If we contacted you

Who contacted you

If we contacted you about Noria's services, the controller of your details is NORIA GROUP Ε.Ε., 71 Grammou Street, 151 24 Marousi, Greece, info@noria.gr, +30 21 0014 0120.

If we contacted you on behalf of one of our clients, the message or the call names the client. The client is then the controller, and Noria processes your details on its behalf, under a contract. You can turn to either of us; anything you ask us, we pass on at once.

Whom we contact

Only businesses, and people in their professional capacity, about something that concerns their work. We do not contact private individuals for marketing, we do not buy consumer lists and we do not process sensitive data.

Where we found your details

In public professional sources, where the business or you published the details so that professionals could reach you:

• Your business's website.
• Professional registers and member directories of trade associations and bodies.
• Trade fair exhibitor lists and the results of competitions and awards.
• Business directories and public professional profiles.
• Business databases that compile such public information.

What we keep

About the business: its name, sector, area, website, published contact details and a short note on why we believe we can help, for example that its website has no online shop. About people, only those the business publishes as responsible: name, role, work email and phone.

We also keep the history of our contact (when, by which channel, what was said, your answer) and, if you ask us not to contact you again, that request. To find which businesses fit, we read their public websites, also with automated tools, but a person makes the choice. We check that an email address exists through a verification service, without sending you a message. We do not keep private addresses, personal social media profiles or sensitive data.

Why, and on what legal basis

We process these details to find businesses that may need our services, or our client's, and to offer them. The legal basis is legitimate interest (Article 6(1)(f) GDPR): a business has a legitimate interest in finding customers, and the Court of Justice of the European Union has held that even a purely commercial interest can be legitimate (Case C-621/22).

We weighed this interest against your rights and concluded that it does not burden them disproportionately, thanks to these safeguards:

• We use only business details, published so that professionals could reach you.
• We call or write about something that concerns your work, as you would expect from a potential partner.
• We keep as little as possible, for a limited time, and give it to no one.
• One reply stops all contact, at no cost and without explanations.

How we get in touch

Greek law (Article 11 of Law 3471/2006) allows marketing emails, text messages and messages in apps or on social networks only with the recipient's prior consent, and this applies to companies and their general addresses too. That is why:

• The first contact is a phone call to a business number, after we have checked that it is not on the Article 11 register of those who refuse marketing calls and not on our own do-not-contact list. Or a letter, or in person, for example at a trade fair.
• We send you an email or other electronic message only if you asked for it, on the phone, at a fair or through our website, or if you are already a client and it concerns similar services.
• Every message says clearly which business sends it, why we are writing and how to stop further messages, with a link to this page.
• If you say no, at any point, we do not contact you again.

Who sees the details

Only the people on our team who handle the contact, and the providers who serve us as processors: email, contact management (CRM), and email sending and verification services. If the contact is made on behalf of a client, the client receives the conversations with those who replied that they are interested.

We do not sell or rent your details. We do not give our lists to clients and we never use one client's list for another.

Transfers outside the European Union

If one of these providers processes data outside the European Economic Area, this happens only under an adequacy decision of the European Commission, such as the EU–US Data Privacy Framework, or under standard contractual clauses. For details or a copy of the safeguards, write to info@noria.gr.

How long we keep the details

We keep the details only as long as we need them:

• If no conversation starts, we delete the record at the latest 12 months after it was created or after our last contact.
• If a collaboration starts, the Privacy policy applies.
• If you ask us not to contact you again, we delete everything else and keep only the minimum (the business name and your address or number) on a do-not-contact list, so that we never write to you again, neither for ourselves nor for our clients.

How to stop all contact

One reply is enough: answer “no” to our message, say so on the phone or write to us at info@noria.gr. We stop at once, at no cost and without asking for reasons; if anything was already scheduled, we cancel it. For direct marketing this right is absolute (Article 21 GDPR).

Your other rights

You can also find out exactly what we hold about you and where it came from, ask for correction, erasure or restriction of processing, and ask us to send you our full legitimate interest assessment. We reply free of charge, within one month. If you believe we have not respected your rights, you can lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr). More in the Privacy policy.