Legal

Privacy policy

Last updated: 12 October 2026

This page explains what personal data we collect when you visit iroad.orama-tech.gr, why we collect it, how long we keep it and what you can ask us to do with it. It is written to be read, not to cover us.

1. Who we are

The data controller is:

• Orama Technology Solutions
• 42 Chrysostomou Smyrnis, Moschato, Athens 18344, Greece
• Phone: +30 210 941 4950
• Email for data protection matters: privacy@orama-tech.gr

That address exists solely for matters concerning personal data. For commercial enquiries please use sales@orama-tech.gr.

2. What this policy does not cover

This text covers this website only — the iRoad Assist promotional site.

It does not cover the data held inside our software when it runs at a customer's premises. There, the controller is the company using it, and Orama Technology Solutions acts as a processor under the contract signed with that company. If you are a customer or an insured person of such a company and want to exercise your rights, please contact them.

3. What we collect and why

3.1 The "Request a demo" form

When you send the form we receive by email whatever you filled in: company, name, email address, phone (if you give one) and your message. Alongside it we record the date and time, the page the form came from, and your IP address.

• Purpose: to reply to you, arrange the demo, and keep a record of the exchange. The IP address and timestamp also let us block automated spam.
• Legal basis: your consent, given through the checkbox above the send button (Art. 6(1)(a) GDPR). For spam filtering, our legitimate interest in protecting the site from abuse (Art. 6(1)(f)).
• Required? Only company, name and email. Without those we cannot reply. Phone and message are optional.

3.2 Site analytics

We use Google Analytics 4 to see how many people visit, where they come from and which sections they read. We care about the totals, not about individual visitors.

• Legal basis: your consent, and nothing else.
• Before you click "Accept", no request reaches Google. The script is not even downloaded. If you click "No thanks", it never loads at all.
• Your IP address is anonymised by Google Analytics 4 before it is stored.

3.3 Server logs

The server hosting this site keeps, as every server on the internet does, a technical record of each request: IP address, date, the address requested, browser type. This happens automatically and is necessary for the site to run safely.

• Legal basis: our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR).

4. Cookies and local storage

This site sets no cookie before you allow it. There are no advertising cookies and no social network buttons that track you.

Name	What it does	Lifetime	Set by
orama-consent	Remembers your answer about analytics so we don't ask again on every page. Stored locally in your browser (localStorage) and never sent anywhere.	1 year	Us
_ga	Distinguishes one visitor from another in the statistics.	2 years	Google, only after you accept
_ga_<id>	Keeps the session state for Google Analytics 4.	2 years	Google, only after you accept

orama-consent is written only once you have answered, and it is exactly what holds your choice — including a "no". Without it you would be asked the same question over and over.

Either way, you can delete cookies from your browser settings, or block them altogether.

5. How long we keep things

• Form messages: up to 24 months after we last spoke. If you become a customer, the retention periods in the contract and in tax law apply instead.
• Analytics: 14 months, the shortest setting Google Analytics 4 allows.
• Anti-spam counters: 2 hours, then deleted automatically.
• Server logs: for as long as the hosting provider keeps them, typically a few months.

6. Who else sees the data

We do not sell or trade personal data. It is seen by:

• Our sales colleagues, those who need it in order to reply to you.
• The hosting and email provider, acting as a processor under contract.
• Google Ireland Limited, for analytics and only if you have consented. Google may transfer data to the United States; the transfer is covered by the EU–US Data Privacy Framework and by the European Commission's standard contractual clauses.
• Public authorities, only where the law requires it.

7. Your rights

The General Data Protection Regulation gives you the following rights, which you exercise free of charge:

• Access: to learn what data we hold about you and receive a copy.
• Rectification: to have anything wrong or incomplete corrected.
• Erasure: to have your data deleted, unless the law requires us to keep it.
• Restriction of processing and objection to it.
• Portability: to receive your data in a machine-readable format.
• Withdrawal of consent at any time. Withdrawal does not affect what was lawfully done before it.

Send your request to privacy@orama-tech.gr. We reply within one month. If a request is particularly complex that period may be extended by two months, and we will tell you.

8. Security

The site runs over an encrypted connection (HTTPS) only. Form messages land in a company mailbox with restricted access. We do not store form data in a website database, so there is no such file to be breached.

9. Children

This site addresses businesses and is not intended for minors. We do not knowingly collect data from children.

10. Changes to this policy

If the way we use data changes, we will update this page and the date at the top of it. For a material change affecting data we already hold, we will ask for fresh consent.