PERSONAL DATA PROTECTION POLICY

PERSONAL DATA PROTECTION POLICY
OF THE COMPANY “TRY Private Equity Investment Company”

This Personal Data Protection Policy provides information regarding the type of personal data collected through the website www.try-dialogou.com, which is maintained by the company named “TRY Private Equity Investment Company” and the trade name “TRY HOLDING & INVESTMENTS SOLE Private Company.”, as well as from the physical presence and participation of individuals in the Company’s business activities. This Policy addresses the framework of the Company’s service provision, the purpose of processing the collected data, how they are managed, and the rights of the individuals (data subjects) in accordance with the General Data Protection Regulation (GDPR) EU 2016/679, Greek law 4624/2019, and the applicable Regulatory Acts of the Personal Data Protection Authority, as applicable.

• Who is the Data Controller?
The Data Controller for the personal data of individuals is the company named “TRY Private Equity Investment Company” and the trade name “TRY HOLDING & INVESTMENTS SOLE Private Company.”, which is based in Vrilissia, Attica, at 21 Chelmou Street, with GEMI 145057303000, VAT number 800925190, KEFODE Tax Office of Attica (hereinafter referred to as “the Company”).

• In what cases and what types of personal data do we collect?
The Company collects personal data of individuals, such as full name, father’s name, email address and/or postal address, contact phone number, etc., when and where required, directly from the data subjects who act voluntarily and not through collaborators or third parties. The collection of personal data occurs specifically in the following cases:
i. When you fill out the online contact form or send an email to [email protected], you provide data such as full name, father’s name, email address and/or postal address, phone number, nationality, place and date of birth, tax identification number, identity card details, marital status, profession, education, and other general or specific matters, depending on the intended use. These personal data are voluntarily provided by you if you wish.
ii. When you fill out the first contact/visit form to receive general information, you provide the required data for the Company to offer services, such as full name, father’s name, email address and/or postal address, phone number, nationality, place and date of birth, tax identification number, identity card details, marital status, profession, education, children’s birth date, etc. These personal data are voluntarily provided by you if you wish. It is noted that the first contact/visit form includes specific fields that are filled out according to the intended purpose, so you provide only the necessary data to ensure that only the essential data are collected for processing. The processing of these data by the Company is based on the “principle of data minimization” and the “principle of proportionality.”
iii. When you complete special forms or questionnaires required for the Company to provide services, such as full name, father’s name, email address and/or postal address, phone number, nationality, place and date of birth, tax identification number, identity card details, marital status, profession, education, children’s birth date, etc. These personal data are voluntarily provided by you if you wish. It is noted that the questionnaires used by the Company include specific fields that are filled out depending on the intended purpose, so you provide only the necessary data to ensure that only the essential data are collected for processing. The processing of these data by the Company is based on the “principle of data minimization” and the “principle of proportionality.”
iv. During your registration and participation in educational programs, lectures, book presentations, speakers’ events, and other activities organized by the Company, as well as evaluations of these activities for the improvement of the Company’s functions.
v. When browsing the Website, where we collect data via cookies and Google Analytics tool to improve user experience and collect data regarding traffic and the type of pages visited. For more information about the cookies used by the Website, refer to the Terms of Use.
vi. When you visit the Website, the server logs your IP address, which constitutes a personal data, even though we cannot identify you based solely on this information. The logs help us record details regarding the browser type you use and other information, such as the date and time of your visit to the Website. These logs are stored for up to one (1) month to ensure network and information security from accidental events or unlawful or malicious activities that may jeopardize the availability, authenticity, integrity, and confidentiality of the stored data and the operation of the Website. During the one (1) month period, only the authorized server administrator has access to the logs, and they are automatically deleted afterward.

• For what purposes do we collect your personal data?
The Company collects only the absolutely necessary personal data according to the purpose for which they are intended, and no further processing is done in a manner incompatible with the purpose for which they were collected. The Company does not transfer or send personal data of individuals to third parties, except in specific cases outlined below (in the next section), and always in accordance with the purpose for which they were collected.
The personal data we collect are processed for the following purposes:
i. For the Company to provide services to the parties involved.
ii. For the Company to communicate with you in response to your request, inquiry, or comment via the Website.
iii. For conducting the Company’s activity review and preparing any form of financial report – anonymously – so that personal data of individuals cannot be identified, for the internal operation, financial auditing, and analysis to improve the Company’s provided services.
iv. To gather and evaluate requests, advice, and suggestions to improve the services provided by the Company in all the areas it operates.
v. To maintain an archive and produce statistical data concerning the Company’s operations and its activities, which are kept in a non-identifiable form.
vi. To promote the corporate profile of the Company and further enhance the visibility of its services to interested parties or third parties, by any means, whether print or electronic, as well as through social media.
vii. To defend the legitimate interests of the Company, its owners, management, employees, partners, clients, and any third party linked to the Company by any legal relationship, as well as fulfilling contractual and legal obligations and rights.
• Who are the recipients of your personal data?
The recipients of your personal data are authorized employees and/or external partners of the Company, who act on behalf of and for the account of the Data Controller. The Company ensures that all natural and/or legal persons cooperating with it in any way explicitly undertake a contractual obligation of confidentiality and protection of personal data that they may receive and/or process in any way, always in accordance with the purpose for which they were collected. The data collected is in no case disclosed to third parties, nor is it made public or subject to any further processing, except as specifically stated in this policy.
Exceptionally, the Company may disclose personal data to third parties in a manner consistent with the processing purposes of this Policy in the following cases:
i. When explicit consent has been obtained for the publication of personal data in any manner.
ii. When disclosed to third-party service providers acting as Data Processors exclusively and solely within the framework of their legal relationship with the Company, providing guarantees that they implement appropriate security measures in accordance with applicable law. Third-party providers may be natural or legal persons offering consulting or development and maintenance services for systems and applications used by the Company.
iii. In compliance with the law or an order from a public or independent administrative authority.
iv. For the defense of the legitimate interests and the fulfillment of obligations and rights of the Company, its owners, management, employees, collaborators, clients, and any third party with a legal relationship with the Company.
• Where and for how long are your data stored?
Your data is stored in the Company’s system, hosted on a server within a specifically designed and predetermined space in a data center (hereinafter referred to as the “Data Center”) located within Greek territory. The management of the server is carried out by the service provider company in accordance with appropriate methods and international practices, ensuring that access to the information is exclusively granted to the authorized personnel, who undertake an explicit obligation of confidentiality and protection of personal data.
As a general rule, the Company retains personal data in an identifiable form only for as long as necessary, as determined by the purposes for which it was collected, as well as for fulfilling tax and other legal or contractual obligations. There are specific retention periods for each category of data. For example, data processed under a contractual relationship is retained for a longer period, even after the contract’s expiration, in order to protect the legitimate interests of the Company. In other cases, the Company may retain personal data in an anonymous form so that identification is not possible, for the purpose of statistical and research purposes. The rules for determining the retention period are derived from compliance with applicable data protection law and best international practices.
• What guarantees do we take for the protection of your data?
The Company has taken the necessary technical and organizational measures by applying the most appropriate technical mechanisms for content protection to ensure the safest possible environment for you, in accordance with the relevant legal provisions. In this context, the Company regularly checks security systems and restricts access to personal data only to employees and contractors who need to access this data and who are explicitly bound to maintain this data as strictly confidential, with relevant confidentiality and personal data protection declarations.
• What are your rights regarding your data and how can you exercise them?
According to the General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as the “Regulation”) and Greek Law 4624/2019, you can exercise the following rights regarding the management of your data by the Company:
a) Right of access: You can inquire from the Company whether your data is being processed, and if so, which data is being processed, who the recipients are, and the purpose of the processing, etc.

b) Right to rectification and erasure (“right to be forgotten”): You have the right to request the correction of any inaccurate data and/or the partial or full erasure of your data under conditions specified by the Regulation.

c) Right to restriction of processing: You can request the restriction of the processing of your data in cases where this is explicitly allowed by the Regulation.
d) Right to data portability: You can request the data you provided in a structured, commonly used, and machine-readable format, as determined by the relevant national supervisory authority.

e) Right to object: You can object at any time to the processing of your data.
f) Right to lodge a complaint with the supervisory authority: You can file a complaint with the relevant supervisory authority in the case of unlawful processing of your data.
It is clarified that the Company has the right to refuse the satisfaction of your request for restriction of processing or erasure of your personal data, or your objection to processing, if the processing or retention of the data is necessary for the establishment, exercise, or defense of legal claims or for the fulfillment of its obligations.
• Supervisory Authority
The relevant Greek authority for the application of the General Data Protection Regulation (EU) 2016/679 is the Hellenic Data Protection Authority. You can contact the Authority for matters related to the management of your personal data at:
Kifisias Avenue 1-3, 11523 Athens, Greece, Tel: +30 210-6475600, [email protected], www.dpa.gr.
• Changes to the Policy and Updates

This policy is posted on the website www.try-dialogou.com with the ultimate aim of more effectively protecting the privacy of individuals who visit the site and/or receive further services from the Company under a private cooperation agreement.
This Personal Data Protection Policy is valid from January 1, 2025.