Website epos.dias.com.gr Privacy Policy

This Privacy Policy applies to the conditions for the collection, storage and use of your personal data by the Company “Interbanking Systems S.A.”, based in Maroussi Attica, Alamanas 2 St. , tel. 210-6171600, e-mail info@dias.com.gr (the “Company”), when you visit or use the website epos.dias.com.gr. The Privacy Policy applies only to natural persons. For any questions, please do not hesitate to contact us.

1. A few words about the website epos.dias.com.gr

   The website epos.dias.com.gr provides electronic payment services. When navigating the site, you provide the Company with personal data that is processed and stored under the Company's responsibility.

2. What are personal data?

   The term "personal data", as used in this Policy, refers to information of any natural person, whether individuals or professionals, which can be used to identify a visitor to the website. This information may indicatively include, a) the name and contact details, b) electronic payment details and c) other data (i.e. user IP address).

3. What is the Processing of Personal Data?

   Processing of Personal Data is the collection, registration, organization, storage, adaptation, modification, retrieval, search of information, use, transmission to third parties, dissemination, association, combination, restriction, deletion and destruction of Personal Data of natural persons.

4. For what purpose do we process your data?

   We collect your data exclusively for the purposes of the services provided in the website epos.dias.com.gr and in particular for: a) making electronic payments, b) protecting the site and you against cyberattacks and c) complying with the obligations imposed by the applicable law.

5. What is the legal basis for processing Personal Data?

   The legal basis for processing personal data is based on the secure completion of your transaction under your contractual relationship with the payee and / or your Bank.

6. Who have access to your data?

   Access to your data is allowed only to the absolutely necessary staff of the Company and our trusted partners (Processors), who are legally bound to maintaining data confidentiality and data -privacy. We also transmit your Data to your Bank in accordance with your agreement with them.

7. How do we ensure that Data Processors respect your Personal Data?

   The Processors have agreed and are contractually bound:

   • To keep Personal Data confidentiality,
   • Not to send Personal Data to third parties without the Company's permission,
   • To take appropriate security measures for your Personal Data,
   • To comply with the legal framework for the protection of personal data and especially the Regulation 2016/679/ΕU.

8. Do We Send Your Data Abroad?

   Your Personal Data is stored and processed only within the EU.

9. When do we delete your Data?

   Deletion time may vary according to the contractual obligations of the Company or the obligations imposed by the applicable regulatory framework. The Data, collected by Cookies, are deleted in accordance with the Cookies Policy.

10. Is Your Data Safe?

    The company is committed to protecting your Personal Data. Especially, we have taken appropriate organizational and technical measures to secure and protect your Data from any form of accidental or fraudulent processing and we use the Transport Socket Layer Certificate (TSL) to ensure the secure exchange of data between the web site and the browser. These measures shall be reviewed and amended as necessary. The processing of your Data in any way is only permitted to our authorized personnel solely for the purposes stated above (see answer in the question number 4).

11. What are your rights regarding the protection of Personal Data?

    You have the right to access your personal data. This means that you have the right to be informed by us on whether we process your Data. If we process your Data, you can ask to be informed about the purpose of the processing, the type of your Data processed by us, who will the data be given to, how long we store them, whether decision making is automated. You are also entitled to other rights (correction, deleting data, limiting the processing, etc), as these are more specifically mentioned in Regulation (EU) 2016/679. In this context, you have the right to correct eventual inaccurate personal data, the right to delete and the right to oblivion. You may ask us to delete your data if it is no longer necessary for the above-mentioned processing purposes or you may withdraw your consent, if this is the only legal basis.

    You have the right to transfer your Data. You may ask to receive from us in a readable form the Data you have provided or to ask us to forward it to another controller.

    You have the right to restrict the processing. You may ask us to restrict the processing of your Data for as long as your processing objection is pending.

    You have the right to object to the processing of your Data. You may oppose to the processing of your Data or to revoke your consent, and we will stop processing your Data unless there are other compelling and legitimate reasons that override your right.

12. How can you exercise your rights?

    To exercise your rights, please contact the Payee or your Bank. You can also contact the Company by mail (Alamanas 2, Maroussi, 15125, Athens) or by email at dpo@dias.com.gr, under the title "Exercise of access / correction / deletion / limitation / opposition ".

13. When do we respond to your Requests?

    We will reply to your Requests for free without delay, and in any case within (1) one month after we receive your request. However, if your request is complex or there are a large number of requests, we will notify you within one (1) month if we need to take two (2) more months as an extension within which we will respond to you. If your Claims are obviously unfounded or excessive, due in particular to their recurring nature, the Company may impose a reasonable fee, taking into account the administrative costs of providing information or executing the requested action, or may refuse to respond to your Request.

14. How can you track the progress of your Requests?

    For more information, you can send email to dpo@dias.com.gr

15. Do we use automated decision making / including profiling when processing your Data?

    We do not make decisions or profiling based on automated processing of your Data. Cookies are used on our site epos.dias.com.gr, always after you have been informed.

16. Do We Process Minor Data?

    We do not process Minors' data.

17. What is the applicable law when processing your Data from us?

    We process your Data in accordance with the General Data Protection Regulation 2016/679 / EU and the current National and European legal and regulatory framework for the protection of personal data.

18. Where can you appeal if we violate applicable law on the protection of Personal Data?

    If you disagree with the above processing of personal data, please contact us at dpo@dias.com.gr. Furthermore, you have the right to submit a complaint to the Personal Data Protection Authority (postal address Kifisias 1-3, P.C. 11523, Athens, email address: contact@dpa.gr), if you consider that the processing of your Personal Data violates the applicable law.

19. How will you be informed of any changes to this Policy?

    This policy will be updated in accordance with the applicable regulatory framework. We encourage you to read this Policy regularly in order to be informed on how your Data is protected.

    The Company is a "Processor" under Regulation 2016/679/EU.

    For any matter relating to the processing of your Data and the exercise of your rights, you may contact the Company's Data Protection Officer (DPO) by phone at 210 6171600 or by mail at Alamanas 2, Maroussi, 15125, Athens, or by e-mail at dpo@dias.com.gr.