Privacy Policy

At VerusTrust, we place great importance on the lawful, secure, and transparent processing of your personal data, in full compliance with the General Data Protection Regulation (GDPR 2016/679) and Law 4624/2019. This Privacy Policy outlines how we collect, use, and protect your personal information whenever you engage with us – either in person or online (e.g., by visiting our website) – and informs you of your rights.

By using our website and signing the relevant consent form, you accept the practices described in this Policy.

Who We Are
Controller: VerusTrust
For any queries regarding your personal data, you may contact us using the details provided in the contact section of our website.

What Personal Data We Collect
We may collect the following types of data:

• Full name, address, email, phone number
• Tax Identification Number (TIN), Social Security Number (SSN)
• Bank account or payment card details
• Device and browser identifiers
• IP address, cookies, and browsing history
• Any other information that may identify you under applicable law

When We Collect Your Data
We collect personal data when you:

• Communicate with us by phone, email, or online forms
• Use our website or services
• Work with us or apply for a position
• Collaborate with us as an external partner
• Participate in our training programmes or events

We collect only the data strictly necessary to fulfill the intended purpose.

Cookies
Our website uses cookies in accordance with the EU ePrivacy Directive and the guidelines of the Hellenic Data Protection Authority (HDPA). Cookies help us analyse website traffic, improve functionality and user experience, and tailor content to your preferences.

• Necessary cookies (core site functions) and Advertising cookies (e.g. Meta’s _fbp) are in use today.
• Analytics cookies (e.g. Google Analytics’ _ga, _gid, _gat) and Embedded-Content cookies (e.g. YouTube’s PREF, VISITOR_INFO1_LIVE, YSC) are not currently in use but will be implemented soon.
• You can view exact names, domains, and durations of active and future cookies in our Cookies Policy.

We do not share personal data with third parties such as Google or Facebook without your prior consent. You can change your cookie preferences at any time via your browser settings or through our cookie banner. Please note that disabling cookies may limit your user experience.

Legal Basis for Processing
We process your personal data on the basis of one or more of the following:

• Your explicit consent
• Performance of a contract
• Legal obligations
• Our legitimate interests, such as website operation and security

How Long We Keep Your Data
We retain your data only for as long as necessary based on the purpose of processing, applicable legal requirements, or contractual obligations. Once no longer needed, we either anonymise or securely delete the data.
You may request access, correction, or deletion of your data – unless its retention is required for legal, tax, or judicial purposes.

Data Sharing and Transfers
We do not share your data with third parties unless:

• It is required to provide you with a service (e.g. web hosting, event organisation)
• We are legally obliged to do so (e.g. authorities, courts)
• It is processed by authorised partners under data protection agreements
• Some data may be transferred outside the European Economic Area (EEA). In such cases, we ensure adequate safeguards are in place (e.g., standard contractual clauses, adequacy decisions).

Data Protection Principles
We follow the principles of GDPR, including:

• Lawfulness, Fairness, Transparency
• Purpose Limitation
• Data Minimisation
• Accuracy
• Storage Limitation
• Integrity and Confidentiality

All data is processed securely, using technical and organisational measures such as encryption, firewalls, access controls, anonymisation, and regular audits.

Your Rights
Under GDPR, you have the following rights:

• Right to Information – Transparent details about how your data is used
• Right of Access – Know what data we hold and how we use it
• Right to Rectification – Correct incomplete or inaccurate data
• Right to Erasure – Have your data deleted (“right to be forgotten”)
• Right to Restrict Processing – Temporarily halt data processing
• Right to Data Portability – Receive your data in a transferable format
• Right to Object – Object to data use, including for profiling

To exercise your rights, please get in touch with us directly at legal@verustrust.com

Data Security
We implement strict security measures to protect your data, including:

• Staff training and limited access
• Data encryption and pseudonymisation
• Firewalls and secure infrastructure
• Regular security audits
• We ensure that all partners and service providers respect your privacy and process your data only as instructed.

Complaints
If you believe your data rights have been violated, you may file a complaint with the:
Hellenic Data Protection Authority (HDPA)
Kifisias 1-3, 115 23 Athens, Greece
📧 complaints@dpa.gr

Updates to This Policy
This Privacy Policy was published on 05/05/2025 and may be updated periodically. Please check back regularly for any changes.