Our company fully shares your concern regarding your personal data. We have recently made a number of changes, which reflect the increased requirements of the EU General Data Protection Regulation (known as the "GDPR"). Our goal is to be as honest and transparent as possible about the personal data that we collect, as well as the way we process them.
We collect personal data only for strictly defined purposes which are directly related to our business activity. The legal basis of the processing is usually your consent, which is obtained after honest and understandable information. In addition, your data may be processed either to be able to execute the contract between us, or to comply with the provisions of the law or to fulfill legitimate interests that are mainly related to our business activity.

We have implemented a program of compliance with the new General Regulation, in order to secure your data. As part of this program, we have developed a mechanism to respond to your requests related to the exercise of your rights.

The GDPR provides for enhanced rights for natural persons (data subjects). So, as subjects, you can ask us to:

• inform you about the data we hold about you and how we process it. If you wish, we will provide you with a copy at your own expense. (Right of access)
• correct inaccuracies or errors, fill in gaps or update your data. (Right of correction)
• delete data, if we do not keep it for a specific, legal, and declared purpose. (Right to oblivion or Right to delete)
• suspend processing a) while questioning the accuracy of the data, b) if you consider the processing illegal (but do not wish to delete it), c) when the data is not necessary for the purpose of processing and d) for as long as it is disputed if the reasons why we are processing your data outweigh the ones you invoke to stop.
• oppose at any time for reasons relating to the processing of personal data which we carry out in particular for the purposes of direct marketing or profiling. The objection may, in particular, concern your compliance with a decision which we have taken by automated means. In the latter case, you can ask us to allow you to intervene. (Right of objection - Automated individual decision making)
• provide you with your data in a specific format (usually machine-readable) or transfer it directly to another person in charge at your suggestion, if, of course, this is technically possible. (Right to portability).
• not to process your data from now on, giving you the opportunity to freely revoke the consent (consent) you have given us.

You can address your requests to the address info@ctas.gr. We are committed to meeting all your requests within one month. In extremely rare cases, where the satisfaction of your rights is almost impossible for us, we will inform you immediately explaining the reasons for our relative weakness.

We remain at your disposal for any question or clarification. Contact us by phone at 211 1821900 or via email at info@ctas.gr