GDPR & Your Rights

• Access (Art. 15): a copy of the data we hold about you.
• Rectification (Art. 16): correction of inaccurate or incomplete data.
• Erasure / "right to be forgotten" (Art. 17): deletion where there is no longer a reason to keep the data.
• Restriction (Art. 18): pausing processing while a dispute is reviewed.
• Portability (Art. 20): receiving your data in a structured, machine-readable file.
• Objection (Art. 21): objecting to processing based on legitimate interest or to marketing.
• Withdrawing consent (Art. 7): at any time, without affecting prior lawful processing.
• Automated decision-making (Art. 22): we do not make solely automated decisions with significant effects on you.

Email info@orismos.gr with the subject "GDPR request" and tell us:

• which right you are exercising,
• the details we know you by (e.g. email or company name),
• any clarification about the scope of your request.

We may ask for additional identity verification so that data is never disclosed to the wrong person. Exercising your rights is free of charge.

We respond within one month of receiving your request. For complex cases this can be extended by a further two months, and we will explain why within the first month.

If you believe the processing of your data breaches the law, you may complain to the Hellenic Data Protection Authority, 1-3 Kifissias Ave., 11523 Athens, tel. +30 210 6475600, www.dpa.gr.

When we build or maintain a website, e-shop or CMS for a client, the client is the controller of their own users' data and we act as a processor under an Article 28 GDPR agreement. In that case end-user requests go to the client and we provide technical support for them.