounded, excessive or repetitive.

14. Complaints

If you believe your rights have been infringed, you may complain to the Hellenic Data Protection Authority (www.dpa.gr, telephone +30 210 6475600). We encourage you to contact ECS first at dpo@ecs.gr so that the matter can be reviewed.

15. Security

ECS applies technical and organisational measures appropriate to the risk, including access controls, passwords, system updates, backups, encryption where appropriate, confidentiality obligations and incident-response procedures. Although reasonable measures are applied, no internet transmission or storage system can provide absolute security.

16. External links

The website may link to third-party websites. ECS does not control their privacy practices or content; you should review the privacy notice of each third-party service.

17. Updates and intellectual property

This Policy may be updated following changes in law, services or technology. The current version will be published at www.ecs.gr. The original content of this document is the property of ECS Informatics and is protected under applicable intellectual-property law.

Last updated: 24 August 2026