INFORMATION ON THE PROCESSING OF PERSONAL DATA
The Company under the name “Ioannis K. Konstantinidis LTD” and the distinctive title “CHEMIKON”, located in Aspropyrgos, Attica, Faka location, P.C. Box: 19300, Tax ID: 099004915, Tax Office: Elefsina, General Commercial Registry No: 122699207000 (hereinafter the “Company”), e-mail: chemikon@chemikon.gr , as a Data Controller, hereby provides you with the following information on the processing of your personal data and your rights as a data subject, in accordance with the General Data Protection Regulation 2016/679/EU (hereinafter “GDPR”), the respective national legislation, as well as the Decisions, Directives and Opinions of the competent supervisory authority.
This information is addressed to partners, suppliers connected to the Company and any of its branches (hereinafter the “Company”) with an independent service, project relationship (hereinafter the “partner”) either natural persons (for example sole proprietorships, self-employed) or legal entities (in which case this information applies to, for example, legal representatives, managers, contact persons, position in the legal entity).
It is also addressed to the natural persons connected to the partner (indicatively to the staff, associates, representatives, agents, managers, executives, counterparties, recruits, assistants to them, contact persons, etc.), whom the partner, when giving their details, should inform of the disclosure of their details to it and have them referred to this information , which, as applicable, is posted on www.chemikon.gr .
The Company collects and processes the following data (indicatively and not restrictively), depending on the type of cooperation or contract:
Personal Data.
Basic identification data (name, surname, father’s name, ID or passport No), contact details (email address and/or postal address, landline or mobile phone number,)
Tax information: TAX ID, TAX OFFICE
Distinctive title/type of company
Address of registered office, bank accounts for payment of fees
Invoices
Title, position in the company, details of legal representatives
Financial offer
Driving license (where required)
Information regarding education and professional experience such as diploma, curriculum vitae, professional license (if required), foreign language certification (where applicable), certifications (e.g. use of computer) (where applicable), previous experience if any.
Data concerning complaints, reports.
Image recording in the context of closed circuit television (CCTV) operation.
Special category of Personal Data (where required).
The Company processes special category personal data as defined in Article 9 of the GDPR, when they are contained in complaints, reports submitted.
Origin of Data.
The Company processes personal data:
– which the partner declares or will declare in the future in any way during the development of the contractual relationship with the Company, such as through relevant communications, telephone, electronic (e-mail), through documents sent by you and those arising from our contractual relationship (conclusion, development and termination of this relationship).
– collected from third publicly accessible sources (such as for example are commercial registers, internet), where there are public records regarding your professional activity and if these data are necessary for the purposes of processing.
Purposes of Processing / Legal Basis for Processing
– for the verification and identification of your data, to receive an offer you have sent. In this case, the legal basis for processing is taking measures at your request prior to the conclusion of the contract. In case of evaluating your qualifications, for the selection of suitable partners that the Company wishes, based on specific criteria established by the Company and based on its needs. In this case, the legal basis for processing is the legitimate interest of the Company.
– for the management/execution of the contract, such as for example the establishment, maintenance, termination, communication within the framework of the contract, the fulfilment of our mutual obligations (for example payments, provision of services and supply of products). In this case, the legal basis for processing is that the processing is necessary for the performance of a contract to which a partner is a party.
– for Company’s compliance with applicable national or EU legislation (indicatively in the field of labour law, tax law, commercial law), such as for example the submission of reports and complaints, the maintenance of tax data, the disclosure of your data to competent bodies (indicatively competent tax offices), the audit by chartered accountants/auditors, etc. In this case, the legal basis for processing is the compliance with a legal obligation of the Company.
-to protect the security of persons and property of the Company (CCTV -closed circuit television), access to the Company’s premises. In this case, the legal basis for processing is the legitimate interest of the Company.
-for the establishment, exercise or support of legal claims before competent judicial bodies or other bodies for out-of-court dispute resolution, In this case, the legal basis for processing is the legitimate interest of the Company.
We process a special category of personal data pursuant to Article 9 of the GDPR which, depending on the nature of the case, are also contained in complaints/reports submitted to the Company, when this is necessary for the Company’s compliance with the applicable legislation (labour law). In this case, the legal basis for processing is the performance of the obligations and the exercise of specific employee’s or Company’s rights in the field of labour law and social security and social protection law.
We process a special category of personal data for the establishment, exercise or support of legal claims before competent judicial bodies or other bodies for out-of-court dispute resolution. In this case, the legal basis for processing is the establishment, exercise or support of legal claims of the Company.
Non-provision of Data.
Any objection by you to the provision of personal data may result in the inability to enter into or continue a contract with the Company.
Recipients/Persons who become aware of your Data.
Access to personal data, depending on the purpose of processing, is available indicatively and not restrictively to the following categories:
(a) The Management of the Company.
(b) The Company’s competent staff, its natural or legal entities offering services to our Company, such as for example tax and legal advisors, bailiffs, auditing companies, chartered accountants, IT service providers (IT), staff training companies, compliance companies, companies providing facility security services, website hosting and management companies, e-mails, e-mail distribution companies, customs clearance agents, credit institutions, destruction of files and data companies, postal services providers.
(c) Public authorities or agencies, judicial, prosecutorial, and investigative authorities, when the transmission or disclosure of data is required by law, by a judicial decision under national or foreign law or by a decision of another authority, accredited mediators and mediation service centers, arbitration courts and alternative dispute resolution bodies.
(d) Natural persons or legal entities having and proving a legitimate interest and in accordance with the legal procedures.
(e) Suppliers, customers and business partners and in general those dealing with the Company.
Where necessary, the Company enters into relevant contracts with natural persons or legal entities, who process your data and who act as processors, i.e. process the personal data on its behalf.
In each transfer we always take every measure to ensure that the data transferred will always be the minimum necessary. Where the transfer is made to a country outside the European Union (EU) or the European Economic Area (EEA), the transfer is subject to appropriate safeguards and in accordance with applicable data protection legislation in order to maintain the required level of protection of your data.
Subject Rights.
As a data subject, subject to applicable law, you may exercise, where applicable, the following rights:
– right of access (to know which data we process, for what purpose, the categories of your data and the recipients and/or categories of recipients),
– right of rectification (to have any omissions or inaccuracies in your data corrected)
– right to erasure (right to be forgotten) (to be deleted from our records, but where processing is no longer necessary)
– right to restriction of processing (in the event that the accuracy of the data is contested, etc.)
– right of data portability (to receive your data in a structured and commonly used format, for those data held in an electronic file).
– right to object (on grounds relating to your particular situation in the event that your personal data are processed for the purposes of the Company’s legitimate interests).
The possible exercise of these rights is carried out at no cost to you, in the following ways:
-by submitting a written request to privacy@chemikon.gr
-in person or by sending a letter to the company “Ioannis K. Konstantinidis LTD” -“CHEMIKON”, Aspropyrgos, Attica, Faka, P.C. 19 300, to the attention of the person responsible for the personal data.
In case you have authorized a third person to submit a request for the exercise of a right, this person must carry the appropriate legal documents (such as for example a proxy or an authorization certified by a Public Authority).
Any request submitted should be accompanied by appropriate proof of identification.
The Company may request additional information necessary to confirm your identity.
If your requests are manifestly unfounded or excessive, in particular because of their repetitive nature, then we may either:
(a) impose a reasonable fee, taking into account the administrative costs of providing the information; or
(b) refuse to act on the request.
If you exercise any of these rights, we will take all possible steps to comply with your request within one month of receiving it, after informing you either that it has been complied with or of the objective reasons why it cannot be complied with. The above deadline may be extended by a further two months, if necessary, taking into account the complexity of the request and the number of requests, after informing you.
The above rights are limited for the reasons provided for by the legislation in force.
The Company’s refusal or unjustified delay in satisfying your requests in the exercise of your rights entitles you to appeal to the Data Protection Authority as the competent supervisory authority for the application of GDPR and before the competent judicial authorities.
Contact the Personal Data Protection Authority.
If you consider that your rights concerning the protection of your personal data are infringed, you have the right to lodge a complaint with the Personal Data Protection Authority, at the postal address Personal Data Protection Authority, Offices: Kifissia 1-3, P.C. 115 23, Athens, Greece, telephone number 210 6475628, e-mail: contact@dpa.gr , fax: +30-210 6475628, www.dpa.gr .
Security of Processing.
The Data Controller recognizes the importance of the security of Personal Data. For the purpose of processing, we take all modern and appropriate technical and organizational measures, the compliance of which we check regularly to ensure maximum security.
Retention of Personal Data.
The Company will retain and process the aforementioned personal data for as long as necessary to serve the aforementioned processing purposes, to comply with its legal obligations (such as, for example, tax, commercial law), to resolve judicial or extrajudicial disputes, including mediation, in accordance with the applicable legal framework.
After a retention period has expired, the Company shall arrange for the secure destruction of your data.
Modifications-Revisions.
The Company reserves the right to amend and update this Notice when deemed necessary in accordance with its current personal data protection policy and in the context of the applicable legal and regulatory framework, which will always be available on the Company’s website, www.chemikon.gr .
Version 2.0: JANUARY 2023