PRIVACY POLICY of KTEO Autotruck Company Gennimata Avenue (Former L.Titan) Habosi Street, Magoula Attica Postal Code: 19018 Last Update: 26/04/2024

1. Field of Application This privacy policy explains how the company with the brand KTEO Autotruck collects, uses, processes, stores, manages, transmits, and protects personal data (hereafter “Information”) through its website to meet the company’s data protection standards and comply with the law. The privacy policy related to the Website https://www.kteoautotruck.gr/ (hereinafter referred to as the “Website”) was drawn up in compliance with GDPR 679/2018 (hereinafter referred to as “GDPR”), which constitutes a directly binding European Regulation, as well as according to current Greek legislation. This privacy policy, based on which KTEO Autotruck undertakes to protect the privacy of visitors and Users/Customers of the Website and the applications operating through it, applies to all Personal Data of third parties (hereinafter the “User or/ and Customer”) managed by KTEO Autotruck through the Website, as well as the applications developed by KTEO Autotruck and operating through the above website. In particular, KTEO Autotruck provides the User/Customer with the possibility to make an online appointment to visit one of the company’s stores through the above-mentioned Website. Additionally, KTEO Autotruck provides the User/Customer with the opportunity to be informed of the date on which his vehicle needs to pass a KTEO inspection through the above Website. The Website https://www.kteoautotruck.gr/ is not intended for minors. Those who are unable to enter into legally binding agreements in Greece are not permitted to use this Website. If you believe that we have received data from an individual protected by child protection laws without obtaining the necessary parental consent, please notify us immediately, and we will take reasonable steps to securely delete that data. This policy does not apply to information collected through any other website or to the practices of companies that we do not control. Please note that the Website may contain links to other websites. Additionally, for example, the above website may contain links that refer to advertisements. In the event that the User/Customer selects a link that refers to another website or an advertisement on the Website and connects to another website, then this privacy policy will not apply to any information collected on the website. We are not responsible for the privacy practices of other websites, and we encourage you to read the privacy policy of each website you visit. Additionally, KTEO Autotruck hereby declares that it is not responsible under any circumstances for the content of the above websites, to which the User/Customer is referred through other connections (links), nor for any financial or other damage suffered by the user who follows them. In no event does KTEO Autotruck guarantee that these links will operate without interruption or that their content is at all times accurate and valid, although we make every effort to ensure that all links are accurate and valid. Furthermore, external links are indicative and not exclusive or restrictive. KTEO Autotruck reserves the right to remove or add links without any warning to anyone and to change the content of the Website at any time. By using the Website, you understand and accept that KTEO Autotruck is in no way responsible for the content of the hyperlinks included therein, the services/products they offer, or the advertisements they contain.

This data protection policy ensures that KTEO Autotruck:

• Complies with data protection legislation, as defined by the current Greek and European personal data protection legislation (GDPR).
• Protects the rights of Users/Customers and visitors.
• Ensures transparency in data processing and storage issues.
• Is protected from the risks of data breach.

2. Lawful Basis for Data Processing KTEO Autotruck operates as a company providing technical inspection services for vehicles (cars, two-wheelers, motorcycles, cars for private and public use, etc.) and the updating of exhaust gas cards and, in general, the provision of integrated services related to the technical inspection procedures of all types of motor vehicles. With the aim of promoting its services and informing the interested public about matters of technical control and vehicle circulation, it created the above website, through which applications are implemented that facilitate the access of the interested public to the services of both KTEO Autotruck and, in general, the technical control, such as the online appointment, the reminder of controls, etc. The personal data that you provide to us during your browsing of the Website is intended exclusively for purposes related to your transactions with us. In particular, the information on the Website is provided only for personal, non-commercial use, free of charge and without requiring user registration. When you visit and browse the Website, the absolutely necessary personal data are collected, which are necessary for your browsing on the Website and the use of the online appointment applications or the KTEO reminder service by SMS or email. Additionally, KTEO Autotruck collects personal data of Users/Customers if they wish to contact KTEO Autotruck through a relevant email form maintained on the Website, for any issue related to the provision of information related to the services provided by KTEO Autotruck. Finally, it collects corresponding personal data information through email communication, through the sending of the CV, and through telephone communication with the respective User/Customer. Therefore, KTEO Autotruck collects your personal data for the following purposes: (a) For the possible maintenance of a personal customer record especially in the event that you use the applications provided through the Website or in general for the creation of a customer record (profile), when the communication with the company is made via email or via phone or by phone. In all the above cases, as KTEO Autotruck, we keep the personal data, which you provide us with your consent and which are necessary for the provision by KTEO Autotruck of the services that are the object of its activity. In some cases, such as for example when completing a vehicle technical inspection report, the personal data collected is determined by the relevant legislation, therefore these data are collected within the framework of compliance with the existing legislation, but also in order to enable the conclusion of the relevant contract with the respective User/Customer. (b) In order to register your request regarding the pricing policy of our services, you provide us with your consent certain personal data via email or by filling in the corresponding form on the Website or via telephone communication with the KTEO Autotruck call center. (c) For your communication with KTEO Autotruck regarding our products and services, the reminder of the technical inspection date, the creation of an appointment regarding the services and products of our company, but also in general with issues you may have with us, you provide us with your consent some of your personal data by email or by filling in the corresponding form on the Website or by contacting the KTEO Autotruck call center or by phone. (d) For ordering the products and Services provided by KTEO Autotruck, through the Website, the Application, by email, or by telephone, as well as for the conclusion of the relevant insurance contracts. (e) To improve the services provided and ensure the operation of the respective service, we use Functionality Cookies, Advertising Cookies (Google Ads – Facebook Ads), and Analytics Cookies to the use of which you consent. The personal data that you provide us may not be used by any third party (except where provided by the Law and the competent authorities only), without complying with the legislative provisions regarding the protection against the processing of personal data, such as these apply every time. KTEO Autotruck operates in accordance with the current Greek and Community legislation and keeps your personal data secure for as long as you are registered with a KTEO Autotruck service or until your consent, based on which you provided us with your personal data, is withdrawn. In summary, KTEO Autotruck requests and processes the personal data absolutely necessary for each processing. In any case, the criterion used to determine the storage period of personal data is based on compliance with the deadlines allowed by law and the principles of data minimization, limitation of the storage period and rational management of our records.

3. Security of Personal Data KTEO Autotruck implements at all stages of the process appropriate technical, physical, and administrative data security measures to protect data from loss, misuse, damage or modification, unauthorized access and disclosure as provided for in Article 32 of GDPR 679/2016 in order to ensure an appropriate level of security against risks. In particular, these measures include, among others, as the case may be: a) the encryption of personal data b) the possibility of ensuring the confidentiality, integrity, availability and reliability of processing systems and services on a continuous basis, c) the possibility of restoring the availability and timely access to personal data in the event of a physical or technical event, d) procedure for regular testing, assessment, and evaluation of the effectiveness of technical and organizational measures to ensure the security of processing. KTEO Autotruck further takes measures to ensure that any natural person acting under the supervision of the controller or processor, who has access to personal data, processes it only on the instructions of the controller, and allows the access to your personal information only to its authorized employees.

4. Categories of Personal Data We Collect During your visit to the Website and in order to use any Service you must have previously accepted the KTEO Autotruck Terms of Use and this Privacy Policy. During your visit and browsing of the Website, personal data is collected in case you want to use the online appointment service or the KTEO reminder service by SMS or email or by sending a CV. In case you make use of the applications provided through the Website and: (a) request to make an appointment via the Website, you must enter your name, your surname, your email address, your mobile phone number, the registration number of your vehicle in the relevant field. (b) you use the KTEO reminder service for one of your vehicles, you must enter your name, your surname, your email address, your mobile phone number, the registration number of your vehicle and the date of issue of the first license or the date of the last KTEO inspection. For your communication, regarding our products and services or with issues that you may want to raise with us, as well as for the conclusion of contracts with KTEO Autotruck and the provision of the relevant services, you must provide us with information that concerns you (such as first name, last name, email address, vehicle number, date of first registration and issuance of the first license of the vehicle, tax registration number), by filling in the corresponding request registration form on the Website, the Application or by email to our email address info@kteoautotruck.gr or by phone at 210 555.32.68. The same above data will be requested from you by KTEO Autotruck for the provision of the above-described services either when their provision is requested through the website contact form or by email or by telephone or in person.

5. Sources of Personal Data Collection Directly from the users and visitors of the Website and Applications. Directly from the Users/Customers of our services.

6. Update on the Processing of Personal Data by KTEO Autotruck (as responsible and Processor – in accordance with the General Data Regulation EU 679/2016) A. Why will you process my Personal Data (PID)? KTEO Autotruck provides services, based on its intended purpose as described in paragraph 2 hereof and generally above. The categories of personal data collected from the Website, via email and telephone vary and depend on the type and purpose of the service provided by KTEO Autotruck. In particular, KTEO Autotruck processes your personal data which it collects through the above mentioned methods for the following purposes: To provide the possibility of registering the User/Customer as a member and user of the services provided by KTEO Autotruck through the website, email, telephone and also in person at its branches, in the context of the exercise of its legitimate interest. To provide the possibility to respond to requests submitted by the User/Customer regarding the pricing policy of its services and products. To ensure your ability to communicate with KTEO Autotruck regarding our products and services or issues you may have raised with us or any complaints you may have expressed. For the registration of requests to use the services of KTEO Autotruck, as well as for the purposes of managing these requests and informing Users/Customers.

B. Information collected automatically during your visit and interaction with Network Site We inform you that your personal data and the information collected and processed during your visit to the Website https://www.kteoautotruck.gr/ are appropriate for the occasion and necessary for the processing of your requests and the use of our services. In particular, when you visit and interact with the Website, certain information may be automatically collected, such as: your computer’s Internet Protocol (IP) address, browser type and operating system configuration, the web pages you visited immediately before and after your visit to the Website, websites and advertisements you see and links you click on within the Website, basic server connection information and information collected through HTML cookies, and other similar technologies. KTEO Autotruck does not manage, collect or process the geolocation data (GPS), which is collected and processed exclusively by the companies that offer the operating system of the device you are using (in the case of using an iOS operating system – Apple Inc, or operating android – Google Inc). KTEO Autotruck does not have access to the GPS position refresh rate. The Website may use cookies to identify you in certain services and pages of www.kteoautotruck.gr. A cookie is a small piece of data that is sent to your browser from a web server and stored on your computer’s hard drive. Cookies do not cause damage to your system and do not affect its functionality in any way. Cookies also make web browsing easier for you by saving your settings. You can set your server (browser) in such a way that you are either warned about the use of cookies in specific services of the Website or prohibit the use of cookies. In case you do not wish to use cookies for your identification, you will not be able to have further access to these services. KTEO Autotruck will use the User’s/Customer’s email contact information and name or other information, to directly promote its similar products or services, to inform users about the status of trial applications, and to serve similar purposes, unless the User/Customer informs KTEO Autotruck at the email address info@kteoautotruck.gr or at its postal address Gennimata Avenue (Formerly Titan Street) Thesi Habosi, Magoula Attica Postal Code: 19018, Attention Customer Service Department, that he does not wish the collection and use of his electronic data for these purposes. Access to personal data is strictly limited to the staff of KTEO Autotruck, which implements the appropriate technical and organizational measures in order to ensure the appropriate level of security and only to achieve the intended purpose. KTEO Autotruck does not carry out a systematic and extensive evaluation of personal aspects regarding natural persons based on automated processing, including profiling.

C. How long will you keep my account information on file? In the case where the legitimizing basis of the processing is the exercise of the legitimate interest, the processing and preservation of personal data will be carried out for as long as is deemed necessary to achieve the intended purpose of KTEO Autotruck, as well as for as long as is required until the statute of limitations for any related claims. In the case where the personal data of the User/Customer (Customer Tab – profile) is provided by him/her with consent in the context of registration to the services of the Website, we will retain the personal data for as long as the consent, which has been obtained voluntarily, is in force by the User/Customer and until the consent given by him/her (data subject) is withdrawn. In the event that, for any reason, this is interrupted, we will keep them for as long as necessary until the statute of limitations for any related claims has passed. In cases where the legal basis of the processing is the execution of the contract, we will keep your data for as long as you maintain a contractual relationship with us both in paper and electronic form or for as long as is required until the statute of limitations expires related claims. In the case of sending a resume, where the User’s personal data is provided by consent in the context of registering for the services of the Website, we will retain the personal data for as long as the consent, which has been voluntarily obtained by the User, is in force and until the consent given by him (data subject) is withdrawn. In the event that, for any reason, it is interrupted, they will be deleted.

D. What rights do I have in relation to the processing of my data? You can exercise, as the case may be, your rights from the current Greek Legislation and from the General Data Protection Regulation (Regulation (EU) 2016/679) which are as follows: a. the right to information (articles 13 and 14), b. the right of access (article 15), c. the right to rectification (Article 16), d. the right to deletion – “right to be forgotten” (Article 17), e. the right to limit processing (Article 18), f. the right to data portability (to receive your data in structured and commonly used format – article 20 if applicable) and g. the right to object (article 21). These rights may be exercised only in cases where KTEO Autotruck acts as a personal data processor and in particular a) in the processing of customers’ personal data in the context of the execution of its contractual obligations (providing main, supporting and related services based on the intended purpose) b) in the processing of personal data of the users of the Website and the applications provided through it c) in the processing of personal data (curriculum vitae) of the candidate partners in the context of the investigation of entering into a possible professional cooperation. If you exercise any of these rights, we will take every possible measure to satisfy your request within thirty (30) days of receiving the relevant request, after informing you either of its satisfaction, or of the objective reasons that prevent his satisfaction. In addition, you can at any time object to the processing of your personal data by withdrawing your consent (Article 7 par. 3 of GDPR 679/2016), as long as the legal basis for this processing is the consent of the data subject.

7. Where will you transfer my data? Your data will be transmitted to departments of KTEO Autotruck, which are responsible for the correct and uninterrupted operation of the services of the Website and the applications provided through it. As part of certain functions of the Website, we transmit to legal entities (Google Inc.) certain personal data of the Users/Customers of our Website through cookies (such as IP address and all user interaction with the application). In the context of promotional and advertising actions, we keep the email address of our Users/Customers and other personal data of their nature, such as indicative first name, last name, mobile phone number and pass them on to companies such as Sponge Creative, which shares advertisements on the Facebook accounts of its customers KTEO, in periods of time when a service check is imminent. The data collected by the Google Analytics tool, such as the address (url) visited by the user, the action (action) performed by the user as well as the time spent on each page (retention), are usually transmitted to Google servers in the USA and are stored there. In each transmission, we always take every measure so that the personal data transmitted is always the minimum necessary, as well as that the conditions for legal and legitimate processing are always met.

How can I submit a complaint/complaint? For any issue regarding the processing of your data, you can contact the Data Protection Officer (DPO) of KTEO Autotruck: tel. 210 555.32.68 and email: info@kteoautotruck.gr Also, you always reserve the right to address the Personal Data Protection Authority, which may accept the submission of relevant complaints or complaints, either in written form in its protocol or electronically following the Authority’s instructions on the website http://www.dps.gr/, after however first contacting the Data Processor as above.

Amendments This policy may be updated from time to time, due to amendments to the relevant legislation or changes in the corporate structure of KTEO Autotruck. Consequently, we encourage Users/Customers to periodically check the Website in order to be informed of the latest information regarding the privacy policy. In any case, Users/Customers will be informed via email or through a warning on the Website about the changes in said policy.