Privacy policy

Who we are

The controller of your data is HAUFEN I.K.E., 43 Marathonos Ave., 190 09 Pikermi, Attica, Greece, tel. +30 210 604 3410, email info@haufen.gr.

We process personal data in line with the EU General Data Protection Regulation 2016/679 (“GDPR”) and Greek Law 4624/2019. For anything about your data, write to info@haufen.gr.

What we collect

When you fill in a form. The “Ask for a quote” form asks for your name, email, phone, the project's location, whether you are a private client or a professional, details about the building and the installation, the windows and doors you need, and any comments, drawings or photos you attach.

When you contact us by phone or email, we keep your contact details and what you send us, so that we can reply.

When you visit our pages, the server automatically records technical data: IP address, date and time, the page requested and the browser type. We use it only to keep the website secure and working.

On your own device (your browser's local storage) we keep only your choice of light or dark theme and, on the quote form, a draft of what you have filled in so far, so that it isn't lost if you close the page. The draft is never sent to us; it is deleted when you submit the form or clear your browser data.

The website uses no visitor analytics, advertising or tracking tools.

Why we use it

• To answer your request and prepare a quote: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)).
• To carry out your order if you become a customer: measuring, production, installation, warranty, invoicing (GDPR Art. 6(1)(b) and (c)).
• To meet our legal obligations, e.g. tax and accounting (GDPR Art. 6(1)(c)).
• To keep the website secure and protect the forms from spam: our legitimate interest (GDPR Art. 6(1)(f)).

We do not use your details for advertising, we do not send newsletters you haven't asked for, and we never sell or rent data to anyone.

Who we share it with

Your details are seen only by the HAUFEN staff handling your request. To run the website we use the providers below, who process data on our behalf or when you choose to use their service:

If you become a customer, our accountant also receives the details needed for invoicing. Public authorities receive data only when the law requires it.

Transfers outside the European Union

Some of the providers above (e.g. Google, monday.com, Vimeo, CARTO) may process data outside the European Economic Area. In those cases the transfer relies on a European Commission adequacy decision (such as the EU–US Data Privacy Framework) or on standard contractual clauses.

How long we keep it

• Requests and messages that did not lead to an order: up to 2 years after our last contact, so that we can refer back to them if you return.
• Customer data: for as long as we work together and the product warranty lasts, then for as long as tax and commercial law requires.
• Server logs: for a short period, for security only.
• Data on your device (theme, form draft): until you delete it.

When we no longer need data, we delete or anonymise it.

Cookies

The website sets no cookies of its own. Cookies may be set only by third-party providers: Google reCAPTCHA on pages with a form, and the video players when you play a video. You can delete or block them in your browser settings; if you block reCAPTCHA the forms may not work, and you can write to us at info@haufen.gr instead.

How we protect your data

The whole website runs over an encrypted connection (HTTPS). The forms are protected from automated submissions, configuration files holding passwords are not reachable from the internet, and only the people handling requests can see them. No system on the internet is completely secure; if a breach puts your rights at risk, we will tell you without delay.

Children

The website is meant for adults. We do not knowingly collect data from children under 15; if we find that such data was sent to us, we delete it.

Your rights

At any time you can ask for:

• access to your data and a copy of it,
• correction of data that is wrong or incomplete,
• erasure, unless the law requires us to keep it,
• restriction of processing, e.g. while a request of yours is being looked into,
• portability: to receive your data in a common digital format or have us send it to someone else,
• objection to processing based on our legitimate interest,
• withdrawal of your consent, where you gave it, without affecting processing done before.

Write to info@haufen.gr; we will reply within one month. If you believe your rights are being breached, you can complain to the Greek Hellenic Data Protection Authority, 1-3 Kifisias Ave., 115 23 Athens, tel. +30 210 6475600, www.dpa.gr, or to the authority in your own EU country.

Changes to this policy

When the way the website works or the law changes, we update this page. The date of the last update is shown at the top.