At «LUMIPLAN I.K.E.» our goal is to protect and secure the privacy of the information provided to us, always with respect for the trust of our customers and the users of our website.

We always comply with the current national and European data protection legislation regarding the protection of personal data and have implemented a series of actions and procedures so that we are fully compliant with the new General Data Protection Regulation (GDPR) of the European Union. Please review this Privacy and Personal Data Protection Policy.

This Policy forms the basis for the processing by our website of all the personal data that we collect from you or that you provide to us. We retain certain basic information when you visit our website and recognize the importance of keeping this information secure, as well as informing you about how we intend to use it.

Please review this Policy to learn more about how we collect, store, use, transfer, and protect the personal data and information we receive. Also, please inform yourself about the rights you have regarding this collection and processing, the ways in which you can exercise them, and generally how you can contact us for any questions.

  1. Principles governing data processing
  2. Legality of processing
  3. Minors
  4. Collection and use of Personal Data
  5. Transfer of Personal Data to third parties
  6. Rights and how to exercise them
  7. Links to other websites
  8. Provision of professional services
  9. Changes to the personal data protection policy
  10. Contact

Principles governing data processing

a) Legality and transparency

All personal data that we collect is processed in a lawful and fair manner, always in accordance with current legislation and in a transparent way regarding the information we collect about you.

b) Purpose limitation and data minimization

«LUMIPLAN I.K.E.» collects your personal data for specific, explicit, and lawful purposes, and it will not be further processed in a manner incompatible with those purposes. Furthermore, only the appropriate and necessary data is collected to the extent required for the purpose for which it is processed. That is, the information and data you share with us will not be subject to further unlawful processing, unless there are reasons of public interest.

c) Accuracy

Your personal data is accurate and, when necessary, kept up to date. «LUMIPLAN I.K.E.» takes all reasonable measures for the immediate deletion or correction of inaccurate personal data through the provided data management form as well as via direct communication through email (e-mail), as detailed below.

d) Limitation of the storage period

«LUMIPLAN I.K.E.» retains your personal data only for the period required for the purposes of its processing or to comply with each individual’s request, or until you request its deletion by the data subject (and in any case not more than 5 years, unless we continue to retain it as provided by current legislation).

e) Integrity, confidentiality, and data security

«LUMIPLAN I.K.E.» implements appropriate security policies and procedures so that your personal data is processed in a manner that guarantees the requisite security, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage, by using appropriate technical and organizational measures.

Despite the efforts made by «LUMIPLAN I.K.E.», security cannot be absolutely guaranteed against all threats. In the event of a loss or breach of personal data, we have a specialized incident response team and a procedure to address such incidents in order to restore the breach as soon as possible, limit any potential consequences, and comply with our legal obligations. We make every possible effort to ensure that access to your personal data is limited to those who need to be aware of it. Individuals who have access to the data are required to maintain its confidentiality. In the event of a breach of your personal data, we will notify you immediately by all available means.

Legality of processing

For the processing of your personal data and information to be lawful, certain conditions must be met. «LUMIPLAN I.K.E.», always in compliance with Greek and EU legislation, collects only the personal data that is necessary and required, adhering to the following legal conditions:

a) Your consent: For the processing of the data you provide to us, you must first give us your consent by accepting the terms of use and this website’s privacy policy, including the use of cookies. Occasionally, we may ask for specific permission to process some of your personal data, and the processing of your personal data will only take place in that manner if you agree. You may withdraw your consent at any time either by completing the “Personal Data Management Request” (through which you may at any time request the withdrawal of your consent regarding the processing of certain personal data as well as the extraction, correction, or deletion of your personal data held by us), or by contacting «LUMIPLAN I.K.E.» at info@lumiplan.gr.

In general, you are not required to submit personal data to «LUMIPLAN I.K.E.» online, but we may ask you to provide certain personal data in order to receive additional information about our services and events. «LUMIPLAN I.K.E.» may also request your permission for certain uses of your personal data, and you can either consent or refuse these uses. If you agree to the consent clause for specific services or communications, such as an electronic newsletter, you will have the option to unsubscribe from the respective mailing list at any time by following the instructions included in each communication. If you decide to unsubscribe from any service or communication, we will endeavor to delete your data as soon as possible, although it may require some time and/or additional information before we can process your request.

b) Performance of a contract: This occurs when the processing of your personal data is necessary for the fulfillment of our obligations arising from a contract, when you are a contracting party, or upon your request prior to entering into a contract.

c) Legal obligation: This occurs when we are obliged to process your personal data in order to comply with a legal obligation, such as keeping records for tax purposes or providing information to a public authority or law enforcement agency.

d) Legitimate interest: We may process data about you when we have a legitimate interest in carrying out a lawful activity in order to ensure the continuity of that activity, provided that it does not override your interests.

e) Public interest: At times, processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

Minors

«LUMIPLAN I.K.E.» recognizes the importance of protecting the personal data of children, especially in an online environment. If the child providing consent for the processing of their personal data is 16 years of age or older, then the processing is in accordance with the law. If the child is under 16, such processing is lawful only to the extent that the consent is provided or approved by the person responsible for the child’s care.

Collection and use of Personal Data

4.1 What data we collect

We collect your personal data provided that you choose to provide it (for example, if you contact us via email or subscribe to certain services). In some cases, you may have previously provided your Personal Data to «LUMIPLAN I.K.E.». By registering and/or submitting your personal data to «LUMIPLAN I.K.E.», you also consent to the use of such data in accordance with this Statement. Your personal data is not used for other purposes unless we obtain your permission, or unless such use is required or permitted by law or professional standards. For example, if you register on the «LUMIPLAN I.K.E.» website and provide information about your preferences, we will use that information to personalize your user experience. When you register or log in using a third-party single sign-on service, we may identify you as the same user regardless of using different devices and personalize your experience on any other «LUMIPLAN I.K.E.» websites you visit. In some cases where you have registered for certain services, we may temporarily store your email address until we receive confirmation of the information you provided via email (i.e. by sending an email to the address you provided during registration to confirm your sign-up request).

4.2 Automatic collection of Personal Data

In some cases, «LUMIPLAN I.K.E.» as well as its service providers use cookies and other technologies to automatically collect certain categories of data when you visit us online, as well as through any emails we may exchange. The collection of this data allows us to personalize your online experience, improve the performance, usability, and efficiency of the «LUMIPLAN I.K.E.» online presence, and assess the effectiveness of our service promotion (marketing) activities.

4.2.1 IP Addresses

An IP address is a number assigned to your computer each time you access the internet. It allows computers and network servers to be recognized and to communicate with each other. The IP addresses from which visitors appear to originate may be recorded for IT security purposes and system diagnostics. This data may also be used in aggregated form to analyze trends and website performance.

4.2.2 Cookies

Cookies may be placed on your computer or internet-connected device each time you visit us online. This allows the website to remember your computer or device and serve additional purposes.

Our website will display a warning banner that will require your consent for the collection of cookies. If you do not give consent, your computer or internet-connected device will not be tracked for activities related to the promotion of services. A secondary type of cookies may be required to ensure the necessary functionality. These cookies cannot be blocked by using this banner. Your choice will be stored in a cookie and will be valid for a period of 365 days. If you wish to withdraw your choice, you can do so by deleting your browser’s cookies.

Although most browsers automatically accept cookies, you can choose to accept or reject cookies through your browser settings (often found in the Tools or Preferences menu). You can also delete cookies from your device at any time. However, please note that if you do not accept cookies, you may not be able to fully experience some features of our website and certain parts of our website may not function properly.

Additional information regarding cookie management can be found in your browser’s “Help” section or through websites such as www.allaboutcookies.org.

Other third-party tools and widgets may be used on our website to provide additional functionality. The use of these tools or widgets may install a cookie on your device to facilitate their service and to ensure that your activity is displayed correctly on our websites.

Cookies by themselves do not reveal your email address or personally identify you in any other way. In our analytical reports, we may receive identification information including IP addresses, but only for the purpose of determining the number of unique visitors to our websites and the geographic origin of visitors, and not for identifying individual visitors.

By browsing our website and entering your login details to access areas for registered users only, you agree that we may place cookies on your computer or internet-connected device.

4.2.2.1 Types of cookies

The basic types of cookies that websites may use are described below:

  • Session cookies: These are temporary cookies that remain in your device’s cookie file only for the duration of your visit and are deleted when you close your browser.
  • Persistent cookies: These remain in your device’s cookie file even after you close your browser, sometimes for a year or longer (the exact duration depends on the lifetime of each cookie). Persistent cookies are used when the website administrator needs to recognize you across multiple visits (e.g., to remember your username or your site preferences).
  • First-party cookies: These are cookies installed on your device by the website you are visiting. This includes assigning a unique identifier to you for the purpose of tracking your navigation on the website. Website administrators often use first-party cookies for managing visits and for identification purposes.
  • Third-party cookies: These are cookies used by third parties, such as social networks, to track your visits to various websites where they advertise. The website administrator has no control over these third-party cookies.

4.2.2.2 Cookies from video service providers (Google, Vimeo, DailyMotion, etc.)

These providers may place cookies on your device if you watch videos on our website provided as an external service. If you disable these cookies, you may not be able to view the embedded videos from our website.

4.2.3 Google Analytics

«LUMIPLAN I.K.E.» uses Google Analytics. More information about how «LUMIPLAN I.K.E.» uses Google Analytics can be found here: http://www.google.com/analytics/learn/privacy.html

In order to provide website visitors with more choices regarding the collection of their data by Google Analytics, Google has developed the Google Analytics Opt-out Browser Add-on. The add-on communicates with the Google Analytics JavaScript (ga.js) to indicate that information about the website visit should not be sent to Google Analytics. The Google Analytics Opt-out Browser Add-on does not prevent the transmission of information to the website itself or to other web analytics services.

4.3 Social network applications and widgets

The «LUMIPLAN I.K.E.» website may host blogs, forums, crowdsourcing, and other applications or services (collectively referred to as “social media functions”). The purpose of social media functions is to facilitate the sharing of information and content. Any personal information you provide in any social media function on «LUMIPLAN I.K.E.» may be disclosed to other users of that social media function (unless otherwise stated at the time of collection), over which we may have limited or no control.

The publication of personal data of third parties (e.g., images, etc.) via the «LUMIPLAN I.K.E.» website is unlawful unless prior consent has been obtained from the data subjects.

Transfer of Personal Data to third parties

We do not share personal data with third parties that are not connected to us, unless such sharing is required for our legitimate professional and business needs to respond to your requests and/or is imposed or permitted by law or professional standards.

This includes the following third parties:

  • External service providers: Where necessary, we will delegate certain tasks that contribute to our services to other companies and individuals under data processing agreements. For example, we may provide personal data to partners to host our databases and applications, to provide data processing services, to send you requested information, or for call centers for the purpose of providing support services or conducting interviews during market research projects. All partners of «LUMIPLAN I.K.E.» are fully GDPR compliant and contractually bound to adhere to it. «LUMIPLAN I.K.E.» transfers personal data to them only when they meet our strict data processing and security standards. We only disclose personal data that is necessary for them to provide their services.
  • Business transfer: In the event of reorganization, restructuring, merger, sale, or other transfer of assets, we will transfer data, including personal data, on a reasonable scale, provided that the recipient agrees to treat your personal data in accordance with current data protection laws. We will continue to ensure the confidentiality of any personal data and will inform you when your personal data becomes subject to a different privacy policy.
  • Courts, judicial, or regulatory authorities: «LUMIPLAN I.K.E.» may disclose personal data in order to respond to requests from courts, judicial, governmental, or law enforcement authorities, or where required and appropriate to comply with current legislation, court decisions, or orders from judicial or law enforcement bodies.
  • Public Authorities: «LUMIPLAN I.K.E.» may disclose personal data in cases of inspections by public authorities, such as those related to the protection of personal data, security, or tax audits.

Indicatively, your personal data may be disclosed to the following recipients:

  • manbiz
  • Google
  • Mailchimp
  • Hetzner

Additionally, «LUMIPLAN I.K.E.» may transfer some personal data outside the EEA (European Economic Area) to external companies that cooperate with us or on our behalf for the purposes described in this Privacy Statement. «LUMIPLAN I.K.E.» may also store personal data outside the EEA. If this occurs, your personal data will continue to be protected by agreements we have made with organizations outside the EEA, which are in a form approved by the European Commission. By providing personal data via the internet, visitors consent to such transfer and/or storage of their personal data abroad.

«LUMIPLAN I.K.E.» will not transfer the personal data you provide to any third parties for their direct use for promotional purposes (marketing).

Rights and how to exercise them

If you have provided personal data to «LUMIPLAN I.K.E.», you have the following rights:

  • Access: You have the right to access and extract your personal data. Before we provide you with personal data, we may ask you for proof of your identity and sufficient information regarding your transactions with us to identify your personal data.
  • Correction: If the data we hold about you is inaccurate, you can correct it by editing your profile, via the “Personal Data Management Request,” or alternatively ask us to correct any inaccuracies.
  • Objection and restriction of processing: You have the right to object to the processing of your personal data by us, if we no longer have the right to use it for any lawful reason, or to request that the processing be restricted in certain cases, such as for reasons of data accuracy and legality.
  • Right to data portability: Upon your request, we will transfer your data to another data controller, where technically feasible, provided that the processing is based on your consent or is necessary for the performance of a contract.
  • Deletion: You have the right to request the deletion of your data in certain cases, such as if it is no longer necessary for processing or has been retained in our records for an extended period.

You can exercise the above rights by completing the “Personal Data Management Request,” through which you may at any time request the extraction, correction, or deletion of your personal data held by us.

You may also submit a request or exercise your rights by contacting us at info@lumiplan.gr and we will make every reasonable and practical effort to comply with your request, provided that it is in accordance with applicable law and professional standards.

Links to other websites

The website of «LUMIPLAN I.K.E.» may contain links to other websites for your convenience and information. These websites operate independently, and since they do not cooperate with «LUMIPLAN I.K.E.», they are not under our control and we are not responsible for any unlawful processing of your personal data. They may have their own privacy policies, which we encourage you to review before disclosing any personal data when visiting external links.

Provision of professional services

«LUMIPLAN I.K.E.» collects personal data during the provision of professional services – usually when providing services to individuals, employers, businesses with individual clients, and in the public sector. Our relationships with clients are governed by cooperation letters and general terms of transactions, including the use of the personal data we collect. «LUMIPLAN I.K.E.» provides various types of services, and its role may not always be clear to the data subjects. However, «LUMIPLAN I.K.E.» complies with its obligations arising from the current Greek and European data protection legislation, as applicable, and the relevant regulatory guidelines related to the management of personal data.

Changes to the personal data protection policy

«LUMIPLAN I.K.E.» may periodically modify this Policy to adapt it to national and EU legislation and to reflect our recent privacy practices. When changes are made, we will record the date of modification or revision at the end of this page and, whenever deemed necessary, we will inform you of the changes.

Contact

If you have any questions, comments, or complaints regarding the management or protection of your personal data by us, or if you wish to modify your personal data or exercise any of your rights as a data subject, please contact us at info@lumiplan.gr.

This policy was last revised on February 23, 2025.