Privacy Policy
Last updated:
This Policy explains what personal data we process when you visit nefus.eu or contact us, why, on what legal basis, how long we keep it and what your rights are. It is governed by the General Data Protection Regulation (EU) 2016/679 ("GDPR"), Greek Law 4624/2019 and Greek Law 3471/2006.
1. Data controller
The controller of your personal data is:
- Legal name: NEFUS Ε.Ε. ("Nefus Telecoms")
- Address: Konstantinou Palaiologou 4, Athens 104 38, Greece
- VAT no.: 803214464, Tax office: ΚΕΦΟΔΕ Αττικής, General Commercial Registry (GEMI) no.: 192268103000
- Phone: +30 210 220 0595
- Email: info@nefus.eu
For any matter regarding your personal data, contact us at info@nefus.eu.
2. What data we collect
- Contact form details: name, email, phone (optional), company (optional), service of interest and the content of your message.
- Details from email or phone contact: whatever you provide when you contact us.
- Technical data: IP address, browser and device type, date and time of access and the page requested. These are logged automatically by our hosting provider for the operation and security of the website.
- Your cookie choice (nefus_consent cookie).
- If you allow the Google Maps map, Google receives your IP address and may set cookies (see the Cookie Policy).
The website does not use analytics, advertising or behavioural tracking tools and does not collect special categories of data.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Responding to your request or question and sending a quotation | Steps prior to entering into a contract at your request (Art. 6(1)(b) GDPR) or our legitimate interest in responding to people who contact us (Art. 6(1)(f) GDPR) |
| Operation, security and protection of the website against misuse | Legitimate interest (Art. 6(1)(f) GDPR) |
| Loading the Google Maps map | Your consent (Art. 6(1)(a) GDPR and Art. 4(5) Law 3471/2006), which you may withdraw at any time |
| Storing your cookie choice | Strictly necessary (Art. 4(5) Law 3471/2006) and legal obligation to demonstrate consent (Art. 7(1) GDPR) |
| Compliance with legal obligations (e.g. tax, requests from authorities) | Legal obligation (Art. 6(1)(c) GDPR) |
4. Recipients
We do not sell your data or share it with third parties for marketing. Your data is accessible only to our authorised staff and to the following providers, who process it on our behalf and under our instructions (processors):
- Vercel Inc. (USA): website hosting and technical logs.
- Formspree Inc. (USA): receiving contact form messages and forwarding them to our email.
- Our email service provider, for correspondence with you.
Google Ireland Ltd / Google LLC receives data only if you allow the Google Maps map, and acts as an independent controller under its own privacy policy (policies.google.com/privacy). Data may also be disclosed to public authorities where required by law.
5. Transfers outside the EEA
Some of the providers above are located in, or process data in, the United States. These transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework where the provider is certified, or on Standard Contractual Clauses (Art. 46 GDPR).
6. Retention
- Messages and correspondence: as long as needed to respond to your request and up to 2 years after the last contact, unless a business relationship follows, in which case data is kept for the duration of the contract and as required by tax and other law.
- Technical data (logs): for a short period, according to the hosting provider's settings.
- Cookie choice: 6 months, after which we ask again.
7. Your rights
Under Articles 15 to 22 GDPR you have the right to:
- access your data,
- rectify inaccurate or incomplete data,
- erasure ("right to be forgotten"),
- restriction of processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal. For cookies, use the "Cookie settings" link at the bottom of every page.
To exercise your rights, email info@nefus.eu. We will reply without undue delay and at the latest within one month. We may ask for information to verify your identity.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA), 1-3 Kifisias Ave., 115 23 Athens, Greece, tel. +30 210 6475600, www.dpa.gr, complaints@dpa.gr.
8. Security
We apply appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS) across the website, access limited to authorised staff, and providers that offer sufficient security guarantees.
9. Children
The website is aimed at businesses and is not intended for children under 15. We do not knowingly collect data from minors.
10. Cookies
For the cookies used and how to manage them, see our Cookie Policy.
11. Changes to this Policy
We may update this Policy when the website or the law changes. The current version is always published on this page with its last-updated date.