Innovative Computer Systems

Privacy Policy

This Privacy Policy explains which personal data we collect through qorect.com and our services, why we use it, who we share it with, how long we keep it and what your rights are. It applies under the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.

1. Who is responsible for your data

The data controller is KARAMOUZIS K. - KANELLOPOULOU TH. O.E., trading as Qorect ("Qorect", "we"), Maiandrou 81 & Trapezountos 25, 143 41 Nea Filadelfeia, Attica, Greece.
Phone: +30 211 7807060 · Email: [email protected]

2. What data we collect

  • Contact details you give us through the contact form, by phone or by email: name, company, email, phone and the content of your message.
  • Newsletter sign-up: name and email.
  • Account and orders: name or company name, VAT number and tax office for invoicing, billing and delivery addresses, phone, email, order history. We never see or store payment card details; they are processed directly by the payment provider.
  • Customers and partners: the data needed for the contract, installation, support and invoicing of our products and services (e.g. support requests, user details you set up).
  • Technical data: IP address, device and browser type, pages visited, cookies and similar technologies (see section 6).

3. Purposes and legal bases

  • Answering requests and quotes — steps prior to a contract or our legitimate interest in replying to people who contact us (Art. 6(1)(b) and (f) GDPR).
  • Fulfilling orders and contracts, technical support — performance of a contract (Art. 6(1)(b)).
  • Invoicing, accounting and tax obligations — compliance with a legal obligation (Art. 6(1)(c)).
  • Newsletter and updates — your consent (Art. 6(1)(a)), which you can withdraw at any time through the link in every email.
  • Visitor statistics and advertising — only with your consent through the cookie settings (Art. 6(1)(a)).
  • Website security and abuse prevention (e.g. protecting forms from spam) — legitimate interest (Art. 6(1)(f)).

We do not make decisions based solely on automated processing that significantly affect you.

4. Who we share data with

We do not sell personal data. Your data may be processed on our behalf, and only for the purposes above, by:

  • hosting, cloud and content delivery providers (e.g. Cloudflare);
  • Google, to protect our forms (reCAPTCHA) and, only with your consent, for statistics (Google Analytics / Tag Manager);
  • Meta, only with your consent, for advertising measurement (Meta Pixel);
  • payment service providers and courier companies, to fulfil orders;
  • accountants, legal advisers and auditors, bound by confidentiality;
  • public authorities (e.g. the Greek tax authority, AADE), where the law requires it.

Where a provider is located outside the European Economic Area (e.g. in the USA), transfers rely on an adequacy decision (e.g. the EU-U.S. Data Privacy Framework) or on the European Commission's standard contractual clauses.

5. How long we keep data

  • Contact requests: up to 2 years after the last contact, unless a business relationship follows.
  • Newsletter: until you unsubscribe.
  • Customers, orders and invoices: for the duration of the relationship and afterwards for as long as tax and accounting law requires.
  • Website account: until you ask us to delete it.
  • Cookies: as set out in the cookie settings and never longer than 13 months.

6. Cookies

We use essential cookies to run the website (e.g. cart, sign-in, language preference). Statistics and advertising cookies are enabled only if you accept them in the cookie window, where you can change your choice at any time.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw your consent at any time without affecting the lawfulness of processing before the withdrawal. To exercise your rights, email us at [email protected]; we will reply within one month.

If you believe the processing breaches the law, you may lodge a complaint with the Hellenic Data Protection Authority (Kifisias 1-3, 115 23 Athens, www.dpa.gr).

8. Security

We operate an Information Security Management System certified to ISO/IEC 27001, encrypted connections (HTTPS), role-based access control, backups and staff training.

9. Minors

This website is intended for businesses and professionals. We do not knowingly collect data from children under 15.

10. Changes to this policy

We may update this policy when our services or the law change. The current version is always published on this page.

Last updated: 7 October 2026