Protecting your personal data is a core obligation for us and part of the trust our clients place in us.
This Policy explains how «VEENOUS PARTNERS O.E.» (hereinafter “VeeNous Partners” or “we”), as Data Controller, collects and processes your personal data.
For any question about your data, contact us at [email protected].
1. About VeeNous Partners
VeeNous Partners provides businesses with accounting and bookkeeping, tax advisory and business management services, payroll and employment services, pay-transparency compliance (Greek Law 5316/2026), HR and business advisory.
This policy covers visitors to veenous.gr, people who contact us and our clients' representatives. When we process data about a client's employees (for example for payroll), we act as a Processor on the client's behalf. That processing is governed by the data processing agreement (Article 28 GDPR) and the employer's own privacy policy, not by this document.
2. What is personal data?
Any information relating to a natural person that allows them to be identified, directly or indirectly: name, email, phone number, tax ID, IP address and so on.
3. What does “processing” mean?
Any use of data, whether or not by automated means: collection, recording, storage, alteration, retrieval, transfer, combination, erasure or destruction (Article 4 GDPR).
4. What data do we process and why?
We collect only the data that is necessary for each purpose.
| Data | Source | Purpose |
|---|---|---|
| Name, company, email, phone, message | Contact form, email, phone | Replying to your request, arranging a meeting, sending a proposal |
| Company name, tax ID, tax office, address, contact person | The client | Entering into and performing a contract, invoicing |
| IP address, device, browser, pages requested | Automatically, by our hosting provider | Operation and security of veenous.gr |
| Username, profile picture, messages | Our official social media channels | Communicating with you and replying to messages |
We do not ask for special categories of data (e.g. health data) or employee salary data through the website. Such data is exchanged only with clients, through a secure channel and under a contract.
5. What is the legal basis for processing?
We process your data only where one of the bases in Article 6(1) GDPR applies:
- Contract or pre-contractual steps (b): to reply to your request, send you a proposal and provide our services.
- Legal obligation (c): to meet our obligations under Greek tax, accounting and social security law.
- Legitimate interest (f): for website security, spam prevention, communication via social media and the defence of legal claims.
Social media. For our official pages, we are joint controllers with the relevant platform (Article 26 GDPR) only as regards page statistics. The platform is responsible for everything else, so please also see its own privacy policy.
6. Who has access to your data?
Access to your data is limited to: (a) the partners and those administrative and professional staff of VeeNous Partners who demonstrably need it for their work, bound by confidentiality and professional secrecy; and (b) external providers acting as Processors who provide us with hosting, website management and maintenance, email, software and social media management services. We do not sell or rent data. Public authorities receive data only where required by law.
7. How are our providers bound?
Every provider that processes data on our behalf signs a data processing agreement (Article 28 GDPR) and undertakes:
- to process the data only on our instructions
- to keep it confidential and not disclose it to third parties without our approval
- to apply appropriate security measures
- to comply with the GDPR and Greek Law 4624/2019
8. Is data transferred outside the EU?
Some of our providers are based in the United States. Transfers take place only with the safeguards of Chapter V GDPR: the EU-US Data Privacy Framework where the provider is certified, or the European Commission's Standard Contractual Clauses.
9. How long do we keep your data?
VeeNous Partners keeps your data for as long as necessary to provide its services, unless a longer period is required because of legal claims or our legal obligations.
Data collected by cookies is deleted as described in section 11 (Cookies).
10. Is your data secure?
VeeNous Partners takes the security of your personal data seriously and applies appropriate technical and organisational measures to protect it against any accidental or unlawful processing. It uses up-to-date protection methods for the highest possible level of security, and reviews and upgrades these measures whenever necessary.
11. Do we use cookies?
Not for analytics, advertising or tracking. Only strictly necessary Cloudflare security cookies are used (e.g. __cf_bm, to detect automated traffic, lasting up to 30 minutes), which do not require consent (Article 4(5) of Greek Law 3471/2006). They do not identify visitors or track them across websites. The contact form also uses Cloudflare Turnstile, an “I am not a robot” check that examines technical browser signals to protect the form from spam, based on our legitimate interest in website security. If we add analytics or third-party content in the future, we will ask for your consent first via a banner and update this section.
12. What are your rights?
Under Articles 15–22 GDPR you have the right:
- of access to your data and to a copy of it
- to rectification of inaccurate or incomplete data
- to erasure (“right to be forgotten”), unless the law requires us to keep it
- to restriction of processing
- to data portability, i.e. to receive it in a commonly used electronic format
- to object to processing based on our legitimate interest
- to withdraw consent at any time, without affecting processing carried out lawfully before
13. How do you exercise your rights?
Send your request by email to [email protected] with the subject “Personal data request”. We will reply by email unless you ask otherwise. We may ask for information to confirm your identity.
14. When will you receive a reply?
We reply free of charge and within one month of receiving your request at the latest. If the request is complex or there are many requests, this period may be extended by two further months, and we will tell you so within the first month (Article 12(3) GDPR).
15. Do we make automated decisions?
No. We do not take decisions about you solely by automated means, nor do we carry out profiling (Article 22 GDPR).
16. Which law applies?
Greek law, together with the General Data Protection Regulation (EU) 2016/679, Law 4624/2019 and Law 3471/2006. The courts of Piraeus have jurisdiction over any dispute, without prejudice to your right to lodge a complaint with the supervisory authority.
17. Where can you lodge a complaint?
If you do not receive a reply within the deadline, or believe your rights have been infringed, you may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
18. How will you learn about changes?
We update this policy whenever the way we process data or the law changes, and publish the new version on veenous.gr before it takes effect. Material changes are highlighted at the top of the page.
Last updated: 12 November 2026