Privacy Policy
Last updated · July 2026
1. Data Controller
Pentagon Group, Mark. Mpotsari 6-8, Ilioupoli 163 42, Athens, Greece. For any privacy-related inquiries, contact ops@pentagongroup.gr.
2. Cookies
We use strictly necessary cookies to operate this website and — with your explicit consent — anonymous analytics cookies to understand aggregate usage. Analytics are only loaded after you click “Accept”. You can withdraw consent at any time by clearing your browser storage.
3. Contact Form Data
Information you submit through our secure contact form (name, company, email, phone, country, dates and message) is processed under our legitimate interest in responding to inquiries and under NDA. Data is retained only for as long as necessary to respond to your request and to maintain a record of the mandate.
4. Legal Basis
We process personal data on the basis of your consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual measures at your request (Art. 6(1)(b) GDPR), and our legitimate interests in operating the business (Art. 6(1)(f) GDPR).
5. Data Sharing
We do not sell personal data. Data is disclosed only to vetted operators strictly involved in the fulfilment of your mandate, or where required by law.
6. Your Rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and to data portability. You may also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
7. Security
All communications are transmitted over TLS 1.3 with AES-256 encryption at rest. Access to principal records is limited to senior operators on a need-to-know basis.