← Back to home page

Privacy Policy

Last updated: 27 October 2026

This policy explains which personal data we process through the emaintenance.gr website and the eMaintenance platform, why, for how long, and what rights you have under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Greek Law 4624/2019.

1. Data controller

The controller for the website and for our customers' account data is:

For any question about your personal data, contact info@bridgenet.gr.

2. Website and contact form

2.1 Contact / demo request form

When you submit the form we process: name, company name, email, phone, your message, plus your IP address and the date/time of submission.

• Purpose: to answer your request and arrange a demo or quote.
• Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in protecting the form from abuse (Art. 6(1)(f)).
• The data are sent by email to our mailbox and are not used for marketing without your consent.

2.2 Server logs

The web server automatically logs technical data for each visit (IP address, date/time, page, browser). They are used only for security and proper operation of the website (legitimate interest, Art. 6(1)(f)).

2.3 Cookies and third-party services

The website does not use cookies, analytics or advertising tools. Fonts and libraries are hosted on our own server, so your IP address is not sent to third parties. Links to Facebook, X and LinkedIn are plain links and load no content from those services. See the Cookie Policy.

3. The eMaintenance platform

eMaintenance (a web application for hotel maintenance and operations management) is used by our business customers and their staff.

• Customer account and billing data (company details, contact persons): we are the controller; legal basis is performance of the contract and our tax obligations.
• Data customers enter into the platform (staff users: name, email, role, department, activity history; faults, tasks, measurements, photos, guest complaints and requests, reviews): the customer (e.g. the hotel) is the controller and we act as a processor on its behalf under Art. 28 GDPR and our agreement. Requests about these data should primarily be addressed to the business that gave you access.
• Technical usage data (sign-in, audit logs, push notifications): for security, access control and delivering the service.

4. Data from Google services (Google Business Profile)

The eMaintenance platform offers an optional connection to a business's Google Business Profile account, so the hotel can read and reply to its reviews from within the platform. The connection is made only by an authorised user of the business (owner or manager of the profile) through Google's consent screen (OAuth 2.0).

4.1 Data we access

• The Business Profile account details and the locations (businesses) the user manages.
• Reviews of those locations (text, rating, date, reviewer name and profile photo as publicly displayed) and the business's replies.
• The access/refresh token issued by Google for the connection. We never receive the Google account password.

4.2 How we use them

• To display the reviews to the business itself inside the platform, together with statistics and notifications.
• To post replies to reviews on Google only when a user of the business explicitly asks us to.
• To link a review to the business's internal work items (e.g. a fault or complaint), solely on its behalf.

4.3 What we do not do

• We do not sell, rent or transfer Google user data to third parties, except to processors needed to run the service (section 6) or where required by law.
• We do not use Google data for advertising, user profiling or retargeting.
• We do not use Google data to develop, improve or train generalised artificial intelligence or machine learning models.
• We do not allow humans to read these data unless (a) the business explicitly asks for support, (b) it is necessary for security or abuse investigation, or (c) it is required by law.

4.4 Storage, revocation and deletion

• Access tokens are stored encrypted and transmitted only over HTTPS.
• You can disconnect your Google account at any time from the platform settings or from Google's Third-party apps with account access page.
• On disconnection we delete the access tokens immediately. Review data already retrieved are deleted within 30 days, unless the business asks to keep them as part of its records for the duration of its subscription.

5. Artificial intelligence features

Where a business enables AI features (e.g. improving a fault description, translation, summarising or suggesting a reply to a review), the relevant text is sent to an AI model provider solely to produce the result the user requested. These providers act as processors and do not use the data to train models. Any reply to a review is published only after a user approves it.

6. Recipients and processors

Data may be disclosed, strictly as necessary, to:

• hosting, infrastructure and email/notification providers;
• AI model providers, when the related features are used;
• Google, for the features in section 4;
• our accountant and tax authorities, for invoicing;
• public authorities, where required by law.

All processors are bound by contract to confidentiality and appropriate security measures. A list of processors is available to our customers on request.

7. Transfers outside the EEA

Some providers (e.g. Google, AI providers) may process data outside the European Economic Area. Such transfers take place only with the safeguards of Chapter V GDPR, such as an adequacy decision (e.g. the EU–US Data Privacy Framework) or the European Commission's Standard Contractual Clauses.

8. Retention

9. Security

We apply appropriate technical and organisational measures: encryption in transit (HTTPS), encrypted storage of access tokens, role-based access control, audit logging, backups, and limiting staff access to what is necessary.

10. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time. Send your request to info@bridgenet.gr; we reply within one month.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority, 1-3 Kifisias Ave., 115 23 Athens, Greece, www.dpa.gr.

11. Minors

The website and the platform are intended for businesses. We do not knowingly collect data from minors through the contact form.

12. Changes to this policy

We may update this policy when our services or the law change. The date of the last update is shown at the top of this page. We inform our customers of material changes affecting the platform.