Privacy & Cookie Policy

1. Who we are

The controller of your personal data is Petros Giouglis, insurance agent, located at 40A Christou Katsari St., 45221 Ioannina, Greece, tel. +30 26510 70950, mobile +30 697 7745003, email info@giouglis.gr (hereinafter “we” or “the agency”).

The agency is registered in the Special Register of Insurance Intermediaries of the Ioannina Chamber of Commerce under special register no. 2527, with General Commercial Registry (GEMI) no. 30525429000 and tax ID (AFM) 122835066, and is a member of the Insurance Agents Association of Epirus.

This policy explains what data we collect through the website www.giouglis.gr and its communication channels, for what purpose, how we protect it and what rights you have, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Greek Law 4624/2019.

This is an English translation for convenience. In case of any discrepancy, the Greek version prevails.

2. What data we collect

Contact details: name, telephone, email and any message you send us through the form, by phone or via Viber, WhatsApp and Messenger.

Details for a quote or policy: depending on the insurance you are interested in, for example vehicle and registration details, driving licence, claims history, property details, date of birth, occupation, tax ID, details of your current policy or energy bill.

Health data (special category): only when you request life, health or personal accident insurance, and only what the insurance company requires (e.g. a health questionnaire). We process it only with your explicit consent.

Technical data: when you visit the website, the server automatically records basic information (IP address, device and browser type, time of visit) for security and proper operation.

We do not knowingly collect data from minors through the website. Data of minors (e.g. as insured family members) is received only from the parent or guardian.

3. Purposes and legal basis

Replying to your request and preparing a quote: to take steps prior to entering into a contract, at your request (Article 6(1)(b) GDPR).

Intermediation, conclusion and management of policies, renewals and claims support: for the performance of the contract (Article 6(1)(b)).

Compliance with legal obligations: for example the obligations of Greek Law 4583/2018 on insurance distribution (demands-and-needs analysis, records), tax obligations and anti-money-laundering legislation (Article 6(1)(c)).

Health data: only with your explicit consent (Article 9(2)(a)) or where necessary for the establishment, exercise or defence of legal claims (Article 9(2)(f)).

Security and operation of the website: based on our legitimate interest in protecting our systems (Article 6(1)(f)).

Information about new products or offers: only if you have given your consent, which you may withdraw at any time (Article 6(1)(a)).

4. Who we share data with

Insurance companies we work with, only as far as needed to obtain quotes, issue and manage your policy and handle a claim. These companies are independent controllers and apply their own privacy policies.

Energy providers, when you ask us to compare or switch your electricity or natural gas provider. Online electricity bill assessment requests are submitted through the platform of our partner Pro Sales Support (prosalessupport.gr), which receives the details you enter there and the photo of your bill, solely for the assessment and for contacting you.

Partners who support us technically (website hosting, email, accounting support), who are contractually bound to confidentiality and data security.

Public authorities, where required by law (e.g. supervisory, tax or judicial authorities).

We do not sell or rent your data to third parties for advertising purposes.

5. Viber, WhatsApp, Messenger and third-party services

When you write to us via Viber, WhatsApp or Messenger, the communication passes through those services (Rakuten Viber, WhatsApp/Meta, Meta Platforms) and is also governed by their own terms and privacy policies. We recommend that you do not send sensitive health data that way. We can receive it by another, more secure method.

The Google Maps map on the contact page loads only with your consent. Your browser then connects to Google's servers, which receive your IP address. The website's fonts are hosted on our own server.

Some of these providers may process data outside the European Economic Area, with the safeguards of the GDPR (e.g. standard contractual clauses or the EU–US Data Privacy Framework).

6. How long we keep data

Quote requests that do not lead to a policy are kept for up to 12 months and then deleted, unless you ask us to delete them sooner.

Data of clients with a policy is kept for as long as the relationship lasts and then for as long as the law requires or as needed to defend possible claims. This is usually up to 20 years from the end of the contract, in line with the general limitation provisions.

Technical server logs are kept for a short period, for security reasons.

7. How we protect data

We apply appropriate technical and organisational measures: encrypted connection (HTTPS), access limited to the people who need it, passwords, backups and confidentiality undertakings. No method of transmission over the internet is completely secure. However, we take every reasonable measure to protect your data.

8. Your rights

You have the right of access to your data, rectification, erasure, restriction of processing, portability, objection to processing based on legitimate interest, and to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

To exercise your rights, contact us at info@giouglis.gr or +30 26510 70950. We will reply within one month at the latest.

If you believe that the processing infringes the law, you have the right to lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens, www.dpa.gr).

9. Cookies

Cookies are small files stored on your device when you visit a website. The browser's “local storage” (localStorage) works in a similar way.

On your first visit a message appears where you choose which categories you allow. Until you choose, only the necessary ones are loaded. You can change your choice at any time from the “Cookie settings” link at the bottom of every page.

Necessary (always active): required for the website to work and to remember your cookie choice. The choice is stored in your browser (localStorage, key “giouglis-consent”) for 12 months. If you close the suggestion to install the website as an app on your phone, we also remember that (key “giouglis-install”) so we do not show it again for 30 days. These do not require consent.

External content (with consent): the Google Maps map on the contact page loads only if you allow it or press “Show map”. Google may then set its own cookies, in accordance with its policy.

Statistics (with consent): we use Google Analytics 4 (Google Ireland Ltd) to understand how the website is used: which pages are read and on which device, and how many visitors tap the contact buttons or send the form. Analytics loads only if you allow it. The cookies “_ga” and “_ga_JRWW1PBWX6” are then set, for up to 12 months. The IP address is anonymised and the data is not used for advertising. Google may process data outside the EEA (e.g. the USA), with the safeguards of the EU–US Data Privacy Framework. If you withdraw consent, measurement stops and these cookies are deleted.

The website does not use advertising cookies. Fonts and icons are hosted on our own server, so your data is not transferred to third parties during normal browsing. You can also delete or block cookies in your browser settings.

10. Changes to this policy

We may update this policy when the law or our services change. The current version is always available on this page, with the date of the last update.