General Data Protection Regulation
1. Scope of application
This Privacy Policy (the “Policy”) describes the practices of VARIO Business Supplies Societe Anonyme, under the distinctive title “VARIO S.A.”, having its registered office in Tavros, Attica, at 205 Pireos Street, 177 78, with Tax Registry Number 999402333, Tax Office: KEFODE Attica, G.E.MI. No. 005714301000, Customer Service telephone number (+30) 210 3418230 and contact email address [email protected] (hereinafter “VARIO” or the “Company”), with respect to the personal data it processes through its website https://www.vario.com.gr/en/ (hereinafter the “Website”), as well as in the context of its business relationships with its commercial partners (collectively, the “Business Relationships”). Where required, we may provide you with more specific privacy notices.
containing additional information regarding specific personal data processing activities.
2. Information We Collect and How We Use It
2.1 Through the Website
Through the Website, we collect the personal data you provide us when you contact us through the Contact Form. For this purpose, we may collect your full name, email address, telephone number, as well as any other information you include in your message.
We use the above data to manage and respond to your request and, where necessary, to contact you in relation to it. If you subscribe to our newsletter or choose to receive marketing communications, we may also use your contact details to send you informational or promotional material regarding the company, our events, offers, products and services, in accordance with applicable law.
You may unsubscribe from our marketing communications mailing list at any time by selecting “unsubscribe” in any relevant email or by contacting us as described in the “Contact us” section.
For information regarding the use of cookies and similar technologies on the Website, please refer to the Cookie Policy.
2.2 In the Context of Our Business Relationships
In the context of our Business Relationships, including transactions through our online store, we may process personal data of business partners (such as customers, suppliers and resellers), as well as their legal representatives or contact persons. Such data may include identification and contact details, Tax Identification Number (TIN), identification document details, bank account details, legalisation documents, tax and social security clearance certificates, and financial information, to the extent necessary for assessing the establishment of a commercial relationship, managing the relationship, executing transactions, invoicing, and maintaining records of existing and prospective business partners.
Where necessary, we may also conduct due diligence, creditworthiness, financial behaviour and/or asset status checks, based on data obtained directly from you, from business information companies, from publicly accessible records (such as, indicatively, the General Commercial Registry (G.E.MI.), the Hellenic Cadastre and other lawful public records), or from other lawful sources, including, where applicable, the “CHECK” Risk Control Registry maintained by TEIRESIAS S.A.
These checks are carried out for the assessment or reassessment of transactional or credit risk in the context of our transaction or business relationship. For further information regarding the above-mentioned Teiresias system and to exercise your rights contrary to Teiresias, please visit http://www.tiresias.gr and https://www.tiresias.gr/media/kljhbcbb/2024-10-geniki-politiki-epexergasias-prosopikon-dedomenon_en-final.pdf.
2.3 Social Media
The Website may contain links to VARIO’s social media accounts, such as LinkedIn, Meta (Facebook, Instagram) and YouTube. When you visit or interact with VARIO’s accounts on these platforms, VARIO may process personal data made available to it through the respective platform, such as your profile information and information regarding your interaction with our content.
At the same time, the providers of the respective platforms process personal data in accordance with their own privacy policies. We recommend that you consult the privacy policies of the respective providers for further information regarding the processing activities they carry out.
2.4 Legal Processing Basis
VARIO processes personal data, depending on the circumstances, on the following legal bases:
a) Article 6(1)(b) GDPR: where processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract (e.g. identifying persons authorised to bind your company for the purpose of signing contracts, providing you, within the context of our cooperation or transactions, with information regarding the prices and offers of our products, processing orders, delivering products, invoicing and providing after-sales service.
b) Article 6(1)(c) GDPR: where processing is necessary for compliance with a legal obligation to which we are subject (e.g. tax and accounting obligations or mandatory disclosures to competent authorities)
c) Article 6(1)(f) GDPR: where processing is necessary for the purposes of our legitimate interests, such as managing our business relationships and communication requests, ensuring transaction security, assessing and mitigating credit or transactional risk, and establishing, exercising or defending legal claims and
d) Article 6(1)(a) GDPR: where you have provided your consent, particularly where consent is required for the sending of marketing communications. Electronic marketing communications are sent with your consent, where such consent is required, or, where the applicable legal requirements are met, within the context of an existing transactional relationship. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to its withdrawal.
3. To Whom We Disclose Your Personal Data
Access to your personal data may be granted, within VARIO and depending on the purpose of processing, to the relevant departments, including, indicatively, the sales, finance and marketing departments.
We may also disclose personal data to the following categories of recipients:
a) business partners, such as external legal or financial advisers, audit firms, business information companies (for obtaining credit risk information), insurers, insurance agents and insurance companies (e.g. for credit insurance), banking institutions (e.g. for carrying out banking transactions with you and/or providing other banking services/products, such as factoring agreements)
b) service providers, such as companies that provide services to or on behalf of us, including companies that host and manage the Website, assist us in maintaining our IT network, provide repair services, customer contact centres, customer support services, advertising companies, customer satisfaction survey companies, invoicing services, or companies that send emails on our behalf
c) other parties where required by law or where necessary to protect our products or services or in connection with corporate transactions (such as a merger, transfer, acquisition or sale, etc.) and
d) other parties with your consent.
4. Data Security and Retention
We take appropriate technical and organisational measures to protect personal data, taking into account the nature, scope, context and purposes of the processing, as well as the relevant risks. If you have reason to believe that your interaction with us is not secure, please notify us immediately in accordance with the “Contact us” section.
We retain personal data only for as long as necessary for the purposes for which it is processed. In determining the retention period, we take into account, among other things:
a) the period during which we maintain an ongoing relationship with you
b) legally mandatory retention periods or periods prescribed by applicable law or
c) whether retention is advisable based on our legal relationship (such as, for example, the applicable limitation period for relevant claims, legal proceedings or audits).
5. Other Links
The Website may contain links to third-party websites and services that are outside our control. We are not responsible for the security or privacy of any information collected by such websites or other services. You should exercise caution and read the privacy statements applicable to the third-party websites and services you use.
6. Your Rights
Subject to the conditions set out in the GDPR, you have the right to access your personal data, rectify inaccurate data, request erasure, restrict processing, data portability, and object to processing. Where your personal data is processed for the purposes of direct marketing, you have the right to object to such processing at any time. Where processing is based on your consent, you may withdraw your consent at any time. To exercise your rights, you may contact us as described in the “Contact us” section.
If you consider that the processing of your personal data infringes applicable legislation, you have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
7. Contact
You may contact VARIO, as the Data Controller, using the following contact details:
205 Pireos Street, 177 78, Tavros, Attica, Greece
Telephone: (+30) 210 34 18 230
Email: [email protected]