INDIGO TECHNOLOGIES / LEGAL
Clear rules for the website, data and digital services.
How INDIGO TECHNOLOGIES processes personal data through this website and related digital services.
INDIGO GROUP SINGLE-MEMBER PRIVATE COMPANY (I.K.E.), VAT 802478693, G.E.MI. 177114001000, registered at 27–29 Dimarchou Angelou Metaxa Street, 16674 Glyfada, Attica, Greece, acting through the INDIGO TECHNOLOGIES brand. Privacy and rights contact: info@indigotechnologies.gr. No Data Protection Officer has been appointed because no applicable statutory requirement has been identified.
This policy covers website visitors, enquiry senders and users of available sign-in areas. Depending on your interaction, we may process contact and company details, professional role, enquiry content, account and access identifiers, session and authentication events, limited security logs and, only after a commercial relationship begins, contractual, support and billing records.
We process data to respond to enquiries and take requested pre-contractual steps; perform agreements and provide support; protect accounts and infrastructure on the basis of legitimate interests; comply with tax, accounting and regulatory duties; and, only where required, on consent for optional analytics or marketing.
Mandatory fields are needed to handle the request. Without them we may be unable to respond. Do not submit passwords, full payment-card details, special-category data or other sensitive information in free-text fields.
Access is restricted to authorised persons and necessary hosting, security and, when enabled, email-delivery providers. Confirmed providers are listed on the Provider & Subprocessor Transparency page. We do not sell personal data. Transfers outside the EEA rely, as applicable, on an adequacy decision, the EU–US Data Privacy Framework for certified recipients, or Standard Contractual Clauses and supplementary safeguards.
Ordinary enquiries are retained for up to 24 months after the last meaningful contact unless they become contractual records or are required for legal claims. Contractual and tax records follow statutory periods. Access cookies expire within 8 hours. Security logs are retained only for a risk-appropriate period, or longer where required to investigate an incident or establish legal claims.
You may request access, correction, erasure, restriction, portability, or object to legitimate-interest processing, and withdraw consent without affecting prior lawful processing. Contact info@indigotechnologies.gr; reasonable identity verification may be required. We normally respond within one month, subject to lawful extension. You may complain to the Hellenic Data Protection Authority, 1–3 Kifisias Avenue, 115 23 Athens, dpa.gr.
The website makes no solely automated decision producing legal or similarly significant effects and is not directed at children. Safeguards include access controls, secure cookies, server-side validation, rate limiting and separation of production secrets from public code. No system can guarantee absolute security.
We update this policy when actual processing, technology or law changes. Material changes will be communicated appropriately and the revision date updated.