Privacy Policy

“AVE S.A.”  WEBSITE PRIVACY POLICY
(“https://www.aveclima-candy.com/”)

This document constitutes the Privacy Policy for the website of “AVE S.A.” (https://www.aveclima-candy.com/), which, as the data controller, collects, stores, uses, and generally processes personal data when you visit or use its website. “AVE S.A.” recognizes and places primary importance on its obligation to comply with the General Data Protection Regulation 2016/679 (GDPR) during such processes. To this end, all necessary measures have been taken, including the drafting and publication of this Privacy Policy.

1. Data Controller

“AVE S.A.” (hereinafter referred to as “AVE” or “the Company”) is a public limited company based in Pallini, Attica, 104 Ethnikis Antistaseos St., 15351, phone: +30 210 8092000, email: This email address is being protected from spambots. You need JavaScript enabled to view it..

2. What is personal data?

The term “personal data” refers to information about natural persons, such as full name, mailing address, email address, contact number, etc., which identify or can identify you (Personal Data or Data).

3. What is the processing of Personal Data?

Any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

4. What Personal Data do we collect?

When visiting, navigating, and using our website, AVE collects only the absolutely necessary Personal Data, which are suitable and relevant for the purpose intended, as detailed below.

For visitors contacting us via the website contact form or via email at This email address is being protected from spambots. You need JavaScript enabled to view it.:

• Full name, email address, phone number, and any other Personal Data included in your message.

For visitors registering for the newsletter via https://www.aveclima-candy.com/:

• Email address
• Method of consent and confirmation of consent for each specific email address, including the date and time of consent and confirmation
• Any withdrawal of consent

5. Why do we collect your Personal Data?

For contact via the website contact form or email at This email address is being protected from spambots. You need JavaScript enabled to view it.:
We collect your Personal Data to communicate with you.

For newsletter subscription via the website:
We collect your Personal Data to send newsletters with updates about the Company.

6. What is the legal basis for processing your Personal Data?

We collect your Personal Data only if we have a legal basis to process it.

For communication via the website form or email:
The legal basis is your explicit consent for the specific processing purpose (Article 6(1)(a) of the GDPR).

For newsletter registration via the website:
The legal basis is your explicit consent, in accordance with applicable law (Articles 5 and 11 of Law 3471/2006 and Article 6(1)(a) of the GDPR).

7. Recipients of Personal Data

Access to your Personal Data is limited to the strictly necessary personnel of AVE and only when needed.
Recipients include our web and email hosting provider and our newsletter distribution provider.

8. Retention Period of Personal Data

Your Personal Data are retained only for as long as necessary to fulfill the purpose for which they were provided, in accordance with applicable legislation, unless an extension is required due to legal claims or obligations.

For contact via the website form or email:
Your data is typically deleted six months after our communication.

For newsletter subscribers:
Personal data are retained for as long as promotional communications are sent and for six months after they stop or consent is withdrawn. The withdrawal of consent is also stored for this same period.

9. Personal Data Security

AVE has taken the necessary technical and organizational measures to protect your Personal Data from loss, misuse, unauthorized access, and disclosure.

10. What are your rights?

You have the following rights:

• Right to Information: To be informed about the data controller, processing purposes, retention periods, and your rights under the Regulation.
• Right of Access: To confirm whether your data is being processed and to access them.
• Right to Rectification: To request correction or completion of inaccurate/incomplete data.
• Right to Restriction: To restrict processing under certain conditions.
• Right to Object / Withdraw Consent: To object to processing if you believe there is no legal basis or purpose anymore. You may also withdraw consent at any time.
• Right to Data Portability: To receive your data in a structured, commonly used, machine-readable format and request its transfer to another controller.
• Right Not to Be Subject to Automated Decision-Making: To not be subject to decisions based solely on automated processing, including profiling, which significantly affect you.

To exercise your rights, contact AVE as the data controller:

Address: 104 Ethnikis  Antistaseos, Pallini, Attica, 15351
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Phone: +30 210 8092000

For data processing-related matters, you may contact the Company’s Data Protection Officer (DPO):

Maria Spanou
Address: 104 Ethnikis  Antistaseos, Pallini, Attica, 15351
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

11. When will we respond to your requests?

AVE responds free of charge without undue delay and, in any case, within one (1) month of receiving your request. If your request is complex or numerous, we may extend the deadline by two (2) additional months and will inform you accordingly.

If your requests are clearly unfounded or excessive (especially if repetitive), AVE may charge a reasonable fee or refuse to act on the request, providing justification.

If you do not receive a response within the deadline, or the response is unsatisfactory, or your issue remains unresolved, you may contact the Hellenic Data Protection Authority: www.dpa.gr.

Effective date: October 12, 2020

This document reflects the currently applicable Remuneration Policy adopted by the Company (following a revision of the policy approved by the Annual General Meeting on 17.07.2019) in compliance with the legal framework, including Law 4548/2018 on corporations, Law 3016/2002 on corporate governance, and best corporate governance practices.