Privacy

Privacy Notice

Our Company takes the privacy of its users seriously into account. For this purpose, we strictly comply with the rules of the present Privacy Notice, which ensures the protection of your fundamental rights and guarantees our compliance with applicable data protection laws.

This Privacy Notice is to let you know how the Company protects the privacy of your communications and collects, processes, uses and stores your personal data through our Website, as well as the rights you have with regard to the foregoing collection and processing of your personal data. By visiting our Website and using our services you acknowledge having read and fully taken into account this Privacy Notice.

This Privacy Notice applies only to our Website under the domain https://yphos.com/. Users should be aware that our Website may also contain links to other websites, yet our Company cannot be held responsible for the data processing practices or the content of such websites.

1. Definitions

For the purposes of this Privacy Notice the following definitions shall apply:

1.1. “Company” – The business with the distinctive title “YPHOS PC”, with registered offices at the 14th km of Athens–Lamia Highway, 14564, Kifissia, Greece.

1.2. “Consent” – Any explicit, specific and freely given indication by which the User, after having been fully informed, signifies her or his agreement to personal data relating to her or him being processed.

1.3. “Cookie” – A short text of software code which is transmitted from the web server of our Company and stored on your device each time that you enter the Website, as further described in our Cookie Policy.

1.4. “GDPR” – The General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, as amended, replaced or superseded and in force from time to time and as transposed into member-state legislation.

1.5. “Personal Data” – Any information which relates to a User who can be identified directly or indirectly.

1.6. “Processing” – Any operation or set of operations which is performed by the Company upon the personal data of the Users of our Website, whether or not by automatic means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction.

1.7. “Recipient” – A natural or legal person, public authority, agency or another body to which the personal data are disclosed, whether a third party or not.

1.8. “User” – Any internet user who accesses and browses our Website.

1.9. “Website” – The website accessible through the domain name https://yphos.com/, including all of its webpages.

2. Subject Matter

2.1. The present Notice sets out the terms and conditions which the Company follows in order to protect the privacy of the Users of the Website. It describes the conditions under which we make any collection and processing of your personal data and ensure their confidentiality.

2.2. The Company reserves the right to amend and update this Privacy Notice whenever it deems it appropriate, and any changes thereof shall come in force and effect from the instance they appear online at the present webpage of the Website.

2.3. If any provision of this Privacy Notice is declared void or unenforceable, such provision shall be severed from this Privacy Notice, which shall otherwise remain in full force and effect to the extent that the original intent of this Privacy Notice will not be altered in any material respect.

3. Principles of Data Processing

We fully respect your fundamental rights and render the protection of your privacy a priority of the Company. In this context, when processing your personal data, we follow the following basic principles:

3.1. We submit your personal data to legitimate processing and we maintain full transparency vis-à-vis the way we handle your personal data.

3.2. We collect and process your data only for specified, explicit and legitimate purposes as outlined in this Notice, and we do not process them further in a manner incompatible with these purposes.

3.3. We process your personal data only to the extent that it is appropriate and relevant to the above purposes, while limiting the processing to the measure necessary for these purposes.

3.4. We make reasonable efforts, with your own assistance, to ensure that your processed data are accurate and, where necessary, updated with regard to the purposes of the processing, taking all reasonable steps to immediately delete or correct them in case of inaccuracy.

3.5. We keep your personal data in a form that allows you to be identified only for the time required for the above processing purposes.

3.6. We process your personal data in a way that guarantees their security, by using appropriate technical and organisational measures.

3.7. We do not intend to further process your personal data for purposes other than the ones for which they are collected.

3.8. We inform you that there is no obligation to provide your personal data and that the only consequence of the choice not to provide them is that we may be unable to respond to your request or to provide the service concerned. Furthermore, we inform you that your personal data will not be used for automated decision-making, including profiling.

3.9. We share your personal data only with the recipients and in the cases described in section 7 of this Notice.

3.10. Please be advised that we transfer personal data to a third country or international organisation only where the European Commission has recognised an adequate level of protection, including under the EU–US Data Privacy Framework, or where appropriate safeguards within the meaning of the GDPR are in place, such as the Standard Contractual Clauses adopted by the European Commission.

3.11. In general, we comply with all applicable laws and with all our statutory obligations as controller of your personal data.

4. Types of Data Collected

4.1. We collect only the strictly necessary categories of personal data and only for the purposes of responding to your requests, providing our services and support, and, where the relevant functions are offered through our Website, executing transactions, at the point of (a) your access and during your use of our Website, (b) your submission of a contact, quotation or support request, (c) your registration as a user, (d) your registration to our newsletter service, and (e) the process of purchasing our products.

4.2. At the point of your access and during the use of the Website:

IP address.
End user device and browser data.
General communication data.
Browsing data (on yphos.com), including the data necessary to protect the Website and its forms against automated abuse.

4.3. At the point of submitting a contact, quotation or support request through the forms of the Website:

Name / Surname.
E-mail.
Country and role.
Project or vessel details, the product or version you are interested in, and the content of your message.
Optionally, company and telephone number.

4.4. At the point of your registration for a personal account and/or each time you log in, where and when such a function is offered through the Website:

Username.
Password.
E-mail.
Name / Surname.
Address and contact data.
Tax and invoice data.
Payment details, as processed by our payment service provider.

4.5. At the point of purchasing our products either as guest or as user, where and when such a function is offered through the Website:

Information regarding your order.
Credit / debit card or other payment details, as processed by our payment service provider, and other data regarding the execution of your payment.
Choice of payment method.
Choice of shipping option.
Shipping address.
Tax data.

4.6. At the point of subscribing to our e-mail newsletter, where and when such a service is offered:

E-mail.

4.7. In addition, when you communicate with us by e-mail or by any other means, we collect and process personal data relating to such communications under the terms and conditions hereof in order to correspond to your requests and to improve our services.

4.8. Payments through the Website, where offered, are executed by licensed payment service providers. Our Company does not store your full credit / debit card data; any payment data retained by our Company are kept under strict conditions of confidentiality and with the use of secure communication protocols.

4.9. The answers you give in the “Find your light” configurator are kept in your own browser only and are transmitted to our Company solely if you subsequently submit a quotation request.

4.10. Business contacts. We also process the business contact details (name, company, position, e-mail address and telephone number) of representatives of our clients, prospective clients, distributors, partners and suppliers, which we obtain directly from them, at trade fairs and industry events, through our regional partners and dealers, or from professional directories and publicly available sources. We process these data for the purpose of managing our business relationships and presenting our products, on the basis of our legitimate interest under article 6 § 1 (f) of the GDPR. You may object to this processing at any time, as set out in section 10.

5. Purposes and Legal Bases of Data Processing

5.1. Personal data necessary for the provision of our services are collected and processed by our Company pursuant to article 6 § 1 (b) of the GDPR for the following purposes:

Responding to your contact, quotation and support requests and taking the steps you ask for prior to entering into a contract. Where you act on behalf of a company, this processing is based on our legitimate interest in responding to your request, under article 6 § 1 (f) of the GDPR.
Performance of our contractual obligations towards our Users and Clients.
Immediate, adequate and efficient provision of our services.
Tax use and use for pricing and proof of delivery of ordered products, where products are ordered through the Website.
Communicating with our clients in the framework of the execution of our services and for the resolution of any complaints.

5.2. In addition, your personal data are collected and processed by our Company pursuant to article 6 § 1 (f) of the GDPR when necessary for the purpose of pursuing the following legitimate interests:

The smooth and secure operation of our Website, including its protection against attacks and automated abuse.
The user-friendly performance of our Website.
The improvement of your online experience while browsing and using our Website.
Improvement, management and review of our products and services to meet the needs of our clients as much as possible.
Administration, organisation and function of our business.
Management of our clientele and follow-up of enquiries.
Extrajudicial or judicial use for the protection of our lawful rights and interests.

5.3. Personal data may further be processed pursuant to article 6 § 1 (c) of the GDPR where the processing is necessary for compliance with a legal obligation to which our Company is subject, in particular tax and accounting legislation.

5.4. Our Company collects and processes your personal data solely for the purposes mentioned above and only to the extent that is strictly necessary to effectively serve them. Data collected are relevant, appropriate and no more than what is required in view of the above purposes, whereas we strive to keep them accurate and up to date. Furthermore, your data are retained only for the period required to achieve the purposes for which they are collected and processed, and are afterwards deleted, as set out in section 9.

6. Consent

6.1. Our Company processes personal data only with your lawful consent for the following purposes:

The use of statistical cookies for the measurement of the use of our Website, as described in our Cookie Policy.
Commercial communication, marketing and advertising of our products via e-mail, internet, telephone, mail, social media and/or any other appropriate communication channels, where you have opted in to such communication.
Personalised market research and/or analysis purposes, to better understand your needs, preferences, interests, experiences and/or habits as a consumer.
Your registration to our newsletter service, where offered.

6.2. You give us your consent to the processing of your personal data for the above purposes with an electronic statement, in a manner clearly distinguishable from other consents or notices and in an intelligible and easily accessible form, using clear and plain language. Your consent is freely given, and your personal data are given without such a provision being a legal or contractual obligation or a requirement on behalf of our Company for the performance of a contract between us.

6.3. You may provide your consent in the following ways:

By accepting statistical cookies in the cookie notice displayed on the Website.
When registering for our newsletter service or opting in to commercial communication, where offered.

6.4. You have the right to withdraw your consent at any time. Withdrawal of your consent does not affect the lawfulness of the processing of your data prior to its revocation. Consent to statistical cookies may be withdrawn at any time through the “Cookie settings” link in the footer of the Website; other consents are revoked in the same manner as they were provided or by contacting us as set out in section 15.

7. Data Recipients

7.1. Our Company does not assign your personal data or interconnect its database with any third parties, public authorities or other organisations for financial or other consideration.

7.2. For the execution of the purposes mentioned in this Notice, the Company may provide access to or transmit the following types of your data to the following categories of processors:

Your personal data to our internet and data hosting providers, for hosting purposes.
Your personal data to our content delivery and website security providers, which deliver the Website and protect it and its forms against attacks and automated abuse.
Your personal data to our e-mail delivery providers, for the transmission of the messages you send us through the forms of the Website and of our replies.
Your personal data to our information technology maintenance and support providers, for the smooth operation of the Website and of our information and communication systems.
Your personal data to the providers hosting our internal business tools (customer relationship and order management systems), in which your requests, our correspondence and your orders are recorded.
Pseudonymous data on the use of the Website to our web analytics providers, subject to your consent.
Connection data to the video hosting providers whose players are embedded in the Website, when a video is played.
Your financial data to the credit institutions and payment service providers with which we partner to process payments, where payments are made through the Website.
Your name, delivery address and telephone number to the carriers that deliver our products, where products are shipped to you.
Consumer behaviour data and contact information to third-party marketing and advertising companies for the commercial communication, marketing and advertising of our products, where you have consented thereto.
Your personal data to third-party consultants to provide data analysis services.
Your financial details and contact details to collection agencies in the event of due payments towards our Company.
Your personal data to our accountants, auditors and legal advisers, where necessary for the fulfilment of our legal obligations or the protection of our rights.

7.3. Where your request concerns a country or region served by one of our authorised regional partners or dealers, we may forward your contact details and the content of your request to that partner, so that it can follow up with you locally. Our partners process your personal data as independent controllers, under their own privacy notices.

7.4. The processing of your personal data by the processors mentioned above is executed under our control and instructions, on the basis of written agreements, and is subject to the same data protection policy or to a policy of at least the same level of protection.

7.5. In the event that we are required by a court or other administrative authority, and in any other case that we are legally bound to do so, our Company may transfer your personal data to public authorities to the extent specified by law, prior to you being informed.

7.6. Certain of the processors and partners mentioned above are established in the United States of America. Transfers of personal data to them take place under the EU–US Data Privacy Framework, to which they are certified, or under the Standard Contractual Clauses adopted by the European Commission, together with any supplementary measures required. A copy of the relevant safeguards may be obtained by contacting us as set out in section 15.

8. Data Security and Confidentiality

8.1. In order to ensure the proper use and integrity of your personal data and to prevent their unauthorised or accidental access, processing, deletion, alteration or other use, the Company applies appropriate internal policies and takes all appropriate organisational, technical, physical and logical security measures, as well as technical standards, in accordance with applicable laws and regulations. The Website is served exclusively over encrypted connections.

8.2. The processing of your data by the Company is conducted in a manner that ensures their confidentiality and physical and logical security, taking into account the latest developments, implementation costs and the nature, scope, context and purposes of the processing, as well as the risks for your rights and freedoms which are applicable in each circumstance.

8.3. Your personal data are processed solely by authorised personnel of the Company, bound by strict obligations of confidentiality.

9. Data Retention

9.1. We keep your personal data for as long as it is necessary for the relevant purposes of their processing and, in any case, not more than five (5) years from the point of their collection, subject to the following specific periods:

Access records of the Website (section 4.2): thirty (30) days.
Requests submitted through the forms of the Website, as stored on the Website itself: twelve (12) months.
E-mail correspondence relating to your requests: up to five (5) years after our last exchange.
Statistical data on the use of the Website: fourteen (14) months.
Your choice regarding cookies: twelve (12) months.
Order, invoicing and payment records, where products are ordered through the Website: for the period required by the applicable tax and accounting legislation.

9.2. Our Company may retain your personal data after the expiration of the relevant purposes of processing only in the following cases:

In case there is a legal obligation under a specific statutory provision.
For tax and social security audit reasons, within the relevant statutory limitation period.
For research or statistical purposes, or for the proper organisation and operation of our business, provided that anonymisation or pseudonymisation of your data takes place.
In case of any claims against the Company, for as long as necessary to defend our rights and legitimate interests before any competent court and any other public authority.

9.3. After the period of retention, your personal data are erased from our databases and systems in accordance with our data protection policies and provided that their retention is no longer required for the fulfilment of the purposes we have described above.

10. Your Rights

10.1. Without prejudice to applicable law and subject to any limitations thereof, you have the following rights:

Request access to your personal data and information related to their processing, and obtain a copy thereof.
Request the rectification of any inaccuracies or any missing personal data of yours.
Request the erasure of your personal data.
Request the restriction of the processing of your personal data in the cases explicitly provided for by law.
Request the portability of your personal data to another controller in a structured, commonly used and machine-readable format.
Object to the processing of your personal data in the cases explicitly provided for by law.
Object to a decision taken solely on the basis of automated processing, including profiling, which has an impact on you or significantly affects you.

Any requests relevant to the above are addressed in writing to our contact details mentioned in this Notice.

10.2. The Company will respond to any of your requests within one month from their receipt. Upon prior notice, this period may be extended by a further two months if necessary, taking into account the complexity of the request and the number of any other pending requests. In case of rejection of your request, we will provide relevant justification.

10.3. Where your request is manifestly unfounded or excessive, in particular because of its repetitive character, we reserve the right, in accordance with article 12 § 5 of the GDPR, either to (a) charge a reasonable fee, taking into account the administrative costs of providing the information or communication or of taking the action requested, or (b) refuse to act on your request.

10.4. In the event of any violation of your personal data which may place your rights and freedoms at a high risk, and provided that it does not fall under one of the exceptions expressly provided for by applicable law, we undertake to inform you without undue delay.

10.5. If there are any doubts as to the identity of the individual submitting the request, we reserve the right to request the provision of additional information necessary to confirm his or her identity.

10.6. If your rights are infringed, we inform you that you have the right to file a complaint with the Hellenic Data Protection Authority (Kifissias 1-3, 11523 Athens, www.dpa.gr) or with any other competent supervisory authority.

11. Your Obligations

11.1. By using our Website and by providing your personal data, you acknowledge that your personal data have to be actual, accurate and up to date whenever you are requested to grant them by our Company. Furthermore, you must inform our Company of any changes regarding your data so as to ensure they are kept up to date and accurate.

11.2. Where a registration function is offered through the Website, if you are found to be in breach of your obligations or if our Company has reasonable suspicion that the information you provide is false or incomplete or in any way contrary to applicable law or this Privacy Notice, we retain the right to reject your application for registration or to suspend or terminate your account immediately without notice. In this case, you have no right to any compensation due to the rejection of your application or the suspension or termination of your account.

11.3. You acknowledge that our Company may delete, cross-check, supplement or modify the information you provide on the basis of information lawfully provided by third parties or from publicly available sources. In this case, our Company will provide you with relevant notice in compliance with applicable law.

11.4. By using our Website you confirm that you are over sixteen (16) years old. If you are under the age of sixteen (16), you have the obligation to abstain from any use of our Website and from any transfer of your personal data without the consent of the person who exercises your parental responsibility. If you fail to comply with the foregoing obligations, you must immediately notify our Company. In any case, by using our Website, you acknowledge that our Company is not responsible for your violation of the obligations mentioned above to the extent that it is unable, even if it makes reasonable efforts, to verify your age or to receive consent from your guardian.

12. Cookies

Our Website uses cookies. For more information please review our Cookie Policy.

13. Communications

13.1. When you fill in a contact, quotation or support form on our Website, or otherwise provide us with your e-mail address, we use your contact details to respond to your request and to communicate with you in connection with our products and services; such communication does not require your consent. We send you commercial communications about our products only where you have opted in to receive them or, if you are an existing contact whose details we obtained in the context of a sale, a quotation or another transaction with us, where we inform you about YPHOS products or services similar to those you have enquired about or purchased, in accordance with article 11 § 3 of Law 3471/2006. You may object to such communications free of charge at any time.

13.2. This communication will display clearly the identity of our Company and will allow you to object and to ask easily and at no charge for the termination of such communication.

14. International Jurisdiction and Applicable Law

14.1. Any dispute between you and the Company arising from or in relation to the subject matter of this Privacy Notice shall be governed and construed in accordance with Greek law, without reference to its conflict-of-laws principles, and shall be subject to the exclusive jurisdiction of the competent courts of Athens, Greece, without prejudice to any mandatory provisions of the law of your country of residence.

14.2. If a provision of the present Privacy Notice is annulled by a decision of a competent court as unlawful, invalid or unenforceable, this will not affect the validity and enforceability of the rest of its provisions, which will remain in full force and will be accordingly applicable.

15. Contact

For the withdrawal of your consent, for the exercise of your rights and for any further request or query related to your personal data, you may address us at [email protected], by post at the registered offices of the Company mentioned in section 1.1, or by using our contact page.

Last updated on 28 September 2026.