Privacy & Information Security

This policy protects StatDec's information from internal and external threats, ensuring the confidentiality, integrity and availability of information, both for our clients and for our own operations.

It applies to all employees, partners and external suppliers of StatDec who have access to the company's information systems, data and infrastructure, including data analysis and credit scoring models.

Principles

• Confidentiality — client information and business data are accessible only to authorised individuals.
• Integrity — information is kept accurate and complete, and unauthorised change is prevented.
• Availability — information and systems are available when their users need them.

Risk management

StatDec follows a continuous risk management process that includes the regular identification and assessment of information security threats, particularly in areas related to data analysis and the development of models for the banking and insurance sectors.

Responsibilities

All StatDec employees are responsible for following information security procedures, for reporting any security incident or suspicious activity immediately, and for taking part in regular information security training.

Compliance and review

This policy complies fully with ISO 27001:2022 and with all relevant regulation and legislation, including the General Data Protection Regulation (GDPR) and other data security regulations.

It is reviewed annually, or whenever there are significant changes in StatDec's business data and operations, with the aim of continuously improving the Information Security Management System (ISMS). The company ensures that all employees are adequately trained in security procedures through regular training and updates on information security threats.

The policy has been approved by StatDec's management and is communicated to all employees and partners for immediate compliance and implementation.

What the contact form collects

If you write to us through the contact form, we collect the details you enter: your name, your organisation, your email address, your telephone number, the subject you select and the content of your message.

Why we hold it and for how long

These details are used only to respond to your enquiry and to any correspondence that follows from it. They are not used for marketing, are not sold, and are not shared with third parties except where a service provider processes them on our behalf in order to deliver the message to us. We keep enquiry correspondence only for as long as it remains relevant to the matter raised or to our business relationship with you.

Controller and contact

The controller of this data is StatDec. Questions about this policy, and any request concerning your personal data, should be addressed to our data protection contact at dpo@stat-dec.eu, or by post to:

39 Sygrou Avenue
117 43 Athens
Greece

General enquiries that do not concern personal data are better sent to info@stat-dec.eu.

Your rights

Under the GDPR you have the right to request access to the personal data we hold about you, to have inaccurate data corrected, to request erasure or restriction of processing, to object to processing, and to receive the data you have provided in a portable form. You also have the right to lodge a complaint with your national supervisory authority — in Greece, the Hellenic Data Protection Authority.

Cookies and third-party content

This website sets no advertising cookies and does not track visitors across other sites. One strictly necessary cookie, sd_consent, records the choice you make in the cookie banner; it is set by us, stored for twelve months, and contains nothing but that choice.

Two third parties are involved in specific, limited circumstances:

• Google Maps — the map on our contact page is embedded from Google. It does not load at all unless you allow it, because loading it would disclose your IP address to Google and allow Google to set its own cookies. Until you allow it, a placeholder is shown instead.
• Our form provider — when you submit the contact form, the details you entered are transmitted through a form-delivery service acting as our processor, solely in order to deliver your message to us. Nothing is transmitted unless you submit the form.

You can change your cookie choice at any time using the Cookie preferences link in the footer of every page.