Your data

Exercising your rights

You want to know what we hold about you, to correct it or to have it erased. Here is where the request goes and what you need to write — no lawyer is needed and it costs nothing.

Last updated: 12 September 2026 · This English version is provided for convenience; in case of divergence the Greek text prevails.

First: who are you addressing?

Your situation	Controller	Where to send it
I called a business and a digital voice answered	The business you called	To them. If you cannot find their contact details, or they do not answer, write to us and we will pass the request on
I filled in a form or asked for a test call on grammateas.gr	Retail Management Solutions	i.kotrotsios@rm.gr
I am a customer and want data from my account	Retail Management Solutions	From your own account, or at i.kotrotsios@rm.gr

What you can ask for

Access — a copy of what we hold about you and an explanation of why.
Rectification — if something is wrong or incomplete.
Erasure — to have it deleted, when there is no reason for us to keep it.
Restriction — to "freeze" it while a disagreement is being examined.
Portability — to take it away in a machine-readable file.
Objection — to stop processing that rests on a legitimate interest.
Withdrawal of consent — at any time, for anything done with your consent.

What to write in the e-mail

Subject: GDPR request — [access / erasure / rectification]
Body: your full name, the telephone number or the e-mail address by which we know you, exactly what you are asking for and — if it concerns a phone call — roughly the date and the time, as well as which business you called.

The telephone number is the key: it is what lets us find the conversation. Do not send a copy of your ID with the first message; we will ask for the minimum confirming details only if we need them, so that data is not handed to the wrong person.

How quickly we answer

Acknowledgement of receipt: within two working days.
A substantive answer: within one month. For complex or multiple requests the deadline may be extended by two months — we tell you, with the reason.
Exercising your rights is free of charge. Only for manifestly unfounded or excessively repetitive requests is a reasonable fee, or a refusal, permitted, with reasons given.

When we cannot erase

When the law requires us to keep something — for example invoices and tax documents, or details needed to establish or exercise legal claims. In such a case we explain what was kept, on what basis and for how long, and we restrict its processing to the minimum.

If you are not satisfied

You may complain to the supervisory authority, at no cost:

Authority	Hellenic Data Protection Authority
Address	Kifisias 1-3, 11523 Athens, Greece
Telephone	+30 210 6475600
E-mail	contact@dpa.gr
Website	www.dpa.gr

You may also complain to the supervisory authority of the EU country where you live or work.