Privacy Policy

I. Object of the Policy

This policy on the protection of data subjects from the processing of their personal data (hereinafter also: the "Policy") explains the ways in which our company (trade name: STADIUM 2020 SPORTS & RECREATION FACILITIES SA. distinctive title.: STADIUM 2020, Business Registry No: 153535501000, registered seat: Amarysias Artemidos & Pitta, Maroussi, P.C. 15123, hereinafter also: the "Company" or "our company"), processes personal data through our website https://stadionsc.com/ (the "Website").

This Policy is addressed to visitors to the Website ("Visitors" or "You") and sets out how our Company, under its role as Data Controller, processes your personal data and protects your rights in accordance with the provisions of the General Data Protection Regulation (EU 2016/679), Law No. 4624/2019, Law No. 3471/2006, as well as the decisions and recommendations of the Data Protection Authority and the European Data Protection Board ("data protection legislation").

Respecting the privacy of data subjects and protecting your personal data is a priority for our Company.

The Policy should be read in conjunction with our Terms and Conditions. All of the foregoing, together with any notices and updates disclosed from time to time through the Website, constitute a single text and govern the operation of the Website as a whole. By using the Website, you acknowledge that you have read and understand this Policy, according to which your personal data is processed. If you do not agree with the practices described in this Policy, please do not use the Website and do not provide your personal data.

Contact: For any questions regarding the processing of your personal data or to exercise your rights, you can contact our company directly by sending your request to the email: [email protected]. Should you require any clarification or further information, please do not hesitate to contact us before taking any action. Any clarification provided to you does not constitute a modification or replacement of this Policy and is provided solely for your convenience.

I. Purposes and legal basis for the processing of your personal data

We collect your personal data when you visit the Website, in principle directly from you, but in some cases also by automated means. In particular:

1. Contact Form: when you fill in the contact form available in the Contact section, we collect your identity (name and surname), contact data (e-mail, phone number), and any data contained in the message you send us when you fill in the form.

We process the above data on the basis of your consent, which you provide by contacting us on your own initiative, in order to respond to your request. Please do not provide us with any further data than what is actually necessary to fulfil your request. Data submitted to us through our contact forms is deemed to be submitted to us upon your consent or with the permission of the person to whom it relates. We are not responsible for processing data that may be submitted to us without reason or without permission/consent.

You are free to withdraw your consent at any time. If you wish us to stop communicating with you and no longer process your personal data, please contact us at the contact details listed above. However, please note that the withdrawal of consent is for the future and therefore any processing that has taken place up to the point of withdrawal will not be affected. Also, if you withdraw your consent, it is likely that we will no longer be able to serve you.

2. Browsing data and data collected through cookies: In addition, we collect certain technical data automatically, such as the Internet Protocol (IP) address associated with your device, server information, information about the operating system of the device you are using, as well as certain data through cookies installed on your browser and device. For more information on how we process this technical data, please visit our Cookies Policy.

We process the above data based on our legitimate interest, with the aim of continuously improving the Website and its functions. This processing is based on the analysis of technical data and feedback from the use of individual pages in order to obtain technical reports and ensure the proper and efficient functioning of the Website. This processing is reasonably balanced against your rights to privacy.

In some cases, we may process your personal data on the basis of our legal obligation, for example, when this is necessary for the proper functioning of the Website and its protection from malicious content that may undermine its security. In such cases, you cannot object to the processing of your data, which we retain for reasons that are reasonably balanced against your rights, and which we seek to maintain anonymous in all cases.

II. Protection and security of personal data

Our company's main concern is to ensure that appropriate precautions are taken at all times to protect the aforementioned personal data. To this end, we implement appropriate technical and organizational measures to ensure that your personal data stored in physical or electronic files are protected against unauthorized access, use, modification, loss and destruction.

We use various methods to protect data, such as locking the areas where personal data is stored, granting access only to authorized persons, anonymization and encryption techniques when storing and transmitting data, using strong passwords on systems where personal data is stored, and other technologies that can help secure the information you provide to us. When exporting reports for statistical analysis, we anonymize the corresponding data on which the research is based before creating the reports.

In any case, the processing of personal data is carried out only by persons or units to whom specific powers have been assigned, who are under our control, and only on our instructions.

Furthermore, through its contractual commitments with its partners, our company takes all necessary security measures to protect and ensure the confidentiality, secrecy, and integrity of personal data.

In any case, the security of your personal data depends on factors or technical problems of the network, which are not controlled by the Company, or on events of force majeure.

III. Data retention timeframes

To determine the retention period for your personal data, we take into account, in particular, the nature of the data, the amount, the purpose of processing, security, and compliance with our legal obligations. We retain personal data for a period that is related to the specific purpose of processing, until the purpose is fulfilled or for a longer period if required by law or in accordance with the legitimate interests of our company until such interests are no longer active.

In any case, we retain personal data for as long as you continue to interact with us (e.g., for as long as we exchange communications in connection with the request you have submitted to us via the contact form).

Furthermore, we retain personal data for legitimate interest purposes, such as to protect our legal rights in the event of a dispute arising from your interaction with us (e.g. in the context of a contract, communication, our commercial policy, or other transaction between us), for the period during which liability could arise from the processing, in accordance with the applicable legislation.

When the legal basis for processing your data is consent (e.g. in the case of the contact form), we retain the data until consent is withdrawn and, in any case, no longer than the period during which liability could arise from the processing, as described above.

When the legal basis for processing your data is our legitimate interest (e.g. in the automated processing of data obtained from browsing the Website), we generally anonymize personal data for research or statistical purposes, so that it can no longer be linked to an identifiable person, and we use it in this form for an indefinite period of time.

In some cases we keep the data as such, if required, for purposes related to the proper functioning of the Website and the security of access to the Website.

IV. Sharing and transmission of data

We transfer the personal data we receive through our Website to other providers, such as subcontractors we use to perform certain services (our hosting provider, our Website development team, etc.).

We may also disclose your personal data to public authorities, to third parties when necessary to serve the legitimate interests of our company (e.g. sending certain information to external financial advisors for the purpose of business development and improvement of the company's commercial activity) or to comply with our legal obligations.

We do not transfer your personal data to third countries. We keep your personal data within the European Union and the European Economic Area.

We do not sell your personal data to anyone.

V. Your Rights

You can submit a written request to the email [email protected] in order to exercise the following rights, as provided for by data protection legislation:

Access: You can ask us to confirm which data we process, to provide you with access to data you do not already have access to, and to provide you with other information about it (to the extent not already known through this Policy).
Correction: To the extent that it is incomplete, out of date or inaccurate, you may request that we correct the data we hold about you. Please note that our company reserves the right to periodically request the updating of this data and the verification of new data.
Deletion: You can request that we delete the data we hold about you. Please note that our company may not be able to comply with your request for erasure if the processing is necessary for us to comply with a legal obligation, to fulfil another legitimate purpose or to establish, exercise and/or defend legal claims.
Withdraw your consent: You can withdraw your consent if we process your data on the basis of the consent you have given us.
Opt-out from processing.
Restriction: You can ask us to restrict the processing (i.e. to store but not process) of your personal data.
Data portability: You may receive your personal data that has been processed.
Submit your complaint: You have the right to contact the Personal Data Protection Authority (1-3 Kifissias Street, P.K. 115 23, Athens, tel: +30 210 6475600, e-mail: [email protected]) and you may file a complaint if you believe that we are not processing your personal data lawfully or that we have not adequately fulfilled your rights as described above.

How to exercise your rights:

In order for us to respond to and/or accurately fulfill your request, you must always provide specific, accurate, and truthful data and/or facts. Otherwise, the Company shall not be liable for any errors beyond its control. Furthermore, we reserve the right to reject requests that are unfounded, excessive, abusive, submitted in bad faith, or illegal under the law. We may also ask for clarification to understand your concerns and expectations so that we can address your request more effectively.

We have the right to ask you for proof of your identity in order to fulfil your rights.

You do not have to pay a fee to exercise your rights in relation to personal data, unless otherwise provided by law or in cases where the request is unfounded or excessive. In this case, you may be charged a reasonable fee. We will inform you of any potential charge before we carry out your request.

The Company aims to respond to all valid requests within one (1) month of receipt at the latest, unless the request is extremely complex or the data subject has made multiple requests, in which case we aim to respond within three (3) months. If we need more than one month to execute the request for the reasons mentioned above, we will inform you accordingly.

Automated decision-making and profiling

We do not engage in any automated decision-making or profiling based on the personal data we collect.

VI. Policy Updates & Changes

In our effort to continuously improve the protection of the personal data we process, to provide you with clear and transparent information about their processing, and to comply with European and national law, but also in order to respond to new technical requirements or in the event of a review of our procedures and practices, we make changes and updates to this Policy. In the event of significant changes, we will notify you via the Website. Use of the Website after such notification constitutes unconditional acceptance of the new terms.

The last update of the Policy took place on 12/9/2025.