Data Protection Policy
A2Z Energy Solutions (hereinafter referred to as the “Company”, “we”, “us”, or “our”) respects your privacy rights, provides a safe and secure online experience, and is committed to protecting your personal data.
The following terms and conditions govern all use of our website (https://a2z-energy.gr/) and all content, services, and products available through it (hereinafter collectively referred to as the “Website”). The Website is offered subject to your unconditional acceptance of all the terms and conditions contained herein, as well as all other operating rules, policies, and procedures that may be published on the Website from time to time (hereinafter collectively referred to as the “Agreement”).
This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Greek Law 4624/2019.
Please read the Agreement carefully before accessing or using the Website. By accessing or using any part of the Website, you agree to be bound by the terms of this Agreement. If you do not agree with all the terms and conditions, you may not use the Website or its services.
We reserve the right to amend the Agreement at any time. We encourage you to review it regularly. Any changes will be published on this page with an updated “Effective Date”.
Data Collection
We may collect and process the following types of personal data in order to provide our services. Your data will not be used for other purposes or disclosed to third parties unless expressly stated. It will be deleted upon withdrawal of your consent or following a request to terminate the relevant services.
Based on the above, we may collect the following types of data:
Identification Data: First name, surname, company name
Contact Data: Email address, telephone number, postal address
Technical Data: IP address, browser type, operating system, device identifiers
Usage Data: Information about how you use the Website, such as the pages you visit and the links you click
Marketing and Communication Data: Your preferences regarding the receipt of newsletters and other communications from us
We primarily use your personal data for the effective provision of products and services, including:
- Processing your order and sending customer satisfaction emails. The information requested when placing an online order is used to complete, confirm, and dispatch your order.
- Providing customer service, technical support, and account management.
- Sending information about our products, offers, and news. Such communications are sent only when you have chosen to receive them.
- Managing competitions, surveys, or other Website features and providing the related services.
- Sending service-related notifications where required by law. These communications are not promotional and generally cannot be disabled.
- Analysing Website traffic and understanding your interests so that we can improve our products and services.
Legal Basis and Purpose of Processing
We process your personal data for the following purposes and on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Responding to requests and providing customer support | Performance of a contract or steps taken before entering into a contract — Article 6(1)(b) GDPR |
| Managing and improving the Website, our services, and the user experience | Legitimate interests — Article 6(1)(f) GDPR |
| Sending newsletters and promotional material with your consent | Consent — Article 6(1)(a) GDPR |
| Compliance with legal obligations | Legal obligation — Article 6(1)(c) GDPR |
Processing is limited to what is necessary and lawful under Articles 25–26 of Greek Law 4624/2019, particularly where we rely on the public interest or the necessity of performing a contract.
Recipients of Personal Data
We may disclose your personal data to:
- Third-party service providers and partners that support us with Website operation, marketing, IT services, payment processing and authorisation, fraud prevention, and customer support. These parties act as data processors in accordance with the GDPR.
- Public authorities where disclosure is required by law, legal proceedings, or a request from a government authority.
- Business partners in the United States or other third countries, as described in the section on international data transfers below.
All data processors are contractually required to process your data only in accordance with our instructions and the requirements of the GDPR.
Protection of Minors
Our services are not intended for children under the age of 15, in accordance with Article 21(1) of Greek Law 4624/2019 and Article 6(1)(a) of the GDPR. Where the child is under the age of 15, parental consent is required.
We do not knowingly process the personal data of minors without parental consent.
If you believe that we have collected such data, please contact us at: info@a2z-energy.gr.
International Data Transfers
Your personal data may be transferred to and processed outside the European Economic Area (EEA), including by service providers and partners located in the United States.
Where such transfers take place, we ensure that one of the following safeguards is applied to protect your data:
Standard Contractual Clauses (SCCs)
We use the European Commission’s approved Standard Contractual Clauses under Decision 2021/914/EU for international data transfers, ensuring an adequate level of protection.
EU–U.S. Data Privacy Framework (DPF)
Where applicable, data may be transferred to companies in the United States that are certified under the EU–U.S. Data Privacy Framework, ensuring adequate data protection standards.
Derogations for Specific Situations
In the absence of an adequacy decision or other appropriate safeguards, we will transfer data only with your explicit consent, where necessary for the performance of a contract, or for the establishment, exercise, or defence of legal claims, in accordance with Article 49 of the GDPR.
You may request further information or a copy of the applicable safeguards by contacting us at info@a2z-energy.gr.
Data Retention
We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, or regulatory obligations.
Once the applicable retention period has expired, we will securely delete or anonymise your data.
Your Rights as a Data Subject
Under the GDPR, you have the following rights:
Right of Access: You may request confirmation as to whether we process your personal data and obtain a copy of that data — Article 15 GDPR.
Right to Rectification: You may request the correction of inaccurate or incomplete personal data — Article 16 GDPR.
Right to Erasure (“Right to Be Forgotten”): You may request the deletion of your personal data — Article 17 GDPR.
Right to Restriction of Processing: You may request that we restrict the way in which we use your personal data — Article 18 GDPR.
Right to Data Portability: You may receive your personal data in a structured and machine-readable format — Article 20 GDPR.
Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes — Article 21 GDPR.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.
To exercise any of your rights, please contact us at: info@a2z-energy.gr.
Data Security
We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to improve your experience on our Website. For further details, please refer to our Cookie Policy.
Third-Party Links
Our Website may contain links to third-party websites or services that are not operated by us. We are not responsible for their content, privacy policies, or practices. Please review the respective privacy policies of those third parties separately.
Data Controller
The controller responsible for processing your personal data is:
A2Z Energy Solutions
61 Timaiou Street, Athens 10441, Greece
Email: info@a2z-energy.gr
Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we manage your personal data, please contact us at: