1. Data Controller
   The company PaperGraph AE (hereinafter “the Company”, “we”, “us”) is the Controller of your personal data. Our contact details are as follows: Address: Industrial Park, 203 00 Loutraki PO Box 4 Email:info@papergraph.grPhone: +30 27443 06000
2. What data do we collect?
   We collect and process the following data:

• Personal data: first name, last name, email, phone, address.
• Usage data: information about how you use our website, including cookies.
• Payment details: in case of transactions.

3. How do we use your data?
   Your data is used for the following purposes:

• To provide our services and execute your transactions.
• To communicate with you about our services or to respond to your requests.
• To improve your experience on our website and to analyze its usage. (through cookies and similar technologies).

4. Legal Basis for Data Processing
   We process your data on the following legal bases:

• Consent: We process your personal data if you have given your express consent (e.g. to send newsletters).
• Contract performance: The processing of data is necessary for the performance of the services you have requested.
• Legitimate interest: For purposes such as improving our services and ensuring the security of our platform.

5. User Rights
   Under the GDPR, you have the following rights:

• Right of access: You have the right to request access to your personal data.
• Right to rectification: You can request the rectification of inaccurate or incomplete data.
• Right to erasure: You have the right to request the erasure of your personal data (“right to be forgotten”).
• Right to restriction of processing: You can request restriction of processing of your data under certain circumstances.
• Right to data portability: You can request your data in a structured, commonly used and machine-readable format.

To exercise your rights, contact us at info@papergraph.gr

6. Disclosure of Data to Third Parties
   Your data is not shared with third parties unless required by law or for the performance of our services. In some cases, we work with third party service providers (e.g. hosting companies) who process your data based on our instructions.
7. Data Retention
   Your personal data is kept for as long as is necessary to achieve the purposes described in this Policy or for as long as provided by law.
8. Data Security
   We take all necessary technical and organizational measures to protect your data from unauthorized access, loss, alteration or disclosure.
9. Use of Cookies
   Our website uses cookies to improve your experience. You have the option to accept or reject non-essential cookies through the special banner that appears when you visit the website. More information can be found in the “Cookies Policy”.
10. Filing a Complaint
    If you consider that the processing of your personal data violates the GDPR, you have the right to file a complaint with the Personal Data Protection Authority (https://www.dpa.gr/).