The 2Pix O.E (hereinafter e-Stapler) considers the security and protection of your personal data to be of utmost priority, regardless of the capacity in which you communicate or cooperate with us, including but not limited to former or active customers, employees, suppliers, or affiliated third parties.

Personal Data

Your personal data includes any information that may lead, either directly or in combination with other information, to your unique identification or to your identification as a natural person. This category includes, but is not limited to, information such as your full name, VAT number, social security number, your physical and e-mail addresses, your landline and mobile phone numbers, your bank/debit/prepaid card numbers, your e-mail addresses, your rating data, your online search history (log files, cookies, etc.), your personal data and your personal data. ), and any other information that allows your unique identification in accordance with the provisions of the General Data Protection Regulation (GDPR 2016/679) and the applicable Greek legislation and the decisions of the Data Protection Authority (DPA).

Who are we

e-Stapler offers invoicing, time management, online payments and expense management applications in the cloud.

The company’s address and contact details are as follows:

Ekavis 6
17564, Athens, Greece
Email: info@e–stapler.net
Website: www.e-stapler.net

This Privacy Policy aims to inform you of the terms of collection, processing and transfer of your personal data that we may collect as Data Controllers.

Personal data collection

e-Stapler will always ask you for the minimum legally required personal data in order to receive our services, including, but not limited to, name, surname, email address, postal address for issuing or sending an invoice or proof of service, billing method, which may include credit card or bank account details in cases of receiving a transfer and details related to the services. The collection of your personal data is almost always done for the performance of a contract between us in your capacity as a user of our services and/or as a supplier and/or as a visitor to our website.

e-Stapler retains your personal data only for as long as required by the contractual terms of each service, in conjunction with the applicable economic, tax and other legislation, based on the purpose of processing and then anonymizes or destroys them.

Personal data of minors

In general, we do not collect or process personal data of minors in the performance of our activities, nor do we provide services to persons under the age of 18.

Lawfulness of processing

e-Stapler will use your information for at least one of the following legitimate processing purposes:

• For the signing and execution of a contract between us and the performance of our contractual obligations.
• Because it is necessary to comply with a legal obligation such as fulfilling our tax and accounting obligations.
• To serve our legitimate business interests as well as the legitimate interests of third parties. A legitimate interest is when we have a business or commercial reason to use your information. But even then this use is in accordance with your fundamental rights, for example:
  • To provide you with efficient service and support.
  • To respond to your requests.
  • To improve the security and usability of our website.
  • To perform business transactions with you.
  • To inform you about our new products and services.
  • To record your complaints.
• Because you have given us your consent If we have obtained your valid consent, which you have freely given, then the lawfulness of the processing is based on that consent.

Transmission to third parties

In fulfilling our contractual and legal obligations, your personal data may be provided to various service providers and suppliers. These service providers and suppliers are bound by data processing agreements and are required to ensure data confidentiality and data protection in accordance with the GDPR, e.g.

• External legal advisers
• Financial and business advisors
• IT and telecommunications companies
• External auditors and accountants

In any case, we take appropriate technical and organisational measures to ensure that your personal information is transferred, stored and processed in accordance with appropriate security standards and in accordance with the terms of this Policy and the applicable data protection laws.

Transmission to third countries

e-Stapler does not transfer personal data to third countries (outside the European Economic Area – EEA).

Data storage

We will process and store your Personal Data for the duration of our business relationship and for as long as necessary to fulfil our contractual and legal obligations.

We will delete your data:

• When it is no longer necessary for the purposes for which the information was collected and processed.
• Upon your request or objection to the processing, provided that there are no legal grounds requiring us to retain this information.
• Where it is not necessary for the purposes of complying with our legal obligations.
• If the collection and processing of the data was based on your consent, after you have withdrawn your consent.

Automated decision-making and profiling

In conducting our business activities, we do not use an automated decision-making process. We may process certain aspects of your data in order to establish a business relationship with you.

Marketing purposes

We may process your personal data to inform you about our services and offers that may be of interest to you or your business.

The personal data we process for this purpose consists of information you provide to us and data we collect when you use our services. We may only use your personal data to market our products and services to you if we have your consent to do so or if we believe we have a legitimate interest in doing so.

You have the right to object at any time to the processing of your personal data for marketing purposes.

Your rights

You have the following rights in relation to the personal data we hold about you:

• To have access to your personal data. This enables you to, for example, obtain a copy of the personal data we hold about you and check that we are processing it lawfully. To obtain the relevant copy you can contact the company or via its website (Contact).
• Request the rectification of the personal data we hold about you. This gives you the opportunity to correct any incomplete or inaccurate data we hold about you.
• Request the deletion of your personal information [known as the “right to be forgotten”]. This allows you to request that we delete your personal data when there is no legitimate reason for us to continue to process it.
• To object to the processing of your personal data [known as the “right to object”] where we have a legitimate interest but there is something specific about you that makes you want to object to the processing for this reason. If you object, we will no longer process your personal data.
• You also have the right to object where we process your personal data for direct marketing purposes. This also includes profiling, insofar as it relates to direct marketing. If you object to processing for direct marketing purposes, we will stop processing your personal data for these purposes.
• Request the restriction of the processing of your personal data. This allows you to ask us to restrict the processing of your personal data, i.e. to use it only for certain purposes.
• Request to receive a copy of your personal data in a structured, commonly used and machine-readable format, in order to transfer this data to other organisations. You also have the right to request that your personal data be transferred directly from us to other organisations you name [known as the right to data portability].
• Withdraw the consent you have given us regarding the processing of your personal data at any time. Please note that any withdrawal of consent does not affect the lawfulness of the processing based on consent before it is withdrawn or revoked by you.

To exercise any of your rights you can contact the Company, or fill in the relevant form via the Company’s website.

Right to complain

Before submitting your complaint you must contact us, exercising your rights under the GDPR above. If we do not meet your requests, or you consider that our response is not what it should be, you have the right to lodge a complaint with the DPA (www.dpa.gr).

Personal data security

We at e-Stapler have trained and responsible staff, and we recognize the importance of protecting the privacy of your personal information. To this end, we have appropriate security policies in place and use appropriate technical and operational tools, such as anonymization, pseudonymization, data encryption, use of firewalls, establishment of access levels, authorized employees, staff training, periodic audits. Any of our partners who have access to the above information use it to serve the above purposes only. We share the information you give us solely in the ways described in this Policy.

Cookies policy

In accordance with the EU’s E-Privacy Directive 2009/136/CE, which is being replaced by a Draft Regulation, our website accepts the use of “cookies”. These are online tools for collecting and analysing information necessary for the operation of the website, see our cookies policy.

Validity of privacy policy

This Policy was published by e-Stapler on 21/12/2022 and is subject to periodic improvement and revision.

Any changes to this Policy will apply to the information collected from the date the revised version is published, as well as to existing information we hold. Your use of the website following the publication of changes will constitute your acceptance of those changes.