Privacy Policy

DATA PROTECTION & PRIVACY POLICY (EFFECTIVE DATE 1/3/2019 – LAST UPDATED 19/5/2026)

The purpose of this Data Protection & Privacy Policy is to provide information concerning the collection and processing of personal data in accordance with Regulation (EU) 2016/679 (“GDPR’’), Law 4624/2019, and other applicable Greek data protection legislation when you use this website. The Company processes personal data in accordance with the principles of lawfulness, fairness, transparency, data minimization, accuracy, storage limitation, integrity, and confidentiality.

DATA CONTROLLER

The controller responsible for the collection and processing of personal data through this website is:

MAS S.A. – ADVANCED ENERGY AND POWER TECHNOLOGIES
Registered office: 92 Kifisou Avenue, Athens, 10443, Greece
GEMI No.: 112572408000
VAT No.: 094412412
Telephone: +30 210 4014000
Email: gdpr@maseurope.com
Website: www.maseurope.com

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us at:

Data Protection Contact Point
Email: gdpr@maseurope.com
Telephone: +30 210 4014000

Where required under applicable data protection legislation, the Company has appointed a Data Protection Officer (“DPO”). The DPO may be contacted at: gdpr@maseurope.com

Where the Company processes personal data of individuals located in the European Economic Area (“EEA”) through entities established outside the EEA, the Company may designate an EU Representative pursuant to Article 27 GDPR. Relevant contact details will be made available where applicable.

The Company acts as the “Data Controller” within the meaning of Regulation (EU) 2016/679 (“GDPR”) with respect to the personal data processed through this website, unless otherwise expressly stated.

CATEGORIES OF PERSONAL DATA WE COLLECT

What we collect:

The Company collects and processes only personal data that are necessary, appropriate, and relevant for the purposes described in this Privacy Policy, in accordance with the principle of data minimization.

We may collect the following information:

• name, company name, and job title
• contact information including e-mail address
• technical information, including IP address, browser type, device information, and website usage data
• cookie and analytics data, subject to the user’s cookie preferences
• communications and correspondence submitted through the website or by email.
• Other information voluntarily provided by users through communications, inquiries, surveys, or requests.

PURPOSES AND LEGAL BASES OF PROCESSING

What we do with the information we gather

We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:

• Internal record keeping. Legal ground for processing: Legitimate interests.
• Respond to specific requests that you send us. Legal ground for processing: contract / precontractual stage or legitimate interests.
• We may use the information to improve our products and services. Legal ground for processing: Legitimate interests.
• We may periodically send promotional emails/newsletters about products, services, or other information that may be of interest to you, where permitted under applicable law or based on your consent. Legal ground for processing: consent, except where applicable law permits marketing communications to existing customers under applicable soft opt-in rules.
• From time to time, we may also use your information to contact you for market research purposes. We may contact you by e-mail. We may use the information to customize the website according to your interests. Certain processing activities may involve the use of cookies or analytics technologies, subject to the user’s consent where required under applicable law.  Legal ground for processing: Legitimate interests.
• Compliance with legal obligations, prevention of unlawful activities, protection of the Company’s legal rights, and establishment, exercise, or defense of legal claims. Legal ground for processing: legal obligations and legitimate interests.

The Company processes personal data only where there is an appropriate legal basis under applicable data protection legislation, including consent, performance of a contract, compliance with legal obligations, or legitimate interests pursued by the Company. Where processing is based on the Company’s legitimate interests, the Company assesses and balances such interests against the rights and freedoms of the data subjects in accordance with applicable data protection legislation.

The Company does not carry out automated decision-making, including profiling, that produces legal effects or similarly significant effects on individuals, unless otherwise expressly stated and permitted under applicable law.

Where personal data are required to comply with legal or contractual obligations, failure to provide such data may affect the Company’s ability to provide requested services or respond to inquiries.

The Company may anonymize or aggregate personal data for statistical, analytical, security, service improvement, or business development purposes, in accordance with applicable laws and regulations.

DATA RETENTION PERIOD

We retain personal data only for as long as necessary to fulfill the purposes for which the data were collected, including for the purposes of satisfying legal, regulatory, tax, accounting, reporting, contractual, and operational requirements.

The applicable retention period depends on the nature of the personal data and the purposes for which they are processed. Indicative retention periods include:

• contact requests and communications: retained for up to 24 months after the last communication
• customer and transactional records: retained for up to 10 years where required under applicable commercial, tax, or accounting legislation
• marketing preferences and consent records: retained until withdrawal of consent or objection to marketing communications
• technical logs, security records, and website analytics data: retained for up to 12 months unless a longer retention period is required for security or legal purposes
• recruitment-related data: retained for up to 12 months unless otherwise required by law or consented to by the applicant.

Where processing is based on consent, personal data may be retained until such consent is withdrawn, unless continued retention is required or permitted by applicable law. Such retention periods may vary where longer storage is required under applicable law or where necessary to protect the Company’s legitimate interests.

Following expiration of the applicable retention period, personal data are securely deleted or anonymized, unless continued retention is necessary:

• to comply with a legal obligation
• to establish, exercise, or defend legal claims
• to investigate fraud, cybersecurity incidents, or unlawful activity
• or to enforce contractual rights and obligations.

RECIPIENTS OF PERSONAL DATA

The Company does not sell or rent personal data to third parties.

Personal data may be disclosed, where necessary for the purposes described in this Privacy Policy, to the following categories of recipients:

• IT and system administration providers
• website hosting and cloud service providers
• email communication and marketing service providers
• analytics, marketing, and website service providers
• professional advisors, auditors, insurers, and legal counsel
• payment, banking, logistics, or operational service providers
• affiliated companies within the corporate group
• competent public authorities, regulators, supervisory authorities, courts, and law enforcement agencies where required by applicable law.

Where third parties process personal data on behalf of the Company, such parties act as “data processors” and are bound by data processing agreements in accordance with Article 28 GDPR, including obligations relating to:

• confidentiality,
• security,
• lawful processing,
• restricted use,
• incident notification,
• and deletion or return of personal data upon termination of services.

Personal data may also be disclosed in the context of a corporate transaction, including a merger, acquisition, restructuring, financing, sale of assets, or transfer of business operations. In such cases, appropriate safeguards will be implemented to ensure confidentiality and lawful processing of personal data.

Certain recipients may be located outside the European Economic Area (“EEA”). In such cases, the Company implements appropriate safeguards pursuant to Chapter V GDPR, including:

• adequacy decisions adopted by the European Commission
• Standard Contractual Clauses (“SCCs”) approved by the European Commission
• supplementary technical and organizational measures, where required.

You may request additional information regarding applicable transfer safeguards by contacting us at gdpr@maseurope.com.

SECURITY MEASURES

The Company implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure, in accordance with Article 32 GDPR. Such measures may include encryption, access controls, system monitoring, secure hosting infrastructure, and confidentiality obligations for authorized personnel.

While reasonable safeguards are applied, no method of electronic transmission or storage can guarantee absolute security.

YOUR RIGHTS

Subject to applicable law, you have the right to:

• access your personal data
• request rectification or erasure of your personal data
• request restriction of processing
• object to processing
• withdraw consent at any time
• request data portability
• lodge a complaint with the Hellenic Data Protection Authority (HDPA).

To exercise your rights, you may contact:

gdpr@maseurope.com

The Company will respond to requests concerning data subject rights within the timeframes required under applicable data protection legislation.

Hellenic Data Protection Authority (HDPA) : www.dpa.gr

In the event of a personal data breach, the Company will take appropriate measures in accordance with applicable data protection legislation, including notification obligations where required.

The Company may request additional information necessary to verify the identity of the individual submitting a request concerning personal data rights.

THIRD-PARTY LINKS

This website may contain links to third-party websites. The Company is not responsible for the privacy practices or content of such websites. Users are encouraged to review the applicable privacy policies before providing any personal data.

This website is not intended for use by children under the age of fifteen (15). The Company does not knowingly collect personal data from children without an appropriate legal basis or parental authorization where required under applicable law.

COOKIES

We use cookies to make the best possible use of our site, to properly navigate the user, link and move to the pages, and to support website functionality, analytics, and, where consent has been provided, promotional and advertising activities. Cookies are also used to analyze how visitors use our site, how they are browsing or are experiencing a problem. Certain cookies are necessary for the operation of the website, while non-essential cookies (including analytics and advertising cookies) are used only with the user’s consent, where required under applicable law. Consent for non-essential cookies may be withdrawn at any time without affecting the lawfulness of processing based on consent before its withdrawal. Information collected through cookies may be aggregated and used to improve the structure, functionality, and performance of the website. Cookies are stored on the user’s computer and can be removed at any time. Users may manage, withdraw, or delete cookie preferences at any time through the Cookie Settings tool or their browser settings. Cookies do not store email addresses or phone numbers. Certain cookies may collect online identifiers, IP addresses, device information, or browsing data in accordance with applicable data protection legislation and the user’s cookie preferences. The cookies we use are:

1. Absolutely Necessary Cookies These cookies are necessary for the proper operation of our website and for the user to navigate and use its features such as access to secure areas of the site. Without these cookies, some of the services and features of the site cannot be provided. These cookies do not require user consent as they are necessary for the functioning and security of the website.
2. Performance Cookies These cookies collect information about how visitors use the web page, for example which pages they visit more often, and whether they are receiving bugs from webpages. These cookies collect information regarding the use and performance of the website. Information collected through these cookies may be aggregated and used for statistical and analytical purposes in order to improve the functionality and performance of the website. These cookies are used only with the user’s consent where required under applicable law.
3. Function Cookies These cookies allow the site to remember the choices made by the user and provide more personalized features. These cookies can also be used to remember changes the user has made to the site or to use them to provide services requested by the user, such as chatting or using social media. These cookies may be disabled through the cookie settings. However, certain website functionalities may be affected.
4. Targeting / advertising cookies These cookies are used to provide ads (Google Ads, Meta/Facebook) more relevant to the user and their interests. They are also used to send targeted ads or bids to limit the number of the displayed ad, and to help measure the effectiveness of ad campaigns. They are usually placed to remember your visit to a website and share this information with other marketing channels. Disabling certain non-essential cookies may affect specific features or personalized content of the website. However, the core functionality of the website will remain available. Advertising and targeting cookies are used only after obtaining the user’s consent, in accordance with applicable data protection and ePrivacy legislation.

For more information regarding the cookies used on this website, including their purpose, duration, and third-party providers, users may refer to the Cookie Settings tool available on the website. Additional information regarding the specific cookies used on the website is available through the Cookie Settings tool and the separate Cookie Policy, where applicable.

UPDATES AND AMENDMENTS

The Company may amend or update this Security and Privacy Policy from time to time in order to reflect changes in legal, regulatory, technical, or business developments. Any updated version will be published on this website together with the relevant revision date.

Users are encouraged to review this Security and Privacy Policy periodically in order to remain informed about the latest version and the manner in which personal data are processed and protected.

APPLICABLE LAW

This Privacy Policy shall be governed by and construed in accordance with the laws of Greece, including Law 4624/2019, and applicable European Union data protection legislation, including Regulation (EU) 2016/679 (“GDPR”).

Any dispute arising in connection with the use of this website shall be subject to the jurisdiction of the competent courts of Athens, Greece, without prejudice to any mandatory rights provided under applicable law.