Privacy policy

Last updated: May 2026

Data Controller THE MOBICELL PROJECT ΜΟΝΟΠΡΟΣΩΠΗ ΙΚΕ · VAT: 802657610
Aristotelous 11-15, Athens 10432, Greece
Email: info@servisdesk.gr

1. Introduction

This Privacy Policy explains how THE MOBICELL PROJECT ΜΟΝΟΠΡΟΣΩΠΗ ΙΚΕ ("ServisDesk", "we", "us") collects, uses, stores and protects your personal data when you use ServisDesk.gr, in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and applicable Greek law.

2. Data We Collect

A. Subscriber Data (B2B)

Business details: name, VAT number, address
Account holder details: full name, email, phone
Billing and payment history

B. Data Entered by the Subscriber (processed on your behalf)

As part of service delivery, we process as Data Processor on your behalf:

Your customers' data: name, phone, email, address
Repair data: device, fault, cost, outcome
IMEI / serial numbers
Photos and notes related to repairs

For this data, you are the Data Controller and we act solely as Processor on your behalf.

C. Technical Data

IP address at login
Browser type and operating system
Platform usage and security logs

3. Legal Basis for Processing

Purpose	Legal Basis (GDPR)
Delivering and operating the service	Contract performance — Art. 6(1)(b)
Billing and tax compliance	Legal obligation — Art. 6(1)(c)
SMS/email notifications	Consent — Art. 6(1)(a)
Platform security and abuse prevention	Legitimate interest — Art. 6(1)(f)
Service improvement (anonymous analytics)	Legitimate interest — Art. 6(1)(f)
Marketing and product updates	Consent — Art. 6(1)(a)

4. Storage & Security

Data is stored on servers operated by Hetzner Online GmbH (Germany) — within the EU, fully GDPR-compliant
Encryption in transit: TLS 1.2+
Password hashing: bcrypt
Regular automated backups
Staff access strictly role-based (least privilege)
Audit logs for all critical actions

5. Data Retention

Category	Retention Period
Active subscription data	Duration of subscription
Data after cancellation/expiry	30 days, then permanently deleted
Tax records and invoices	10 years (legal obligation)
Security logs	12 months

6. Third-Party Disclosure

Your data is never sold to third parties. It is shared exclusively with:

Hetzner Online GmbH — hosting infrastructure (Data Processing Agreement in place)
VivaWallet — payment processing (PCI-DSS compliant)
SMS provider — automated customer notifications
Law enforcement / courts — only upon lawful order

7. Your Rights (GDPR)

Under the GDPR you have the right to:

Access — obtain a copy of your personal data
Rectification — correct inaccurate or incomplete data
Erasure — "right to be forgotten" where no legal basis for retention exists
Portability — receive your data in a structured, machine-readable format
Objection — object to processing for specific purposes
Restriction — suspend processing under specific circumstances
Withdraw consent — at any time, without retroactive effect

To exercise your rights: info@servisdesk.gr — response within 30 calendar days.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): www.dpa.gr · Tel: +30 210 6475600.

8. International Transfers

We do not transfer personal data outside the European Union / European Economic Area. All our data processors are located within or process data inside the EU.

9. Policy Updates

We may update this Privacy Policy periodically. Material changes will be communicated by email at least 14 days before taking effect. Continued use of the platform after notice constitutes acceptance of the revised Policy.