Privacy Policy and Personal Data Protection

1. Who is responsible for your data – Where can you exercise your rights?

1.1. The Data Controller of your personal data is the company “LIME CODE TECHNOLOGY”, based in Argyroupoli, Attica, legally represented, with telephone number +30 210 9952961 and contact email limecodetech@gmail.com (hereinafter “the Company”).

1.2. The above Company, acting as Data Controller, has appointed a Data Protection Officer with contact email limecodetech@gmail.com . You may send all requests concerning the exercise of your rights listed below (under sections 3.1 to 3.7) to the Data Protection Officer’s email address.

2. General principles of the Company regarding this information

2.1. Any information provided to you through this document, as well as any information you may request from us in the future, is provided free of charge, unless the request is repetitive, excessive, or manifestly unfounded (see more under section 2.3).

2.2. For each of the rights you exercise, the Company will respond within one (1) month from receipt of the request. In case of objective difficulty, complexity of the request, or due to the number of requests, the Company may respond within a maximum total period of three (3) months, either regarding the completion of your request or a justified refusal to comply, for lawful reasons expressly defined in Regulation (EU) 2016/679.

2.3. If the Company considers that any of your above rights are exercised in a manifestly unfounded, excessive, or repetitive manner, it may either impose a reasonable fee for providing further information or refuse to act on the request.

2.4. If the Company has reasonable doubts concerning your identity when you submit a request to exercise any of your rights, it may request additional information necessary to confirm your identity before processing the request.

2.5. If the Company delays responding to your request beyond the justified period, or if you believe your rights are being violated or the Company is not complying with its obligations regarding the protection of your data, you are entitled to lodge a complaint with the supervisory authority: Hellenic Data Protection Authority 1-3 Kifisias Ave., 115 23 Athens, Greece Email: contact@dpa.gr Tel.: +30 210 6475600

2.6. You retain the right to withdraw any consent you may have provided at any time by submitting a relevant written request to the email address of the Data Protection Officer: limecodetech@gmail.com (see section 1.2).

3. What are your rights regarding the Personal Data you have provided to us?

3.1. Right to Information

You have the right to request information regarding the personal data we have received from you and retain for one or more of the purposes described below under sections A to D. This document as a whole serves as a guide for basic information and understanding of the legal framework governing the protection of your personal data. Updates, clarifications, and further explanations may be provided upon submission of a relevant request for the exercise of your right to information (see section 1.2).

3.2. Right of Access

You have the right to request access to the personal data we retain about you and confirmation as to whether such data is being processed. More specifically, you may request information regarding the purposes of processing, the categories of personal data, the recipients or categories of recipients, the retention period, the existence of the right to lodge a complaint with the supervisory authority, any available information regarding the origin of the data when it has not been provided directly by you, the existence of automated decision-making including profiling and the methodology used, safeguards regarding transfers to third countries, and a copy of the personal data that is retained and processed (see section 1.2).

3.3. Right to Rectification

You have the right to request the correction of your personal data if any information we process has changed or has been recorded incorrectly (see section 1.2).

3.4. Right to Erasure

You have the right to request the full or partial deletion of your data where we are entitled to retain and process it, either because it is no longer necessary for the purposes for which it was collected, because you withdraw your consent, or because you consider the purpose of collection unlawful. The Company will respond within a reasonable time (not exceeding one month and, where justified by complexity, not exceeding three months in total), confirming the full or partial deletion of your data or the inability to delete certain data where retention is required by law, public interest, freedom of expression and information, or the establishment, exercise, or defense of legal claims. In such a case, you have the right to lodge a complaint with the supervisory authority and to seek judicial remedy (see section 1.2).

3.5. Right to Restriction of Processing

You have the right to request the restriction of the processing of your data, quantitatively, temporally, or in relation to the purpose of processing, specifically where: (a) you contest the accuracy of your data, for the period required for the Company to verify its accuracy; (b) you consider the processing unlawful but prefer restriction over deletion; (c) the Company no longer needs the data, but you require it for the establishment, exercise, or defense of legal claims; or (d) you have objected to processing pending verification of whether your rights override the Company’s legitimate grounds for processing (see section 1.2).

3.6. Right to Data Portability

You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and the right to transmit that data to another controller without objection, provided that the processing is based on your consent.

When exercising this right, you may also request direct transmission from the Company to a third party without your own intervention. This right is exercised subject to the limitations of the right to erasure (see section 3.4) and must not adversely affect the rights and freedoms of others (see section 1.2).

3.7. Right to Object

3.7.1. You have the right to object to the use of your personal data for the purpose of direct marketing, including profiling related to such direct marketing (see section 1.2).

3.7.2. This right does not apply to Employees / Job Applicants and visitors to the Company’s premises, as such data is not transferred to the Marketing Department and is not processed for those purposes.

4. Can your data be transferred elsewhere?

Your data is not intended to be transferred to any organization outside the Company and its subsidiaries, except for: (a) service providers supporting the Company’s electronic systems and networks, solely for the purpose of fulfilling their contractual obligations to support the Company; and (b) the competent tax authorities, within the framework of compliance with tax legislation, only to the extent required.

Safeguards

We assure you that the Company will apply every appropriate technical and organizational measure to protect your data and will make only the best, minimum, and strictly necessary use and processing of your data, as required by law and solely for the purpose for which it was provided.

Special Provisions for Specific Categories of Data Subjects These provisions apply in addition to the general provisions of this Policy.

(A) COMMUNICATION RECIPIENTS

A.1. Purpose The collection, processing, and retention of your data submitted in the context of communication is carried out exclusively for the purpose of informing you about the Company’s products and activities. All such data is kept only for this purpose and processed only by the Company’s Marketing Department.

A.2. Legal Basis for Processing The legal basis for processing your data is your consent for the fulfillment of the above purpose, pursuant to Article 6(1)(a) of the General Data Protection Regulation.

A.3. Data Retention Period For the above purpose of processing, namely informing you about our products and activities, we consider a retention period of three (3) years to be reasonable and necessary. After the lapse of three years from the date your consent was obtained, the relevant data will be deleted unless you provide renewed consent under the above conditions.

(B) CUSTOMERS – SUPPLIERS and PROSPECTIVE CUSTOMERS – SUPPLIERS

B.1. Purpose – Legal Basis

(a) In the pre-contractual stage, including the completion of an online contact form on our website, direct email communication, telephone communication, or completion of a printed form (where you provide us with your full name, email address, telephone number, address, professional capacity, and/or products of interest), the purpose is to assess the possibility of entering into a transaction with the Company. The legal basis is the Company’s legitimate interest in pursuing its commercial purposes by responding to your request for communication regarding a possible transaction.

(b) If a transaction takes place with the Company, the data you provided during the pre-contractual stage (as well as any further data provided during the course of the transaction) will be processed for the purpose of performing our contract and complying with tax legislation. In this case, the legal basis for processing is the performance of the contract and compliance with legal obligations (Article 6(1)(b) and 6(1)(c) GDPR).

B.2. Data Retention Period

The data referred to in section B.1.(a) will be retained for five (5) years and then deleted. The data referred to in section B.1.(b) will be retained for as long as required by tax legislation.

We update this Privacy Policy whenever necessary. If there are significant changes to this Privacy Policy or to the way we use your Personal Data, we will publish the updated version on our website before the changes take effect and notify you by any appropriate means.