Personal Data

The management and protection of the users’ personal data is subject to the present terms and conditions, as well as to the provisions of the applicable national, European and international legislation relating to the protection of individuals with regard to the processing of personal data, as in force from time to time.

The Company Malls Management Services - Management of Shopping Centers S.A., having its registered offices at Maroussi of Attica (37A Kifissias Avenue) (hereinafter referred to as “Company”), as the Data Controller, collects and further processes the personal data of the users of the wireless network available at the shopping center “My Golden Hall” when they connect to and use it. 

What personal data does the Company collect?

As part of the wireless network service, the Company collects and further processes:

• the IP address
• the MAC address
• other technical data, such as characteristics of the device connected to the network, date and time of the users' entry and exit from the wireless network, and the duration of their connection

For what purposes is your personal data collected? 

• To provide you with secure and reliable internet access
• To gain insight into the effectiveness of the wireless network service offered, through statistical analysis
• To resolve any problems, you may encounter while browsing the internet and, in general, to continuously improve the service we offer 
• To comply with the Company’s legal obligations, such as responding to requests from public or independent Authorities and Services

On what legal basis is your personal data collected?

A. Contract:

The processing of your personal data is carried out in the context of the performance of a contract and, specifically, is necessary in order to provide you with the wireless network service available in our shopping center, in accordance with its terms and conditions of use.

B. Legitimate Interest:

Furthermore, we collect the above data to serve our legitimate interests, including ensuring the effectiveness of the service provided to you and its continuous improvement, as well as addressing any browsing issues.

C. Legal Obligation:

The Company may also process your personal data in order to comply with the applicable legal framework, such as, for example, in cases where it is required to respond to requests from public or independent Authorities and Services.

Who do we share your personal data with?

Third-party companies, both within and outside the Lamda Development Group, have access to your personal data, in the context of our cooperation in relation to providing you with wireless network services, and specifically the companies that provide us with the technical infrastructure of the wireless network, having also undertaken its technical support, the companies that provide us with the platforms through which your connection to the service is made, as well as the companies that provide us with IT services.    

Furthermore, your data may be transferred to state, public or independent Authorities and Bodies, if disclosure to them is required by laws, regulations, administrative or judicial measures etc.

How long do we retain your personal data?

When the processing of your personal data is based on the performance of the contract between us, your personal data is stored for as long as necessary for the performance of the contract and the provision of the services we have undertaken to provide to you, in order for you to be able to use the wireless network available in our shopping center, or for as long as required by law  for the establishment, exercise, and/or defense of legal claims based on the contract. 

When processing is mandatory under applicable law, your personal data will be stored for the period of time provided for by the relevant provisions applicable in each case.

Our commitments

The Company guarantees that it has implemented all appropriate technical and organizational measures, in accordance with technological standards and applicable laws and regulations, to ensure that the processing of your personal data, whether by us or by third parties on our behalf, is lawful, appropriate and secure. These measures are designed to prevent any unauthorized or accidental access, processing, deletion, alteration or other use of your data.

Your Rights:

Pursuant to applicable data protection legislation, as a data subject, you have the following rights:

• Right of Access: You have the right to be informed and verify the lawfulness of the processing. You may access your personal data and obtain additional information regarding its processing.
• Right to Rectification: You have the right to request the correction, update, or amendment of your personal data by contacting the Data Protection Officer (DPO) at the contact details provided below.
• Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data where it is processed for the protection of our legitimate interests. In all other cases (such as when processing is based on the performance of a contract), this right may be subject to specific limitations or may not apply.
• Right to Restriction of Processing: You may request restriction of processing of your personal data in the following cases: (a) when you contest the accuracy of the data, for the period enabling verification, (b) when you oppose deletion and request restriction instead, (c) when the data is no longer necessary for the purposes of processing but required for the establishment, exercise, or defense of legal claims, (d) when you object to processing and the decision on your objection is pending.
• Right to Object: You have the right to object at any time to the processing of your personal data where such processing is based on our legitimate interests as Data Controller.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  
  To exercise any of the above rights, you may contact our Data Protection Officer directly via email at the email address: personaldata@lamdadev.com
  
  
• Right to lodge a complaint with the Supervisory Authority (Hellenic DPA): You also have the right to file a complaint with the Hellenic Data Protection Authority (www.dpa.gr) through its online portal: https://eservices.dpa.gr, if you believe that the processing concerning you violates data protection legislation. 

Last updated 09/2025