Privacy Policy

Scope and data controller

This Policy explains how personal data is handled when you visit palladiumcps.com or contact Palladium CPS. It applies to this website only; other group-company websites may have their own privacy notices.

The website uses the trading name Palladium CPS. Website inquiries may be addressed to Palladium CPS, Mpoumpoulinas 6, 185 35 Piraeus, Greece. Privacy questions may be directed to corporate@palladiumcps.com.

Personal data we may process

Depending on your use of the website, data may include:

• Contact information such as name, email address, telephone number and company when provided in a contact or meeting request.
• Communications including the subject, message and information you choose to share.
• Technical visit information such as IP address, browser, request time and logs that may be recorded by the hosting provider for operation and security.
• Privacy preferences stored in your browser through localStorage.

Please do not include special-category personal data, identity document numbers, banking information or other sensitive content in an initial inquiry.

Contact and meeting-request forms

Both the Contact and Book a Meeting forms use a mailto: link. Once you enter your details, the website attempts to open your device's email application with a draft addressed to corporate@palladiumcps.com. Nothing is automatically sent: you must review the message and press Send.

The website does not store these form messages in its own database and does not use PHP or a third-party email API to transmit either form. If you choose to send the email, your email provider, the company's email provider and their associated systems process the communication.

Purposes and legal bases

We process data for specified purposes:

• Responding to inquiries and meeting requests: to answer questions, arrange meetings and assess cooperation requests. Legal basis: legitimate interests in professional communication (GDPR Article 6(1)(f)) and, when taking steps you request before entering a contract, Article 6(1)(b).
• Site operation and security: to address abuse, errors and security incidents. Legal basis: legitimate interests (Article 6(1)(f)) or an applicable legal obligation (Article 6(1)(c)).
• Compliance and legal claims: where necessary for statutory obligations or the establishment, exercise or defence of legal claims, subject to the appropriate legal basis.

This website has no newsletter subscription functionality. We do not automatically use contact inquiries to send marketing emails.

Cookies, local storage and the embedded map

We use localStorage to remember privacy preferences in your browser (key palladium-consent-v1). This website version does not include active Google Analytics or another traffic tracking service.

The Contact section embeds Google Maps in an iframe. The map loads when a visitor reaches the relevant section and may contact Google, transmit technical information such as an IP address, and use cookies or similar technologies under Google's policies. Accepting or rejecting analytics in the website settings does not currently prevent the map from loading.

Read the Google Privacy Policy. You can also use the written office address and external directions link without interacting with the embedded map.

The compliance of automatic map loading and any non-essential cookies must be assessed before live publication. This disclosure does not replace any prior consent that may be legally required.

Recipients and international transfers

Personal data may be accessible to authorised Palladium CPS staff or partners, hosting and IT service providers, email service providers and public authorities where required by law. We do not sell visitor personal data.

Some providers, including Google or email service providers, may process personal data outside the European Economic Area. Where a transfer is made under our responsibility, applicable safeguards under Chapter V GDPR must be used as required. The exact providers, processing locations and safeguards depend on the production infrastructure.

Retention periods

Communications are retained as long as needed to answer and follow up on an inquiry and, if a business relationship begins, for its duration and any additional period required by legal obligations or legitimate claims. Retention is reviewed in light of the purpose, ongoing relationship and legal requirements.

Technical logs may be retained in accordance with the actual hosting provider's policy and security needs. Browser localStorage preferences remain on the device until changed or cleared by you or your browser.

Your data protection rights

Subject to GDPR conditions, you may request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting previous lawful processing.

To exercise your rights, contact corporate@palladiumcps.com. Only information necessary to verify identity may be requested. We normally respond within one month; the GDPR allows an extension of up to two further months where the conditions are met.

You may lodge a complaint with the Hellenic Data Protection Authority.

Security, children and automated decisions

We seek to implement appropriate technical and organisational security measures proportionate to the risks and hosting environment. No transmission over the internet is completely secure. The website is not specifically directed at children and does not use its public contact forms for automated decision-making with legal or similarly significant effects.

Updates and contact

We may update this Policy when site functionality, service providers or applicable law changes. The last-updated date appears at the top of this page. For questions contact corporate@palladiumcps.com.