PERSONAL DATA PROTECTION POLICY
The Company "ZANAE SA" located at Industrial Area Sindos, OT 49, Phase B, Entrance C, P.O. Box 1270, acting as a controller pays close attention to security issues and respects the privacy and confidentiality of your personal data. The Company takes all necessary organizational and technical measures designed to protect data from loss, misuse, unauthorized access, disclosure, distortion or destruction and ensures the fair and lawful collection and processing of your personal data as well as their safe storage. In this endeavor, the Company makes all the appropriate efforts, in order to fully comply with the applicable national, European and international legal framework, and in particular with the European Union's General Data Protection Regulation 679/2016.
Scope
We would like to inform you of the way in which your personal data are collected, stored, used and transmitted, the security measures we take to protect your personal data, the reasons and the maintenance time, as well as the type of the personal data which are collected. This policy refers to any operation or series of operations performed with or without the use of automated means, in personal data or personal data sets, such as the collection, registration, organization, structure, storage, adjustment or alteration, retrieval, use, transmission, dissemination or any other form of distribution, correlation or combination, restriction, deletion or destruction.
This Policy is frequently updated and may be amended at any time, without prior notice, always within the applicable legal framework and in accordance with any changes to existing data protection legislation. We therefore recommend to review this Policy from time to time to keep abreast of any changes that have been made.
What is personal data?
Personal data is any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together can lead to the identification of a particular person, also constitute personal data (eg. name, surname, ID number, email address, etc.). Health data (physical or mental, medical services, etc.) are included in the general term of personal data however are a specific data category. The Company will not process your personal data without your consent. However, the Company reserves the right, in exceptional cases, to process your personal data information to the extent permitted or required by law, and / or by court orders or prosecution orders.
How is your personal data information collected?
Your personal data information is collected in the following ways:
(a) You provide your personal data to us when you apply for a job. Disposing of your personal data in the context of submitting a CV to the Company takes place on a voluntary base otherwise your evaluation would not be feasible. For more information please check our Curriculum Vitae Policy.
(b) Automatically via the browser or mobile device you use to access our website www.zanae.gr
(c) You provide your personal data to us when you complete electronic forms or when you send an e-mail in order to be informed about our Company's products or services which are available in our website www.zanae.gr. Submission of your personal data information is processed with your consent for the sole purpose of informing you about our Company's services and products, in accordance with Article 6b of the Regulation 679/2016.
In cases where your consent is required for the use of your personal data information (eg. for promotional purposes regarding new services and products) this will be expressly requested by you and you will have the right to withdraw it at any time.
What kind of personal data is collected?
Personal data collected and further processed include your full name, your address, your CV, your email address, your tax information and your telephone number and any other information described in detail in our Company's policies.
In addition to the above data you provide to us, technical information may be collected such as your device's Internet Protocol address, e.g. computer, laptop, tablet, smartphone. This technical information is used for the smooth operation and performance of the Company's website and is not permanently stored from our Company.
More details about the technologies used on our website are provided in our Cookies Policy.
What are the principles governing the processing of personal data by the Company?
The Company processes your personal data in a lawful manner for the purposes clearly set out in this Policy. Your personal data processed by the Company is limited to what is strictly necessary to achieve these purposes, is accurate and relevant, is kept for a period specified by the processing purposes, is protected by adequate security measures and is not transmitted to countries that do not provide sufficient security level of protection.
Who collects personal data and for what purpose? Are they transmitted to third parties?
In accordance with Article 6a GDPR, the processing and storage of your CV is obtained and maintained for the sole purpose of your evaluation. All of your personal data is kept only for this purpose and is processed only by the relevant staff (Personnel Department).
In accordance with Article 6b GDPR, the processing and maintenance of your data relating to identification, tax and contact information is necessary for the performance of the contract and the provision of services required by our Company. All of your personal data is kept only for these purposes and is processed only by the relevant staff (Finance & Sales Department).
In order to smoothly conduct our business operations or to fulfil our obligations to you, we may also disclose the personal data that you have provided to us to our third party service providers, affiliates or related corporations, who may be situated inside or outside of Greece, for our website functionality, marketing purposes, data management and technical support. We may disclose your personal information to all authorized persons of our Company. We will also disclose your personal data to government regulators or authorities in order to comply with any laws, rules, guidelines, regulations or schemes that apply to us.
Please note that in cases of outsourcing the processing and/or transmitting the data to third parties, the Company hereby informs the data owner and guarantees that appropriate safeguards are in place to protect the personal data and that, in terms of expertise, reliability and resources, appropriate technical and organizational measures are taken in such a way that the processing is lawful and that both the rights of the data owners and the appropriate level of security against risks are protected.
How long is my personal data kept?
In order to fulfill the purpose of processing a job search in our Company (CV form) we consider a reasonable and necessary time to maintain your relevant data within six (6) months. After the six (6) months have elapsed since the date of your submission, the relevant file with all of your details will be deleted.
In order to fulfill the processing purpose relating to the performance of the contract and the provision of services, a reasonable time for the retention of your information is the time of the relevant commercial operation of the Company.
Data Subjects’ Rights
You have the right at any time to be informed about your personal information we process, the purposes we do it, whether they are transmitted to third parties and to whom, and other relevant information. You also have the right to receive a free copy of your personal data we possess upon request. Other rights that you have under applicable law include the right to request the updating and / or correction of your data, the cessation and / or restriction of their processing and deletion from the Company's computer systems, unless there is not any other obligation provided by law for their maintenance. You also maintain the right to portability and / or objection to the processing of your personal data.
You may exercise all of the above rights by submitting an application to the following email address dpo@zanae.gr. If you have any further queries about your personal data, you may contact the Company's Personal Data Protection Officer, Mrs Papanestoros Aspa, either on phone at 0030 2310-796360 or via e-mail, at dpo@zanae.gr. Each request made should be accompanied by appropriate identification evidence and the required information as well (eg. data needed to be corrected) as described in the terms of use of each service.
The Company makes every effort to ensure that your requests are answered promptly and in any case within one month of their receipt. This period may be extended by two (2) more months, if necessary, taking into account the complexity of the request and the number of requests. You will be informed by the Company for this extension and the reasons for the delay within one month of receiving the request. If you consider that the protection of your personal data is in any way affected, you can contact the Hellenic Data Protection Authority in the following details: Hellenic Data Protection Authority, Kifissias Str. 1-3, Athens P.C. 115 23, Athens, email: contact@dpa.gr, tel:+ 30-210 6475600.
