A. RESPONSIBLE FOR DATA
Α.1 The company SPIRULINA NIGRITA ANASTASIADIS CHRISTOS and distinctive title ” SPIRULINA NIGRITA ” (hereinafter referred to as ” The Company ”) based in Therma Nigritas, Serres, Choumniko TK 62200s and e-mail: [email protected] and legal representative Anastasiadis Christos, is responsible for the processing of your data.
A.2 The Company has appointed a Personal Data Protection Officer and for any matter concerning your rights you can contact us at e-mail: [email protected]
B. GENERAL PRINCIPLES ABOUT GDPR
B.1 The information you request from us as well as the information in this document is provided free of charge, provided that it is valid, not excessive and will not be repetitive. Otherwise, the company may charge a corresponding fee or refuse to provide the information in your request.
B.2 If the company has any doubts regarding your identity when submitting an application for the exercise of your rights, it may request more information to confirm your details and process your request.
B.3 The Company will respond to your above rights within one (1) month from the submission of the request or in four (4) months in special cases (eg complex request, request of great difficulty, large number of requests etc.). If the Company has legitimate reasons as defined in the General Data Protection Regulation (GDPR 2016/679) it has the possibility to refuse the provision of information. In case of longer delay or if you consider that your right is violated, you have the right to file a complaint to the supervisory authority with the following information: Personal Data Authority, Kifisias 1-3, PC 115 23, Athens, e-mail: [email protected] , tel. 2106475600. You have the right to withdraw consent by submitting an application to the Personal Data Protection Officer at e-mail: [email protected]
B.4 Effective protection of personal data requires the enhancement and detailed determination of the rights of data subjects. The General Regulation on the Protection of Personal Data refers to the manner in which information is provided in a “concise, transparent, comprehensible and easily accessible form” using a clear and simple wording. The information can be provided either in writing or electronically.
C. PURPOSE OF EDUCATION OF THE DATA
C. 1 Associates – Customers – Suppliers – Employees
For current customers, suppliers, partners of our company, the purpose of processing your data is only the execution of the contract between us and the observance of tax legislation. The legal basis is the execution of the contract between us and the compliance with the text law. The retention time of your data is the one defined by the tax legislation and after its expiration they will be deleted.
C.2 Candidate Associates – Customers – Suppliers
Regarding your potential partners, customers, suppliers, we know that your personal data (name, phone, e-mail, address, etc.) that you have provided to our company through digital or printed communication form, e-mail , telephone, etc. The purpose is to investigate the possibility of cooperation or transaction between us. The legal basis is to serve the legitimate interest of our company to enter into a commercial agreement with you.
C.3 Candidate Employees
For prospective employees, obtaining your CV is intended to assess your company’s ability to hire on a legal basis with your consent. Retention time is 12 months and after its expiration it will be deleted.
C.4 TRANSPORTATION OF DATA OF A COMPANY
Transferring your data outside the company is allowed if required by law (Labor Inspectorate, Insurance Agencies, Tax Office, etc.). Also to computer and network technicians, computer software for the purpose of computer support of the company as well as to any collaborator with the company for its smooth operation (such as Accountants, Transportation companies, etc.)
D.1 Right to information
You have the right to request the provision of information in the personal data that we maintain and have collected from you.
D.2 Right of access – correction
Our company has the obligation, as long as it is requested, to give you access to the data that we maintain and concern you as well as to confirm whether or not your data is processed, the purposes of processing, data categories, recipients, etc. a. You also have the right to request a correction of the data in case they have been changed or entered incorrectly.
You reserve the right to complain to the supervisory authority if the available information has not been made available to you and you find that there is a profile training and automated decision making.
D.3 Right to deletion
It is one of the flags of the regulatory reform effort.
In case your personal data is not necessary for the purpose of collecting it or you deem it illegal, you have the right to request their full or partial deletion. The company in a period of one month or in four (4) months in special cases (eg complex request, request of great difficulty, large number of requests, etc.) is obliged to answer you for the progress of your request. In case of inability to delete, you have the right to file a complaint with the supervisory authority (Personal Data Authority, Kifisias 1-3, PC 115 23, Athens, e-mail: [email protected], tel. 2106475600) or to file a lawsuit.
If you consider the processing of the data illegal but do not wish to delete it due to a possible legal claim, you question the accuracy of your data or you consider that your rights override the processing grounds by the Company(quantitatively, chronologically and in terms of processing purpose).
You have the opportunity to challenge the use of the processed data by the Company for the purposes of commercial promotion and especially the training of profiles related to commercial promotion.
D.4 Right to portability
You have the right to receive and transmit your data to a third party without any objection from the company as well as upon your request the possibility of immediate transmission without your own mediation.
E. DATA INSURANCE – WARRANTIES
The Company takes all necessary technical and organizational measures to protect your data as required by law and solely for the above purposes.
The Company will not forward your personal data except in cases required by law (Tax, Insurance bodies, etc.) and the providers of support of the Company’s information systems.