Privacy notice – GDPR - Greece Lean Six Sigma

1. Who We Are

This website, www.greeceleansixsigma.gr, is owned and operated by the sole proprietorship Greece Lean Six Sigma, owned by Victoria Tsolidou, with registered office at:

Evmenous 4,
54250 Thessaloniki, Greece
📞 +30 231 231 5681
📧 privacy@greeceleansixsigma.gr

Greece Lean Six Sigma acts as the Data Controller in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

2. Scope of Application

This Privacy Notice applies to all personal data collected and processed through:

our website,
training and certification programs,
examinations (on-site or remote),
the e-learning platform (Moodle Cloud),
webinars and online training (Cisco Webex, Microsoft Teams),
communications with clients, partners, and candidates.

3. What Is Personal Data

Personal data refers to any information relating to an identified or identifiable natural person, including but not limited to: full name, email address, phone number, IP address, payment-related data, training and certification records.

4. Categories of Data We Collect

Depending on your interaction with us, we may collect:

Identification data (first name, last name)
Contact details (email, phone number)
User account information
Training participation, progress, and results
Certification-related data
Payment data (processed via third-party providers)
Technical data (IP address, browser type, cookies)
Comments, requests, and communications

5. Purposes & Legal Basis for Processing

Personal data is processed based on:

Article 6(1)(b) – performance of a contract (training, certification)
Article 6(1)(a) – consent (newsletter, marketing)
Article 6(1)(c) – legal obligation (taxation, certification records)
Article 6(1)(f) – legitimate interest (security, service quality)

6. Website, Comments & Media

Comments

When visitors leave comments on the website, we collect the data shown in the comments form, as well as the IP address and browser user agent to support spam detection and security.
The Gravatar service (Automattic) may be used.

Media

Please avoid uploading images that include embedded location data (EXIF GPS).

Protecting forms from spam

To protect the website forms (contact, newsletter sign-up, tool downloads, assessments, checkout) from automated abuse, we use Cloudflare Turnstile, a service of Cloudflare, Inc. When you submit a form, the service checks technical details of your browser and device, such as your IP address, to tell a person from an automated program. These details are used for security only, not for advertising or profiling. The legal basis is our legitimate interest in keeping the website secure (Article 6(1)(f) GDPR). More in the Cloudflare privacy policy.

Newsletter and email updates

When you subscribe to the newsletter or request free material (such as the DMAIC Kit or an assessment) and give your explicit consent, we record your email, name and language on the Mailchimp platform of Intuit Inc. We also record which material you requested, so that we can send you updates related to it. Mailchimp provides us with open and click statistics for our emails.

After you subscribe, you receive a short series of automated emails about the material you requested, followed by the regular newsletter.

The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time through the unsubscribe link in every email or by writing to privacy@greeceleansixsigma.gr. Your data is kept until you unsubscribe. After that we keep only your email address on a suppression list, so that we do not contact you again. Mailchimp may process data outside the EU under the safeguards provided by the GDPR, such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses. More in the Intuit Mailchimp privacy statement.

7. Cookies & Tracking Technologies

This website uses cookies for functional, statistical, and analytical purposes.
For detailed information, please refer to our Cookie Policy.

8. Training & Moodle Cloud (LMS)

We use Moodle Cloud to manage courses, educational material, assessments, and learner progress.
All data processed via the LMS is used exclusively for educational purposes.

9. Webinars & Online Training

For synchronous training and communication, we use:

Cisco Webex
Microsoft Teams

Participation data such as name, email address, and interaction logs may be collected.

10. Examinations & Certifications

As a training and certification organization, we process personal data related to:

examination participation,
candidate identification,
examination results and certifications.

Data is retained in accordance with quality, accreditation, and legal requirements.

11. Payments

Payments are processed through the providers Alpha Bank, Nexi XPay, PayPal and WooPayments, over a secure encrypted connection.

Greece Lean Six Sigma does not store, process, or have access to credit/debit card details, bank account information, or other sensitive payment data.

Payment processing is carried out exclusively by the above certified payment providers, in accordance with their own privacy policies and international security standards (PCI DSS).

For purchases through the online shop, the order system (WooCommerce) is synchronised with Mailchimp. The synchronised data are your contact details, the programmes you bought or added to the cart, and the order value. The purpose is statistical tracking of purchases. In addition, if you have consented to receive updates, you may receive one reminder about a registration you started but did not complete. The newsletter option at checkout is not pre-ticked and is always optional.