ECOVERSE Data Protection Policy

I. General information about data processing
1. Data processing

We process ESG data of our users, which they register on our platform. The processing of these data takes place for the preparation of aggregate – comparative results by branch of economic activity. Furthermore, the processing of the data takes place as required for the preparation of aggregate-comparative results individually for each user. We collect cookies on a voluntary basis (consent) to understand how users of our platform use our website and which content they see the most.

2. Legal basis for the processing of data

In order to use the EcoVerse platform, you will need to enter into an agreement with us, either for yourself or for the entity you represent when you use the EcoVerse platform. The legal basis for the processing of your data is the contractual relationship we have with you or the entity you represent (see eg Article 6 (1) (b) GDPR or similar provisions in other data laws), including any pre-contractual relationships. When the identification process prevents abusive behavior, including the creation of fake accounts for companies, the legal basis is our business interest, as defined by: Article 6 (1) (f) GDPR or similar provisions in other data laws.

The collection of cookies is based on consent as defined e.g. In Article 6 (1) (a) GDPR or similar provisions in other data laws.

3. Data deletion and storage period

The data we collect will be deleted or excluded from processing as soon as the purpose of the storage is no longer valid or the person to whom the information relates states that he wishes to delete it. Storage can also be done if this is provided by any data laws.

II. Data reregistration for EcoVerse platform- comparative data preparation
1. Description and scope of data processing

Use of our site requires you to register and then log in to the site using your login passwords. For easy access we only ask for a valid e-mail address and a password. If you would like to register on our site on behalf of an entity, we will also ask for the full name and country of registration of the entity, your position in the entity and possibly a link to your professional network profile or other evidence that you belong to the entity you claim to represent. The following data is also stored at the time of recording: (1) The date and time of recording. (2) The version of the Terms and Conditions of the EcoVerse platform that you have accepted. During subsequent connections, we will save the date and time you accepted and modified version of the EcoVerse platform Terms and Conditions.

2. Legal Database of Data Processing

The registration serves the purpose of the pre-contractual relationships and the conclusion of a contract to which the user is a party. The following logins serve the execution of the contract. In both cases, the legal basis for the processing of personal data is Article 6 (1) b GDPR or similar provisions of other data laws. To the extent that registration and subsequent links help prevent abusive behavior on the site or fraudulent login attempts, the legal basis for the processing of personal data is Article 6 (1) f GDPR or similar provisions of other data laws.

3. Purpose of Data Processing

The registration of the user is necessary for the implementation of the pre-contractual relationships and for the fulfillment of a contract with the user. As a pre-contractual measure, data processing allows us to ensure that a user logged in through a given email address actually is the owner of that email address and is a real person. The user can then be identified from this address, which allows the person to verify that has accepted the required Terms and Conditions as apply from time to time. When an individual person wishes to use and then use the Website on behalf of an entity, the personal data collected allows the individual to be sufficiently verified that the individual belongs to that entity and has the right to act on behalf of the company.

4. Storage duration

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected or requested in writing by the user. In the event that the registration process abandons before completion or does not lead to the conclusion of the contract because the person in question does not accept the Terms and Conditions for concluding a contract with the user, the data collected so far will be deleted immediately.

When the registration is successful and therefore a contract has been concluded, the data collected will be stored for as long as the contract is in progress and may be stored for up to ten years thereafter.

5. Rights of Objection and Deletion

A request for deletion or objection to storage is possible by sending an e-mail to All data stored when contacting us will be deleted in this case.

III. Use of Cookies
1. Description and Extent of Data Processing

Our website uses cookies that are stored in your browser and performs two functions: (1) they recognize when you return to the site and identify if you are logged in and (2) they monitor which sections of the site you find most interesting and useful or may have difficulty.

2. The Legal Basis for Processing

The legal basis for the processing of the mentioned cookies is your consent as defined in the article 6 paragraph 1 subsection GDPR or similar provisions of other data laws. Your consent is expressed (or rejected) in the banner cookie that will appear when you first access the site and as often as necessary to ensure that we have your consent.

3. Purpose of Processing

The processing of data only serves to improve your user experience, either directly by avoiding the constant need to connect or over time, as the use of the platform helps us understand what is relevant or where the platform needs to be improved. Cookies are stored on the user’s computer and transmitted to our website by the user. Therefore, you as a user also have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing the settings in your browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically.

IV. Rights of the data subject

Your rights regarding the registered data are the following:

1. Right of access

You can request information and clarifications from our company regarding the following: (1) the purposes for which the data are processed; (2) the categories of data being processed; (3) the estimated storage time of the data processed; or, if specific information is not available, criteria for determining the storage period; to a supervisory authority;

2. Right of correction

You have the right to request the correction and / or completion of your data from our company.

3. Right of Deletion

a) Obligation to delete

You can ask our company to delete your data without undue delay and our company is obliged to delete this data without undue delay, if one of the following reasons applies: (1) Your personal data is no longer necessary for the purposes for which they were or are collected or otherwise processed; (2) Withdraw your consent on which the processing was based in accordance with Article. 6 (1) GDPR or similar provisions of others data laws and there is no other legal basis for processing. (3) Your data has been illegally processed. (4) The deletion of your data is necessary for compliance with a legal obligation under European law or Greek law.

b) Exceptions

The right of deletion does not apply if the processing is necessary (1) for the exercise of the right to freedom of expression and information; (2) for compliance with a legal obligation requiring processing under the law of the Union or of the Member State to which the (3) for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) of the GDPR or similar provisions in other data laws, to the extent that the right module a) make it impossible or seriously impair the attainment of the objectives of such processing; or (5) for the establishment, exercise or defense of legal claims.

4. Right of information

If you have exercised the right to correct, delete or limit the processing against our company, we are obliged to inform all the recipients to whom the personal data concerning you have been disclosed, for the deletion or restriction of the processing to all the recipients in which the relevant data concerning you have been disclosed, unless this proves impossible or entails a disproportionate effort associated with it.

You have the right to be informed by our company about these recipients.