Introduction
Our company, the private capital company named “FLOW WAVE TECHNOLOGIES ΜΟΝ. ΙΚΕ” with the trade name “FLOW WAVE TECHNOLOGIES,” located in Marousi, Attica, at Kifisias Avenue No. 44, 15125, with GEMI number 175082103000, VAT number 802365430 of the KEFODE ATTICA Tax Authority, and email [email protected], which is the legal and exclusive owner of the application INACTION, ensures compliance with national and EU legislation regarding the processing of personal data of individuals. We guarantee that the processing of personal data of individuals interacting with the Application is conducted fairly and in a way that respects privacy, personal identity, freedom, and human dignity.
The purpose of this policy is to inform individuals interacting with the Application about the identity of our company, the way we collect and process data, the purposes and legal basis of processing, and the rights of individuals.
By registering with the application, you agree to this privacy policy. If you do not agree, you must abandon the application and NOT use any of its services or content.
As stated in the Terms of Use, the services of the Company are not intended for children, and therefore, no personal data is collected from children under the age of 18.
Data Controller
Our company, “FLOW WAVE TECHNOLOGIES ΜΟΝ. ΙΚΕ” with the trade name “FLOW WAVE TECHNOLOGIES,” located in Marousi, Attica, at Kifisias Avenue No. 44, 15125, with GEMI number 175082103000, VAT number 802365430 of the KEFODE ATTICA Tax Authority, and email [email protected], is responsible for the processing of personal data of individuals interacting with the Application, in the context of providing its Services, as specified in detail in the Terms and Conditions of Use of the Application.
Organizers and Users of the Application may always contact us through the following methods:
Postal Address: Kifisias Avenue No. 44, Marousi, Attica, 15125
Phone: 6945918516
Email: [email protected]
For any questions related to the collection and processing of personal data, Users can contact us at the following email: [email protected]
Personal Data
Personal Data is defined according to Article 1 of Regulation (EU) 679/2016 (GDPR) as any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one whose identity can be verified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural, or social identity of that natural person.
Data Collection Sources
Our company collects and processes personal data directly from the Organizer/User of the application when:
Categories of Data We Collect and Process – Purpose of Processing – Legal Basis of Processing
In order to provide our services, it is necessary to process your data.
This section will list the categories of data we collect and process, the purposes for which we collect and process them, and the legal basis for their collection and processing according to the European Regulation GDPR 679/2016.
| Categories of Data | Purpose of Processing | Legal Basis for Processing | Retention Period of Data |
| Personal details for creating an Organizer account such as: name, surname, VAT number, address, mobile, email, account username, password, account creation date, photo (optional), IBAN | These are essential data for account creation, as the application offers services to legal and natural persons, individual businesses, and professionals dealing for business purposes. | Execution of the contract (Article 6(1)(b) GDPR) | We retain your personal data as long as the account remains active. |
| Personal details for creating a User account such as: name, surname, date of birth, address, mobile, email, account username, password, account creation date, photo (optional) | These are essential data for creating a User account. | Execution of the contract (Article 6(1)(b) GDPR) | We retain your personal data as long as the account remains active. |
| Contact details such as: name, address, mobile, email | To execute our services, we need to know with whom we are communicating, whether a User or an Organizer. | Execution of the contract (Article 6(1)(b) GDPR) | We retain your personal data as long as the account remains active. |
| Location data such as: address, postal code, city, country, geographic longitude, latitude | We need this information for the proper functioning of the application. | Execution of the contract (Article 6(1)(b) GDPR) | We retain your personal data as long as the account remains active. |
| Participation data such as: name, surname, VAT number, address, event details, payment method and payment date, comments about the event, number of participants | We collect and process personal data to issue the legal tax document for the provision of our services. | Execution of contract (Article 6(1)(b) GDPR), compliance with legal obligations (e.g., tax) (Article 6(1)(c) GDPR) | 5+5 years from the submission of the participation statement according to tax legislation, unless there is an ongoing legal process. |
| Participation data such as: name, surname, participation history, participation submission date, event date, event details, payment method, payment date, comments, number of participants | We collect and process this data to execute our services, improve our services, and make recommendations for events. | Execution of contract (Article 6(1)(b) GDPR), compliance with legal obligations (e.g., tax) (Article 6(1)(c) GDPR), and legitimate interest (Article 6(1)(f) GDPR) | We retain your personal data as long as the account remains active. |
| Payment details such as: payment method | We process this information to track the progress and payment of participation. | Execution of the contract (Article 6(1)(b) GDPR) | 5+5 years from the submission of the participation statement according to tax legislation, unless there is an ongoing legal process. |
Single-Sign-On (“SSO”) Option
You have the option to register in the application using one of the widely used social networking systems, such as Google or Apple. A User who already has an account with one of these services can register and log in to the application using their user data from these providers.
When logging in with the SSO option, we may gain access to SSO data such as your name, email address, phone number, country, user ID, and date of birth, if you have shared this data with the SSO provider.
These details are necessary for account creation. We never receive or store the password you use in these systems.
For information regarding third-party SSO providers, you can refer to:
Google: https://support.google.com/accounts/answer/112802
Apple: https://support.apple.com/en-us/HT204053
Account Deletion
In case of account or data deletion, we delete/anonymize the data, except for personal data which:
We assure you that we do not collect or have access to your financial data (e.g., bank card details) or sensitive data. We ask that you do not send us or disclose sensitive personal data such as social security numbers, racial or ethnic origin, political opinions, religious or other beliefs, health, criminal records, or trade union membership. If we identify or are notified of such data in our electronic store or communications, we will immediately delete it unless we are required to retain it to support our legal rights.
Disclosure of Personal Data
As a rule, the Company does not disclose or transfer data to third parties.
However, the Company may disclose your personal data to the following categories of recipients within the European Union:
The Company evaluates third-party data processors and ensures they take appropriate security and protection measures to address potential risks related to personal data processing. The Company will also sign a data processing agreement to ensure compliance with data protection laws and the application of adequate technical and organizational measures for the protection of personal data.
In some cases, the Company is legally required to disclose your data, for example, in compliance with a court decision
The Platform may provide messaging functionality between Users and Hosts.
In this context, the Company may process:
Such processing is carried out for the purposes of:
Such data shall be retained only for as long as necessary for the above purposes or as required by applicable law.
Sharing of Information Following a Booking:
Following the completion of a booking, the Company may share certain participant information with the relevant Host, including:
Such information is shared exclusively for:
Emergency Contact Information:
Users may provide emergency contact information for specific Activities.
Such information shall be used exclusively for safety-related purposes and may only be disclosed to the Host responsible for the relevant Activity.
The Company shall not use such information for marketing, advertising or commercial purposes.
Data Collected Through Custom Participation Forms:
For certain Activities, Hosts may request additional information through customized participation forms.
Such information may include:
The Company provides only the technical infrastructure for the collection of such information.
The Host remains solely responsible for the legality of the information requested and for compliance with applicable data protection laws.
Personal Data Protection Statement
On May 25, 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, entered into force, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data, and the repeal of Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the Regulation or GDPR). Additionally, Law 4624/2019, as amended, defines measures for the implementation of the Regulation.
The Organizer, within the scope of using the services of the application and receiving personal data from the Company for the execution of the contract concluded between them and the user, declares the following: The Organizer, for the personal data it receives from the Company within the scope of using the application, acts as the Data Controller, as it determines the purposes of the processing of personal data and the means by which it is carried out. Therefore, the Organizer declares and guarantees that it fully complies with its obligations under the GDPR, as well as all other harmonized and applicable legislation, judicial decisions, or guidelines or decisions of authorities related to privacy and the protection of individuals from the processing of personal data and is responsible for proving compliance with these regulations. The Organizer is liable to the Company for any fault in the event of a failure to fulfill its obligations arising from the applicable personal data protection legislation, and as a result, any liability incurred by the Company for any reason.