Privacy Policy

At EPOPTIA P.C. our first and foremost priority is protecting your personal data and information, regardless of the manner in which you contact or collaborate with us.

We are constantly working to properly process and store the information you share with us.

This policy applies equally to all-natural or legal persons and companies that cooperate with our company, such as active or former customers, suppliers, employees, or other partners.

We collect and use your information, on our behalf, based on your consent or as prescribed by law. We foster and invest in collaborative relationships, while greatly appreciating the trust you place in us.

Who we are

This website, epifor.com (the "Website"), and the Epifor brand are operated by EPOPTIA P.C. ("Epoptia", "we", "us"), a Greek private company registered with the General Commercial Registry (G.E.M.I.) under no. 147698736000, with registered offices at 312 Andrea Syngrou Avenue, 176 73 Athens, Greece.

Epoptia is the data controller for the personal data described in this Policy. For any privacy matter, contact us at:

Email: info@epifor.com
Post: EPOPTIA P.C., 312 Andrea Syngrou Avenue, 176 73 Athens, Greece
Phone: +30 210 924 2900

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019 and Greek Law 3471/2006 on electronic communications.

What this Policy covers and what it does not

This Policy covers personal data we collect when you:

visit and browse the Website;
contact us, book a demo or presentation, or join our beta or partner program;
subscribe to our newsletter or receive marketing communications from us;
communicate with us by email, phone, or WhatsApp;
apply for a job with us;
interact with our pages on social media platforms;
are a business contact at a current or prospective customer or partner.

What this Policy does not cover

Data inside the Epifor platform. When manufacturing companies use the Epifor MES, they are the data controllers of the data processed in their account (for example, operator names and production records). Epoptia processes that data as a processor, under the customer agreement and data processing agreement, not under this Policy.
The Epifor mobile apps, which have their own privacy notice available in the app stores and on this Website.
Third-party websites we link to (including Capterra, LinkedIn and app stores), which have their own privacy policies.

What data we collect and where it comes from

Data you give us directly

Identification and business contact details: name, surname, email address, phone number.
The content of your messages: contact form submissions, demo, presentation and partner requests, beta signup details, emails and chat messages.
Marketing preferences: newsletter subscription status, consents and opt-outs.
Job application data: CV, cover letter, education and work history and anything else you choose to include.

Data collected automatically when you browse the Website

Technical and usage data: IP address, device and browser type, operating system, pages viewed, referring page and approximate location (city level), collected through cookies and similar technologies only as described in our Cookie Preferences & Personal Information page. Analytics and marketing trackers run only with your consent, given through our cookie banner.

Data we obtain from other sources

Business contact data of professionals at manufacturing companies (name, role, company, business email) from publicly available professional sources such as LinkedIn, company websites and trade directories, used only for relevant business-to-business outreach. Where we first contact you on this basis, we will tell you where we got your data and link to this Policy and you can object at any time.

We do not collect special categories of data (such as private data) through this Website, and we ask that you do not include such data in messages or applications. This Website is intended for business audiences and is not directed at children; we do not knowingly collect data from anyone under 15.

Why we process your data and on what legal basis

Purpose

Data used

Legal basis (GDPR)

Purpose

Responding to inquiries; arranging demos and presentations; running the beta & partner program

Data used

Contact details, message content

Legal basis (GDPR)

Art. 6(1)(b): steps prior to a contract; Art. 6(1)(f): legitimate interest where you act for a company

Purpose

Operating, securing and improving the Website; preventing abuse

Data used

Technical data, strictly necessary cookies

Legal basis (GDPR)

Art. 6(1)(f): legitimate interest in a secure, functioning website

Purpose

Newsletter and marketing emails

Data used

Email, name, preferences

Legal basis (GDPR)

Art. 6(1)(a): your consent; for existing customers, Art. 6(1)(f) with an opt-out in every message (art. 11 L.3471/2006)

Purpose

Business-to-business outreach to professional contacts

Data used

Business contact data

Legal basis (GDPR)

Art. 6(1)(f): legitimate interest in promoting our services to relevant businesses; you may object at any time

Purpose

Website analytics; measuring and improving marketing (Google Analytics, Google Ads, Microsoft, Meta, advertising pixels)

Data used

Technical and usage data via cookies

Legal basis (GDPR)

Art. 6(1)(a): your consent, given through the cookie banner (art. 4(5) L.3471/2006)

Purpose

Recruitment

Data used

Application data

Legal basis (GDPR)

Art. 6(1)(b): steps prior to an employment contract; Art. 6(1)(a): consent, for keeping your CV beyond the specific opening

Purpose

Compliance with legal obligations (tax, accounting, responding to authorities, records of consent and requests)

Data used

Relevant records

Legal basis (GDPR)

Art. 6(1)(c): legal obligation

Purpose

Establishing, exercising, or defending legal claims

Data used

Relevant records

Legal basis (GDPR)

Art. 6(1)(f): legitimate interest

We do not use your data for automated decision-making that produces legal or similarly significant effects on you. We do not sell personal data.

Who receives your data

We share personal data only as needed, with:

Service providers (processors) acting under our instructions and data processing agreements: our website hosting and IT infrastructure providers; our consent management platform (which stores your cookie choices); our CRM and email marketing platforms; analytics providers (Google LLC - Google Analytics; Microsoft Corporation - Clarity); advertising platforms when you consent to marketing cookies (Google, Meta Platforms Ireland Ltd, LinkedIn Ireland UC); and communication tools (Meta - WhatsApp Business, where you choose to contact us via WhatsApp).
Professional advisors: lawyers, accountants and auditors, bound by confidentiality.
Epoptia implementation partners, only where necessary to respond to your request and under data protection agreements.
Public authorities, where the law requires it.

When you visit our pages on LinkedIn, Facebook, Instagram, or YouTube, we and the platform act as joint controllers for aggregated page statistics; the platform's own privacy policy applies to your use of it. Reviews you post on Capterra are governed by Capterra's privacy policy.

International transfers

We store data primarily in the European Economic Area. Some of the providers above (Google, Microsoft, Meta, LinkedIn) may process data in the United States. Such transfers rely on the European Commission's adequacy decision for the EU–U.S. Data Privacy Framework, to which these providers are certified, and, where needed, on the European Commission's Standard Contractual Clauses with supplementary measures. You can request a copy of the relevant safeguards via info@epifor.com.

How long we keep your data

Data

Retention

Data

Inquiries, demo requests, prospect and lead data

Retention

For the duration of our dialogue and up to 24 months after our last meaningful contact

Data

Newsletter data

Retention

Until you unsubscribe; we then keep only your email address on a suppression list so we respect your opt-out

Data

Cookie consent records

Retention

As long as needed to demonstrate compliance

Data

Job applications

Retention

For the recruitment process and up to 12 months after; longer only with your consent

Data

Customer contract, billing, and tax records

Retention

As required by Greek tax and accounting law (typically 5–10 years)

Data

Records of data subject requests

Retention

5 years from resolution

When a retention period ends, we delete or anonymize the data.

Your rights

You have the right to:

access your data and receive a copy;
rectify inaccurate or incomplete data;
erase your data, where the conditions of Art. 17 GDPR are met;
restrict processing in the cases of Art. 18 GDPR;
data portability: receive data you provided in a structured, commonly used, machine-readable format;
object to processing based on legitimate interest, and to direct marketing;
withdraw consent at any time (for cookies, via the "Cookie Settings" link on our Cookie Preferences & Personal Information page or in the footer; for emails, via the unsubscribe link in every message), without affecting processing before withdrawal.

To exercise your rights, email info@epifor.com. We respond within one month, extendable by two further months for complex requests (we will tell you if so). Exercising your rights is free of charge. We may need to verify your identity before acting on a request.

Complaint to the Hellenic Data Protection Authority

If you consider that the processing of your personal data violates the provisions for the protection of personal data, you can file a complaint with the Hellenic Data Protection Authority www.dpa.gr.

Prior to submitting the complaint, you are required to contact us, exercising your above rights in accordance with the GDPR. If we fail to satisfy your requests, or our response is deemed insufficient, you maintain the right to proceed with the complaint to the Hellenic Data Protection Authority www.dpa.gr.

Please contact us for any further queries or clarifications regarding the processing of your personal data and the exercise of your rights.

Changes to this Policy

We may update this Policy from time to time. The current version, with its effective date, is always available on this page. For material changes, we will post a prominent notice on the Website or, where appropriate, notify you by email.

Effective date: 23 July 2026

Version: 2.0 (replaces the policy dated 26 June 2019)

See also general Android Privacy Policy here & Terms and Conditions here.