01Data controller

The controller of your personal data is Plus and Minus, accounting and tax services, based in Rethymno, Crete.

  • Business name: Plus and Minus, Ioannis Petropoulos, Certified Class A Accountant
  • Address: [office address to be completed]
  • VAT number / Tax office: [to be completed]
  • Email: info@plusandminus.gr
  • Phone: +30 28310 00000

For any matter relating to your personal data you can contact us at info@plusandminus.gr.

02What data we collect

We collect only the data required in order to serve you.

  • Information you submit through the contact form: full name, phone number, email address and the text of your message.
  • Information you provide as a client in the course of our accounting and tax cooperation: tax and financial data, invoices and receipts, payroll data, banking data and any other information required to meet your obligations.
  • Technical browsing data such as IP address, device type and browser, collected in aggregate form for the security and operation of the website.

We do not request and do not wish to receive special categories of data, such as health data, through the contact form.

03Purposes and legal bases

  • Responding to your request and arranging a meeting. Legal basis: your consent and pre contractual steps taken at your request.
  • Providing accounting, tax and advisory services. Legal basis: performance of the contract between us.
  • Filing returns and data with public authorities, keeping statutory books and records. Legal basis: compliance with a legal obligation.
  • Website security and improvement of our services. Legal basis: our legitimate interest in secure and proper operation.

04Retention period

We keep your data only for as long as it is necessary.

  • Contact form messages: up to twelve months, if no cooperation follows.
  • Client data: for the duration of our cooperation and thereafter for the period required by tax and social security legislation, at a minimum five years from the end of the relevant financial year.
  • Technical security data: for a short period and in aggregate form.

05Recipients of the data

We never sell or trade your data. Your data is shared only where required for the performance of our cooperation or by law.

  • Public authorities and bodies such as the Greek tax authority, the social security fund and the ERGANI system, in the context of mandatory filings.
  • Banks and financial institutions, following your own instruction or authorisation.
  • Software and cloud service providers we use to keep your digital files, acting as processors under contract.
  • Legal or other advisors, only where required for the establishment or defence of legal claims.

06Transfers outside the European Union

Some cloud providers may store data on servers outside the European Economic Area. In such cases the transfer takes place under the safeguards provided by the General Data Protection Regulation, such as an adequacy decision or standard contractual clauses.

07Data security

We apply appropriate technical and organisational measures to protect your data, such as an encrypted connection to the website, controlled access to digital files, strong passwords and regular backups. No method of transmission or storage is absolutely secure, but we undertake to act immediately in any incident that could affect your data.

08Your rights

Under the General Data Protection Regulation you have the following rights.

  • Access to the data we hold about you.
  • Rectification of inaccurate or incomplete data.
  • Erasure of your data, where no legal obligation requires us to keep it.
  • Restriction of processing and objection to it.
  • Portability of your data in a structured and commonly used format.
  • Withdrawal of your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any right, send us an email at info@plusandminus.gr. We reply within one month at the latest. You also have the right to lodge a complaint with the Hellenic Data Protection Authority, www.dpa.gr.

09Cookies

The website uses only strictly necessary cookies for its proper operation, which do not require your consent. If analytics or advertising cookies are added in the future, a banner will appear and you will be able to choose which ones you accept. You can always delete or block cookies from your browser settings.

10Changes to this policy

We may update this policy, for example due to changes in legislation or in our services. The version in force at any time is published on this page with an updated date.