At ACUSTICO Greece, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how personal information is collected, used, stored, and protected when you visit our website, contact us, or request information about our products and services.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek data protection legislation.
1. Data Controller
The data controller responsible for processing personal data through this website is:
Legal Name: NIKOLAOS NIKOU AND SIA E.E. (NNGROUP)
Trading Name: ACUSTICO Greece
2. Personal Data We Collect
Depending on how you interact with our website, we may collect the following categories of personal information.
Contact Information
When you submit an enquiry or communicate with us, we may collect your name, email address, telephone number, company name, and any information you voluntarily include in your message.
Project and Commercial Information
When requesting product information or a quotation, you may provide details about your project, including room dimensions, intended applications, architectural requirements, product preferences, technical drawings, and supporting documentation.
We ask that you avoid including unnecessary personal or sensitive information in these submissions.
Technical and Usage Information
When you visit our website, our servers and security systems may process technical information such as your IP address, browser type, device characteristics, requested pages, access times, and diagnostic or security events.
Communication Records
We may retain correspondence and related records to respond to enquiries, maintain continuity of communication, and manage ongoing professional relationships.
3. How We Use Personal Data
We process personal data for the following purposes:
Responding to Enquiries
To answer questions, provide product information, respond to contact form submissions, and manage communications.
Preparing Quotations
To review project requirements, recommend suitable products, prepare commercial offers, and discuss potential projects.
Managing Business Relationships
To maintain appropriate communication with customers, partners, suppliers, and prospective clients.
Website Security and Reliability
To protect the website, detect malicious activity, investigate technical problems, and maintain stable operations.
Legal and Regulatory Compliance
To meet applicable legal obligations and respond to lawful requests from competent authorities.
Marketing Communications
Where permitted by applicable law, to send newsletters or promotional information in accordance with the appropriate legal basis and communication preferences.
4. Legal Bases for Processing
We process personal data only where an appropriate legal basis exists under Article 6 of the GDPR.
These legal bases may include:
Consent — Article 6(1)(a)
Where you have given specific, informed consent for activities such as optional cookies or consent-based marketing communications.
Contract or Pre-Contractual Measures — Article 6(1)(b)
Where processing is necessary to respond to a request for a quotation, take steps toward an agreement with you, or perform an existing contract.
Legal Obligations — Article 6(1)(c)
Where processing is necessary to comply with applicable legislation.
Legitimate Interests — Article 6(1)(f)
Where processing is necessary for proportionate and lawful business purposes, such as protecting website security, responding to certain business communications, or maintaining records, provided these interests are not overridden by your rights and freedoms.
We assess the applicable legal basis according to each processing activity.
5. Contact Forms and Enquiries
When you submit a contact form, the information provided is used to process and respond to your request.
Depending on the nature of the enquiry, your information may be shared internally with authorized personnel or, where appropriate and lawful, with the relevant manufacturer or project partner when necessary to address your request.
We do not automatically subscribe you to promotional communications simply because you submitted a general enquiry.
Providing information requested in a form may be necessary for us to respond effectively. Where certain fields are mandatory, they will be identified accordingly.
6. Cookies and Similar Technologies
Our website may use cookies and related technologies to support essential functionality, maintain security, remember applicable preferences, and, where enabled, analyze website usage or support external content.
Strictly necessary cookies may be used where permitted by law without requiring consent.
Non-essential cookies and similar technologies that require consent will be activated only after the relevant consent has been obtained.
You can manage or withdraw your optional cookie consent through the website’s cookie preference controls.
Further information about the specific cookies, providers, purposes, and storage durations should be provided in our Cookie Policy.
7. Analytics and Third-Party Services
Depending on the services enabled on the website, certain technical or usage information may be processed by authorized external service providers.
These may include website hosting providers, security services, website analytics services, email delivery services, and providers of embedded content.
Any optional analytics, advertising, or tracking technologies will be subject to the applicable legal requirements.
The specific providers used by this website will be identified in the relevant website disclosures where required.
8. Sharing Personal Data
We do not sell personal data.
We may disclose personal information only when reasonably necessary and supported by an appropriate legal basis.
Recipients may include:
Authorized personnel responsible for handling enquiries and customer communications.
Hosting, email, maintenance, and information security service providers.
Manufacturers or commercial partners involved in responding to a specific project request.
Professional advisers where legitimately necessary.
Public authorities where disclosure is required by law.
Where a service provider processes personal data on our behalf, we apply the contractual and organizational safeguards required by applicable legislation.
9. International Data Transfers
Where personal data is transferred outside the European Economic Area, we ensure that an appropriate GDPR transfer mechanism applies.
Depending on the destination and circumstances, this may include an adequacy decision by the European Commission or suitable safeguards such as Standard Contractual Clauses.
Where required, additional protections will be assessed and implemented.
Information about relevant international transfers and safeguards may be requested using our privacy contact details.
10. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including any applicable legal, accounting, contractual, or regulatory requirements.
Enquiry data is retained in accordance with our documented retention schedule, taking into account the nature of the request and any resulting business relationship.
Contractual and financial records may be retained for the periods required by applicable law.
Technical security records are retained according to operational necessity and documented security policies.
When personal data is no longer required, it is deleted, anonymized, or otherwise handled in accordance with applicable legislation.
Specific retention periods or applicable retention criteria are available upon request and should be published where required.
11. Data Security
We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, alteration, disclosure, or misuse.
These measures may include encrypted website connections, access controls, system monitoring, software updates, backups, and appropriate restrictions on access to personal information.
Although we take reasonable precautions, no internet-based system can guarantee absolute security.
12. Your Rights Under the GDPR
Subject to the conditions and limitations established by applicable law, you may exercise the following rights:
Right of Access
Request information about the personal data we process and obtain a copy where applicable.
Right to Rectification
Request the correction of inaccurate or incomplete personal information.
Right to Erasure
Request deletion of personal data where the legal conditions are met.
Right to Restriction
Request the restriction of processing in certain circumstances.
Right to Data Portability
Receive eligible personal data in a structured, commonly used, machine-readable format where applicable.
Right to Object
Object to processing based on legitimate interests in accordance with applicable law, and object to direct marketing at any time.
Right to Withdraw Consent
Withdraw previously given consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Rights Concerning Automated Decisions
Benefit from applicable protections relating to decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise your rights, please contact [email protected]
We will respond within the periods required by GDPR, generally within one month, subject to legally permitted extensions.
13. Complaints to the Supervisory Authority
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a competent data protection supervisory authority.
In Greece, the supervisory authority is:
Hellenic Data Protection Authority (HDPA)
Website: https://www.dpa.gr/en
You may also contact us directly so that we can review and address your concerns.
14. Children’s Privacy
This website is intended primarily for individuals seeking information about professional acoustic products and related solutions.
We do not knowingly seek to collect unnecessary personal information from children.
Where we become aware that personal data has been collected unlawfully from a child, we will take appropriate steps in accordance with applicable legislation.
15. External Links
Our website may include links to other websites, including the manufacturer’s official website and external technical resources.
These external websites are governed by their own privacy practices.
We recommend reviewing the privacy policies of external websites before submitting personal information.
16. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, technology, processing activities, or legal requirements.
Any revised version will be published on this page with an updated revision date.
Where required by law, additional notice or renewed consent will be obtained.
