Overview
Varsitonis is committed to handling personal data with care, transparency and respect for the individuals whose information we process. This Privacy Policy describes our approach to the collection, use, storage and protection of personal data in connection with the services we provide. By accessing or using our platform, you acknowledge that you have read and understood this policy.
Data We Process
We process only the personal data that is necessary to deliver our services. This includes identification and contact details provided during account registration, as well as operational records generated through the normal use of the platform. We do not collect data beyond what is required for the purposes described in this policy and we do not process sensitive personal data unless explicitly required and consented to in a separate agreement.
Legal Basis and Purpose
Personal data is processed on the basis of contractual necessity, legitimate interest and - where applicable - explicit consent. The primary purpose of processing is to provide, maintain and improve the services offered through the platform. Data is never sold, rented, or disclosed to third parties for commercial purposes. We may share information with service providers acting under our instruction and bound by confidentiality obligations, or when legally compelled to do so by a competent authority.
Data Retention and Security
We retain personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Data is stored with appropriate technical and organisational safeguards in place to protect against unauthorised access, loss, or misuse. Access to personal data is restricted to personnel who require it to perform their duties.
Your Rights
You have the right to access the personal data we hold about you, to request its correction or deletion and to object to or restrict its processing where permitted by law. Requests may be submitted to our designated contact address. We will respond within the timeframes required by applicable data protection legislation. Where we are unable to fulfil a request, we will explain the reasons in writing.
Controllers and Processors
Where the platform is used by an organisation to manage data relating to its employees or members, that organisation acts as the data controller and retains full ownership of and responsibility for the personal data it causes to be processed. Varsitonis acts solely as a data processor in such cases, processing personal data only on the documented instructions of the controller and in accordance with applicable data protection law. Varsitonis does not make independent decisions about the purpose or means of processing data belonging to a controller's users. Controllers remain responsible for ensuring a valid legal basis for processing and for informing their users accordingly.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date of the most recent revision is indicated at the top of this page. Continued use of the platform following any update constitutes acceptance of the revised policy.