Ροή+ Οργανισμός Εξειδικευμένης Εκπαίδευσης ΙΚΕ - Roe+ Specialised Education Organisation

Privacy Policy  

1. Introduction

This Privacy Policy outlines the practices of Ροή+ Οργανισμός Εξειδικευμένης Εκπαίδεσυης ΙΚΕ (Roe+ Specialised Education Organisation) ("we", "us", "the Company") regarding the collection, processing, and management of personal data from users who visit our website at www.roeplus.org ("Site"), use our services, or otherwise share information with us (collectively: "Users"). Our company provides specialized consulting services in statistical analysis, econometric modelling, risk management, and training in quantitative methods for businesses, academic institutions, and public authorities in Greece and Europe.

2. Legal Basis for Data Processing

In accordance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679) and Greek legislation (Law 4624/2019), the processing of your personal data (i.e., any information that may potentially allow your identification by reasonable means; hereinafter "Personal Information") is based on the following legal grounds:
  • Contractual Performance: For performing our contractual obligations towards you and providing our services (statistical analysis, econometric modelling, risk management, training)
  • Legitimate Interests: For the protection of our legitimate business interests
  • Legal Obligation: For compliance with legal and regulatory obligations to which the Company is subject
  • Consent: Where required, based on your explicit consent
By using the Site, you consent to the collection, storage, use, disclosure, and other uses of your Personal Information as described in this Privacy Policy. We encourage Users to carefully read this Privacy Policy and use it to make informed decisions

3. What Information Do We Collect

We collect two types of data and information from Users:

3.1 Non-Personal Information

The first type is non-identified and non-identifiable information pertaining to User(s), which may be made available or gathered via your use of the Site ("Non-Personal Information"). We are not aware of the identity of a User from which the Non-Personal Information was collected. Non-Personal Information which is collected may include:
  • Aggregated usage information
  • Technical information transmitted by your device (e.g., browser type, operating system, language preference, access time)
  • Information on your activity on the Site (e.g., pages viewed, online browsing, clicks, actions)
3.2 Personal Information

The second type is individually identifiable information, namely information that identifies an individual or may with reasonable effort identify an individual.

Device Information: We collect Personal Information from your device, including geolocation data, IP address, unique identifiers (e.g., MAC address and UUID), and other information relating to your activity through the Site.

Registration and Communication Information: When you contact us via our contact form or register for our services, you may be asked to provide details such as:
  • Full name
  • Email address
  • Phone number
  • Company/Organisation
  • Professional title
Professional Information: For the provision of consulting services (statistical analysis, econometric modelling, risk management), we may collect:
  • Company details
  • Industry/sector
  • Specific project requirements
Financial Information: For processing payments for training and consulting services (processed securely by third-party payment providers).

    4. How do we receive information about you?

    We receive your Personal Information from various sources:
    • When you voluntarily provide us your personal details to contact us or register for services on our Site
    • When you use or access our Site in connection with your use of our services
    • From third-party providers, services, and public registers (e.g., web analytics vendors)

    5. How we use your information

    We do not rent, sell, or share Users' information with third parties except as described in this Privacy Policy. We may use the information for the following purposes:

    Service Provision: For providing consulting services in statistical analysis, econometric modelling, risk management, and training programmes.
    Communication: Sending you notices regarding our services, providing technical information, and responding to customer service inquiries.
    Service Improvement: Conducting statistical and analytical analysis to improve the Site and our services.
    Compliance: Meeting legal and regulatory obligations, enforcing our policies, investigating illegal activities.
    Marketing: Sending updates and offers regarding our services (with opt-out option).

    5.1 Sharing with Third Parties

    We may share Personal Information with trusted third-party providers for the following purposes:
    • Hosting and Operation: Maintaining and operating our Site
    • Cloud Services: Data storage and processing (e.g., Microsoft Azure, Google Cloud - within EU)
    • Web Analytics: Google Analytics for website traffic statistics
    • Payment Processing: Secure payment transactions (PCI-DSS compliant)
    • Email Services: Customer communications
    All third-party providers are subject to contractual obligations to protect data in accordance with GDPR.

    5.2 Legal Requirements

    We may disclose information if we have good faith belief that disclosure is necessary to:
    • Comply with applicable law, regulation, court order, or government request
    • Enforce our policies and investigate potential violations
    • Investigate illegal activities, fraud, or security issues
    • Protect the rights, property, or safety of the Company, Users, or third parties
    • Cooperate with law enforcement agencies

    6. User Rights (GDPR)

    In accordance with GDPR and Greek legislation, you have the following rights: 
    • Right of Access: Confirmation whether we are processing your personal data and access to stored information.
    • Right of Rectification: Request correction of inaccurate or incomplete personal data in our control.
    • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data under specific circumstances.
    • Right to Restrict Processing: Request limitation of the processing of your data.
    • Right to Data Portability: Receive a copy of data you directly provided to us in a structured, commonly used, machine-readable format.
    • Right to Object: Object to the processing of your personal data.
    • Right to Withdraw Consent: Withdraw your consent at any time (without affecting the lawfulness of processing before withdrawal).
    • Right to Lodge a Complaint: Submit a complaint to the Hellenic Data Protection Authority (www.dpa.gr).
    These rights are not absolute and may be subject to our legitimate interests and regulatory requirements.

    To exercise any of the aforementioned rights or receive more information, please contact our Data Protection Officer (DPO):
    Email: please use the website contact form
    Phone: +30 210 44 49 629
    Mailing Address: Antifilou 20, Athens, Greece

    7. Data Retention

    We will retain your personal information for as long as necessary to:
    • Provide our services
    • Comply with legal obligations (e.g., Greek tax laws: 5 years; accounting records: 6 years)
    • Resolve disputes and enforce our policies
    Retention periods are determined taking into account the type of information collected, the purpose of collection, and applicable regulatory requirements. We may correct, supplement, or remove incomplete or inaccurate information at any time and at our own discretion.

    8. Cookies and Tracking Technologies

    We and our trusted partners use cookies and other technologies on our Site. A "cookie" is a small piece of information that a website assigns to your device while you are viewing a website. Cookies are useful and can be used for various purposes, including navigation, automatic feature activation, storing preferences, and making interaction with our services faster and easier.

    8.1 Types of Cookies We Use

    Session Cookies: Stored only temporarily during a browsing session and deleted when the browser is closed.
    Persistent Cookies: Saved on your computer for a fixed period and not deleted when the browser is closed. Used for storing preferences and repeat visits.
    Third-Party Cookies: Set by other online services who run content on the pages you visit (e.g., thirdparty analytics companies).

    8.2 Google Analytics

    We use Google Analytics to collect information about your use of the Site (how often users access it, which pages they visit, etc.). We use this information only to improve our Site and services.

    Google Analytics collects the IP address assigned to you on the date you visit sites, rather than your name or identifying information. We do not combine information from Google Analytics with personally identifiable information.

    Google's ability to use and share information collected by Google Analytics is restricted by the Google Analytics terms of Service and the Google Privacy Policy.

    8.3 Cookie Management

    You may remove cookies by following your device preferences. However, if you disable cookies, some features of our Site may not function properly and your online experience may be limited.

    9. Third party collection of information

    Our policy addresses only the use and disclosure of information we collect from you. Different rules may apply to information you disclose to other parties or websites on the internet.
    We encourage you to read the terms and conditions and privacy policies of each third party to whom you disclose information.
    This Privacy Policy does not apply to the practices of companies we do not own or control or to individuals we do not employ or manage.

    10. How do we safeguard your information?

    We take great care in implementing and maintaining the security of the Site and your information. We employ industry-standard procedures and practices to ensure the safety of information we collect and retain:
    • Encryption: Use of SSL/TLS for secure data transmission
    • Access Control: Limited access only to authorized personnel
    • Secure Servers: Hosting in secure data centers within the EU
    • Regular Audits: Periodic review of security measures
    • Pseudonymisation: Where feasible, for additional protection
    Although we take reasonable steps to safeguard information, we cannot be responsible for the acts of those who gain unauthorized access, and we make no warranty, express or implied, that we will prevent such access.

    11. Transfer of data outside the EEA 

    Some data recipients may be located outside the European Economic Area (EEA). In such cases, we will transfer your data only:
    • To countries approved by the European Commission as providing adequate data protection
    • Based on EU Standard Contractual Clauses (SCCs)
    • Through other appropriate safeguards in accordance with GDPR

    12. Advertisements

    We may use third-party advertising technology to serve advertisements when you access the Site. This technology uses your information regarding your use of our services to serve relevant advertisements to you (e.g., by placing third-party cookies).

    You may opt-out of many third-party ad networks, including those operated by members of the Network Advertising Initiative (NAI) and the Digital Advertising Alliance (DAA):
    • NAI opt-out: http://optout.networkadvertising.org/
    • DAA opt-out: http://optout.aboutads.info/

    13. Marketing

    We may use your Personal Information (name, email address, telephone number, etc.) for providing promotional materials concerning our services, which we believe may interest you.

    Out of respect for your right to privacy, we provide within such marketing materials means to decline receiving further marketing offers. If you unsubscribe, we will remove your email address or telephone number from our marketing distribution lists.

    Please note that even if you have unsubscribed from marketing emails, we may send other important communications (e.g., customer service announcements, administrative notices) without offering you the opportunity to opt out.

    14. Corporate transaction

    We may share information in the event of a corporate transaction (e.g., sale of a substantial part of our business, merger, consolidation, or asset sale). The transferee or acquiring company will assume the rights and obligations as described in this Privacy Policy.

    15. Minors

    We understand the importance of protecting children's privacy, especially in an online environment. The Site is not designed for or directed at children under 16 years of age.

    We do not allow use of our services by minors without prior consent or authorization from a parent or legal guardian. We do not knowingly collect Personal Information from minors.

    If a parent or guardian becomes aware that their child has provided us with Personal Information without consent, they should contact us at using our website's contact form.

    16. Updates or amendments to this Privacy Policy

    We reserve the right to periodically amend or revise this Privacy Policy. Material changes will be effective immediately upon display of the revised policy.

    Your continued use of the Site following notification of such amendments constitutes your acknowledgment and consent to such amendments and your agreement to be bound by the modified terms.

    17. Contact Information

    If you have any questions about the Site, the information we collect about you, or how we use it, you can contact us:

    Pón+ Οργανισμός Εξειδικευμένης Εκπαίδευσης ΙΚΕ
    Roe+ Specialised Education Organisation

    Data Protection Officer (DPO)
    Email: please contact us through the website's contact form
    Phone: +30 210 44 49 629
    Website: www.roeplus.org

    Hellenic Data Protection Authority
    Website: www.dpa.gr
    Phone: +30 210 6475600
    Email: contact@dpa.gr

    Last Updated: November 17, 2025