General information for our company
Name: Afoi Patsalas SA
Address: Thessaloniki, 5,5 klm Thessaloniki -Lagadas Str, PO Box 40325, PC 56429
Contact: e-mail: email@example.com, tel: 2310681150.
Company representative: Dimitrios Patsalas
Data Protection in Charge: Aggeliki Zevgolati
Contact details: e-mail: firstname.lastname@example.org, tel: 2310681150.
On this website, the terms “our office, our firm, we, us” refer to Afoi Patsalas SA.
Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Sensitive personal data or special categories of personal data are data such as religious, ideological, political opinions or actions, information for health, gender, or biometric elements, the race and national origin, records or sanctions administrative or criminal nature.
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
Data archive is every structured amount of personal data, which are accessible in a way that enables the recognition of the data’s subject.
Pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
Data controller is the legal or natural person who decides the purpose and means of personal data processing.
Data processor is the legal or natural person who processes personal data on behalf of the data controller.
This edition has been drafted in 10.6.2019 and is subject to future modifications, due to compliance procedure with GDPR. This edition substitutes all the previous publications or notifications by us.
This declaration replaces all the previous notifications which we potentially provided in the past, regarding our information practices. We reserve the right to change this policy and implement any change in collected information, as provided by law.
If there are essential changes in this policy or our practices regarding information will be modified in the future, we will notify you by publishing the changes on our website.
It is important for us, your collected by us personal data to be precise and valid. By this policy, we ask you to inform us if your personal data change during our professional cooperation.
Our base is in Greece, and therefore all kinds of processing take place in Greece.
Processing purposes and legal bases
Our company processes personal data for professional and legal purposes, as also in order to serve its legitimate interests whenever and wherever is considered necessary. The company is an enterprise of construction and sale of aluminium wares. In the framework of its professional activity and mainly for the purpose of performance of the sale / construction contract, with regard to aluminium wares, the company processes personal data of customers as also of interested to become customers.
We process data for different purposes, such as:
-In order to provide you technical services, when we undertake a specific construction project.
-In order to process the requested services and keep you informed about the progress of your request.
-In order to invoice you for the sale of our products or the use of our services or to integrate the payment of your financial obligations.
-In order to answer your questions or concerns regarding the use of our products or services.
In the framework of these purposes we may collect data such as: name of associate or customer or interested person, work address, email address, telephone, ID number, Passport number, tax and invoice data. These data are being collected in many ways such as through signing a contract, through paper or electronic forms, via phone, via email, verbally during the meeting.
Processing legal bases
Our company collects and processes personal data for professional reasons. Processing of personal data, though, as it is explained below, may be based on another legal basis, such as the contract performance, the pursuit of the company’s legitimate interests, the compliance with a legal obligation.
Our company processes personal ID and contact data of its customers, in order for the contract of construction an aluminium project or the sale of aluminium wares to be performed. These data are indicatively the name, phone number, email address. Our company also process the data provided by the interested man, in order for the contract to be signed, as also to be able to carry out actions, relevant with your requests. In the same framework is conducted the processing of our associates data.
Compliance with legal obligation
Our company may process the personal data of customers / associates in order to comply with legal obligations, including, for instance, accounting and tax consulting requirements, which are being implemented according to the internal policies and procedures. Indicatively the collection of data, which are needed for an invoice issue, is necessary.
Pursuit of company’s legitimate interests
Our company, as a private professional organism, promotes its purposes also through simple promotional events, in order for third people to be able to know the quality of our basic associates. In the framework of showing its purposes, our company may legally process data of its associates or other people, always with the appropriate respect to their rights and the appropriate balance, between the promotional activity and their personal data.
Our company does not process personal data, for which a consent is required. If exceptionally the company wants to carry out an advertising or promotional activity, in this case it will carry it out upon your consent.
Regarding the collection of your personal data, our company collects personal data when:
-It provides services to you.
-You subscribe via paper on electronic form in a service or a project, by completing and signing the respective request.
-You ask for information about a service, or you contact us for submitting questions or complaints.
Our website operates just and only with the necessary cookies, which are needed technically for the use and visit of it. Except this kind of cookies, there is no other use.
Simultaneously, our website functions with google analytics, which do not make a user’s identification possible, as it regards a simple anonymized statistical analysis of the website’s traffic.
Personal data are not notified to other persons, but only to our associates and our staff, for the purpose of performing a sale / construction contract. The data concerning the tax obligations, are notified obligatorily to the public tax authorities.
Our associates have agreed and are contractually bound to:
– keep confidentiality, and also bind their staff, with the respective obligations,
– not to transfer data to third parties without our written permission,
-undertake organizational and technical data security measures to protect your Data.
-inform us of any incident relating to the violation of your Data.
-delete or return your Data, upon the expiration of our contract
-comply with the legal framework for the protection of personal data, in particular with the General Data Protection Regulation (GDPR).
International transfers to third countries
There are no transfers to third countries outside the EU. In case it is required, the transmission will be done only for legitimate reasons and only in accordance with the provisions of the GDPR.
Data storage period of time
The personal data, are being collected only for the period of time that is necessary. Our company implements a strict policy of data maintenance and revision, in order for them not to be maintained beyond the necessary period of time. Our company also stores the basic personal data, needed for accounting and tax consulting purposes, for the specific period of time, as provided by law, namely for 10 years at least.
As a subject of processing of personal data you maintain the following rights:
-The right to access to your personal data, and if they are being processed by us, as a data controller, also to the purposes of processing, the categories of data, the receivers or the categories of the receivers (article 15 GDPR).
-The right to rectify not precise data, as also to complete incomplete data (article 16 GDPR).
-The right to erase your personal data, without prejudice to the obligations and the legal rights of our company for their maintenance, according to the respective legislation (article 17 GDPR).
-The right to restriction of data processing, if their accuracy is being challenged, or the processing is unlawful, or the purpose of processing has been concluded, provided that there is not a legal reason for maintaining them (article 18 GDPR).
-The right to data portability to another data controller, provided that the processing is based on your consent and is being carried out by automated means. The satisfaction of this right takes place without prejudice to the legal rights and obligations or our company for maintaining the data and the fulfilment of a duty to public interest (article 20 GDPR).
-The right to object for reasons as to your special condition in case your personal data are being processed for the fulfillment of a duty, exercised for the public interest or for the purposes of legal interests pursued by our company or a third party (article 21 GDPR).
You will not have to pay any fee or tax in order to have access to your data (or to exercise any other rights of yours). Nevertheless, we maintain the right to charge a reasonable fee if your request is obviously unfounded, repeated or abusive. Otherwise, we maintain the right to deny to comply with your request in these cases.
Withdrawal of consent
You can withdraw your consent any time, even with a simple email to email@example.com, if the processing of personal data is based on your consent. Nevertheless, this is an action which will not affect the lawful processing taken place before your withdrawal. If you withdraw your consent, maybe we will not be able to provide specific services to you. In this case, we will inform you accordingly at the time of your withdrawal.
Obligation for data providing
ID, contact, payroll data, have to be provided by you, in order for us to be able to perform completely the works or employment contract. The provision by you of the data we need to collect according to the tax and accounting legislation, constitutes a legal obligation. If the -each time- interested man would not give the respective abovementioned data, then it would be impossible for the works or employment contract to be fulfilled, while, in case of not providing the tax data, the tax legislation would be respectively violated, and therefore, this would have as a result the danger of state sanctions .
Our company does not automatically process data for the purpose of profiling.
Submitting a complaint
Every request of yours, concerning your personal data and the exercise of your rights have to be submitted written and to be sent either to firstname.lastname@example.org or to be handed over to our offices. A special form for the exercise of your right to access to your data, is available in our offices. A denial by our office or an unjustified delay as to the satisfaction of your requests, provides you the right to resort to the Data Protection Authority, as the competent supervising authority for the implementation of GDPR. In any case, you maintain the right to submit a complaint to the competent supervising authority, if you consider that the processing of your personal data is being conducted in breach of the applying legislation. You can find respective information on the website www.dpa.gr. In case of any kind of question or concern, you can firstly address to us, using our contact data, in order to enable us to manage the questions before involving the abovementioned authority.