Privacy Policy
Last updated: 28 September 2026
This Privacy Policy explains how Vega Alpha Group I.K.E. ("Vega Alpha", "we", "us", "our") collects and processes personal data through this website. We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and applicable Greek data protection legislation, including Law 4624/2019.
1. Data controller
The controller responsible for the processing of your personal data through this website is Vega Alpha Group I.K.E., Athens, Greece. For privacy-related enquiries or requests, please contact us at info@vega-alpha.com.
2. Personal data we collect
Contact form. When you submit an enquiry through our contact form, we collect the information you provide, including your name, email address and message, together with your company and the topic of your enquiry where provided. Technical data. When you visit the website, limited technical data is processed automatically for the secure and reliable operation of the website, including IP address, browser or device information, date and time of access, and requested pages. We do not use personal data submitted through the website for advertising or profiling. We do not knowingly request special categories of personal data and ask that such information is not included in messages submitted through the website.
3. Purposes and legal basis
We process personal data only where there is an appropriate legal basis under Article 6 GDPR. We rely on our legitimate interests in responding to enquiries, maintaining appropriate business correspondence, managing existing or prospective business relationships, operating and securing the website, maintaining proper business records, and establishing, exercising or defending legal claims (Art. 6(1)(f) GDPR). Where an enquiry concerns a potential contractual relationship, processing is also based on the necessity to take steps at your request before entering into a contract (Art. 6(1)(b) GDPR). Where processing is required to comply with a legal obligation, we rely on Art. 6(1)(c) GDPR. We do not sell or rent personal data and we do not use it for automated decision-making or profiling.
4. Recipients and service providers
Personal data is accessible only to authorised persons within Vega Alpha who need it for the relevant purpose. We also use third-party service providers for website hosting and delivery, contact-form transmission, business email, IT, security and supporting infrastructure. These providers receive or process personal data only to the extent necessary to provide the relevant services. Where a provider acts as a processor on our behalf, it is subject to appropriate contractual data-protection obligations. Certain providers also process limited service-generated data under their own applicable privacy terms. We take reasonable steps to ensure that service providers handling personal data apply appropriate technical, organisational and contractual safeguards. Personal data is also disclosed to professional advisers under duties of confidentiality where necessary, and to competent authorities where disclosure is required by law.
5. International transfers
Certain service providers process personal data outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA, the transfer is made using an applicable lawful transfer mechanism or safeguard under data protection law, including, as relevant, an adequacy decision of the European Commission or the European Commission's Standard Contractual Clauses. Further information on the safeguards applicable to a specific transfer is available on request.
6. Data retention
Contact form submissions and related correspondence are retained for as long as reasonably necessary for the purposes for which they were collected. These purposes include responding to enquiries, maintaining relevant business correspondence, managing an existing or reasonably prospective business relationship and maintaining appropriate business records. The appropriate retention period is determined by taking into account the nature and context of the enquiry, the existence or reasonable prospect of an ongoing business relationship, the continued relevance of the correspondence, and any applicable legal, contractual or regulatory requirements. We periodically review the personal data we retain. Where information is no longer reasonably necessary for any relevant purpose, it will be deleted or anonymised, unless continued retention is required by law or is necessary for the establishment, exercise or defence of legal claims. Technical logs are retained only for the period reasonably necessary for security, operational and diagnostic purposes, subject to the applicable practices of the relevant infrastructure providers.
7. Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. These measures include secure transmission and access controls. No method of transmission or storage can be guaranteed to be completely secure, and highly confidential information should therefore not be submitted through the website contact form.
8. Your rights
Subject to the conditions and limitations set out in the GDPR, you have, where applicable, the right to access your personal data, request correction of inaccurate or incomplete data, request erasure, request restriction of processing, object to processing based on legitimate interests, and receive or transfer your data where the right to data portability applies. To exercise any of these rights, please contact info@vega-alpha.com. We will respond without undue delay and within the time limits required by applicable law. Where necessary, we will request appropriate information to verify your identity before acting on a request. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr, or with another competent supervisory authority where applicable.
9. Providing your data
Providing personal data through the contact form is voluntary. However, your name, email address and message are necessary for us to respond to your enquiry.
10. Changes to this policy
We update this Privacy Policy when necessary to reflect changes in our practices, services or applicable legal requirements. The current version will be made available on this website together with the date of its most recent update.
11. Contact
For questions about this Privacy Policy or the way Vega Alpha processes personal data, please contact info@vega-alpha.com.