In order to gain access as a visitor/user of our Website www.circet.gr ("Website") to some of the services it offers, you must first provide us with personal information or information that identifies you or may identify you and which is characterized as "personal data" or "personal data".

We collect, maintain, store, organize, adapt, use, process, etc. files with personal data that you provide to us during the use/visit of our Website ("Processing") and we are a "Controller" for them. The processing of your personal data is limited to what is strictly necessary for its purpose and is carried out in accordance with the provisions of applicable law.

We respect the privacy of visitors/users of our Website and recognize that when you choose to provide us with information about yourself, you trust that we act with absolute responsibility and integrity when processing your personal data. This Privacy Notice contains important information about how we process your personal data. If you choose to use the Website by accepting its terms of use, it is presumed that you accept the provisions of this Privacy Policy. If you do not agree with this Policy, please do not use the Website.

We reserve the right to modify this Policy, whenever we deem it necessary, and we invite you to check it regularly to be informed of any changes to its content, as well as how your personal data may be used.

Collection of personal information

We collect the following information about you, in accordance with the consent you have given us and solely for the following processing purposes and if we need more for those you have approved, we will contact you.

  • activity data: the domain and provider through which you access the internet, the address of the website from which you connected to the website, the day and time of browsing our website as well as the browsing time and pages visited, the IP address, the operating system and the browser of your computer.

This information is used to access our website and for statistical purposes. Therefore, processing falls within the scope of Article 6(1)(f) of the European Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, "GDPR"), according to which processing is lawful if it meets the legitimate interest of the data controller.

  • registration data: Personal data and personal information that you disclose to us yourself through the online contact form or by sending your CV and the application for expression of interest for your recruitment / cooperation.

This processing falls within the scope of Article 6(1)(a) GDPR, according to which processing is lawful if the data subject has given consent to such processing.

  • data you have allowed social media to share with the Company

This processing falls within the scope of Article 6(1)(a) GDPR, according to which processing is lawful if the data subject has given consent to such processing.

We collect neither financial information from a payment service provider nor special categories of personal data (including but not limited to your racial or ethnic origin, trade union membership, health data or data concerning your sex life or sexual orientation) unless these data are included in your CV and the application for expression of interest for your recruitment / cooperation that you have chosen to send us. Even in this case, we have taken the necessary and technical organizational means for the safe keeping and processing of your personal data belonging to the above special categories.

We do not seek or collect personal data from individuals under the age of eighteen (18). If we discover that, by mistake or deception created to us, we have collected personal data from persons under eighteen (18) years of age, we will delete them in the shortest possible time.

The purpose of collection of personal information

The main reason we collect data about you is to provide you with the Company's Services and to allow you to interact with those services. In addition, with your prior consent, we may send you offers, promotions and commercial communications, also based on your personal preferences and habits.

The processing of your personal data for each of the above-mentioned processing purpose(s) is carried out in accordance with the consent you provide us for it, which you may revoke at any time, without however affecting the lawfulness of the processing based on it until the moment of its withdrawal. The revocation can be submitted by email to the email dpo(at)circet.gr.

It is also necessary to collect your personal data for the purposes of complying with legal obligations or for the purposes of protecting the legitimate interests of the Company. Failure to provide such data will result in our inability to offer you the Company's Services. When your personal data is collected for marketing purposes, you have the option not to provide the Company with your personal information.

Recipient or categories of recipient

In order to provide you with our services and manage your data, we may use third parties, which act as processors. This includes processors installed outside the European Union or the European Economic Area, in which case we will ensure that adequate measures are in place to protect your personal data, in particular through standard European Union contractual clauses entered into between us and the subcontractor. In any case, your personal data will be transferred to other companies that are members of the CIRCET group

Legal

We will disclose your personal data where we are required by law (compliance with a legal provision), to the extent and extent necessary to meet this obligation or if in our good faith judgment it is reasonably necessary to comply with legal proceedings or to respond to requests of a similar nature.

The use of your personal data

We provide you with information / answers you have requested and transmit your personal data to third parties, as described herein and in accordance with the consent you have given us in the context of expressing your interest in work / cooperation.

The duration of keeping your personal data

We store your personal data for as long as it is strictly necessary for the execution of the processing purposes as well as for our response to any of your requests.

Especially with regard to the personal information you have communicated to us with your applications for work / cooperation, we will keep them for a period of six (6) months, and after the lapse of the above period and if you do not ask us to keep your personal information for an additional period of time, we will destroy them in a secure manner and without the possibility of retrieval.

Protection of your personal data

The security of your data is our absolute commitment and in order to achieve this, we apply all modern and appropriate for the purposes of Processing technical (indicatively, encryption, anonymization) and organizational measures (indicatively privacy by design, establishment of policies and procedures), the adequacy and response of which we check at regular intervals.

Please note that these protections do not apply to personal data that you choose to share in public places, such as community websites.

Your rights

As a subject of personal data processing, you retain the following rights:

  1. find out which of your personal data we process, for what reason, the recipients to whom they have been or will be disclosed, the period for which they will be stored and, if this is not possible, the criteria that determine it (Article 15 GDPR),
  2. the correction of your personal data (e.g. due to their deficiencies or inaccuracies), their deletion from our records (provided however their processing is no longer necessary), the restriction of their processing, your objection/opposition to it (Article 16-17-18 GDPR),
  3. withdrawal of your consent to the processing of your personal data (which cannot operate retroactively),
  4. opting out of receiving personalized and personalized information, if you have consented through the Website to this, and
  5. submission of a complaint to the Personal Data Protection Authority before the Personal Data Protection Authority (1-3 Kifissias Avenue, PC 11523, Athens tel: +30 210 6475600 e-mail: contact(at)dpa.gr).

How to exercise your rights

You can exercise your rights either by email to the email dpo(at)circet.gr or in writing by registered letter to the company, at no cost to you, unless such requests are repeated frequently and have administrative costs for us, in which case you will bear the relevant reasonable costs.

If you exercise any of these rights, we will take every possible measure to satisfy it within one month of receiving your request and we will inform you accordingly (unless otherwise provided by the applicable provisions), unless due to its complexity it is necessary to extend this deadline by two more months, for which we will inform you of the reasons for delay.

We will also communicate any correction or deletion of your personal data to any recipient who has disclosed it, unless it is disproportionate or impracticable and we will inform you if you request it.

Legislation - Applicable provisions on the security and protection of personal data.

Where in this Policy we refer to the applicable provisions on the security and protection of personal data, we mean REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 "on the protection of natural persons with regard to the processing of personal data and on the free movement of such data" or GDPR as it has prevailed to be referred to,  the relevant implementing law (Law 4624/2019) and the relevant decisions of the competent members and authorities, as currently in force.

Update / Modification of this privacy policy

The Company may modify or update this Privacy Policy for any reason (including, but not limited to, changes in applicable law and interpretations, decisions, opinions and orders regarding such applicable law.)

Please refer to the Effective Date at the top of this Privacy Policy to see when it was last revised. Any changes to this Privacy Policy will be notified in advance by posting the revised Privacy Policy on the Company's Services.

In the event that we make material changes to this Privacy Policy that change the nature of the processing or extend our rights with respect to the use of personal data we have already collected from you, we will notify you and provide you with a choice regarding the future use of such personal data as may be required by applicable law.

How to contact us

For any question or comment you may have regarding this Policy or our personal data collection practices and to submit any request you may have, please contact us either by email at dpo(at)circet.gr or in writing by registered mail to the company and you will receive a response as soon as possible.