Sign in / Register

The all-new ProSMS.gr platform has arrived!

Explore the New ProSMS.gr

Privacy Policy

ProSMS.gr > Privacy Policy

This Privacy Policy describes how the ProSMS.gr service, owned by the company “Integrated IT Solutions Ltd” (hereinafter “Cytech”, “we”, “us”), collects, uses, retains, and protects your personal data, in full compliance with the EU General Data Protection Regulation (GDPR 2016/679) and applicable Greek legislation (Law 4624/2019, Law 3471/2006).

1. Data Controller Details

The company under the name “Integrated IT Solutions Ltd” (distinctive title Cytech), headquartered at the Science and Technology Park of Crete, Heraklion, Crete, PC 70013, VAT 099928640, acts as the Data Controller for the personal data of users/customers who register on our platform. For any issue regarding the protection of your data, you can contact the Data Protection Officer (DPO):

2. Separation of Roles (Controller vs Processor)

Due to the nature of our service (bulk SMS sending), it is important to distinguish our role: 

  1. For your own data (user/customer): When you create an account, purchase SMS packages, and use the platform, Cytech is the Data Controller. We determine how and why your account and billing details are collected.
  2. For your contact lists (SMS recipients): For the phone numbers and recipient details you upload to our platform to send messages, you are the Data Controller.
  3. Cytech acts strictly as a Data Processor, providing exclusively the technical infrastructure for sending messages, according to your instructions and the Data Processing Agreement (DPA) included in our Terms of Use. Cytech bears no responsibility for the content of the messages or the legality of sending messages to specific users based on their specific consent. In the event of a data breach involving customer lists, Cytech will notify the customer (Data Controller) without undue delay (in accordance with Article 33 of the GDPR).

3. What Data We Collect

During your visit and use of ProSMS.gr, we collect the following categories of data:

  1. Account Data: Full name, email address, mobile phone number, password (in encrypted form).
  2. Billing Data (if you make a purchase): Company name, profession/activity, VAT number, Tax Office, postal address (street, postal code, city, country), and cardholder’s billing address. Note: We do not store credit card numbers. Payment is made by redirection to a secure environment of a banking institution or third-party payment provider.
  3. Usage and Technical Data: IP address, browser type, operating system, access date and time, as well as data collected through cookies. Our platform uses the following categories of cookies:
  • Strictly Necessary Cookies: These are technically mandatory for the smooth operation of the website, secure navigation, and logging into your account. Your consent is not required for their installation, as without them the platform cannot technically function.
  • Statistics/Performance Cookies: Help us understand how visitors interact with the website by collecting and reporting information anonymously, aiming to improve our services.
  • Marketing/Targeting Cookies (if applicable): Used to track user activity in order to display relevant and engaging advertisements.
  • iv. Consent: For the use of any non-essential cookie (such as statistics and marketing), we collect data only upon your prior, explicit consent (opt-in) through the special mechanism (Cookie Banner) displayed during your first visit to the website. You have the right to modify your choices or withdraw your consent at any time through our page settings.

          4. Communication Data: The content of messages, emails, or support requests (tickets) you send us.

4. Purposes and Legal Basis of Processing

We process your data exclusively for the following purposes:

  1. Execution of our contract: To create your account, provide the SMS sending service, and offer technical support. (Legal basis: Article 6(1)(b) GDPR).
  2. Compliance with a legal obligation: For issuing invoices, keeping accounting records, and complying with tax legislation or any prosecutorial orders. (Legal basis: Article 6(1)(c) GDPR).
  3. Our legitimate interests: To protect the platform from malicious use, e-fraud, or attacks, and to improve our services through statistical analysis. (Legal basis: Article 6(1)(f) GDPR).
  4. Informational/Promotional Communication (Marketing): To send updates about new services or offers, provided you have given your consent (or if it concerns similar services under Law 3471/2006). You can withdraw your consent at any time (opt-out). (Legal basis: Article 6(1)(a) GDPR).
  5. The service does not engage in automated decision-making, including profiling, which produces legal effects for the users of the service.

5. Data Recipients

Your data is treated with absolute confidentiality. Only authorized Cytech personnel have access to it. We may share data with third parties (Processors acting on our behalf) only to the extent strictly necessary:

  • Telecommunications Providers (Telcos): For the final routing and delivery of SMS to recipients.
  • Payment Service Providers: For completing financial transactions (e.g., banks).
  • Cloud & Hosting Providers: Data hosting services on servers within the European Economic Area (EEA) with high security standards.
  • Public and Prosecutorial Authorities: Only if required by law (e.g., in the event of cybercrime).

We never sell, rent, or trade your personal data or contact lists with third parties for commercial purposes.

6. Data Transfers outside the European Economic Area (EEA)

In the event that, as a user, you choose to send SMS messages to telephone numbers in countries outside the European Economic Area (EEA), the relevant data (recipient’s phone number and message content) will necessarily be transferred to telecommunications networks in those third countries to complete delivery. In these cases, the transfer is carried out with maximum security and is based on: a) Adequacy Decisions by the European Commission for countries ensuring an adequate level of protection. b) Appropriate safeguards, such as concluding EU Standard Contractual Clauses (SCCs) with cooperating international routing providers. c) Alternatively, in the absence of the above, the transfer is carried out based on the derogations of Article 49 of the GDPR, specifically because the transfer is absolutely necessary for the performance of our contract (upon your explicit instruction to route the message to the specific international network).

7. Data Retention Period

We retain your data only for as long as necessary:

  1. Account Data: For as long as you maintain an active account on ProSMS.gr. If your account remains inactive (no login, purchase, or SMS sending) for 12 months, it is placed in a deactivated state. After 24 months of total inactivity, your account and associated profile data are permanently deleted.
  2. Tax Data: Billing details and purchase invoices are retained for as long as required by applicable tax legislation (usually 10-15 years).
  3. Phone Lists & SMS History: Data (recipient phones, message texts) uploaded for your campaigns are permanently deleted upon the deactivation or deletion of your account.
  4. Communication Data: Kept for 12 months from the last communication for statistical purposes and quality assurance.

8. Data Security

We take all necessary technical and organizational measures to prevent the loss, misuse, or unauthorized access to your data:

  • Use of SSL (Secure Socket Layer) encryption protocol for the secure transmission of data between your browser and our servers.
  • Encryption of passwords in our database.
  • Strict access controls to our systems and maintenance of logs.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access: To know what data we hold about you and receive a copy of it.
  • Right to Rectification: To request the correction of inaccurate or incomplete data (which you can also do yourself through your account settings).
  • Right to Erasure (“Right to be Forgotten”): To request the deletion of your data, provided there is no legal reason to retain it (e.g., tax obligation).
  • Right to Restriction of Processing: To request the suspension of your data processing under specific conditions.
  • Right to Data Portability: To receive your data in a structured, commonly used, and machine-readable format (e.g., CSV, Excel).
  • Right to Object: To object to the processing of your data for direct marketing purposes or when processing is based on legitimate interest.

To exercise any of the above rights, please send a written request to the Data Protection Officer (DPO) at the e-mail: [email protected]. We respond to your requests without delay and in any case within one (1) month of receiving them.

This Privacy Policy was last updated on September 30, 2026. Cytech reserves the right to modify this policy, and any changes will be published on this website.