Privacy Notice on Article 13 of Regulation (EU) 2016/679 for the processing of personal data of users / subscribers of the website
Dear User, the Company called as “Arkas Hellas S.A.” (hereinafter called as the “Company” or ‘’Controller”), having its registered office at 33, Akti Miaouli str., 185 35, Piraeus, Greece, with tax registration number 099351870 and contact number +30 2104599460, welcomes you at our Website (hereinafter called as the “website”) and invites you to read carefully the following privacy notice (hereinafter called as the “notice”), which is being issued in accordance with Article 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR").
This document contains a record of the processing performed by the Data Controller, as specified above, through the website, while specifying that the information is solely for this website, therefore excluding any website to which you may be redirected.
1. Controller
The Controller is the Company, as defined above. This means that the Company determines the purposes and means of processing of your personal data, in accordance with the GDPR and the data protection legislation in general.
The Company has also appointed a Representative to whom you may come in contact with directly for the exercise of your rights and to obtain any information regarding the processing of your personal data at the following address:
Name: Paris Evangelinos
Address: n. 43, 26th Oktovriou str. – Thessaloniki
Email: dpo@arkas-hellas.gr
Tel: +30 2310 500027
2. Sources of personal data collection
The Company collects your personal data directly from you and not from third parties. Your personal data is being provided in terms of your visit to the website and in particular by pursuing contact with the Company, sending your curriculum vitae, completing the offer forms, submitting comments evaluating our services and subscribing to our newsletter recipient list. In order to serve the above purpose and to fulfill the service that you, as a user, have requested, it is deemed necessary to provide us with the following personal data, otherwise it will be impossible to provide the service.
3. Processing of personal data and legal bases
The following table lists the purposes of processing of personal data collected by the Company for the above mentioned purposes, the categories of the data collected, as well as the legal basis for such processing.
| Purpose of Processing | Personal Data | Legal Basis of Processing(GDPR provisions) |
| 1. User’s communication with the Company | Personal details, contact details and data that user communicates to us | Art.6 par.1 (f) - processing is necessary for the purposes of the legitimate interests pursued by the Company and in particular for the request service. |
| 2. Sending curriculum vitae | Personal details, contact details, contents of the cv | Art.6 par.1 (f) - processing is necessary for the purposes of the legitimate interests pursued by the Company and in particular for the evaluation of future collaboration with the user. |
| 3. Completing the offer forms | Personal details, contact details | Art.6 par.1 (f) - processing is necessary for the purposes of the legitimate interests pursued by the Company and in particular for the request service. |
| 4. Services evaluation – comments submission | Personal details, contact details | Art.6 par.1 (f) - processing is necessary for the purposes of the legitimate interests pursued by the Company and in particular for the improvement of its services |
| 5. Newsletter registration | Contact details (email) | Art.6 par.1 (f) - processing is necessary for the purposes of the legitimate interests pursued by the Company and in particular for the company promotion and marketing. |
4. Disclosure to third parties and recipients
For the purposes described in paragraph 3, your personal data may be available to outsourcing services providers or public authorities. The Company does not transmit your personal data to a third country or international organization.
5. Security
The Company shall process your personal data in a manner that ensures its protection by taking all appropriate organizational and technical measures for data security and its protection against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access and any other form of illicit processing.
6. Geo – tagging data
The website may collect and process location-based data for the provision of services requested by the user only under the specific consent of the person concerned, which may always be revoked. In this case, consent will be requested through a pop - up window.
7. Subjects' rights
This section presents your rights with respect to your personal data. These rights are subject to certain exceptions, reservations or limitations. Please submit your requests responsibly. The Company will respond as soon as possible and in any case within one (1) month of receipt of the request. If the review of your request is going to take longer, you will receive relevant information. To exercise your rights, you can contact the Company’s Representative.
The Company ensures the exercise of your rights:
7.1. The right to information
You have the right to request and receive clear, transparent and easily understandable information about how we process your personal data in accordance with the Company’s policies and procedures.
7.2. The right to access
You have the right to access your personal data free of charge, in accordance with the relevant policies and procedures of the Company, with the exception of the following cases where there may be a reasonable charge to cover the administrative expenses of the Company:
• manifestly unreasonable or excessive / repeated requests, or
• additional copies of the same information.
7.3. The right to rectification
You have the right to ask for your personal data to be corrected if it is inaccurate or incomplete, in accordance with the relevant policies and procedures of the Company.
7.4. The right to erasure («to be forgotten»)
You have the right to request the deletion or removal of your personal data when it is no longer necessary for the purposes collected or there is no legitimate reason to continue processing it in accordance with the Company’s policies and procedures. The right of deletion is not absolute, to the extent that there is a particular legal obligation or other legitimate reason for the retention of your personal data by the Company.
7.5. The right to restriction of processing
In some cases, you have the right, in accordance with the relevant policies and procedures of the Company, to restrict or remove further processing of your personal data. In cases where processing has been restricted, your personal data remains stored, without further processing.
7.6. The right to data portability
You have the right to request your personal data, which you have provided us with in a structured, commonly used and machine readable format, and to transfer that data to another controller in accordance with the relevant policies and procedures of the Company.
7.7. The right to object
You have the right to oppose, at any time and for reasons related to your particular situation, to the processing of your personal data based on Article 6 (1) (f) of the GDPR (processing for reasons of lawful interest of the Company), on the basis of that provision. In such a case, the Company as controller will no longer submit the personal data unless it demonstrates imperative and legitimate reasons for processing that override the interests, rights and freedoms of the subject, or the filing, exercise or support legal claims.
7.8. Rights on automated decision-making mechanisms
The Company does not make automated individual decision-making, including profiling.
7.10 How to exercise the right
The exercise of the aforementioned rights takes place with the submission of a written application to the Company in accordance with its policies and procedures. The Company reserves the right to reply no later than one month after receiving the request, in accordance with the terms of the GDPR.
8. Retention period for personal data
For each category of personal data, the Company determines the retention period in accordance with the provisions of the law and its policies and procedures.
9. Contact of the Data Protection Authority
For further information and advice on your rights or to submit a complaint, you may contact the Greek Data Protection Authority:
Address: 1-3, Kifisias Avenue, P.C. 115 23, Athens.
Telephone: +30-210 6475600
Fax: +30-210 6475628
E-mail: contact@dpa.gr
10. Amendments of the present Notice
We aim to review and keep up-to-date the present Notice in order to comply with privacy laws and new developments. Any updates to this Notice will be communicated to you immediately.
|
Legal Basis of Processing (GDPR provisions) |
