Last updated: 11/08/2026  Â·  Version 3.0

The Website https://www.itacc.gr, hereinafter referred to as the “Website”, is managed by the company under the name “ITACC SOLUTIONS MONOPROSOPI I.K.E. “(101 Irakleitou Str., 15238, Chalandri, Athens, Greece), hereinafter referred to as “Company “, which is the Data Controller.

The Company takes the protection of your privacy and personal data very seriously and has taken all necessary measures to protect the security and preserve the confidentiality of information concerning visitors/users of the Website.

Please read carefully this Privacy Policy of our Website in order to be informed about the data collected from you, when you visit the website and when you use its online services, the information uploaded and shared on it, their use and your rights.

This Policy serves as a point of information to data subjects in accordance with articles 13-14 of the EU General Data Protection Regulation (EU 679/2016) and the National Greek Law LN. 4624/2019 (Government Gazette A’ 137/29.08.2019), such as regarding the personal data collected by the Company through its Website.

WHAT KIND OF DATA DOES OUR WEBSITE COLLECT

Our Website has primarily informative content about our activity and services. Therefore, simply browsing our Website does not require the visitor to provide/enter personal data in case he/she does not wish to use the services provided.

DATA COLLECTED AUTOMATICALLY

As with most websites, our web server automatically records certain technical information when you visit the Website, such as your IP address, the date and time of your visit, the pages requested and your browser type and operating system. This information is kept in server log files for the purposes of ensuring the security, availability and proper technical operation of the Website and of detecting and investigating malicious activity. The legal basis for this processing is our legitimate interest under Article 6(1)(f) GDPR in maintaining the security of our network and information systems. Log files are kept for no longer than is necessary for those purposes and are not used to identify you or to build any profile of you.

COOKIES AND TRACKING TECHNOLOGIES

Simply browsing our Website does not require cookies. We do not use strictly necessary, functional, advertising or profiling cookies, and we do not use tracking technologies such as web beacons, tracking pixels or device fingerprinting. The only cookies we use are the analytics cookies described below, and they are set exclusively where you have given your prior consent.

To understand how visitors use our Website so that we can improve it, we use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics is loaded only after you click “Accept” in our cookie banner. If you reject, or if you do not make a choice, no Google Analytics script is loaded and no analytics cookie is placed on your device.

When enabled, Google Analytics sets the following first-party cookies in your browser:

  • _ga, used to distinguish visitors; retention up to 2 years.
  • _ga_H1G2MF17XP, used to persist the analytics session state; retention up to 2 years.

These cookies collect information such as the pages you view, the approximate region of your visit, the referring source and details about your device and browser, in a form that we do not use to identify you personally. IP addresses are not retained by GA4. We use this information only in aggregate, to measure traffic and improve the Website; we do not use it for advertising and we do not combine it with the data you submit through our forms.

Legal basis. We place and read analytics cookies solely on the basis of your consent, in accordance with Article 5(3) of Directive 2002/58/EC (the ePrivacy Directive) as transposed by Greek Law 3471/2006 and Article 6(1)(a) GDPR. Consent is not bundled with any other action and rejecting is as easy as accepting.

International transfers. Google may process analytics data outside the European Economic Area, including in the United States. Such transfers are safeguarded under the EU-U.S. Data Privacy Framework, to which Google LLC is certified, and, where applicable, the European Commission’s Standard Contractual Clauses.

Withdrawing or changing your choice. You can withdraw or change your consent at any time, with the same ease as giving it, by selecting “Cookie Settings” in the footer of any page and choosing “Reject”. Doing so stops further analytics collection and removes the analytics cookies from your device. You may also block or delete cookies through your browser settings. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

Please note that our Website may contain links to third-party websites. This Policy does not apply to those websites, which may use cookies under their own policies.

DATA YOU PROVIDE DIRECTLY

Contact Form

  • Full Name
  • Company
  • Work Email
  • Phone Number
  • Message (free text by the interested person)

Bribery Complaint Form

  • Name (Optional)
  • Contact information (Optional)
  • Relationship with ITACC
  • Message (free text by the interested person)

Since free text input fields are used, we kindly ask you to keep your comments polite and non-offensive. Comments with racist/offensive content will be deleted immediately in a secure way and without the possibility of retrieval.

The forms should be submitted by the interested person himself/herself or by his/her legally authorized representative.

The provision of your personal data through the above forms is voluntary and is not a statutory or contractual requirement. However, the fields indicated as mandatory are necessary in order for us to respond to your enquiry or to assess your report, if they are not completed, we may be unable to do so.

CONSENT

Where we rely on your consent as the legal basis for processing namely, in respect of the information you submit to us through the Contact Form, you provide that consent by submitting the relevant form, having read this Privacy Policy. You are free to withdraw your consent at any time. Processing which is carried out on another legal basis, as set out in the section “How we use the data we collect” below, is not based on your consent and is therefore not affected by any withdrawal of it.

Any withdrawal of your consent does not negate the lawfulness of your personal data processing until then.

HOW WE USE THE DATA WE COLLECT

  • Contact form: To respond to your enquiry and to provide you with information on the matter in which you have expressed interest. The legal basis for this processing is your consent, which you give by submitting the form in accordance with this Privacy Policy.
  • Bribery Complaint Form: To receive, assess and investigate reports of potential bribery incidents, and to take any follow-up action required. The legal basis for this processing is our legitimate interest under Article 6(1)(f) GDPR in preventing and detecting bribery and corruption, in safeguarding the integrity of our operations and in meeting the anti-bribery commitments we have undertaken towards our clients and under the anti-bribery management practices we apply. We ask you to limit your report to the information that is necessary for us to understand and assess the incident. You may submit a report anonymously; providing your identity or contact details is optional. If you choose to identify yourself, your identity is treated as confidential and is disclosed only to the persons authorised to handle the report, or where disclosure is required by law. Please note that if you report anonymously and provide no means of contact, we will not be able to acknowledge receipt, request clarifications, or inform you of the outcome.

Where a report concerns another person, that person is also a data subject. In accordance with Article 14 GDPR, we will inform any person identified in a report about the processing of their personal data and about their rights, as soon as this is possible without prejudicing the assessment or investigation of the report or risking the identification of the reporting person. The identity of the reporting person is not disclosed to the person concerned.

USE AND EXCHANGE OF DATA

The Company respects your right to protect your privacy and personal information and therefore uses the data collected via its Website for the aforementioned purposes. For this reason, it does not sell or trade your personal data. Save for the analytics data described in the “Cookies and Tracking Technologies” section above, which, where you have given your consent, is processed by Google as our analytics provider and may be transferred outside the European Economic Area under the safeguards set out in that section, the Company does not share or make your personal data accessible to third parties, nor does it transfer such information outside the European Union.

RETENTION PERIOD OF DATA

The Company will keep the personal data it collects through its Website for the period of time that is absolutely necessary for the fulfilment of the above processing purposes and for compliance with its legal obligations, in accordance with the requirements of the applicable legislation.

Where processing is based on your consent, if you withdraw that consent we will delete your data from our electronic and physical files, unless their retention is necessary for compliance with a legal obligation as described above, or for the establishment, exercise or defence of our rights or legitimate interests before judicial or other authorities.

The Company retains:

Contact Form data: for a maximum of one (1) year.

Bribery Complaint Form data: for as long as necessary and proportionate for the handling of the report, namely for the duration of the assessment and investigation of the report and any resulting proceedings, and for five (5) years following their conclusion, or for such longer period as may be required for compliance with a legal obligation or for the establishment, exercise or defence of legal claims. Because this processing is based on our legal obligations and not on consent, it is not subject to withdrawal of consent. Reports submitted anonymously that contain no identifying information are retained under the same rules, on a de-identified basis.

The Company is committed to the secure destruction of your personal data, without any possibility of recovery.

INFORMATION SECURITY

The security of your personal data is our absolute commitment. To achieve this, we apply all modern and appropriate for the purposes of processing technical and organisational measures, the response and adequacy of which we check at regular intervals, such as:

-TLS (Transport Layer Security): the TLS protocol used by our Website is the established standard on the Internet for authenticating websites to users and for encrypting data exchanged between users and web servers. TLS-encrypted communication requires all information sent between a client and a server to be encrypted by the sending software and decrypted by the receiving software, thereby protecting personal data while in transit. In addition, information sent over TLS is protected by a mechanism that automatically verifies whether the data has been altered during transmission.

-The personal data collected from the contact forms are sent encrypted and are stored in the e-mail of the Company. They are processed only by members of the Company and are not given or sold to third parties.

YOUR RIGHTS

You may exercise, where applicable, the following rights:

  • The right of access/information, to find out if we process your data, what data we process, for what purpose and their recipients
  • The right to rectification, to correct any deficiencies or inaccuracies of your data
  • The right to erasure (right to be forgotten), to delete your personal data from our records, provided however that their processing is no longer necessary or the retention of your data is not required in order to comply with our legal obligations or to defend our legitimate interests before the Courts
  • The right to restrict processing in case the accuracy of your data is disputed
  • The right to portability, to receive your data or transmit it to another controller in a structured and commonly used format
  • The right to object, with which you can object under certain conditions to the processing of your data
  • The right to withdraw your consent to processing at any time, without prejudice to the lawfulness of processing based on consent before its withdrawal;
  • Your right to be informed of any unwanted and malicious action on the data systems of the Company and which may entail unauthorized access to your personal data.

The Company does not use automated decision-making methods, including profiling.

The Company will make every effort to respond to any relevant request within thirty (30) days of receipt. However, in the event that due to the complexity of your request or due to the volume of information it is not possible to satisfy your request within thirty (30) days, the Company undertakes to inform you within the above deadline in writing of the reasons for the delay and to make every effort to satisfy your request as soon as possible and in any case within two additional months.

The Company reserves the right not to satisfy your request, in case it is deemed manifestly unfounded or excessive, informing you of the reasons for its non-satisfaction.

In any case, you have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr). Call Center: +30 210 6475600, Fax: +30 210 6475628, E-mail: [email protected]

CONTACT

If you have any questions regarding this Policy or more generally, regarding our activities concerning your privacy or wish to exercise any of your rights, you may contact us at the email address: [email protected]

CHANGES TO THIS POLICY

The Company reserves the right to modify this Policy, always in accordance with the applicable rules of law on the protection of privacy and personal data. Visitors to our Website should read this Privacy Policy at regular intervals to be informed about any change that is made, while the Company is committed to making the necessary updates to its visitors and users by any appropriate means, in compliance with the conditions set by the EU General Data Protection Regulation 679/2016.