Privacy & Data Security Policy

Last updated: 16 August 2026

This policy explains what personal data we collect through agrometrisis.com and the Agrometrisis service, for what purposes, and what rights you have, in accordance with the General Data Protection Regulation (EU 2016/679, GDPR).

Data Controller

The Agrometrisis service is provided by the sole proprietorship “KOUMOUTSAKOS PANAGIOTIS TOU CHRISTOU”, trading as “Eliotis Software”, VAT no. EL047608891, General Commercial Registry (GEMI) no. 18173939000, registered in Apidea, Laconia, 23060, Greece. Contact: info@agrometrisis.com, tel. +30 6977 974 580.

What Data We Collect

Contact form: full name, email address, subject and message — only what you submit to us.

Customer account details: the laboratory’s business name and contact details, its users’ names and email addresses, and billing details.

Technical logs (IP addresses, login timestamps) for security purposes. For visit statistics we use self-hosted Umami, which sets no cookies and shares no data with third parties.

Purposes & Legal Bases

We process data to: respond to your inquiries (pre-contractual steps), provide the service (performance of contract), issue invoices and meet tax obligations via the AADE myDATA platform (legal obligation), and maintain security and prevent abuse (legitimate interest). We do not sell data and we do not use it for advertising.

Payments

Payments are processed by Viva (a licensed credit institution) in its own secure environment. We never receive or store card numbers or banking credentials.

Recipients & Processors

Data is shared only with: hosting providers within the EU, Viva for payment execution, the Greek tax authority (AADE) for invoice issuance, and email delivery providers for service messages. All are bound by corresponding data-processing agreements.

Data Security

All connections are encrypted (TLS/HTTPS). Each customer laboratory has a fully isolated database, sensitive fields are encrypted with per-laboratory keys, access is role-based, and daily backups are taken with integrity verification.

Your Laboratory’s Client Data

For the data each laboratory records in the service (samples, analyses, its own clients’ details), the laboratory is the data controller and we act as data processor, solely on its instructions. Your data remains yours.

Retention

We retain data for the duration of the contractual relationship and thereafter only as long as tax and other legal obligations require. Contact-form messages are kept only as long as needed to handle the request.

Your Rights

You have the rights of access, rectification, erasure, restriction, portability and objection. For any request write to info@agrometrisis.com — we respond within the GDPR deadlines. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).