PERSONAL DATA PROTECTION POLICY 1). Information about the collection of personal data and contact details of the SBW.gr controller  This site, Serres Brick Workshop (sbw.gr) uses the SSL (Secure Sockets Layer) protocol which uses methods to encrypt data exchanged between two devices (usually PCs), establishing a secure connection between them, via the internet, which results in the protection of your personal data, as well as other sensitive data (eg orders or inquiries of the controller). You can recognize that you are in a secure connection by looking at the https: // characters and the lock symbol that appears in your browser’s address bar. 2). Collect data when you visit the site. When you visit our site for information only, ie you do not open a personal account for any orders or do not provide any of your personal data (eg contact form), then the only data we collect is that of your browser , transfers to our server, the so-called serverlogfiles, and specifically:

• Date and time of entry to the site.
• The amount of data sent in bytes.
• The browser you used to sign in to the site.
• The operating system you used to access the site.
• Your IP Address (InternetProtocoladdress) when you log in to the site.

The processing of data is carried out in accordance with article 6 par. 1 par. f of the General Regulation of Personal Data Protection (GDPR) based on our legitimate interest in improving the stability and functionality of our website. The data will not be transferred or used in any other way. However, we reserve the right to check serverlogfiles if specific evidence of illegal use is found. 3). Cookies Cookies are small text files that are sent to your device when you visit a website. The cookies are then sent to the website of origin on each subsequent visit or to another website that recognizes this cookie. Cookies act as a memory on a website, allowing that website to remember your device on your next visit. Cookies can also remember your preferences, improve your user experience, and customize the ads you see to your liking. For more information about cookies, including how you can view cookies on your device and how to manage and delete them, visit www.aboutcookies.org . 4). Contact Form In the context of communication between us (eg via the contact form or e-mail), personal data is collected. The data collected in this case is exactly what you fill in on this form. This data is stored and used solely for the purpose of responding to your request or for our contact and technical management. The legal basis for the processing of this personal data is in our legitimate interest to respond to your request, which applies to article 6 par. 1 of the General Regulation on Personal Data Protection (GDPR). If the communication is aimed at concluding a contract between us, then the additional legal basis is based on article 6 par. 1 par. B of the General Regulation on Personal Data Protection (GDPR). Your data will be deleted after the final processing of our communication. This will happen if the circumstances suggest that the communication has been completed, provided that there are no legal requirements for the storage of this data. 5). Edit data when opening a client account Pursuant to Article 6 (1) (b) of the General Data Protection Regulation (GDPR), your personal data will continue to be collected and processed, if you provide it to us for the performance of a contract or for opening a client account. Which data is collected can be seen from the respective login forms. It is possible to delete the client account at any time. This can be done by sending a message to the above address of the controller. Once the contract is fully processed, your data will be blocked and deleted, unless you have expressly given your consent to the further use of your data, or you have legally accepted the further commitment and use of our site. 6). Processing payment and order handling data In order to process your order, we work with the following service providers, who support us in whole or in part in the execution of the concluded contracts. Some personal data is transferred to the service providers based on the following information. The personal data collected by us will be forwarded to the transport company entrusted with the delivery to the extent necessary for the delivery of the goods. We will transfer your payment data to the authorized credit institution as part of the processing of payments, if this is necessary for the handling of payments. If we use payment service providers, we explicitly inform you of the following. The legal basis for the transfer of data is based on Article 6 par. 1 item b of the General Regulation on Personal Data Protection (GDPR). 7). WebAnalysisServices GoogleAnalytics This site uses GoogleAnalytics, a GoogleLLC web analytics service, 1600 AmphitheaterParkway, MountainView, CA 94043, USA (“Google”). Google Analytics uses so-called cookies, which are text files stored on your computer, to help our site analyze how users use it. The information generated by cookies about the use of this website (including IP address) is generally transmitted to and stored on a Google server in the USA. On our behalf, Google will use this information to evaluate the use of the website, to compile reports on the activity of the website and to provide us with other services related to the use of the website and the Internet. The IP address transmitted by your Google Analytics browser does not merge with other Google data. You can refuse the use of cookies by selecting the appropriate settings in your browser, as listed above. However, we should note that in this case, you may not be able to use the full functionality of this site. You can permanently refuse Google to collect and process data generated by cookies about the use of the website (including IP address). You can download and install the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en=GB More information about how the above service works can be found here: https://support.google.com/analytics/answer/6004245?hl=en 8). Data Subject Rights The applicable law [General Regulation on the Protection of Personal Data (Regulation 2016/679)] on data protection provides extended rights to data subjects (rights of information and intervention) vis-του-vis the controller regarding the processing of data. of your personal data, of which we inform you below.

• Right of access under Article 15
• Right of correction under Article 16
• Right of deletion (“right to be forgotten”) in accordance with Article 17
• Right to restrict processing in accordance with Article 18
• Obligation to notify regarding the correction or deletion of personal data or the restriction of processing in accordance with Article 19
• Right to data portability under Article 20
• Right to withdraw consent according to Article 7 par. 3
• Right to lodge a complaint with a supervisory authority in accordance with Article 77

If, within the framework of the agreement, we process your personal data, you have the right at any time to object to this processing, which will be valid for the future. If you exercise your right to object, we will stop processing the relevant data. However, we reserve the right to further processing if we demonstrate compelling reasons that need protection that take precedence over your interests, fundamental rights and freedoms, or if the processing is used to pursue or defend legal claims.