Last updated: 26 October 2026
Protecting personal data and securing information is a core commitment of PANGAEA R&D® PC. This policy explains what data we process, why and on what legal basis, in line with the EU General Data Protection Regulation 2016/679 (GDPR), Greek Law 4624/2019 and Law 3471/2006 on electronic communications.
It applies to the pan-gaea.gr website and its domains (earth, ocean, sky, civil, tectrans, RnD, apps), and to the applications, platforms and services we develop or provide.
1. Data controller
PANGAEA RESEARCH & DEVELOPMENT PRIVATE COMPANY
Distinctive titles: PANGAEA R&D® PC · ΠΑΝΓΑΙΑ Ε&Α ΙΚΕ
1 Eirinis Katsigra str., 41335 Larisa, Greece
VAT No: EL801795770 · GEMI No: 163482340000 · EUID: ELGEMI.163482340000
Tel.: +30 2413 025 570 · Email: info@pan-gaea.gr
For any question about your personal data, write to info@pan-gaea.gr with the subject “Personal data”.
2. This website
- No cookies, no tracking. The website uses no cookies, analytics, advertising tools or browser storage, which is why no cookie banner is shown.
- Server logs. Like any website, the hosting server may record technical data (IP address, date/time, page, browser type) to run the site securely and defend against attacks. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Fonts. The website’s fonts are loaded from Google Fonts. When they load, your browser connects to Google servers, which receive your IP address.
- External links. Links to partners and third parties (e.g. EKT, GSRI, cooperatives) lead to sites with their own privacy policies, for which we are not responsible.
3. Contacting us
The website’s contact form stores nothing on a server. It opens your device’s email program with the message filled in, and you decide whether to send it. When you email or call us, we process:
- your name, email, phone, organisation and the content of your message;
- to answer your request and, where relevant, to take steps before entering into a contract (Art. 6(1)(b) and (f) GDPR).
We never send newsletters or marketing messages without your explicit consent, which you can withdraw at any time.
4. Applications & platforms
Our solutions mainly collect technical and environmental data (sensors, weather stations, trap images, measurements). Where personal data is involved:
AgroNIT & smart farming
User account (name, email, password), field and crop details, GPS position of stations and traps, task logs. Used to provide the service, alerts and agronomic advice.
C4 platform – Civil Protection
Staff and field-team data (name, role, contact details, availability, training), audit trails, alerts by SMS, voice, email or push, and location data during operations.
Smart Cities applications
Depending on the application: pupils and parents (nursery schools), drivers and vehicles (fleet management), visitors (Social WiFi). The platforms are GDPR compliant.
Drones & field images
UAV flights and field cameras target crops, land and incidents, not people. Any incidental images of people are not used for identification and are deleted or anonymised.
Our role
When we provide a platform to a municipality, region, cooperative or company, the client is the data controller for its users’ data and PANGAEA R&D® acts as processor (Art. 28 GDPR), under a written agreement setting out purpose, duration, security measures and sub-processors. For such data, please contact the organisation that gave you access first.
5. Research & development projects
In research and co-funded projects (e.g. OEF, ESPA/Regional Programmes, Horizon Europe) we process data of partners, event and training participants and cooperative members only as needed to implement, disseminate and audit the project. Research data is published in aggregated or anonymised form.
6. Recipients & transfers
We do not sell or rent personal data. We may share it only with:
- hosting, cloud, email and communications (SMS/voice) providers acting on our behalf under confidentiality agreements;
- technology partners and project partners, where necessary for the service or project;
- project funding and audit bodies, and public authorities where the law requires.
We aim to keep data within the EU/EEA. Any transfer outside the EEA (e.g. through international providers) is made with GDPR safeguards such as an adequacy decision or standard contractual clauses.
7. Retention
- Correspondence: as long as needed to handle the request or the collaboration.
- Application accounts: for the duration of the contract or account, then deleted or returned to the client.
- Project records and tax/accounting data: as long as required by the funding programme rules and the law.
- Server logs: for a short period, for security purposes.
8. Information security
We operate a quality management system to ELOT EN ISO 9001:2015 and information-security standards to ISO/IEC 27001:2022. Measures include:
- Encryption in transit (HTTPS/TLS)
- Role-based access control (RBAC)
- Audit trails
- Backups
- Data minimisation
- Staff training
- Confidentiality agreements
If a data breach poses a risk, we notify the Hellenic Data Protection Authority within 72 hours and, where required, the people affected.
9. Your rights
Under the GDPR you have the right to:
Access & rectification
Know what data we hold about you and have it corrected.
Erasure & restriction
Ask for deletion or restriction of processing, where the law allows.
Portability
Receive your data in a structured, machine-readable format.
Objection & withdrawal
Object to processing based on legitimate interest and withdraw consent at any time.
To exercise your rights, write to info@pan-gaea.gr. We reply within one month. You may also lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., 11523 Athens, www.dpa.gr).
10. Children & changes to this policy
This website is not aimed at children. Minors’ data (e.g. in the nursery-school application) is processed by the educational organisation as controller, with the consent of parents or guardians.
We may update this policy when our services or the law change. The current version is always published on this page, with its last-updated date.