Privacy Policy

Last updated: 10 September 2026

This policy describes how ELMECH ENGINEERING I.K.E. collects and processes personal data through the website elmech-engineering.gr, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

Data controller

ELMECH ENGINEERING I.K.E.
41A Fragkokklisias, 151 25 Marousi, Attica, Greece
VAT: 803175993 · GEMI: 191361001000
Email: pk@elmech-engineering.gr

What data we collect

We collect only the data you voluntarily submit through the contact form:

• Full name
• Email address
• Telephone number (optional)
• The subject and content of your message

When you submit the form we also process your IP address. It is used solely to limit how many submissions come from one visitor, so that the form cannot be abused automatically. It is not stored permanently and is not linked to the content of your message.

The website uses no cookies of any kind, no analytics tools and no tracking technologies. Fonts are served from this site itself, so your visit is not disclosed to any third-party provider.

Purpose and legal basis

We process the form data solely in order to respond to your enquiry. The legal basis is your consent (Article 6(1)(a) GDPR), which you give explicitly when submitting the form.

For the IP address, the legal basis is our legitimate interest in the security of the website (Article 6(1)(f) GDPR).

Completing the form is optional. Without the required fields the message cannot technically be sent, so we would be unable to reply. You can always contact us by telephone or email instead.

Who receives your data

We do not sell your data and do not pass it to third parties for commercial purposes. It is accessible only to:

• the relevant staff of ELMECH ENGINEERING I.K.E.
• Microsoft, acting as a processor, for website hosting (Azure) and corporate email (Microsoft 365)

Where data is stored

Messages are sent to ELMECH's corporate email account and stored in Microsoft 365. The contact form is handled by an Azure Static Web Apps managed function in the East US 2 region (United States), where the message is processed only momentarily to forward it and is not stored. This transfer to the US is covered by Microsoft's certification under the EU–US Data Privacy Framework and by Standard Contractual Clauses (SCCs).

Retention period

We retain messages for 12 months and then delete them, unless the correspondence develops into a contractual relationship.

Your rights

You have the right to access, rectify, erase, restrict and port your data, and to withdraw your consent at any time. To exercise these rights, contact pk@elmech-engineering.gr.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).

Automated decision-making

We do not carry out automated decision-making or profiling within the meaning of Article 22 GDPR. The automatic spam check looks only at technical characteristics of the submission and makes no assessment of you as a person.

Security

The website is served exclusively over HTTPS, under a content security policy that permits no third-party content to load. Access to messages is limited to the relevant company personnel.

Changes to this policy

We may update this policy, for example if the way the website works changes. The current version is always published on this page, with the date of last revision at the top.