1. The Hellenic Development Bank S.A., headquartered in Athens (80 Michalakopoulou Street, ZIP Code 115 28, tel. 210 74 50 400, e-mail: [email protected]), (hereinafter “HDB SA”), in its capacity as Data Controller, collects and processes your personal data, only to the extent strictly necessary, for specific and legitimate purposes, in accordance with Regulation (EU) 2016/679, Law 4624/2019, and any other applicable legislation on the protection of personal data. Through this notice regarding the processing of personal data (hereinafter the “Notice”), we inform users of the website www.innoagora.gr (hereinafter “Users” or “you” and “Website,” respectively) regarding the processing of their personal data when using the Website and its services.
3. Personal Data – Purposes of Processing – Legal Basis – Retention Period – Recipients
While browsing and using the Website, depending on the features we collect and process the following data used by users of :
| Personal Data | Purpose | Legal Basis | Retention Period | Recipients |
|---|---|---|---|---|
| (a) Data collected through the “Send us your deck” form, such as, but not limited to: identification data (e.g., full name), contact information (e.g., phone number, email), industry sector, investment proposal presentation file, business description, funding stage, etc. The above data are necessary for the evaluation of your investment proposal, and failure to provide them will make it impossible to proceed with the relevant process. | Evaluation of an Investment Proposal | Article 6(1)(b) of the GDPR – Processing is necessary for taking steps at the request of the data subject prior to entering into a contract (e.g., collaboration, support, financing) | The data are retained for as long as necessary to evaluate the proposal and for any communication with the interested party. If the proposal is rejected, the data is deleted after twelve (12) months; if the evaluation results in a collaboration, the data will be retained for as long as required by applicable law. | Authorized personnel of HDB S.A. for the evaluation of the proposal Service providers acting on behalf of HDB, such as website operation and maintenance service providers, based on appropriate contractual arrangements and technical and organizational security measures. |
| (b) Email address, collected through subscription to the newsletter: | Subscription to the newsletter for the purposes of providing information and promoting the business activities of HDB S.A. | Article 6(1)(a) – Data is collected and processed with the data subject’s consent | Data is retained for as long as you remain subscribed to our mailing list, and we delete it if you withdraw your consent | Authorized personnel of HDB S.A. Companies that support and manage the Website Other companies with which we collaborate to fulfill the above purpose |
| (c) Data collected via the contact form: full name, email address, phone number, the content of your message, and any other information you choose to provide to us. | Processing and responding to your request or inquiry | Article 6(1)(f) of the GDPR – HDB S.A.’s legitimate interest in ensuring a prompt and effective response to any request or inquiry | The data are retained for as long as necessary to process the request and for [12] months following the conclusion of the communication, unless a longer period is required to establish, exercise, or defend legal claims. | Authorized HDB S.A. personnel handling the request. Website support and management companies Other companies with which we collaborate to fulfill the above purpose |
Personal Data
Purpose
Legal Basis
Retention Period
Recipients
Personal Data
Purpose
Legal Basis
Retention Period
Recipients
Personal Data
Purpose
Legal Basis
Retention Period
Recipients
Please note that no data processing is carried out through automated decision-making, including profiling.
(b) Data we collect automatically
Technical information collected during your visit to the Website, such as IP address, date and time of visit, browser and operating system type, and device model. The collection of the above data is based on HDB S.A.’s legitimate interest in maintaining the security and the proper functioning of the Website (Article 6(1)(f) of the GDPR). This data is retained for up to six (6) months for the purposes described above. Access to this data is limited to authorized HDB S.A. personnel and technical partners or hosting providers who support the operation of the Website. In addition, information is collected through cookies and similar technologies. For more details, click here to read the Cookie Policy.
4. Processing of Minors’ Personal Data
As a general rule, HDB S.A. does not collect or process data from minors (i.e., individuals under the age of 18) through the Website. However, since it is not possible to verify the age of individuals who access or use the Website, parents and guardians of minors are advised to contact HDB S.A. immediately if they become aware of any unauthorized disclosure of data by the minors for whom they are responsible, in order to exercise the rights granted to them, such as, for example, the deletion of their data. In the event that HDB S.A. becomes aware that it has collected a minor’s personal data, it undertakes to delete such data immediately and to take all necessary measures to protect such data.
5. Transfer of Personal Data Outside the EEA
As a general rule, HDB S.A. does not transfer your personal data to countries outside the European Economic Area (EEA) or to international organizations. In the event that your personal data is transferred to a country outside the EEA or to an international organization, the following conditions must be met:
(a) The Commission must have issued an adequacy decision for the third country to which the transfer will take place (Article 45 of the GDPR); or
b) Appropriate safeguards in accordance with the GDPR must be in place for the transfer of such data (Article 46 of the GDPR); or
c) For occasional processing, one of the exceptions provided for in Article 49 of the GDPR applies.
Otherwise, the transfer to a third country is prohibited, and HDB S.A. will not transfer your personal data to that country, unless one of the specific exceptions provided for in the GDPR applies (e.g., the user’s explicit consent and notification regarding the risks involved in the transfer, the transfer is necessary for the performance of a contract at the data subject’s request, there are reasons of public interest, it is necessary to support legal claims and the vital interests of the data subject, etc.).
6. Data Subjects’ Rights
HDB S.A. ensures that it is able to respond promptly to requests from data subjects to exercise their rights, in accordance with data protection legislation.
Specifically, every data subject has the following rights:
as well as provided the conditions set forth in the law are met:
In the event that any of the above rights are exercised, HDB S.A. will respond without undue delay and, in any case, within one month of the submission of the request, informing you in writing of the progress and outcome of its review. This deadline may, if necessary, due to complexity or a large number of requests, be extended by two additional months, provided that you are notified in advance of the extension and the reasons for the delay.
If a request is deemed manifestly unfounded or excessive, particularly due to its repetitive nature, HDB S.A. may either charge a reasonable fee or refuse to comply with it, in accordance with data protection legislation.
If you are not satisfied with our response to your request or believe that HDB S.A.’s processing of your personal data violates Data Protection Law, you have the right to file a complaint with the Hellenic Data Protection Authority (HDPA) via the following link: www.dpa.gr.
7. Data Protection Officer (DPO) Contact Information
To exercise all of the above rights, as well as for any issue regarding the processing of your personal data by HDB S.A., you may contact HDB S.A.’s Data Protection Officer (DPO) via e-mail: [email protected] .
8. Disclaimer Regarding Data Processing by Third-Party Websites/Providers
The Website may contain links, hyperlinks, banners, or tabs that, when clicked, will redirect you to third-party websites. Please review the respective privacy notices and policies regarding the processing of personal data, as HDB S.A. is not responsible for the processing of personal data carried out by third-party websites or providers.
In addition, the Website includes social media buttons (social media widgets), such as, for example, Facebook, Twitter, or other social media providers. By using these buttons (e.g., by selecting “Share” or performing a similar action), the respective social media provider may collect Users’ personal data, even if they are not members of that social media platform or are not logged in to it.
HDB S.A. and the respective social media provider act as joint Data Controllers exclusively for the stage of data collection and transmission via these buttons, in accordance with Article 26 of the GDPR. HDB S.A. is not involved in the installation or use of these cookies, nor does it collect any related data. HDB S.A. only stores the User’s selection to enable the relevant feature.
For HDB S.A., the purpose of processing this data is to enhance the interactivity and functionality of the Website, as well as to promote the Company’s presence and communication through social media. The legal basis for processing in these cases is the User’s consent (Article 6(1)(a) of the GDPR, in conjunction with Article 5(3) of the ePrivacy Directive), which is provided through the cookie management mechanism (cookie banner) that appears upon entering the Website, prior to the activation of the relevant social media widgets. HDB S.A. does not control nor is it responsible for any subsequent processing carried out by social media providers after the data has been transferred. For more information, Users are encouraged to refer to the privacy notices/policies of the respective providers.
Updates to the Privacy Policy
This Notice may be amended or revised in the future. For this reason, we recommend that you refer to the most recent version of this Notice each time.
Last update: October 2026
