Privacy Policy

The Company, as Data Controller and also as Data Protection Officer (DPO), fully complies with the General Data Protection Regulation (EU 2016/679 - GDPR) and applicable Greek legislation (Law 4624/2019).

1. Data We Collect and Purpose of Processing

We collect personal data only when you voluntarily provide it to us, for example through the contact form, a request for IRMA risk analysis or use of investment calculators.

• Identity & Contact Data: Full name, phone number and email address. Purpose: Responding to your requests, providing information about our services and pre-contractual planning.
• Financial/Insurance Profile Data: Information you enter for needs calculations, such as desired savings amount, age and existing coverage. Purpose: Carrying out indicative financial simulations and preparing personalized advisory support.

2. Legal Basis for Processing

The processing of your data is based on:

• On your consent when submitting the contact form or using the tools.
• On taking steps at your request before entering into a contract (pre-contractual stage of insurance/investment intermediation).
• On compliance by the Company with legal obligations arising from supervisory legislation, such as IDD - Law 4583/2018.

3. Recipients of the Data

Your data remains confidential within the Company and is processed only by our authorized personnel. It may be transmitted exclusively and only:

• To partner Insurance Companies, Mutual Fund Management Companies or Financial Institutions, if you request the conclusion of a specific product or the issue of an official offer.
• To technical support (IT) providers for our website, who are contractually bound by confidentiality and data security clauses.
• To the competent judicial, prosecutorial or supervisory authorities, where required by law.

4. Data Retention Period

Contact and pre-contractual data are retained for the period required to complete communication or the pre-contractual study, and in any case for no more than five (5) years from collection, unless a contract is concluded in the meantime, in which case they become part of the client file and are retained according to the periods provided by law.

5. Your Rights

You have the right to exercise the following rights at any time:

• Access & Rectification: To learn what data we keep about you and request correction of any inaccuracies.
• Erasure (“Right to be Forgotten”): To request erasure of your data, provided there is no lawful reason for retaining it.
• Portability: To receive your data in a structured format.
• Withdrawal of Consent: To withdraw your consent to processing, without affecting the lawfulness of processing based on that consent before its withdrawal.

To exercise your rights, and for any matter concerning the processing of your personal data, you may contact the Company directly as Security Officer & DPO at the email address: info@gs-wealth.gr or by post at our headquarters address (208 Kifisias Ave., Chalandri, P.C. 15231).

If you believe that your data is being infringed, you have the right to file a complaint with the Hellenic Data Protection Authority (www.dpa.gr).