Your Rights Under GDPR

Data Controller

The data controller for the Keryx platform is:

NetViper
Legal Form: Sole Proprietorship (Greece)
Location: Athens, Attica, Greece
Email: support@netviper.gr

Legal Bases for Processing

We process your personal data under the following legal bases as defined in GDPR Article 6:

• Consent (Art. 6(1)(a)): Marketing communications and optional cookies
• Contract (Art. 6(1)(b)): Account management, subscription billing, license provisioning, and service delivery
• Legal Obligation (Art. 6(1)(c)): Tax records, regulatory compliance, and lawful data disclosure
• Legitimate Interests (Art. 6(1)(f)): Security monitoring, threat detection, fraud prevention, analytics for service operation, and abuse prevention

Your Rights

As a data subject in the European Economic Area (EEA), you are entitled to the following rights:

Right of Access (Art. 15)

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within 30 days of your request.

Right to Rectification (Art. 16)

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure (Art. 17)

You have the right to request deletion of your personal data ("right to be forgotten") when:

• The data is no longer necessary for the purposes it was collected
• You withdraw your consent (where consent is the legal basis)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased to comply with a legal obligation

Note: We may retain certain data where required by law or for legitimate purposes such as legal defence or fraud prevention.

Right to Restriction of Processing (Art. 18)

You have the right to request restriction of processing when:

• You contest the accuracy of your data (restriction applies during verification)
• Processing is unlawful but you oppose erasure
• We no longer need the data but you require it for legal claims
• You have objected to processing pending verification of overriding grounds

Right to Data Portability (Art. 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller without hindrance.

Right to Object (Art. 21)

You have the right to object to processing based on legitimate interests or direct marketing at any time. We will cease processing unless we demonstrate compelling legitimate grounds that override your rights.

Right to Withdraw Consent (Art. 7(3))

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Right to Lodge a Complaint (Art. 77)

You have the right to lodge a complaint with a supervisory authority. For Greece, this is the:

Hellenic Data Protection Authority (HDPA)
Website: www.dpa.gr

How to Exercise Your Rights

You can exercise any of your GDPR rights by:

• Submitting a deletion request using the form below
• Emailing us at support@netviper.gr with the subject line "GDPR Request"

We will respond to all valid requests within 30 days. We may ask you to verify your identity before processing your request.

Data Deletion Request

Use the form below to submit a formal GDPR data deletion request. We will process your request and respond within 30 days.