See the English version of the Privacy & Personal Data Protection Policy at the end of this page.

Privacy and Personal Data Protection Policy

Taking into account the provisions of the current legislation on the protection of personal data, and in particular Law 4624/2019 and Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter the "Regulation"), through this Privacy Policy (hereinafter the "Policy") we wish to inform you about the processing of personal data carried out through the website "ison.gr" (hereinafter the "Website"), so that you have all the information that will help you make an informed decision on whether to use or continue to use the Website.

1. Definitions

"Personal Data" means any information that can directly or indirectly identify a living natural person, such as, but not limited to, full name, home address and contact details.

"Data Processing" means any operation or set of operations carried out with or without the use of automated means on personal data or sets of personal data.

"Data Subject" means the person to whom the personal data relate.

"Controller" means the person who determines the purposes and means of the processing of personal data.

2. Processing Manager

The company responsible for the processing of your personal data is the company with limited liability under the name "LIMITED LIABILITY COMPANY FOR ADVANCED MANAGEMENT SYSTEMS APPLICATIONS" and the distinctive title "ISON PSYCHOMETRICA" (hereinafter "ISON"), "we", "the Company"), having its registered office in Attica, at Louise Riancour Street, No. 64,P.O. Box 11523, with the registration number 095407750, which, as the owner of the Website, determines the purposes and means of processing your data when you enter the Website.

3. What data we collect from you

Through our website we collect two types of data:

α) Data provided directly by you.

b) Data collected through cookies and similar technologies that help us understand and improve your experience on the Website and provide you with personalized content.

3.1. Personal data provided by you

We collect information that may lead to your direct or indirect identification when this information is provided by you for the purpose of using certain features of our Website, such as to purchase a product or a package of consulting services, seminars and career guidance programs, to take a psychometric or other test, and to contact us for any reason you wish.

Specifically, we collect the following categories of personal data by processing activity:

α) Purchase of products/services and placing an order via the Website: If you wish to purchase a product through our Website we will collect the following data: Name, contact phone number, email address, age, studies. In addition, if you wish to receive an invoice: your name, VAT number, registered office, competent tax office and your profession.

b) Making payments: The payment of the products and services you have added to your cart is carried out through a secure login to the website of the partner electronic payment service provider (Stripe) in the ways and procedure defined in the above platform. Through our Website we do not collect or process any information related to your payments, such as your debit/credit card number. Thus the transactions you make are completely secure and for this reason you need to re-register them for transactions through the Website.

c) Contact: if you contact us, we will collect your email address, as well as any other data that may be included in that communication (such as your full name).

d) Newsletters: if you express interest or subscribe to our Website's Newsletter, we collect your email address in order to send you updates on products, seminars or events that may be of interest to you.

e) Attendance of online seminars (webinars):ISON provides through the Website the possibility of online attendance of seminars and other educational or consulting programs. These webinars are recorded through the Zoom web platform in order to provide the possibility of online monitoring by the participants of these webinars for a period of one month after their conduct. In case a participant does not wish to have his/her personal data collected through the recording of the webinar, he/she may keep his/her computer camera turned off and log in to the platform under a pseudonym.

3.2. Automatically collected data

Cookies are used on our website to improve your experience and provide tailored content. Cookies are small text files sent and stored on your device that allow us to identify you as a visitor to the Website. This helps us to improve our services by making the Website more effective, and to tailor the products and services offered and advertised to you, both within the Website and on other websites or social media. Such information may include information about the computer, mobile device or other devices you use to access our Site, your IP address, date and time of access, geolocation information, unique device identifiers, browser type, browser language and other preferences that are automatically collected.

In order to collect and process data through cookies that are not necessary for the operation of the Website, we require your consent. You have the right to withdraw your consent at any time, without prejudice to the lawfulness of the processing carried out on the basis of your consent before its withdrawal. You can manage your cookie preferences and opt out of the collection and management of your preferences through the following websites.

For more information about the use of Cookies on our Website you can visit our Cookies Policy.

4. Purpose of processing your personal data

Your personal data may be processed on our Website only if this is necessary to serve one of the legitimate purposes listed below:

5. Data transfer/sharing conditions.

In order to achieve the legitimate purposes described in this Privacy Policy, we may disclose or grant access to your personal data, where absolutely necessary and subject to the recipients' binding the data recipients to strict confidentiality and privacy obligations, to our partners who support the services we provide to you, such as:

- Payment service providers and financial institutions.

- Product dispatch service providers

- Technology service providers.

- Customer support providers.

- Providers of advertising and marketing services.

- Data storage providers.

- Data security partners

- Detection and prevention bodies to combat fraud.

Further, we may disclose personal data if required to do so by law, or for the purposes of a judicial proceeding or search warrant, or if, in our discretion, we believe that such action is necessary to comply with our legal obligations. In this regard, we may find it necessary to transfer data to the competent authorities and/or our legal advisors for the purposes of judicial investigation, prevention, or action regarding suspicious or illegal activities including, but not limited to, fraud, potential threats to the public or private safety of any person, violations of our Terms of Service, or as otherwise may be determined by law.

Under no circumstances will we sell your personal data to third parties for any reason. The privacy of personal data is strictly observed by ISON.

6. Data Security

In order to keep your personal data secure, we take appropriate technical, physical, legal and organisational measures, which comply with data protection legislation. In particular, we implement appropriate technical security measures to ensure that your personal data is kept secure, including strong encryption, access restriction and extensive logging and auditing functionality on our systems.

All third party processors with whom we contract for the provision of our services and the proper functioning of the Website (including our service providers) are carefully selected and contractually bound by strict conditions to comply with the law and ensure the protection of your personal data.

7. Retention period

We will retain your personal data for as long as necessary for the purposes for which we collect it in the fulfilment of our contractual and legal obligations. In particular:

- Where we retain your personal data in the context of a transaction, i.e. in order to provide you with a service or sell you a product, we will retain your data for the period specified by the applicable legal and regulatory framework, and in any case for the entire duration of the transactional relationship between us and its individual contractual obligations. The maximum period of retention of your data in this case is twenty (20) years, i.e. the general limitation period for claims provided for under Greek law.

In rare cases, such as in the case of pending legal proceedings, we may retain your data for a longer period of time, in particular until the competent court issues an irrevocable decision.

- Where we retain your personal data by virtue of your consent (except for cookies, the retention period of which is specifically regulated below), the data will be retained for five (5) years from the date of receipt, unless you withdraw your consent earlier, in which case it will be deleted immediately.

- Where we retain your personal data to comply with a legal obligation (including to prevent misconduct and fraud), we will retain the information for at least the period necessary to comply with that obligation (e.g. tax obligations).

- As to the retention period of your data collected through Cookies and other similar technologies you can find out more here.

8. What are your rights regarding our processing of your data?

As the data subject of your data, the Regulation gives you a number of rights in order to ensure their optimal protection. Your rights may be exercised subject to the conditions set out in the legislation, by contacting our Data Protection Officer at dpo@ison.gr.

• Right of access, i.e. the right to request to be informed whether we process data and, if so, what this data is, and some other information, such as the purpose of processing, recipients, etc.
• Right of correction, i.e. the right to request the correction or completion of your data (important note: you can correct any data through your profile),
• Right to erasure, i.e. the right to request, under certain conditions, the deletion of your data,
• Right to restriction of processing, i.e. the right to obtain, under certain conditions, the restriction of our processing of your data
• Right to data portability. You have the right to receive all the personal data you have provided to us in a structured, commonly used and machine-readable format, as well as to require us to transfer it to another controller, where technically feasible, under the terms and conditions set out in the Act.
• Right to object, i.e. the right to object at any time to the processing of your data, which is based on our legitimate interest (marketing).
• Right to withdraw consent. Where your consent is the legal basis for the processing of your personal data, you have the right to withdraw it at any time without affecting the lawfulness of the processing carried out on the basis of the consent prior to its withdrawal.

Finally, in the event of a data breach, which may put your rights and freedoms at high risk, and provided that it does not fall within one of the exceptions provided for in the GDPR, we are obliged to inform you without undue delay.

We undertake that within one month of receiving your request, we will inform you of its progress.

9. Right to complain

You have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data violates applicable law. In Greece, this authority is the Personal Data Protection Authority.

1-3 Kifissia Avenue, 115 23, Athens, Greece

Fixed Phone: +30-210 6475600

Fax: +30-210 6475628

E-mail: contact@dpa.gr

10. Processing of children's data

We do not knowingly collect personal data from children. If we become aware that we have collected data of a child (under the age of 15) without the consent of his/her parent or guardian, we commit ourselves to proceed immediately to their permanent deletion.

In this context, if you are a child (under 15 years old) and you wish to contact us for any reason, such as if you wish to participate in a counselling programme, we must first obtain the consent of your parent or guardian. For this reason, if you wish to participate in a program, please inform your parents and ask them to contact us directly.

11. Data Protection Officer

Our Company, in order to ensure the optimal protection of your data, has appointed a Data Protection Officer (DPO). The DPO is Mr.Lambros Saplaouras, Attorney at Law (dpo@ison.gr). Any natural person of our company who processes or has access to your personal data, acts under the absolute supervision of the DPO.

12. Contact

For any query regarding this Policy and the processing of your personal data, you can contact either the Data Protection Officer at dpo@ison.gr or directly with us at office@ison.gr or send a letter to Louise Riancour 64, P.O. Box 11523.

13. Changes to the Privacy Policy

We reserve the right to revise this Privacy Policy at any time. If a change to the Policy implies a change to the terms on which you have given your consent, we will ask you again and, if you do not provide it, we will stop the relevant processing.

LAST AMENDMENT: JAN 2024

Privacy and Personal Data Protection Policy

Taking into account the provisions of the current legislation on the protection of personal data, and in particular Law 4624/2019 and Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter the "Regulation"), through this Privacy Policy (hereinafter the "Policy") we wish to inform you about the processing of personal data carried out through the website "ison.gr" (hereinafter the "Website"), so that you have all the information to help you make an informed decision about whether to use or continue to use the Website.

1. Definitions

"Personal Data" means any information that can directly or indirectly identify a living natural person, such as, but not limited to, name, home address and contact details.

"Data Processing" means any operation or set of operations carried out with or without the use of automated means on personal data or sets of personal data.

"Data Subject" means the person to whom the personal data relates.

"Controller" means the person who determines the purposes and means of the processing of personal data.

2 Data Controller

The controller of your personal data is the company under the name "ADVANCE APPLICATIONS IN MANAGEMENT SYSTEMS LIMITED LIABILITY COMPANY" and the distinctive title "ISON PSYCHOMETRICA" (hereinafter "ISON"), with its registered office in Ampelokipi Attica, at 64 Louise Riancourt Str., 115 23, GR, with the V.A.T. number 095407750, which, as the owner of the Website, determines the purposes and means of processing your data when you enter it.

3 What data do we collect?

Through our website we collect two types of data:

a) Data provided directly by you.

b) Data collected through cookies and similar technologies that help us understand and improve your experience on the Website and provide you with personalized content.

3.1 Personal data provided by you

We collect information that may lead to your direct or indirect identification, when this information is provided by you for the purpose of using certain features of our Website, such as to purchase a product or package of counseling services, seminars, and career guidance programs, to perform a psychometric or other test, as well as to contact us for any reason you wish.

Specifically, we collect the following categories of personal data per processing activity:

a) Purchase of products/services and placing an order through the Website: In case you wish to purchase a product through our Website we will collect the following data: name, contact phone, email address, age, studies. In addition, if you wish to issue an invoice: your name, VAT number, registered office, competent Tax Office, and profession.

b) Making payments: the payment of the products and services you have added to your shopping cart is carried out through a secured connection to the website of the cooperating electronic payment service provider (Stripe) in the ways and procedure defined in the above platform. Through our Website we do not collect or process any information related to your payments; such as your debit/credit card number. Thus, the transactions you make are completely secure and for this reason you need to re-enter them for transactions through the Website.

c) Contact: in case you contact us, we will collect your email address, as well as any other data that may be included in this communication (such as your name).

d) Newsletters: in case of expression of interest or subscription to the recipient list of the Newsletter of our Website, we collect your email address to send you updates about products, seminars or events that may interest you.

e) Attendance of webinars: ISON provides through the Website the possibility of online attendance of seminars and other educational or consulting programs. These webinars are recorded through the online platform Zoom to enable participants to watch them online for a period of one month from their conduct. In case a participant does not wish to collect his/her personal data by recording the webinar, he/she may keep his/her computer camera closed, as well as log in to the platform under a pseudonym.

3.2 Data collected automatically

Cookies are used on our website to improve your experience and provide personalized content. Cookies are small text files sent and stored on your device that allow us to recognize you as a visitor to the Website. This helps us improve our services by making the Website more effective, but also to customize the products and services offered and advertised to you, both within the Website and on other websites or social media. Such information may include information about the computer, mobile device, or other devices you use to access our Site, your IP address, date and time of access, geolocation information, unique device identifiers, browser type, browser language and other preferences collected automatically.

To collect and process data through cookies that are not necessary for the operation of the Website, we require your consent. You have the right to withdraw the consent you have given us at any time, without affecting the lawfulness of the processing carried out based on your consent before its withdrawal. You can manage your cookie preferences and opt out of the collection and management of your preferences through the following websites: http://www.aboutads.info/choices and http://www.youronlinechoices.eu/.

For more information on the use of Cookies on our Website you can visit our Cookies Policy.

• Purpose of processing your personal data

Your personal data may be processed on our Website only if this is necessary to serve one of the following legitimate purposes:

4. conditions for data transfer/sharing.

In order to achieve the legitimate purposes described in this Privacy Policy, we may disclose or grant access to your personal data, where strictly necessary and subject to the commitment of the recipients of the data with strict obligations of confidentiality and protection of your personal data, to our partners who support the services we provide to you; such as:

- Payment service providers and financial institutions.

- Product shipping service providers

- Technology service providers.

- Customer support providers.

- Advertising and marketing service providers.

- Data storage providers.

- Data security partners

- Anti-fraud detection and prevention bodies.

Furthermore, we may disclose personal data if required to do so by law, or for the purposes of a judicial action or search warrant, or if, in our sole discretion, we consider that such action is necessary to comply with our legal obligations. In this context, it may be necessary to transmit data to the competent authorities and/or our legal advisors for the purposes of judicial investigation, prevention, or measures regarding suspicious or illegal activities including but not limited to fraud, possible threats to the public or private security of any person, violations of the Terms of Use of our service, or as may otherwise be determined by law.

Under no circumstances will we sell your personal data to third parties for any reason. The confidentiality of personal data is observed by ISON with great strictness.

5. Data Security

To keep your personal data secure, we take appropriate technical, physical, legal, and organizational measures, which comply with the legislation on the protection of personal data. In particular, we implement appropriate technical security measures to ensure that your personal data is kept secure, including strong encryption, access restriction and extensive logging and control functionality in our systems.

All third-party processors with whom we contract for the provision of our services and the proper functioning of the Website (including our service providers) are carefully selected and contractually bound by strict conditions to comply with the law and ensure the protection of your personal data.

6. Retention period

We will retain your personal data for as long as necessary for the respective purposes for which we collect it while fulfilling our contractual and legal obligations. Specifically:

- Where we retain your personal data in the context of a transaction, i.e. to provide you with a service or sell you a product, we will retain your data for the period defined by the applicable legislative and regulatory framework, and in any case for the entire duration of the trading relationship between us and its individual contractual commitments. The maximum retention period of your data in this case is twenty (20) years, i.e. the general limitation period for claims provided for under Greek law.

In rare cases, such as pending legal proceedings, we may retain your data for a longer period and specifically until a final decision is issued by the competent court.

- Where we retain your personal data pursuant to your relevant consent (except for cookies whose retention period is specifically regulated below), the data will be retained for five (5) years from their receipt, unless you revoke your consent earlier, in which case they will be deleted immediately.

- Where we retain your personal data to comply with a legal obligation (including preventing misconduct and fraud), we will retain the information for at least as long as necessary to comply with that obligation (e.g. tax obligations).

- Regarding the retention period of your data collected through Cookies and other similar technologies, you can see more here.

7. What are your rights regarding the processing of your data on our behalf?

As the subject of your data, the Regulation assigns you a series of rights to optimally protect them. The exercise of your rights may take place subject to the conditions set by law, by contacting our Company's Data Protection Officer at dpo@ison.gr.

• Right of access, i.e. the right to submit a request to be informed if we process data and, if so, what they are, and some other information, such as the purpose of processing, recipients, etc.
• Right of rectification, i.e. the right to request the correction and/or completion of your data (important note: you have the ability to correct any information through your profile),
• Right of erasure, i.e. the right to request, under certain conditions, the erasure of your data;
• Right to restriction of processing, i.e. the right to ensure, under certain conditions, the restriction of processing of your data by us
• Right to data portability. You have the right to receive all personal data you have provided to us in a structured, commonly used, and machine-readable format, as well as to require us to transfer them to another controller, where technically feasible, under the terms and conditions set out in the Law.
• Right to object, i.e. the right to object at any time to the processing of your data, based on our legitimate interest (marketing).
• Right to withdraw consent. If the legal basis for the processing of your personal data is your consent, you have the right to withdraw it at any time without prejudice to the lawfulness of the processing carried out on the basis of consent before its withdrawal.

Finally, in the event of a data breach, which may put your rights and freedoms at high risk, and provided that it does not fall under one of the exceptions provided for in the GDPR, we have the obligation to inform you without undue delay.

We are committed that within one month of receiving your request, we will have informed you of its progress.

9 Right to complain

You have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data violates applicable law. In Greece, this authority is the Personal Data Protection Authority.

1-3 Kifissias Avenue, 115 23, Athens, Greece

Landline: +30-210 6475600

Fax: +30-210 6475628

E-mail: contact@dpa.gr

10 Processing of children's data

We do not knowingly collect personal data of children. In case we become aware that we have collected data of a child (under 15 years old), without having received the consent of the parent or guardian, we undertake to proceed immediately to their definitive deletion.

In this context, if you are a child (under 15 years old) and wish to contact us for some reason, such as if you wish to participate in a counselling program, we must first obtain the consent of your parent or guardian. For this reason, in case you wish to participate in a program, please inform your parents and ask them to contact us directly.

11 Data Protection Officer

Our Company, to optimally protect your data, has appointed a Data Protection Officer (DPO). The DPO is Mr. Lambros Saplaouras, Lawyer (dpo@ison.gr). Any natural person of our company who processes or has access to your personal data, acts under the absolute supervision of the DPO.

12 Communication

For any questions regarding this Policy and the processing of your personal data, you can contact either the Data Protection Officer at dpo@ison.gr or directly with us at office@ison.gr address or send a letter to 64 Louise Riancourt Str., 115 23, Athens, Greece.

13 Changes to the Privacy Policy

We reserve the right to revise this Privacy Policy at any time. If a change to the Policy entails the change to the terms on which you gave your consent, we will ask you again and, if you do not provide it, we will stop the relevant processing.

LAST AMENDMENT: JANUARY 2024