Personal Data Protection Policy for Parties Dealing with “Premo E.E.”

PREMO E.E., operating under the trade name PREMO IPM (“the Company”), as Data Controller, respects the rights of its clients, employees, suppliers, and all other data subjects, and places primary importance on compliance with applicable data protection legislation — specifically the General Data Protection Regulation (GDPR) 2016/679 and Greek Law 4624/2019.

1. What Personal Data We Process

Depending on your relationship with the Company, data processed may include: full name, contact details (address, phone, email), property ownership details, monthly common charges, date of birth, marital status, spouse/children names, ID/passport number, Tax ID (AFM), Social Security number (AMKA), tax office, salary details, bank account, CVs, health data, work history, and education details.

Data is collected via: forms, signed contracts, documents you provide, emails, our website (e.g. CVs submitted for employment), publicly accessible sources, or from third parties under a management contract.

1. Cookies

The website uses only strictly necessary cookies required for its operation.

III. How We Use Your Information

Your data is used to: fulfill our contractual obligations; process and complete tasks assigned to us; communicate with you; inform existing clients of new offers; comply with legal obligations (tax, insurance law); defend or assert legal claims; and disclose to competent public authorities when required by law.

1. Sharing of Data

Data is not shared with third parties except: authorized employees; third-party service providers (legal, accounting, banking, IT, security, insurance firms) bound by GDPR; parties with your consent; insurance bodies and public authorities; and supervisory, judicial, or independent authorities in Greece or Europe when legally required.

Cross-border transfers outside the European Economic Area (EEA) are only permitted where adequate protection is ensured, or under appropriate data transfer agreements or legal exceptions.

1. Data Retention

Data is retained for the duration of the contractual relationship and afterwards as required by law (e.g. tax regulations), up to a maximum of 15 years. In case of litigation, data is retained until a final court decision is issued.

1. Your Rights

After identity verification, you may exercise the following rights (in writing or by email):

• Information & Access – request details about how your data is processed
• Rectification – correct inaccurate or incomplete data
• Erasure (“Right to be Forgotten”) – request deletion where legally applicable
• Restriction of Processing – limit how your data is used
• Objection – withdraw consent and request cessation of processing
• Portability – receive your data in a structured, machine-readable format or have it transferred to another provider

VII. System/Process Security

Personal data is stored on secure servers, protected by firewalls and antivirus measures. The Company has taken reasonable security measures and has redesigned its processes for better data protection.

VIII. Policy Updates

This policy may be updated periodically. Any significant changes will be prominently announced on the Company’s website.

1. Contact Us

For questions or to exercise your rights, contact:

• Address: Plateia Agiou Louka 3, Athens, 11144
• Email: info@premo.gr (with a copy of your ID)

If you believe your rights are still being violated after contacting us, you may file a complaint with the Hellenic Data Protection Authority (www.dpa.gr, tel. 210 6475600).