Privacy Policy

---

Last Updated: December 2024

Oceanos Capital respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your personal data, in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Greek data protection laws. Our company aims to respect your privacy and civil rights while ensuring transparency in how we process your personal data.

1. Data Processing Controller

Oceanos Capital ("we," "us," or "our") is the Data Processing Controller for all personal data collected via our website and services. You may contact us at info@oceanoscapital.com

2. Definitions

• Data Subject: Any natural person whose personal data is processed by us.
• Personal Data: Any information related to an identified or identifiable natural person, such as name, contact details, or other identifiers.
• Processing: Any operation performed on personal data, including collection, recording,      storage, alteration, and destruction.
• Controller: The legal entity determining the purposes and means of processing personal data.
• Processor: A third party that processes personal data on behalf of the Controller.

3. Personal Data We Process

With your consent, we process the following personal data:

• Contact Information: Name, email address, phone number.
• Business Information: Company name, job title, position, business-related information.
• Communication Data: Content of messages, requests, and inquiries submitted through      the website's communication form.

Some data is necessary for us to provide our services (e.g., when you contact us via the communication form). Without this mandatory information, we may not be able to proceed with your request.

4. Why and How We Process Your Data

We process your data for the following purposes:

• To handle your inquiries: We process your personal data to respond to requests made through the communication form. The legal basis for this processing is your consent (Article 6(1)(a) and Article 9(2)(a) of the GDPR).
• To communicate updates: If you consent, we may send you updates, newsletters, or marketing material. You may withdraw your consent at any time.
• To comply with legal obligations: We may process your data to meet legal,      regulatory, or contractual obligations (Article 6(1)(c) of the GDPR).

We process personal data using both automated and manual methods, ensuring appropriate security measures in line with GDPR requirements.

5. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Consent: When we rely on your explicit consent to process your data, especially for      marketing or communication purposes (Article 6(1)(a)).
• Contractual Necessity: When processing is necessary for the performance of a      contract or pre-contractual steps (Article 6(1)(b)).
• Legal Obligation: When processing is required to fulfill legal obligations (Article 6(1)(c)).
• Legitimate Interests: When processing is necessary for legitimate business      interests, such as improving our services and maintaining security (Article 6(1)(f)).

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, and as required by law. We take into account legal obligations, contract fulfillment, and legitimate business needs when determining retention periods.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right to Access: You have the right to request access to the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete data we hold about you.
• Right to Erasure: You can request the deletion of your personal data, subject to certain legal exceptions.
• Right to Restriction: You can request a limitation on how we process your personal data in certain circumstances.
• Right to Data Portability: You can request your data in a structured, machine-readable format to transfer to another controller.
• Right to Object: You can object to our processing of your data on legitimate grounds.
• Right to Withdraw Consent: If we process data based on your consent, you can      withdraw that consent at any time.

To exercise these rights, please contact us at the details provided above.

8. Security of Personal Data

We implement appropriate technical and organizational measures to safeguard your personal data against unauthorized access, loss, or misuse. These measures are designed to ensure that your data remains secure.

9. Data Sharing and Transmission

We may share your personal data with third-party service providers who assist in providing our services, such as IT providers, legal advisors, and business partners. We ensure that all such third parties comply with applicable data protection laws.

We may also transfer your personal data to non-EU countries, ensuring that appropriate safeguards (e.g., Standard Contractual Clauses, EU-US Privacy Shield) are in place.

10. Third-Party Websites

Our website may contain links to third-party websites. These websites are governed by their own privacy policies, and we are not responsible for the content or practices of those websites. We encourage you to review their privacy policies before submitting personal data.

11. Policy Updates

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the updated policy will become effective immediately upon posting. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

12. Contact Us

If you have any questions or concerns about how we process your personal data or wish to exercise your rights, please contact us at info@oceanoscapital.com