Information to Data Subjects regarding the processing of their personal data in accordance with EU Regulation 2016/679 and the relevant Greek legislation.
SANELCO is committed to protecting the personal data of its customers and employees. The company is dedicated to safeguarding the confidentiality and privacy of the information entrusted to it and complies with the applicable legislation on the protection of personal data.
The company’s goal is to ensure the best possible service and provision of its offerings to the individuals with whom it interacts, while at the same time keeping their personal data secure, as outlined below.
As part of this fundamental commitment, the company is dedicated to protecting and appropriately using the personal data collected with the explicit consent of the data subjects. We collect personal data solely within the framework of fulfilling our purpose and only such personal data as is voluntarily provided by the data subjects.
The company’s personal data protection practices are described below, and the data protection policy in place covers all company activities related to the collection and processing of personal data.
Data subjects are kindly requested to review this Privacy and Personal Data Protection Statement in order to be informed about the type of information collected, as well as how it is stored, used, and protected throughout the duration of any contracts with the data subjects and the fulfillment of any other required purpose.
1. Collection and Use of Personal Data.
Personal data are collected only with the explicit consent of the data subjects, which is provided by them prior to any processing or collection of their personal data. In the aforementioned consent, the data subjects are clearly informed, in accordance with the provisions of the applicable Personal Data Protection legislation, that their personal data will be collected and processed solely for the purpose of fulfilling the intended objective, and they are made aware of all recognized rights that they may exercise.
The data collected are as follows:
Identification Data: full name, ID number, Tax Identification Number (TIN), Tax Office, gender, etc.
Contact Data: postal and email address, telephone number, etc.
It is clarified that the personal data of the data subjects are not used for any purposes other than those intended by the company and the data subjects themselves, who explicitly consent to the collection and processing of their data.
1.1 The Legal Basis for the Use of the Data Subjects’ Personal Data.
The company collects only the personal data necessary to fulfill customer requests. In the case of employees, it is clarified that we maintain records of their personal data for payroll and social security purposes, in accordance with the laws in force at any given time. Personal data are also obtained from résumés submitted to us for the purpose of employment with our company, provided that the data subjects (i.e., the applicants) have explicitly consented to the provision of the necessary personal information in order to proceed with interviews and determine whether a recruitment will take place.
Greek and EU legislation permit our company to process personal data when there is a lawful basis for doing so. In addition, the reasons for such processing may be disclosed to the data subjects. Naturally, a lawful basis includes the prior consent provided by the data subjects, as well as any subsequent contracts or transactions, for which the disclosure of certain personal information is self-evidently necessary.
1.2 From Where and How the Data Subjects’ Personal Data Are Collected.
Personal data are collected either manually and in person at the company’s premises, by fax or postal mail sent to the company, or electronically via email or telephone.
2. Duration of Retention of the Data Subjects’ Personal Data.
The company retains your data immediately after collection and keeps them in this form for a limited period of time and only for the agreed purposes. Specifically, employee data will be retained for as long as the employment contract remains active, while customer data will be retained for as long as necessary and only for the duration of the transactions between the company and its customers.
After the expiration of the above periods, the personal data of the subjects will be destroyed and will no longer be used for any purpose or in any manner. Furthermore, we assure you that these data are not transmitted to any third party, as access to records containing the data subjects’ information is strictly limited to authorized personnel who have been designated as data processors.
3. Rights of Data Subjects and How They May Be Exercised.
Each data subject, having explicitly consented to the processing and collection of their personal data and having accepted the aforementioned actions, has the following rights:
Right of access and information regarding the manner and purpose of processing and storage of their data.
Right to rectification and/or completion of incorrect, inaccurate, or incomplete data, in order to ensure that the records held are complete and accurate.
Right to request restriction of processing or to object to any further processing of their data.
Right to erasure (right to be forgotten), when the retention period referred to above has expired or when the data subject no longer wishes their data to be processed.
Right to data portability, meaning the right to receive their data in a format that allows its transfer to another Data Controller.
Right to withdraw consent at any time.
Finally, right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) if the data subject believes that they or their rights have been violated in any way.
Communication for exercising the above rights may be made by contacting our company by phone at 2310449004,or by sending an email to [email protected] .
Our company will take all reasonable measures to satisfy the requests of data subjects and will respond within a reasonable period of time; if this is not possible, it will inform them of any necessary extension.
4. Protection of the Data Subjects’ Personal Data
Our company applies appropriate technical and organizational measures to ensure a sufficient and satisfactory level of security suitable for addressing risks and to provide the highest possible level of protection of the Data Subjects’ information using state-of-the-art safeguards.
Regarding the use of company computers, special technologies and procedures are implemented to enhance the protection of this information against loss or misuse, as well as to safeguard it from unauthorized access, disclosure, alteration, or destruction.
To this end, if any visitor/user becomes aware of any unlawful, malicious, inappropriate, or unfair use of personal data, they are obliged to report the incident immediately to the company.
5. Where You Can Contact Us Regarding Any Issue Related to the Processing of Your Personal Data?
If you have any questions, comments, or concerns regarding the company’s management or protection of your personal data, or if you wish to modify your personal data or exercise any of your rights as a data subject, please contact us at the following email address: [email protected]