Privacy Policy & GDPR Notice

1. Data controller

The controller responsible for this website is:

• CDS Information Technologies Μονοπρόσωπη Ι.Κ.Ε.
• 4 Eleftheriou Venizelou Street, Elefsina, 19200, Greece
• GEMI number: 172919809000
• Email: info@cdsbackup.gr
• Telephone: +30 210 554 1336

2. Data we may collect

The website does not provide account registration or a contact form. We may process:

• contact details and information you voluntarily provide when contacting us by email or telephone,
• technical data generated during a visit, such as IP address, browser type, access date and time, and server security logs.

3. Purposes and legal bases

We process data only where necessary for the following purposes:

• Responding to enquiries, preparing quotations and taking steps before entering a contract — Article 6(1)(b) GDPR.
• Operating and securing the website, preventing malicious activity and technical troubleshooting — legitimate interests, Article 6(1)(f) GDPR.
• Meeting tax, accounting and other legal obligations — Article 6(1)(c) GDPR.
• Where consent is specifically requested, processing relies on Article 6(1)(a) GDPR and consent may be withdrawn at any time.

4. Cookies and analytics

cdsbackup.gr does not use Google Analytics, Meta Pixel, advertising cookies, or other tracking technologies that store information on a visitor's device.

Aggregated website traffic statistics are produced using Webalizer within the Plesk hosting environment. Webalizer analyses web server log files, which may contain an IP address, access date and time, requested page, referrer, and browser information.

This processing supports website operation and security, technical troubleshooting, and aggregated traffic measurement on the basis of the company's legitimate interests under Article 6(1)(f) GDPR. The data is not used for advertising, commercial tracking, or profiling and is retained according to the hosting provider's log retention and rotation settings.

5. Recipients and transfers

Access may be granted only to authorised CDS personnel and necessary hosting, technical support or email providers acting under appropriate contractual obligations. Data may also be disclosed to public authorities or professional advisers where required by law or necessary for legal claims.

• If data is transferred outside the European Economic Area, a lawful Chapter V GDPR mechanism is used, such as an adequacy decision or approved Standard Contractual Clauses.

6. Retention

Data is retained only for as long as required for the purpose for which it was collected. Correspondence is kept while an enquiry is handled and, where necessary, for legal claims. Contractual, tax and accounting records are kept for periods required by law. Technical logs are retained for a limited period according to hosting operation and security needs.

7. Customer data within Backup services

For personal data contained in a customer's backups, the customer determines the purposes and means of processing and generally acts as controller. CDS acts as processor under the service agreement, the applicable data processing agreement and the customer's documented instructions.

8. Your rights

Subject to the GDPR conditions, you may request access, rectification, erasure, restriction, portability, object to processing based on legitimate interests, and withdraw consent without affecting prior lawful processing.

• To exercise a right, contact info@cdsbackup.gr. We will respond without undue delay and normally within one month. Reasonable information may be requested to verify your identity.

9. Automated decisions and security

The website does not use automated decision-making or profiling. Appropriate technical and organisational measures are applied to protect data against unauthorised access, loss, alteration or disclosure. No security measure can guarantee absolute protection.

10. Complaints and contact

For any privacy matter, contact info@cdsbackup.gr. You also have the right to lodge a complaint with the Hellenic Data Protection Authority. This policy may be updated when services or legal requirements change; the current version is always published on this page.