PRIVACY POLICY AND PERSONAL DATA PROTECTION

TELECOMMUNICATIONS TELEGLOBAL E.E. (hereinafter the “Company”) attaches great importance to the lawful processing, security, and protection of your personal data, in whatever capacity you communicate or cooperate with us, such as indicatively prospective or active customers, consumers, website visitors, employees, suppliers, professionals, private individuals, passengers, or other cooperating third parties.

Please read these terms carefully, as well as the Company’s relevant Security and Personal Data Protection Policy. By using our websites and by signing the relevant consent statement, you unconditionally accept the practices described herein. These terms shall henceforth govern our contractual relationship and are incorporated into the terms of use of each of our services.

1. What your personal data are
Your personal data include any information, in paper or electronic form, which may lead, either directly or in combination with other data, to your unique identification or to locating you as a natural person. This category may include, as applicable, information such as your full name, Tax Identification Number (TIN), social security registration number, your physical and electronic addresses, your landline and mobile phone numbers, calling and called telephone numbers, SMS message recipients, your bank/debit/prepaid card details, your email addresses, identifiers of your equipment or terminal devices (computer, smartphone, tablet), your browsing/search history (log files, cookies, etc.), and any other information that allows your unique identification under the provisions of the General Data Protection Regulation (GDPR 2016/679), Law 4624/2019, applicable Greek legislation, and the decisions of the Hellenic Data Protection Authority (HDPA).

2. Which personal data we collect
We process, in accordance with the law, and protect your personal data when you communicate with us and/or purchase our products or services directly and/or online, when you call our numbers to receive information, end-user services (B2C) or services on behalf of third parties (B2B), or when you receive other services, information, or services relating to any other activity of the Company.

3. Lawful processing
The Company will use your information for the following lawful purposes of processing (pursuant to Article 6 GDPR), as applicable, based on your explicit consent (which you may freely withdraw at any time), or for the performance of a contract or pre-contractual relationship with you, or for the purposes of our legitimate interests, or to protect your vital interests, namely:

• Managing your calls and requests for information in order to complete your requests, purchases, and orders.
• Responding to your requests and questions regarding our products/services, as well as receiving and responding to your suggestions and comments on improving our products and services.
• Quality assurance and staff training purposes; in this context, telephone communications with our customers are usually recorded, as you are informed by a recorded introductory message.
• Analyzing traffic on our websites and improving your experience, as well as providing you with information related to products, services, special offers, and promotional activities.
• Our internal operations and analytics, such as internal administration, fraud prevention, use by management information systems, invoicing, accounting, billing, and auditing.
In any case, you may change your preferences at any time by calling +30 26511 18743 or by using the unsubscribe link at the end of each email you receive from us.

4. Principles of collection and processing
This Personal Data Protection Policy aims to inform you about the terms of collection, processing, and transfer of your personal data that we may collect, either as Data Controller or Data Processor. The Company and its trained personnel apply the principles of processing set out in GDPR 2016/679 (lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability). The Company safeguards your rights regarding the use of your personal data (information, access, rectification, erasure, restriction of processing, portability, objection, and the right not to be subject to automated decision-making/profiling, as further specified in Greek law). The above apply without any discrimination and cover all processing activities we perform and all services we provide.

5. How we collect your personal data
The Company collects your personal data through your acceptance of the terms of use of each of our services, such as:

• when you call our numbers, send us an email, or submit an application or an order;
• when you contact our offices or our personnel, including our call center;
• when you provide your billing or shipping address for issuing or sending an invoice/receipt, as well as home-delivery details for your order;
• when you purchase a product and/or service, in order to verify your age and determine whether you may legally enter into a valid contract with us or whether parental/guardian consent or signature is required;
• when you visit our websites, where—subject to your explicit consent—we collect information from your device via cookies, such as your Internet Protocol (IP) address, operating system, browser type and version, etc.;
• when we receive documents, requests, orders, pleadings, warrants, etc. from third-party bodies, such as supervisory, prosecutorial, judicial, or tax authorities, for the investigation of crimes and the protection against fraud and all forms of criminal activity, and for preventing infringements of legal interests (protected works, software, etc.).

6. Data minimization, retention, and deletion
The Company will always request only the minimum personal data required by law for you to access our electronic platforms and services and to purchase products/services.

We retain your personal data only for as long as required by the contractual terms of each service, in combination with applicable law and depending on the purpose of processing, and then anonymize or destroy them. You may ask us which data we collect about you and request correction or deletion by submitting the relevant application we have available, unless retention is required by law for tax, evidentiary, or judicial purposes or for the prosecution of unlawful acts.

7. Cookie Policy
In accordance with the European e-Privacy Directive 2009/136/EC (to be replaced by the ePrivacy Regulation) and the HDPA Guidelines dated 25.02.2020, our website uses “cookies”. These are online tools for collecting and analyzing information originating from social media platforms or cooperating third-party websites, in order to measure traffic, improve functionality, content, and overall appearance of our website, and tailor it to the needs of our customers.

When using our website, your personal data may also be processed by third parties, such as social networks and search engines (e.g., Google Analytics, Facebook social plug-ins, etc.), without any involvement, influence, or control by the Company, and may be transferred within or outside the European Economic Area (EEA). Such third parties are solely responsible for their processing activities. If you do not wish third parties such as Google, Facebook, or Twitter to receive information from your browser when you visit the Company’s websites, you may opt out according to the terms provided in the relevant usage/privacy policy on each such third party’s website.

Although most browsers accept cookies automatically, you can always change your settings to refuse cookies or to require your consent for each cookie separately. However, please note that this may limit the features available to you on any website and may affect your browsing experience.

8. Transfer of your data to third parties
As a rule, our Company does not transfer your personal data to third parties, except when we act as an intermediary and to the extent required to complete your order and fulfill requests related to the services we provide. Such third parties may include official state and supervisory bodies (e.g., law enforcement and prosecutorial authorities, Cyber Crime Division, HDPA, EETT, ADAE, supervisory authorities) when we are required to comply with the law and prevent unlawful actions against us and our customers (e.g., telecommunications fraud, insult, infringement of personality rights, etc.).

To process your data, we may need to transfer your information to other countries, primarily within and, exceptionally, outside the EEA, based on EU adequacy decisions, binding corporate rules, standard contractual clauses, and approved codes of conduct.

9. Security of your personal data
In all cases, we take appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of your data. Our aim is to ensure that your personal information is transmitted, stored, and processed in accordance with appropriate international security standards and procedures. The Company employs trained and responsible personnel, an Information Security Officer, and a Data Protection Officer, and we recognize the importance of protecting privacy and all your personal information. For this purpose, we maintain appropriate security policies and use suitable technical and operational tools, such as anonymization, pseudonymization, data encryption, firewalls, access levels, authorized staff, staff training, periodic audits, and compliance with international standards for information security and business continuity.

Any partner who has access to the above information uses it solely to serve the purposes described above. We share the information you provide only in the ways described in this Policy and according to your explicit and specific consent per type of processing, which you may withdraw at any time by contacting us.

10. Targeted advertising
If you have provided written consent, we may use your personal data together with other information we have collected—following human intervention by our commercial department—to display advertisements related to your apparent preferences, on our website or on another website.

However, we do not use automated tools to identify and assess your consumer profile and preferences by combining them with other personal information (such as your email address) in order to display ads or send personalized offers. Furthermore, we do not share your personal data with third parties so that they can send you similar advertising messages, unless you have explicitly provided written consent. If you wish to stop receiving updates or offers, you may use the unsubscribe link at the end of each email you may have received from us.

11. Links to third-party websites
The Company’s websites may contain links to other third-party websites that are operated and maintained exclusively by those parties and are not controlled by us. Therefore, we bear no responsibility whatsoever for the content, actions, or policies of such websites. Please read carefully the data protection policies of the websites you visit, as they may differ significantly from ours.

12. Unsolicited commercial communication
The Company does not allow the use of our website or our services for the transmission of bulk or unsolicited commercial email messages (spam). We also do not allow the sending of messages to or from our customers that use or contain invalid or forged headers, invalid or non-existent domain names, techniques to conceal the origin of a message, false or misleading information, or that violate the terms of use of websites.

We do not allow, in any way, the collection of email addresses or general information of our customers and subscribers through our website or our services. We do not permit and do not authorize any attempt to use our services in a manner that could harm, disable, overburden, or impair any part of our services or interfere with anyone’s lawful use of our services.

If we consider that unauthorized or inappropriate use is taking place in any of our services, we may, without notice and at our sole discretion, take appropriate measures to block messages from a specific domain, an email server, or an IP address. We may immediately terminate any account using our services that, at our sole discretion, transmits or is associated with the transmission of messages that violate this Policy.

13. Contact for questions or comments
If you have questions or comments regarding this Security and Personal Data Protection Policy, or if you believe that we have not followed the principles set out herein, please email us at info@teleglobal.gr or contact us at the following postal address: Ethnikis Antistaseos 135, Kardamitsia, Ioannina, 45500, Greece.

14. Effective date of the Security and Personal Data Protection Policy
This Policy was published by the Company on 23.08.2025 and is subject to periodic improvement and revision.