Privacy and Personal Data Protection Policy

The Privacy and Personal Data Protection Policy form an integral part of the TERMS & CONDITIONS OF EUCALLSPLATFORM. 

This Privacy Policy explains how JOIST SINGLE MEMBER S.A., (“JOIST S.A.”, “JOIST”, “we”, “our”, “us”), collects, uses, stores, and protects your personal data when you access or use the EUcalls Platform (“EUcalls”, “Platform”, “Services”). 

We are committed to protecting your personal data and complying with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Greek Law 4624/2019 (“Personal Data Protection Authority, implementing measures of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and incorporation into national legislation of Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 and other provisions”) and EU data protection laws. 

JOIST S.A. processes personal data provided by its customers and suppliers as well as visitors/users of its website, upon their express consent. The processing is carried out in compliance with all necessary security measures in order to prevent the risk of their leakage. 

1. Data Controller

EUcalls Platform is not a service of the European Union authorities and has no legal connection with the European Union authorities. EUcalls Platform is a platform created, provided and operated by JOIST SINGLE MEMBER S.A.  

The data controller responsible for the processing of your personal data is: 

JOIST SINGLE MEMBER S.A.
Valtetsiou & Tripoleos 
41336, Larissa, Greece 
Email: info@eucalls.net  
Phone: +30 2410 234422 

For any question or issue that may arise regarding the processing of your Data, you can contact the company directly at e-mail info@eucalls.net 

2. Data Protection Officer (DPO)

For any questions regarding this Privacy Policy or your personal data, you may contact our Data Protection Officer: 

Name: Dimitrios Tsakiridis
Email: dpo@joistpark.eu  
Phone: +30 2410 234422 

3. Scope of This Policy

This Privacy Policy applies to: 

• Visitors of the EUcalls website
• Registered users of the EUcalls Platform 
• Subscribers to paid EUcalls services 
• Business partners and experts interacting with the Platform 

4. Categories of Personal Data We Collect

Depending on how you interact with EUcalls, we may collect the following categories of data: 

4.1 Account & Identity Data 

You provide us with the data below when you log in to the system and create your account by logging in and registering on our platform portal. 

• First and last name 

• Post address and Email address 

• Telephone number 

• Password (encrypted) 

• Organisation name and role 

• User profile information 

4.2 Usage & Technical Data 

Mainly for the purpose of protecting our website from attacks and malware, we may collect and process further data that constitute technical information, such as, but not limited to: 

• IP address 

• Date and time of access (log in) and exit (log out) 

• Total duration of your stay on our website 

• Browser type and version 

• Your domain name 

• Operating system 

• Language and approximate geographic location 

• Log files and platform activity 

• The details of our website you visit, e.g. pages, audiovisual files, other links, etc. 

4.3 Content & Interaction Data 

• Declared interests and preferences 

• Uploaded documents (e.g. presentations) 

• Comments, and interactions within the platform 

4.4 Billing & Transaction Data 

• Subscription status 

• Invoices and payment confirmations 

• VAT and billing address (where required by law) 

Important: JOIST.S.A. does not store or process credit or debit card details used in EUcalls Platform. 

5. Purposes and Legal Bases for Processing

We collect, use, process and store the personal data you provide to us, always strictly respecting the relevant National and European legislation and always after your explicit consent which you grant us when you register on our website Portal and create your personal access account for the first time. The collection of data takes place when you log in to your account, when you register any questions, etc. The collection also takes place when you contact us by phone, or by email, or through Social Media networks, or when you complete the Contact Form available on our website. 

We use the data with the aim of improving our services, for statistical purposes, as well as for our direct communication with you in order to answer any questions you may ask us or comments/observations you may report to us, for your assistance when creating an account or when browsing our website, etc. We may also use your data to send you informational material, while you are always given the opportunity to choose to be deleted from the list of recipients of this type of updates. 

Finally, data collection is carried out whenever this is required to prevent or prosecute illegal behavior against our company, as well as following a decision by the competent police, administrative, judicial authorities, or for the general defense of the legitimate interests of our company. 

More specifically, we process personal data only where permitted under Article 6 GDPR: 

• Creating and managing user accounts 

• Providing EUcalls platform services 

• Subscription management & invoicing 

• Platform security & fraud prevention 

• Analytics & service improvement 

• Marketing communications 

• Compliance with legal obligations 

The applicable legal basis for each processing activity may include the performance of a contract (i.e. providing access to EUcalls Platform), compliance with legal obligations, legitimate interests, or consent, depending on the nature and purpose of the processing. 

6. Payments and Payment Processors

Payments for EUcalls paid services are processed securely through third-party payment service providers. Depending on the payment method selected, transactions may be handled by Stripe, PayPal, or Revolut. 

JOIST.S.A. does not collect, store, or process credit or debit card details. All payment transactions are carried out directly by the respective payment provider, which acts as an independent data controller for payment data and processes such data in accordance with its own privacy policy and applicable data protection laws. 

All payment providers used by JOIST.S.A. comply with the Payment Card Industry Data Security Standard (PCI-DSS), ensuring a high level of security for payment transactions. 

For more information on how these providers process personal data, please refer to their respective privacy policies:  

Stripe Privacy Policy
PayPal Privacy Policy
Revolut Privacy Policy

7. Data Sharing and Recipients

We may share your personal data only when necessary and under strict safeguards: 

7.1 Service Providers (Processors) 

We work with trusted third parties, to whom we may assign the processing of your data on our behalf, such as: 

• Hosting and cloud infrastructure providers 

• CRM and email communication tools 

• Analytics and monitoring services 

• Authentication and security providers 

• Payment processors 

All such providers are bound by Data Processing Agreements (DPAs) in order to ensure that they comply with all legal provisions and the required security measures when processing your data. 

7.2 Experts & Partners 

For paid or customized services, limited data may be shared with selected experts or partners strictly to deliver the requested service. Confidentiality agreements may be executed upon request.  

The above entities under 7.1. & 7.2. are located within the European Union and therefore apply the strict EU legislation on the protection of personal data. In case these entities are located outside the European Union, in order to process the data they must, in accordance with the General Regulation EU 2016/679, appoint a representative in the EU and apply the more specific provisions of Chapter V of the Regulation entitled “Transfers of personal data to third countries or international organizations” (Articles 44-55). 

7.3 Legal Obligations 

We may disclose data required by law, court order, or to protect our legal rights, users, or infrastructure. 

8. International Data Transfers

Some service providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards, such as: 

• EU adequacy decisions 

• Standard Contractual Clauses (SCCs) 

• Additional technical and organizational measures

9. Data Retention

We retain personal data only for as long as necessary: 

• In the event that their processing is carried out for the performance of a contract, your data is stored for as long as the performance of the contract lasts and/or for the establishment of legal claims arising from the performance of the contract and is then destroyed. 

• Account data: for the duration of the account plus up to 24 months 

• Billing and invoicing data: as required by tax and accounting laws (usually 5–10 years)  

• Technical logs: up to 12 months 

• Marketing data: until consent is withdrawn 

Data may be anonymized for statistical purposes. 

10. Cookies and Tracking Technologies

10.1 Cookies 

JOIST.S.A. uses cookies to ensure proper functionality and improve user experience of EUcalls Platform. 

Cookies are categorized as: 

• Essential cookies: required for platform operation 

• Analytics cookies: help us understand platform usage (consent required) 

• Marketing cookies: used only with explicit consent 

You can manage cookie preferences at any time via our cookie banner or settings panel. 

10.2 Analytics  

We may use analytics services (e.g. Google Analytics) with IP anonymization and consent-based activation, where required, in compliance with GDPR and ePrivacy rules. 

11. User Rights (GDPR)

JOIST S.A. recognizes that all visitors or users of our website, where we process your personal data that you have provided to us, enjoy the following rights: 

You have the right to: 

• Access your personal data: you have the right to request and receive full information about the processing of your data. You have the right to be informed, as discussed above, about: a) the personal data that are being processed and the categories to which they belong, b) the available information on the origin of the data, c) the purposes and legal basis for the processing, d) the recipients or categories of recipients to whom the data have been disclosed, in particular recipients in third countries or international organizations, e) the period for which the personal data will be stored or, if this is not possible, the criteria used to determine this period, f) the possibility of exercising the right to rectification or erasure or restriction of the processing of personal data, g) the right pursuant to Article 58 to submit a complaint to the Authority, and h) the contact details of the Authority. 

• Rectify inaccurate data and Request erasure (“right to be forgotten”): you have the right to request from the controller the correction of inaccurate personal data concerning you without delay or the completion of incomplete data. You also have the right to request the erasure of your personal data without delay, where the processing violates legal provisions, where their retention is no longer necessary, where consent is revoked, where their erasure constitutes a legal obligation of the controller. 

• Restrict processing: you have the right to request restriction of processing instead of erasure, when: a) there is reason to assume that erasure would harm your legitimate interests, b) the personal data must be retained, under certain conditions, c) erasure would be impossible or would involve a disproportionate effort due to the specific storage method. 

• Data portability: you have the right to receive your data in a structured, commonly used and machine-readable format and the right to transmit it to another controller. You also have the right to request that we transmit your personal data directly to another controller, where technically feasible. 

• Object to processing: you have the right to object to the processing of your personal data, in particular where it is based on a legitimate interest, or to withdraw your consent. You may object to the processing at any time on grounds relating to your particular situation, including profiling based on these provisions. If you exercise your right to object to the processing, JOIST S.A. will no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. 

• Withdraw consent at any time: you have the right to withdraw your consent to the processing of your data at any time. Withdrawing your consent does not affect the lawfulness of processing that was based on your consent before its withdrawal. Withdrawing your consent is as easy as giving it. 

• Right to Information regarding a) the legal basis of the processing (Law 4624/2019 and General Regulation EU 2016/679), b) the period for which the personal data will be stored as analysed above, c) the recipients of the personal data as analysed above. 

• Right not to be Subjected to Automated Individual Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. 

• Right to File a Complaint. You have the right to file a complaint with the Personal Data Protection Authority if you believe that the processing of your data violates your rights, at https://www.dpa.gr/, https://www.dpa.gr/el/wizard_kataggelion e-mail: contact@dpa.gr , complaints@dpa.gr Telephone: 210 6475600 

We take the protection of your personal data very seriously and encourage you to contact us first if you have any questions, concerns, or believe that your personal data has not been processed in accordance with this Privacy Policy or applicable data protection laws. 

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. 

Where available, you may exercise certain rights directly through your user account settings within the EUcalls Platform. 

If a request cannot be fulfilled through your account or if you require assistance, you may contact us at info@eucalls.net. We may verify your identity before responding. 

12. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure. Security measures are continuously reviewed and improved. 

JOIST S.A. takes all necessary technical and organizational measures to ensure the secure processing and confidentiality of your personal data and to prevent any unauthorized and unlawful access to them and any loss, leakage or destruction thereof. The personal data you share with us is transmitted in encrypted form and for this purpose we use modern security systems, such as the Transport Layer Security (TLS) system. For this reason, the user visiting our website can see at the left end of the instructions the characteristic lock padlock which means that the website is secure. 

In order to continuously provide high protection, we frequently review the measures taken and upgrade them whenever there is a technological upgrade of the system available. 

13. Business Transfers

In the event of a merger, acquisition, or transfer of assets, personal data may be transferred as part of the transaction, in full compliance with GDPR. Users will be informed where required. 

14. Changes to This Privacy Policy

JOIST S.A. reserves the right to update or to modify the above terms without prior notice, especially in the event of a change in applicable legislation or the required technological protection measures. 

Material changes will be communicated via the platform or email, and renewed consent will be requested where required. 

15. Subject Acceptance and Consent for Data Processing – Purpose of Processing

By accepting the terms of use, the user accepts, consents and grants his consent for JOIST S.A. and its employees, employees, fulfilment assistants, associates, to collect and “Process personal data” within the meaning and terms of Law 4624/2019, i.e. in any task or series of tasks that will be carried out by JOIST S.A., with or without the aid of automated methods and are applied to personal data that the user communicated to JOIST S.A.. 

The visitor/user of the website EUCalls.net consents to JOIST S.A.collecting, processing and using the information that the user makes available to it and the user’s usage data regarding the use of the website eucalls.net, in particular in order to formulate and submit to the user commercial proposals that may be of interest to him.