The Data and Information Protection and Security Policy is based on the following principles:

• Confidentiality: Only authorized personnel have access to information and data. Specific files and data are protected and accessible only by appropriately specialized personnel.
• Integrity: The necessary attention is always given by personnel during information and data processing to ensure that the generated results are accurate and of high quality.
• Availability: Information and network/system availability, so that their use, processing, and protection can be carried out at any time.
• Traceability: Information and data used by the company must be traceable by the appropriately trained personnel, as well as by the interested partner or client.
• Confidentiality: Information and data will be collected, processed, and shared using methods that respect the rights and security of the involved parties.

Confidentiality and Security of Corporate Data and Information

• Only personnel have access to p-consulting.gr‘s archives. Consequently, the relevant data and information, as well as the databases of the generated digital and non-digital tools, are available only to directly interested parties.
• p-consulting.gr uses Antivirus software to protect its digital archive and prevent malware infection.
• A corporate drop-box is used for direct file sharing among personnel. Consequently, no third parties are involved in this process.
• The company’s employees maintain full confidentiality regarding the information and data managed by the company, having all signed a confidentiality agreement, the violation of which incurs legal penalties.

Protection and Security of Client Data and Information

p-consulting.gr, fully relying on and respecting cooperation, communication, and trust with its partners and clients, has developed a set of rules and procedures for the protection and security of their personal and corporate data and information. The following principles complement the culture and mindset of p-consulting.gr regarding the protection of its clients’ data and information:

• Client files, data, and sensitive information are for corporate use exclusively and are not shared with third parties.
• The company’s employees maintain full confidentiality regarding client-related information and data, as well as anything related to their business ideas.
• p-consulting.gr proceeds with the processing of its clients’ data and information only after consultation with them, and solely for reasons related to the agreed terms of their professional agreement.
• Data and information related to p-consulting.gr‘s clients are accessible only by the departments of personnel directly involved with the specific matter or client, and not by all personnel.
• The inappropriate and unlawful use of company assets is prohibited.
• Submission of false, forged, or altered statements using the company’s details.

This Policy and the data processing based on it, both corporate and personal/professional client data, which p-consulting.gr undertakes, are based on the following principles:

• Legality, objectivity, and transparency during the processing procedure
• Minimization of processed data
• Accuracy and updating of processed data
• Integrity and confidentiality during processing
• Limitation of the retention/storage period for client data and information
• Compliance with the applicable legislative and regulatory framework

p-consulting.gr is responsible for the above and is able to demonstrate its compliance with these principles, as outlined in this Policy, at any time.

The Company regularly reviews, re-evaluates, and updates this Policy whenever deemed necessary, taking into account the applicable legislative and regulatory framework.