Privacy Statement

Who We Are

This website is operated by ΔΗΜΗΤΡΟΥΛΑ ΠΑΠΠΑ & ΣΙΑ Ε.Ε. (APSTAGE), which is the data controller for the personal data processed through https://xenia.apstage.gr.

Email: info@apstage.gr
Address: Φιλαδελφίας 170, 13671 Αχαρνές, Αθήνα, Greece
Tax ID: 998992945

What Data We Collect

We collect the following personal data when you use this website:

Contact and enquiry data: name, email address, telephone number, and the content of your message submitted through our contact form.

Cookie consent preferences: your choices about which cookies and similar technologies you accept or reject, and related information needed to store and apply your preferences (we use our own consent management system, Trustwards).

Device and technical data: IP address, browser type, device information, and technical information necessary for the website to load and function correctly.

Analytics and usage data (only after your consent): information about how you interact with the website collected through Google Tag Manager and Google Analytics 4, which may include pseudonymous identifiers and device information.

Advertising measurement data (only after your marketing consent): information used to measure advertising performance, including Google conversion measurement (Conversion Linker), which may involve pseudonymous identifiers and device information.

Sources of data:
We collect data directly from you when you submit an enquiry through the contact form.
We collect some data automatically when you access the website (such as device and technical data).
We collect analytics and advertising measurement data through cookies and similar technologies only where you have given the relevant consent.

Providing enquiry data is optional, but if you do not provide it, we will not be able to respond to your enquiry or prepare an offer. Providing device and technical data is necessary to use the website. Consent-based data (analytics and advertising measurement) is optional and can be refused without affecting your ability to browse the website.

How We Use Your Data

We use your personal data for the following purposes:

Responding to your enquiries and preparing an offer for exhibition stand design and construction services for XENIA 2026, based on contract performance (to take steps at your request before entering into a contract).

Operating, maintaining, and securing the website (including protecting against security threats and misuse), based on our legitimate interests in keeping our systems and website secure and reliable.

Measuring website performance and understanding how visitors use the website through Google Tag Manager and Google Analytics 4, based on your consent.

Measuring advertising performance through Google conversion measurement (Conversion Linker), based on your marketing consent.

Who We Share Your Data With

We share personal data only where necessary for the purposes described in this policy, including with the following recipients:

Website hosting provider: our hosting provider processes device and technical data and any data you submit through the website on our behalf to host and operate the website.

Google (Google Tag Manager, Google Analytics 4, and conversion measurement): we use Google services to implement tags, measure website usage, and measure advertising performance. Data is shared with Google only to the extent required for these functions and only after the relevant consent has been given. Google processes this data in accordance with its own privacy documentation.

WPML: we use WPML to provide multilingual functionality on the website. Data processed for this purpose is limited to what is necessary to display the website in your selected language and operate the site’s language features.

Trustwards consent management: we use our own consent management system (Trustwards) to record and manage your cookie preferences. This data is processed internally and not shared with third parties.

International Data Transfers

Some of our service providers are located outside the EU/EEA, specifically in the United States.

Google: where you consent to analytics and/or advertising measurement, transfers may occur to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF). Transfers are limited to pseudonymous identifiers and device information collected by analytics and advertising technologies, and only where consent has been given.

Our consent management system (Trustwards) is based in Spain (EU), so consent data is not transferred internationally.

How Long We Keep Your Data

Enquiry form data: kept for up to 2 years from the last communication, unless the enquiry leads to a contract, in which case it is kept for the duration of the contract and for as long as Greek tax and accounting law requires. Enquiries are received by email and also stored in the website database, and are deleted from both on the same schedule.
Analytics data: 14 months.
Advertising measurement data: until consent is withdrawn.
Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).
Security logs and technical records: 12 months.
Analytics data: until consent is withdrawn or according to the analytics tool retention settings.
Advertising/marketing tracking data: until consent is withdrawn.

Your Rights

If you are in the EU/EEA, the UK, or Switzerland, you have the right to:

Access your personal data.
Correct inaccurate or incomplete data.
Delete your personal data (the “right to be forgotten”).
Restrict the processing of your personal data.
Receive the personal data you provided to us and, where applicable, have it transmitted to another organization (data portability).
Object to processing based on our legitimate interests.
Withdraw your consent at any time, where we rely on consent (this does not affect processing carried out before you withdrew consent).
Not be subject to automated decision-making, including profiling, that produces legal effects or similarly significantly affects you.

To exercise your rights, contact us at info@apstage.gr. We will respond within one month.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Data Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Breach Notification

We maintain procedures to detect, report, and investigate security incidents. If a personal data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and provide information about the nature of the breach, the likely consequences, and the measures taken or proposed to address it. If you suspect a security issue, please contact us at info@apstage.gr.

How to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority in your jurisdiction. As our establishment is in Greece, you may also lodge a complaint with the Hellenic Data Protection Authority. We encourage you to contact us first at info@apstage.gr so we can try to resolve your concern directly.

Updates to This Policy

We review and update this policy periodically. The “Last updated” date at the top of this policy indicates when changes were last made. If we make significant changes, we will provide notice on the website or by email where appropriate. Changes take effect from the date indicated at the top of this policy. Where processing is based on consent, we will request new consent when required.

Contact Us

Tax ID: 998992945
Email: info@apstage.gr
Address: Φιλαδελφίας 170, 13671 Αχαρνές, Αθήνα, Greece
Data Controller: ΔΗΜΗΤΡΟΥΛΑ ΠΑΠΠΑ & ΣΙΑ Ε.Ε. (APSTAGE)