PRIVACY POLICY

1. INTRODUCTION

At animap (hereinafter "animap", "we", "us", or "our") we respect the protection of your privacy and the personal data that you share with us or that we otherwise collect through the website animap.gr and the associated online animap platform (hereinafter collectively the "Website"), or generally within the framework of our cooperation with you and the provision of our services. For this purpose and within the framework of transparency required by applicable legislation, we have posted this Privacy Policy (hereinafter the "Policy"), in which you will find all the necessary information regarding the personal data we collect, how we collect and process it, the purposes of processing, the measures we take for its protection, as well as your rights in relation to your personal data.

This Policy constitutes a unified text with the Website's Terms of Use and Service Provision, and they collectively regulate your use of the Website. For professional users, the provisions of the relevant Business Listing Terms and Conditions apply simultaneously.

For the purposes of this Policy, "personal data" means any information by use of which a natural person can be identified, directly or indirectly, including, but not limited to, name, residential address, email address, telephone number, as well as any other information connected to this person that falls under the definition of "personal data", as defined in the General Data Protection Regulation (EU) 2016/679 ("GDPR"), Law 4624/2019, as applicable, and any other applicable law or regulation.

2. DATA CONTROLLER

The data controller of your personal data, according to the relevant definition of the GDPR, is the company "Monovia I.K.E.", with GEMI No.: 186347801000 and Tax Registration Number (AFM): 802964751, having its registered office in Athens, 2 Dorou Street, 10431.

You can contact the data controller regarding matters related to the processing of your personal data at any time by sending an email to the electronic address: legal@animap.gr

3. MINORS

The Website is not intended for use by minors. Therefore, under no circumstances do we knowingly collect personal data of minors under 15 years of age without the consent of their parent or guardian. If, nevertheless, you are a parent or guardian of a child under 15 and are concerned that your child may have provided us with their personal data, please contact us using the contact details above.

4. DATA SUBJECTS

The personal information we collect and process relates to the following categories of data subjects:

• Users browsing the Website
• Users of the Website who register in order to have access to the services provided
• Professional users and businesses displayed on the Website

(hereinafter collectively "data subjects" or "Users").

5. CATEGORIES OF PERSONAL DATA

The personal data we process or may process, case by case and depending on the specific data subjects, includes:

• Full name
• Residential address
• E-mail
• Mobile phone number
• Credit/debit card details
• User account data, Website usage history, and preferences
• Website browsing data
• User device identifiers and information

Specifically for professionals and businesses displayed on the Website (sole proprietorships or representatives of legal entities), in addition to the above, we will further collect and process the following personal data, as applicable, within the framework of conducting the due diligence required by applicable legislation in order to approve your listing on the Website:

• Business name
• Business address
• Tax Registration Number (AFM)
• Role/capacity in the company (in the case of representatives of legal entities)
• Supporting documents certifying the capacity to provide the relevant services (such as professional license, AADE registry certificate, CV, certifications, etc.)
• Photographs
• Trade names and logo
• Business website and social media profiles
• Bank account details
• Payment and invoicing data

6. HOW WE COLLECT YOUR DATA

As a rule, you provide us with your personal data yourself in order to register on the Website and use our services, or to display your services and products as a professional. For example, if you wish to register and create your personal account on the Website, you will be asked for certain basic identification and contact details.

In addition, we collect information concerning you as it arises from your use of the Website, such as information related to the history of your appointments and orders.

Apart from the above cases, we collect certain personal data automatically through your device or the web browser you use, using cookies and other similar technologies, such as your Internet Protocol (IP) address, login details, browser type and version, operating system, navigation data, geographical location, etc. For more information regarding the use of cookies by our Website, see here.

7. PURPOSES AND LEGAL BASES OF PROCESSING

We will use your personal information for the following indicative purposes and under the corresponding legal bases of processing:

• For the creation of your account on the Website and the verification of the details you provide us: Performance of a contract (Article 6 para. 1b GDPR).
• For the provision of services available on the Website: Performance of a contract (Article 6 para. 1b GDPR).
• For the management, fulfillment, and processing of your payments: Performance of a contract (Article 6 para. 1b GDPR).
• For ensuring the security of transactions carried out on the Website: Legitimate interest (Article 6 para. 1f GDPR).
• For sending you the products you have ordered through the Website: Performance of a contract (Article 6 para. 1b GDPR).
• For receiving and managing any of your requests or complaints: Legitimate interest (Article 6 para. 1f GDPR).
• For sending you commercial/promotional communications regarding our services and offers or those of third parties, provided you have given us your consent for this: Consent (Article 6 para. 1a GDPR).
• For understanding and analyzing the results of our advertisements and promotional activities: Legitimate interest (Article 6 para. 1f GDPR).
• For satisfying your rights regarding your personal data: Legitimate interest (Article 6 para. 1f GDPR).
• For the improvement of the Website and the services provided to you: Legitimate interest (Article 6 para. 1f GDPR).
• For protecting the Website from illegal actions: Legitimate interest (Article 6 para. 1f GDPR).
• For protecting our rights and assets or those of third parties: Legitimate interest (Article 6 para. 1f GDPR).
• For our compliance with our legal obligations: Legal obligation (Article 6 para. 1c GDPR).

8. DISCLOSURE TO THIRD PARTIES

We may disclose your personal information to any of our employees, officers, or representatives, as well as to any subsidiary or affiliated company, as required for the purposes mentioned in this Policy.

Under no circumstances do we sell, disclose to third parties, or otherwise exploit the personal data you provide us for our own benefit. However, we may share some of your personal data with third parties for specific legal purposes, such as: Website hosting and management service providers, electronic mail (email) service providers, web and app analytics service providers, marketing and e-commerce service providers, advertising service providers, electronic payment processing providers, technical, financial, and legal advisors, as well as tax, police, prosecutorial, and other public authorities and services.

In these cases, where third-party recipients act either as data processors on our behalf, or as joint controllers, or as independent controllers, we ensure, to the extent possible and within the limits of our responsibility as a data controller, that they maintain confidentiality regarding the personal data we disclose to them, take appropriate security measures, do not further disclose this data, and generally comply with the legal framework for the protection of personal data. Under no circumstances do we assume responsibility for any illegal use or processing of your personal data by the aforementioned parties that falls outside the limits of our responsibility as defined by applicable legislation.

9. INTERNATIONAL TRANSFERS

As a rule, we do not disclose your personal data to third parties established in countries that do not have personal data protection legislation equivalent to that applied in the European Economic Area (EEA). However, in the event that such a data transfer is required, we will take every possible measure, in accordance with the provisions of the relevant legislation and the decisions of the European Commission, to ensure that your data is appropriately protected.

Specifically for processing your payments, we use the payment service Stripe, which is provided by Stripe, Inc., based in the United States (510 Townsend Street, San Francisco, CA 94103, USA). When making a payment through Stripe, certain personal data of yours (such as payment details, IP address, technical information, and other relevant data) may be transferred and processed outside the EEA, including the United States. Stripe has been certified under the EU-U.S. Data Privacy Framework (DPF), which is recognized by the European Commission as a mechanism providing an adequate level of protection for the transfer of personal data to the US. More information can be found on Stripe's privacy page.

10. RETENTION PERIOD

We will store and retain your personal data for as long as required in order to fulfill the purpose for which we collected and process your respective data. For example, if you delete your account on animap, as a rule, we will delete all your personal data that we maintain within a reasonable period of time.

We may, however, retain some of your personal data for a longer period if required for the pursuit of any of our legal claims or if imposed by applicable legislation (e.g., tax legislation).

11. DATA SECURITY

At animap, we implement appropriate technical and organizational measures to ensure the required level of security for your personal data against existing risks, such as accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access, and any other form of unlawful processing.

For your safe navigation on the Website and for the security of your transactions, animap takes every appropriate measure, adopting modern, high-quality security standards in line with market trends, such as high levels of SSL (Secure Sockets Layer) encryption technology. Regarding the storage of your personal data, this takes place on secure, encrypted media, access to which is limited only to authorized personnel of animap or to third-party processors from whom animap has received the necessary guarantees.

In particular regarding payment security and the protection of your credit/debit card details, all payments made for purchases through our Application are conducted using a 128-bit encryption protocol (Secure Sockets Layer – SSL) and in cooperation with reliable providers.

You understand and accept, however, that the transmission of information over the internet is inherently insecure and, therefore, we cannot guarantee the security of data transmitted over the internet. Under no circumstances do we assume responsibility, and we disclaim to the maximum extent permitted by law, any liability for damages caused by loss, misuse, and unauthorized access, disclosure, alteration, or destruction of your personal data, and we recommend that you take all necessary precautions to protect the personal data you submit to the Website (e.g., secure configuration of your browser, updated antivirus software, effective firewall, avoiding the use of software from doubtful sources, using strong passwords and not disclosing them to third parties, etc.).

12. THIRD-PARTY WEBSITES

The Website may contain hyperlinks to other websites, applications, or social media profiles. This Policy does not apply to your access and browsing on the aforementioned third-party websites and media. Please refer to the respective privacy policies of those websites for more information on how they handle your personal data.

Under no circumstances are we liable for any unlawful use of your personal data associated with your access or browsing on third-party websites to which the Website may redirect, for the operation and security of which the respective data controller is responsible. Access to the aforementioned websites and applications takes place at your sole responsibility.

13. COMMERCIAL/PROMOTIONAL COMMUNICATION

We provide you with the option, if you wish, to receive promotional messages and/or newsletters at your electronic address regarding our services and offers. If you have already used a service through the Website, we have the ability to send you such promotional communication without obtaining your prior consent, in accordance with the provisions of applicable legislation. Otherwise, before sending any such communication on our behalf, your explicit consent will be requested following relevant notification.

In any case, you retain the right, at any time, to request the termination of the above communication by clicking the unsubscribe button located at the end of each newsletter, or by contacting us at the electronic address: legal@animap.gr, with the message subject "NEWSLETTER UNSUBSCRIBE".

14. YOUR RIGHTS

Depending on the purpose and legal basis of the processing, you may have all or some of the following rights regarding your personal data:

• The right to request access to your personal data.
• The right to rectify any of your personal data that is inaccurate or incomplete.
• The right to request a copy of your personal data in electronic format, so that you can transmit this data to third parties, or request animap to transfer your personal data directly to one or more third parties.
• The right to object to the processing of your personal data.
• The right to erase your personal data when its retention is no longer required for the purposes for which we collected it.
• The right to restrict the processing of your personal data where its erasure is not possible.
• The right to withdraw your consent at any time, where it has been given, provided there is no other legal ground for continuing the relevant processing.

To exercise any of your rights above or to request further information regarding them, please contact us at the electronic address: legal@animap.gr. As a rule, your request will be satisfied within one (1) month of its receipt, unless the satisfaction of your request presents specific difficulties, in which case we will inform you accordingly.

15. COMPLAINT

In the event that you believe that our processing of your personal data does not comply with applicable legislation, you have the right to lodge a complaint with the competent supervisory authority:

16. SEVERABILITY & APPLICABLE LAW

Severability: In the event that any provision of this Policy is deemed unlawful, void, or unenforceable, such provision shall be enforceable to the maximum extent permitted by applicable law, and the invalid part thereof shall be deemed severed from this Policy. This designation shall not affect the validity and enforceability of the remaining provisions hereof.

Applicable Law and Dispute Resolution: This Policy is governed by the laws of Greece, as shaped in accordance with the GDPR and generally by the applicable national and European legislative and regulatory framework for the protection of personal data. Any disputes that may arise from it shall be resolved by the courts of Athens having material jurisdiction.

Amendments: We reserve the right to revise this Policy at any time. For this reason, we invite you to periodically visit this page in order to remain informed. The date on which this Policy was last revised is located at the top of this page.