Privacy Policy

1. Who we are / Data Controller

PHAROS AI FACTORY S.A. (“Pharos S.A.”, “we”, “us”, “our”), incorporated under Greek Law 5263/2025, having its registered office at Patriarchou Grigoriou & Neapoleos Str. 27, GR-15341, Agia Paraskevi, Greece (Lefkippos Tech Park, NCSR Demokritos), VAT EL899972455, GEMI 191632360000, acts as the Data Controller for the personal data processed in connection with this website.

Data Protection Officer: dpo@pharosfactory.ai.

2. Scope of this Notice

This Privacy Notice explains how Pharos S.A. processes personal data when you visit this website, submit an enquiry or collaboration request through our forms, or otherwise communicate with us through the website.

This Notice concerns the website only. Processing carried out through PHAROS platform services, customer environments, AI applications, recruitment processes, events or other services may be governed by separate privacy notices and/or contractual data protection arrangements.

3. Personal Data We Collect

Depending on how you interact with the website, we may process the following categories of personal data:

Contact and identification data: full name, professional email address and, where provided, telephone number.
Organisation and professional information: organisation/company, role or category selected in the enquiry form, and other professional information voluntarily provided.
Enquiry information: the content of messages submitted through the “Tell us about your AI needs or collaboration interest” field and any other information voluntarily included in a request.
Technical data: IP address, browser/device information, server and security logs and other technical information generated through use of the website, to the extent actually collected.

4. Purposes of Processing

To receive, assess and respond to requests for information, access, collaboration or other enquiries submitted through the website.
To communicate with you regarding your enquiry and, where relevant, discuss potential collaboration or access to PHAROS services.
To operate, secure, maintain and improve the website and to detect, prevent and investigate security incidents or misuse.
To comply with applicable legal obligations and to establish, exercise or defend legal claims where necessary.

5. Legal Bases

Depending on the specific processing activity, we rely on the following legal bases under Article 6 GDPR:

Article 6(1)(b) GDPR, where processing is necessary to take steps at the request of the data subject prior to entering into a contract or to perform a contract.
Article 6(1)(c) GDPR, where processing is necessary for compliance with a legal obligation applicable to Pharos S.A.
Article 6(1)(e) GDPR, where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority, where the applicable legal basis and conditions are met.
Article 6(1)(f) GDPR, where processing is necessary for Pharos S.A.’s legitimate interests, subject to the applicable balancing requirements.
Article 6(1)(a) GDPR, where consent is specifically requested for a processing activity, such as optional marketing communications.

6. Information Submitted Through the Enquiry Form

The website includes a “Build your AI with PHAROS” enquiry form. The form may request your full name, organisation, work email address, professional category/role and information about your AI needs or collaboration interest.

Please do not include special-category personal data, health information, authentication credentials, confidential information belonging to third parties, or other sensitive information that is not necessary for your enquiry in the free-text field.

7. Recipients and Service Providers

Personal data may be accessed by authorised personnel of Pharos S.A. and by service providers acting on our behalf where necessary for website hosting, form handling, communications, information technology, security or other website-related functions. Where a service provider acts as a processor, Pharos S.A. will require the safeguards required by Article 28 GDPR.

We may also disclose personal data to public authorities, courts, regulators or other recipients where required by law or where necessary for the establishment, exercise or defence of legal claims.

8. International Transfers

Where personal data are transferred outside the European Economic Area, Pharos S.A. will ensure that the transfer is carried out in accordance with Chapter V GDPR, including, where applicable, an adequacy decision, appropriate safeguards such as Standard Contractual Clauses, and any additional measures required by applicable law.

9. Cookies and Similar Technologies

The website may use cookies or similar technologies that are necessary for its operation, security and functionality. Where optional cookies or similar technologies are used, the applicable consent and information requirements will be observed.

A separate Cookie Policy and/or cookie consent mechanism may provide more detailed information about the technologies actually deployed on the website.

10. Data Retention

We retain personal data only for as long as necessary for the purposes for which they were collected, including for the purposes of responding to enquiries, maintaining website security, complying with legal obligations and establishing, exercising or defending legal claims.

Specific retention periods depend on the category and purpose of processing. These will be finalised and published here in a future update of this Notice.

11. Data Subject Rights

Subject to the conditions and limitations of the GDPR, you may have the right to:

request access to your personal data and information about its processing.
request rectification of inaccurate or incomplete data.
request erasure where the legal conditions are met.
request restriction of processing where the legal conditions are met.
object to processing based on Article 6(1)(e) or 6(1)(f) GDPR, where applicable.
request data portability where Article 20 GDPR applies.
withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact us at dpo@pharosfactory.ai. We will respond without undue delay and, in any event, within one month of receiving your request, subject to the extension rules of Article 12(3) GDPR.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): www.dpa.gr.

12. Security

Pharos S.A. applies appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, taking into account the risks associated with the processing and the state of the art.

13. Changes to this Notice

We may update this Privacy Notice from time to time to reflect changes in the website, processing activities, legal requirements or organisational arrangements. The updated version will be published on this page with the applicable effective date.