If we contacted you

Who contacted you

If we wrote to you about Noria's services, the controller of your details is NORIA GROUP Ε.Ε., 71 Grammou Street, 151 24 Marousi, Greece, General Commercial Registry (G.E.MI.) no. 186546103000, info@noria.gr. We have not appointed a Data Protection Officer; every request is handled directly by a person on our team.

If we wrote to you on behalf of one of our clients, the letter or message names the client. The client is then the controller, and Noria processes your details on its behalf, under a written contract. You can turn to either of us; anything you ask us, we pass on at once.

Whom we contact

Businesses, and people in their professional capacity, about something that concerns their work. We do not approach private individuals for marketing and we do not process sensitive data.

Where we found your details

In professional sources, where the details were published so that other professionals could find the business:

Every letter we send says where your address came from. If you would like to know exactly what we hold about you and from which source, ask us.

• Your business's website.
• The General Commercial Registry (G.E.MI.), for the company name, registered office and the people who represent the company.
• Trade fair exhibitor lists, member directories of trade associations and bodies, and the results of competitions and awards.
• Public business directories and public professional profiles.
• Third-party business databases that compile such information; we will tell you which one on request.

What we keep

For the business: its name, sector, area, website, contact details and a short note on why we think we can help, for example that the website has no online shop.

For people, only the professional details of those with a role in the business: name, role, the contact details they use for work and, where there is one, the link to their public professional profile. We also keep the source of the details, the history of our contact (when, by which channel, what we sent, your reply) and, if you ask us not to write again, that request.

A letter may carry its own QR code. If you use it, we know which letter you are answering; the page it opens uses no cookies or measuring tools without your consent.

To find which businesses are a fit, we read their public websites, also with automated tools; a person decides the selection and the text of every letter. We take no decision about you by automated means.

How we get in touch

For our own services:

• The first time, we write to you by letter, at the business's address, to its management.
• We email you when you asked us to (through the QR code on our letter, the form on our website or by giving us your card so that we write to you), when you have already written to us, or when you are a client and it concerns similar services.
• We do not phone you to offer services, and we do not send you marketing SMS or messages on apps and social networks.
• If you say no, at any point and through any channel, we never contact you again, through any channel.

What every letter says

Which business sends it (NORIA GROUP Ε.Ε., with its details), who signs it, that it is an offer of our services, where we found your address and how to stop any further contact, with a reference to this page. Our letters are signed by our founder.

When we write to you by email, the message comes from a noria.gr address, is plain text and does not measure whether you opened it.

Why, and on what legal basis

We process these details to find businesses that may need our services and to offer them. The legal basis is our legitimate interest in finding clients (Article 6(1)(f) GDPR); the GDPR recognises that direct marketing may serve a legitimate interest (Recital 47). For those who asked us to write to them, the basis is their consent, which they can withdraw at any time without affecting what happened before.

We weighed this interest against your rights and recorded the assessment; we will send it to you on request. The main safeguards:

• We use only professional details.
• Before every mailing of letters we check the Hellenic Data Protection Authority's register of people who do not want marketing mail, and our own suppression list.
• We write to you about something specific that concerns your work, a few times and with a clear end.
• We keep as little as possible, and we do not sell the details or give them to others for their own use.
• One reply stops all contact, at no cost and with no explanation needed.

Who sees the details

Only the people on our team who handle the contact, and providers who serve us as processors, only on our instructions: our email and documents provider, the email sending platform, the contact management service (CRM), research and data-checking services, and the company that prints and posts our letters. The name and address on the envelope naturally also reach the postal service.

If we contact you on behalf of a client, the client receives the conversations with those who replied that they are interested. We do not sell or rent your details, we do not give our lists to clients and we do not use one client's list for another.

Transfers outside the European Union

Some of these providers also process data outside the European Economic Area, for example in Australia and the United States. This is done under an adequacy decision of the European Commission, such as the EU–US Data Privacy Framework, or under standard contractual clauses. For details, write to us at info@noria.gr.

How long we keep the details

We keep the details only as long as we need them:

• We keep a business's details as long as it remains a possible client for us. We review the records at least once a year and delete those we no longer need.
• If we start working together, the Privacy policy applies.
• If you ask us not to write again, we delete the details we hold to approach you and keep only the minimum (the business name, your name, the address or email, and the date of the request) on a suppression list, so that we never write to you again, neither for ourselves nor on behalf of clients.
• A short history of the messages we sent (date, text, reply) is kept for up to five years, with restricted access, only so that we can show what we sent if a dispute arises.
• The company that posts our letters deletes the address files after the mailing, as our contract with it requires.

How to stop all contact

One reply is enough: write "no" to info@noria.gr, reply to any message of ours, or send us a letter at 71 Grammou Street, 151 24 Marousi, Greece. We stop at once, at no cost and without asking for reasons, and the request covers every channel, including messages you received from us in the past. If a letter had already been handed to the post, it may still arrive, but after it you will receive nothing else.

For direct marketing this right is absolute (Article 21 GDPR).

Your other rights

You can also find out exactly what we hold about you and from which source, ask for correction, erasure or restriction of processing, and ask us for the legitimate interest assessment. We reply free of charge, as soon as possible and within one month at the latest.

If something bothered you, write to us and we will put it right at once. You always have, of course, the right to lodge a complaint with the Hellenic Data Protection Authority, 1-3 Kifissias Avenue, 115 23 Athens, www.dpa.gr. More in the Privacy policy.

Changes to this page

This page describes how we work from the date shown at the top. On 17 October 2026 we updated it: the first contact is now made by letter, and we send email only as described under "How we get in touch". When something changes, we update the page and its date.