We assure you that the Company shall take any technical and organisational data protection means and shall make only the optimum, minimum and absolutely necessary use and processing of your Data, as defined by the law, and strictly and exclusively for
the purpose for which you have provided them to us.
Specific provisions regarding the individual categories of Personal Data Subjects, that apply cumulatively with the above general provisions of the Policy.
(A) RECΙPIENTS OF COMMUNICATION
A.1. Purpose: The receipt, processing and preservation of your Data that were given exclusively in the framework of communication, is executed for the sole purpose of your briefing about our Company’s products and actions. The entirety of
your Data are kept only for this purpose and they undergo processing only from the Marketing Department of our Company.
A.2. Legitimate Basis of the Processing: Your consent to the processing of your Data, in order to fulfil the above mentioned relevant purposes, constitutes the legitimate basis of this processing, in accordance with Article 6(1)(a) of the
Regulation on the protection of personal data.
A.3. Data Retention Period: In order to fulfil the above mention purpose of the processing, namely your briefing about our products and actions, we consider it reasonable and necessary to store your relevant Data for a period of five (5)
years. After five years from the time you provided your consent, the relevant Data shall be deleted, unless you provide us anew with your consent under the above conditions.
(B) CUSTOMERS – SUPPLIERS and POTENTIAL CUSTOMERS – SUPPLIERS
B.1. Nature – Legitimate Basis:
(a) during the pre-contractual phase and specially in case of filling in an electronic contact form on our website, or direct sending e-mail, or communication by telephone, or filling in a hardcopy document (in this way you provide us with your full name/e-mail
address or/and telephone number or/and Address or/and profession or/and our products that you are interested in), purpose of the processing is the evaluation of a possible transaction with the Company and legitimate basis the service of the Company’s
legitimate interest to pursue its commercial purposes, responding to the requested communication to investigate the possible transaction with you.
(b) In case that a transaction with the Company is realized, the Data that you have provided us with during the pre-contractual phase (as well as all that you shall provide us with in the framework of our transaction) shall be processed for the purpose
of implementing the contract between us and of our compliance with tax legislation. In this case, legitimate basis of the processing is the performance of the contract between us and our compliance with the legislation (Article 6(1)(b) and (c) of
the Regulation on the protection of personal data).
B.2. Data Retention Period.
We shall keep the above under B.1.(a) Data for five (5) years and afterwards we shall erase them. Regarding the above under B.1.(b) Data, shall be reserved for as long as it is necessary according to tax legislation.
B.3. Specifically, regarding the subject’s Data that we receive during the commercial expositions, the Privacy Policy, which is an integral part of the ‘Attendee form’ that the interested individuals are asked to fill in, remains in effect.
(C) VISITORS THROUGH SHOWROMS AND EXPOSITIONS
C.1. Purpose:
Purpose of the processing of your Data is the communication between us in order to investigate the possibility of cooperation as well as the sending of information material.
C.2 Legitimate Basis of the Processing
The processing is based on your consent according to art. 6 par. 1a GDPR.
C.3. Recipients:
In order to fulfil the above mention purpose of the processing, we consider it reasonable and necessary to store your relevant Data for a period of three (3) years unless otherwise specified in national and European legislation or in case of prior
withdrawal your consent.
(D) VISITORS TO CORPORATE EVENTS
D.1. Purpose
Purpose of the processing of your Data is the communication between us in order to enhance corporate communication and external image via corporate events. During the event, video and photo recording may be taken. This material will further be uploaded
to Company’s site and social media. Personal data (image and voice) of the participants, employees and external partners included, will be processed in this process.
D.2 Legitimate Basis of the Processing
The processing is based on your consent according to art. 6 par. 1f GDPR. As far as factually possible and legally reasonable, reference that the event is being recorded will be made during the event. You may exercise your right to object to photo
or video recording by giving a prior notice to the photographer. Your legal rights as described under 3. shall apply in whole.
Special CCTV Privacy Policy
A.1. Purpose
The receipt, processing and preservation of your Data that refer to your identity and the time spent in our Company’s establishments, takes place in favor of the sole purpose of security and protection of the people in the Company’s establishments (e.g. employees, visitors) as much as the Company’s general equipment (for example building, electronic etc.)
A.2 Legitimate Basis of the Processing
Your consent to the processing of your Data, in order to fulfil the above mentioned relevant purposes, constitutes the legitimate basis of this processing, in accordance with Article 6(1)(a) of the Regulation regarding the protection of personal data.
A.3. Recipients:
The material held is accessible only by our competent / authorized personnel who are in charge of security of the premises. This material shall not be disclosed to third parties, except in the following cases: (a) to the competent judicial, prosecutorial and police authorities when it contains information necessary to investigate a criminal offense involving persons or property of the controller; (b) to the competent judicial, prosecutorial and police authorities when lawfully requesting data in the performance of their duties, and (c) to the victim or perpetrator of a criminal offense, in the case of data which may constitute evidence of the offense.
A.4. Recipients:
We keep the cctv material for fifteen (15) days, after which they are automatically deleted. In the event that during this period we find an incident, we isolate part of the video and keep it for another (1) month, in order to investigate the incident and initiate legal proceedings to defend our legal interests, while if the incident concerns third parties, we will keep the video for up to three (3) more months.
A.5. Data subjects have the following rights:
- Right of access: you have the right to know if we are processing your image and, if applicable, to receive a copy.
- Right of restriction of processing: : you have the right to ask us to restrict processing, such as not to delete data that you consider necessary to establish, exercise or support legal claims.
- Right to object: you have the right to object to the processing.
- Right to delete you have the right to request that we delete your data.
To exercise any of these rights you can contact the Data Protection Officer, the following contact information: email: [email protected]. We also note that the exercise of a right of objection or deletion does not entail the immediate deletion of data or the modification of the processing. In any case, we will reply in detail as soon as possible, within the deadlines set by the GDPR.
Changes in the Privacy Policy
Information about our company’s privacy policy reflects the current state of data processing on our website. In the event of changes in data processing, this information for data protection will be updated accordingly. We recommend that you always be aware of how we process and protect your personal information. The above information is provided in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council and the provisions of Greek law on the protection of personal data adopted and implemented in this context.