Physical Premises & Facilities
Client and Visitor Privacy Policy for Physical Premises
Last Updated: 27 October 2026
This policy covers individuals who contact or do business with PARAGON, including customers, sole traders, company representatives and workspace users. Company information is covered where it includes personal data.
1. Data Controller
PARAGON Consulting Services L.P. (registered Greek name: PARAGON Consulting Services E.E.), 91Γ Alexandrou Papanastasiou Ave., 714 09 Heraklion, Crete, Greece. Tax ID: 802121772. GEMI registration number: 170385327000. Contact: info@offices.com.gr · +30 2810 320 579.
2. Data and Sources
Depending on the service, we process contact, company and representative details, billing and payment information, enquiries, bookings, agreements and related correspondence. We request necessary identification and tax details where required for an agreement or a legal obligation.
You, your company or an authorised person provide this information. Public business registers may be used where company details need to be checked. We identify required information when collecting it. Without it, we may be unable to provide the relevant service.
3. Purposes and Legal Bases
- Quotes, availability checks and agreements with individuals: steps requested before a contract or performance of a contract.
- Communication with company representatives, access arrangements, premises security and legal claims: legitimate interests, balanced against your rights.
- Invoices, accounting and tax duties, and lease declarations where required: compliance with legal obligations.
- Optional marketing: an appropriate legal basis and separate consent where required. A booking does not automatically subscribe you to marketing.
4. Premises, Access and Mail
Business address services and mail handling follow the agreed service and your authorisation. We do not open or scan mail contents without an instruction to do so. Where access control or CCTV operates, the specific notice at the premises explains its purpose, operation and retention periods. You can request that notice before visiting.
5. Recipients and Transfers
Access is limited to authorised people and necessary providers of IT support, hosting, email, accounting and legal services. Banks and payment providers process payment details under their own policies as well. Information is shared with competent authorities where legally required. We do not make customer personal data available to other workspace users.
Transfers outside the EEA require GDPR safeguards, such as an applicable adequacy decision or standard contractual clauses and additional measures where needed. You can request information about the relevant safeguards.
6. Retention and Security
We retain information for the enquiry or contractual relationship. Contract and tax records are kept for the periods required by applicable law. Records needed for legal claims may be retained for that purpose. Access is limited according to responsibilities, with security measures proportionate to the risks.
7. your Rights and Contact
Subject to the legal conditions, you can request access, correction, deletion, restriction or portability, or object to processing. You can withdraw consent for future processing. Send requests to info@offices.com.gr · +30 2810 320 579. We may request only the information needed to confirm your identity. We respond within the GDPR deadline, normally one month. We will explain any lawful extension within that period.
You may complain to the Hellenic Data Protection Authority. Submitting a form does not produce an automated, binding booking decision.
For browsing and online forms, see our Online Privacy Policy.
Visitors, Access Control and Specific Notices
Arranging a visit or access may require minimum details of the visitor, host, time and authorisation. The actual data collected and active retention periods are explained at collection. General consent is not required as a condition of entry for processing lawfully based on contract, a legal duty or legitimate interests.
CCTV is covered by the separate CCTV Privacy Notice and Signage Policy, identifying its controller. The Network Usage Policy covers Wi-Fi, Ethernet and any technical logs.
