HINDT knows that you care how information about you is used and shared, and we appreciate your trust in us to do that carefully and sensibly. This notice describes the privacy policy of the Hellenic Institute of Non-Destructive Testing (HINDT), including its website, www.hindt.gr. By visiting www.hindt.gr, you are accepting and consenting to the practices described in this Privacy Notice.

Any personal information provided to or gathered by HINDT and hindt.gr is controlled primarily by:

Hellenic Institute of Non-Destructive Testing (HINDT)

Adress: Digeni Akrita & Trapezountos, 19200 Elefsina, Greece

Website: www.hindt.gr

Email: info@hindt.gr

HINDT is registered as a data controller in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Greek Law 4624/2019 on the Protection of Personal Data.

The information we learn from customers helps us personalise and continually improve your experience at hindt.gr. We use the information to handle orders, deliver products and services, process payments, communicate with you about orders, products, services and promotional offers, update our records, and generally maintain your accounts with us.

To process your information, we rely on the following legal bases under Article 6 of the GDPR:

• Performance of a contract (Art. 6(1)(b)): The use of your information is necessary to perform the contract that you have with us, including processing orders, delivering products and services, and managing your account.
• Legitimate interests (Art. 6(1)(f)): We may use your information for our legitimate interests, such as providing you with membership services and benefits, a suitable website experience, emails or newsletters, or to improve and promote our products and services, along with administrative and fraud prevention and detection. We ensure that such processing does not override your fundamental rights and freedoms.
• Consent (Art. 6(1)(a)): We may rely on your freely given, specific, informed and unambiguous consent to use your personal information for certain purposes, such as membership renewal and direct marketing. You may withdraw your consent at any time without detriment by contacting us using the details provided below. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Compliance with a legal obligation (Art. 6(1)(c)): We may process your data where necessary for compliance with Greek or EU legal obligations applicable to HINDT.

Please also note the following:

• Information about our customers is an important part of our business and we are not in the business of selling it to others.
• We will not send you marketing material unless you have given us permission to do so. You may withdraw your consent to receive marketing communications at any time.
• We only retain your data for as long as is necessary to fulfil our obligations to you or as required by applicable Greek or EU law. Retention periods are set out in our Records Retention Schedule, available upon request.
• Where it is not possible for us to delete your data, we will ensure that appropriate technical and organisational security measures are in place to protect it, in accordance with GDPR Article 32.
• You have the right to request a copy of the personal information we hold about you (right of access, GDPR Article 15). We will provide this information within one month of receiving your request and verifying your identity, free of charge for the first request.
• You have the right to contact us if you believe your personal information is incorrect (right to rectification, GDPR Article 16), or if you believe we are no longer entitled to use your personal data (right to erasure / right to object, GDPR Articles 17 and 21).
• You have the right to data portability (GDPR Article 20) and the right to restriction of processing (GDPR Article 18) in the circumstances set out in the GDPR.
• You have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

If you have questions about how we use your personal information, please contact us using the details set out in the “Our Details” section below.

HINDT implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with GDPR Article 32 and applicable Greek data protection law. In particular:

• We work to protect the security of your information during transmission by using Transport Layer Security (TLS/SSL) software, which encrypts information you input.
• We do not reveal credit card numbers when confirming an order. Payment card data is processed exclusively through our secure payment gateway in full compliance with PCI DSS Level 1 requirements. HINDT does not store full payment card data on its systems.
• We maintain physical, electronic, and procedural safeguards in connection with the collection, storage, and disclosure of personally identifiable customer information. Our security procedures mean that we may occasionally requestn proof of identity before we disclose personal information to you.
• It is important for you to protect against unauthorised access to your password and to your computer. Be sure to sign off when you finish using a shared orm public computer.
• In the event of a personal data breach, HINDT will notify the Hellenic Data Protection Authority (HDPA) within 72 hours of becoming aware, where required under GDPR Article 33, and will inform affected individuals without undue delay where required under GDPR Article 34.

Where HINDT transfers personal data outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place in accordance with GDPR Chapter V, such as Standard Contractual Clauses approved by the European Commission, or that the transfer is to a country recognised as providing an adequate level of protection. Details of the safeguards applied to such transfers are available upon request.

HINDT does not sell, trade, or otherwise transfer your personal data to third parties for their own marketing purposes. We may share your information with trusted service providers who assist us in operating our website, conducting our business, or servicing you, provided that those parties agree to keep this information confidential and comply with applicable data protection legislation including the GDPR. We may also disclose your information where required by Greek or EU law, court order, or competent regulatory authority.

Our website uses cookies and similar tracking technologies. For full details of the cookies we use, their purpose, duration, and how to control or disable them, please refer to our Cookie Policy, available at www.hindt.gr. Where cookies involve the processing of personal data, we rely on your consent in accordance with GDPR Article 6(1)(a) and the requirements of the Greek Law implementing the ePrivacy Directive (EU Directive 2002/58/EC as amended).

For all data protection enquiries, requests to exercise your rights, or complaints, please contact:

Data Protection Officer / Contact

Hellenic Institute of Non-Destructive Testing (HINDT)

Adress: Digeni Akrita & Trapezountos, 19200 Elefsina, Greece

Website: www.hindt.gr

Email: info@hindt.gr

You also have the right to lodge a complaint with the supervisory authority:

Hellenic Data Protection Authority (HDPA)

Kifissias 1–3, 115 23 Athens, Greece

Tel: +30 210 6475 600

Website: www.dpa.gr

Last updated: May 2026