Privacy policy

1. Controller

The controller is FILMORAMA S.A. (FILMORAMA Α.Ε.), based at Ιωνίας, 570 09 Καλοχώρι, Θεσσαλονίκη. Registry details (when published): VAT 800430284 · Tax office Thessaloniki · ΓΕΜΗ 122104504000.

Global Films Greece is the trading name used to present Global Hi-Tech Films in Greece. This website is not an online shop and does not take payments.

For data requests: info@globalhitechfilms.gr or +30 2312 318364.

2. Data we collect

Personal data is any information that can identify a natural person — for example a name, email, phone number, a professional VAT number, an IP address or an account identifier.

You can browse the public site without submitting a form. In that case we only receive the technical data the server produces (IP address, browser type, requested page, time) for security and operation.

If you send a contact message we collect name, company (if given), email, phone, topic and your text, together with acceptance of this policy.

If you apply to become a partner we collect the professional fields on the form: company name, VAT number, tax office, city, years in business, application scopes, contact details and message.

For approved partners we keep an account (email, identifier, approval status, tier, VAT number) so the portal can open.

If you subscribe to the newsletter, we collect your email, whether you are an installer or a private customer, and your consent.

For approved installers' orders we keep the order details (products, quantities, delivery address). We do not ask for or store card or other payment details; no payments are made through this website.

3. Purposes and legal bases

Answering a contact request — legitimate interest or steps toward a contract (GDPR art. 6(1)(b) or (f)).

Reviewing a partner application and, if approved, creating an account — steps toward or performance of a B2B contract (art. 6(1)(b)).

Portal sign-in, account protection and abuse prevention — contract performance and a security legitimate interest (art. 6(1)(b) and (f)).

Keeping a record of prospective customers or partners and proving consent (acceptance time, policy version, submission metadata) — legitimate interest and legal obligation where it applies (art. 6(1)(c) and (f)).

Hosting, operating and securing the website — legitimate interest (art. 6(1)(f)).

Sending the newsletter — consent (GDPR art. 6(1)(a)). You can withdraw it at any time through the unsubscribe link in every email or by writing to us. We do not send SMS or promotional messages without separate consent.

4. Recipients and processors

We do not sell personal data. We share it only as needed to run the site or when the law requires it.

Application hosting and delivery: Vercel (including Vercel Web Analytics for cookieless, aggregated page-view statistics). Partner authentication and database: Supabase (Auth and Postgres). New-lead notifications and newsletter delivery: Resend.

Those providers act as processors under their contracts. They may process data outside the EEA; we then rely on appropriate safeguards (EU Standard Contractual Clauses or an equivalent framework).

Data may be given to courts, police or other public authorities after a lawful request, and to legal or accounting advisers when needed for claims or duties.

Only authorised staff and contractors of the company have access, and only as needed to handle the request.

5. Retention

Contact messages and partner applications are kept for as long as needed to reply and review them and, afterwards, for as long as tax or commercial law or the defence of claims requires — typically up to five years from the last action, unless a longer duty applies.

Partner accounts are kept for the life of the relationship and for a reasonable period after it ends.

Newsletter details are kept until you unsubscribe.

Server logs are deleted on a short cycle unless they are needed to investigate a security incident.

When the purpose ends, data is deleted or anonymised unless the law requires keeping it.

6. Your rights

Under GDPR articles 15 to 22 you may request: information and access, rectification, erasure, restriction, objection, portability where it applies, and not to be subject to a decision based solely on automated processing — which this website does not do.

Where processing is based on consent you may withdraw it at any time (art. 7(3)). Withdrawal does not affect processing already carried out.

Send the request to info@globalhitechfilms.gr. We reply within one month of receipt. If the request is complex the deadline may be extended by up to two further months; we will tell you. We may ask you to confirm your identity. Requests are free unless they are clearly unfounded or repetitive.

You may lodge a complaint with the Hellenic Data Protection Authority (HDPA), Kifisias 1-3, 115 23 Athens, www.dpa.gr.

7. Security

We use HTTPS, access controls and limited sharing. No system is perfectly secure. If we learn of a breach that affects you, we will notify you and the Authority where the law requires it.

8. Children

The site is aimed at professionals. We do not seek to collect children’s data. If you believe a minor’s data was given to us, write to us so we can delete it.

9. Changes

This policy may change when the site or the law changes. The new version is posted on this page with an updated date and version number (current: 2026-09-28). Continued use after publication means you have seen the new version.