Who We Are

This website is operated by LABOR S.A. (T4C - ISO Certification Services), which is the data controller for the personal data processed through https://staging.t4c.gr.

Controller: LABOR S.A.
Email: t4c@t4c.gr
Address: ΕΘΝΙΚΗΣ ΑΝΤΙΣΤΑΣΕΩΣ 84, ΠΑΛΛΗΝΗ 15351, Greece
Tax ID: EL094493926

What Data We Collect

We collect the following categories of personal data when you use our website and contact us about ISO certification services (including ISO 9001, 14001, 22000 and 45001):

Business enquiry and quotation request data you provide to us, such as your name, business email address, phone number, organisation name, and the information you include in your message or request about certification services.

Cookie consent preferences, including your choices about which non-essential cookies you accept or reject. We record these preferences through our consent management system (Trustwards).

Device and connection information that is technically necessary to provide the website, such as IP address, browser type, device identifiers, and similar technical information.

Website usage data collected through analytics technologies, where you have given consent, such as information about how you interact with the website (for example, pages viewed and approximate interaction events).

Advertising and measurement data collected through advertising technologies, where you have given consent, such as pseudonymous identifiers and device information used to measure advertising performance and deliver advertising features.

Sources of data:
We collect data directly from you when you submit an enquiry or quotation request through the website.
We collect some data automatically when you access the website (for example, IP address and browser information).
We collect data from cookies and similar technologies for analytics and advertising only where you have given consent.

Providing enquiry and contact data is optional, but if you do not provide it, we may not be able to respond to your request or provide a quotation.

How We Use Your Data

We use your personal data for the following purposes:

To respond to your enquiries and quotation requests and to communicate with you about ISO certification services. Legal basis: contract.

To operate, maintain, and secure the website, including ensuring its availability and protecting against misuse. Legal basis: legitimate interests.

To manage and store your cookie preferences and to demonstrate that we respected your choices. Legal basis: legal obligation.

To measure website performance and understand how visitors use the website through analytics technologies, where you have given consent. Legal basis: consent.

To support advertising and advertising measurement through advertising technologies, where you have given consent. Legal basis: consent.

Who We Share Your Data With

We share personal data only where necessary for the purposes described in this policy and only with recipients that support the operation of the website and our communications with organisations seeking certification.

We use Google Tag Manager to manage website tags and support the deployment of analytics and advertising technologies. Data is shared with Google for this purpose and is processed according to Google’s privacy policy.

We use Google Analytics 4 to measure website usage and produce aggregated statistics about website performance. Data is shared with Google for this purpose only where you have given consent, and is processed according to Google’s privacy policy.

We use Google Ads for advertising features and advertising measurement. Data is shared with Google for this purpose only where you have given consent, and is processed according to Google’s privacy policy.

We embed YouTube videos on the website. When you view embedded video content, data may be shared with Google (YouTube) to deliver the video and related functionality, and is processed according to Google’s privacy policy.

We use our own consent management system (Trustwards) to record and manage your cookie preferences. This data is processed internally and not shared with third parties.

International Data Transfers

Some of the service providers we use for analytics, advertising, tag management, and embedded video content may process personal data outside the EU/EEA, specifically in the United States, depending on your cookie choices and how the services operate.

Google (Google Tag Manager, Google Analytics 4, Google Ads, and YouTube): Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF). Transfers are limited to pseudonymous identifiers and device information collected by analytics and advertising technologies, and only where consent has been given.

Our consent management system (Trustwards) is based in Spain (EU), so consent data is not transferred internationally.

How Long We Keep Your Data

Enquiry and contact data: retained for the duration of the business relationship and for as long as required by applicable certification and accounting obligations.
Analytics data: until consent is withdrawn or according to the analytics tool retention settings.
Advertising data: until consent is withdrawn.
Cookie consent records: 10 years, to demonstrate compliance and address potential claims within legal limitation periods.

Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).
Security logs and technical records: 12 months.

Analytics data: until consent is withdrawn or according to the analytics tool retention settings.
Advertising/marketing tracking data: until consent is withdrawn.

Your Rights

If you are in the EU/EEA, the UK, or Switzerland, you have the right to:

Access your personal data.
Correct inaccurate or incomplete data.
Delete your personal data (the “right to be forgotten”).
Restrict our processing of your personal data.
Receive a copy of certain personal data you provided to us in a structured, commonly used format and have it transferred to another controller where technically feasible (data portability).
Object to processing based on our legitimate interests, on grounds relating to your particular situation.
Withdraw your consent at any time, where we rely on consent (this will not affect the lawfulness of processing before you withdrew consent).
Not be subject to automated decision-making, including profiling, that produces legal effects or similarly significantly affects you.

To exercise your rights, contact us at t4c@t4c.gr. We will respond within one month.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Data Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Breach Notification

If a personal data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. Our notification will describe the nature of the breach, the likely consequences, and the measures taken or proposed to address it. We maintain procedures to detect, report, and investigate security incidents. If you suspect a security issue, please contact us at t4c@t4c.gr.

How to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority in your jurisdiction. As LABOR S.A. is established in Greece, you may also lodge a complaint with the Hellenic Data Protection Authority. We encourage you to contact us first at t4c@t4c.gr so we can try to resolve your concerns promptly.

Updates to This Policy

We review and update this policy periodically to reflect changes in our practices, technologies, or legal requirements. The “Last updated” date at the top of this policy shows when it was last changed. If we make significant changes, we will provide an appropriate notice on the website and, where suitable, by email. Changes take effect from the date indicated at the top of this policy. Where processing is based on consent, we will request new consent when required.

Contact Us

Tax ID: EL094493926
Email: t4c@t4c.gr
Address: ΕΘΝΙΚΗΣ ΑΝΤΙΣΤΑΣΕΩΣ 84, ΠΑΛΛΗΝΗ 15351, Greece
Data Controller: LABOR S.A.