Data Subject Information Notice on the Processing of Their Personal Data in Accordance with EU Regulation 2016/679 (GDPR) and Relevant Greek Legislation

TECHNOLOGIKI ATHINON A.T.E. is committed to protecting the personal data of its clients and employees. The company is dedicated to safeguarding the confidentiality and privacy of any personal information provided and fully complies with applicable data protection laws.

The company’s primary objective is to offer high-quality services and customer care, while maintaining the security of personal data, as outlined below.

As part of this fundamental commitment, the company undertakes to protect and use, in an appropriate and lawful manner, any personal data collected with the explicit consent of the data subjects. We collect only the personal data necessary to fulfill our operational purposes, and only the data voluntarily provided by individuals.

Our data protection practices are described below, and our privacy policy applies to all company activities related to the collection and processing of personal data.

We encourage data subjects to carefully read this Privacy and Data Protection Statement to understand what types of information are collected, how they are stored, used, and protected throughout the duration of any contractual relationship or for any other relevant purpose.

1. Collection and Use of Personal Data

Personal data is collected only after the explicit consent of the data subjects is obtained, before any processing or collection takes place. This consent clearly informs the data subjects, in accordance with applicable data protection laws, about the intended collection and processing of their data for specific purposes and their related rights.

The personal data collected may include:

  • Identification Data: full name, ID number, tax ID (AFM), tax office (DOY), gender, etc.
  • Contact Data: postal and email address, phone number, etc.

These data are not used for any purposes beyond those agreed upon between the company and the data subjects, who have explicitly consented to the collection and processing of their personal information.

1.1 Legal Basis for Processing Personal Data

We collect only the personal data necessary to respond to client requests. In the case of employees, we maintain records for payroll and social security purposes, in accordance with applicable legislation. We also receive personal data via CVs submitted by candidates applying for employment. These data are collected with the candidates’ explicit consent and used for the purposes of evaluation and potential recruitment.

According to Greek and EU legislation, the company is legally permitted to process personal data when there is a lawful basis to do so. This includes prior consent and any subsequent contractual relationships that necessitate the disclosure of certain personal information.

1.2 How and From Where Personal Data is Collected

Personal data may be collected manually in person, by fax or post, or electronically via email or telephone.

2. Retention Period for Personal Data

Personal data is retained immediately upon collection and stored only for as long as necessary to fulfill the agreed purposes.

  • Employee data is stored for the duration of the employment contract.
  • Client data is retained only for the duration of relevant transactions with the company.

Once the retention period has expired, the data is securely destroyed and is no longer accessible or usable. These data are not shared with any third parties. Access to personal data records is strictly limited to authorized personnel acting as data processors.

3. Rights of Data Subjects and How to Exercise Them

By giving explicit consent to the collection and processing of their personal data, data subjects are entitled to the following rights:

  • Right of Access and Information: to know how and why their data is processed and stored.
  • Right to Rectification: to correct inaccurate or incomplete data.
  • Right to Restriction or Objection: to request the limitation or objection to further processing.
  • Right to Erasure (“Right to be Forgotten”): to request deletion of their data once the retention period has expired or if they no longer wish it to be processed.
  • Right to Data Portability: to receive their data in a structured, commonly used format for transfer to another data controller.
  • Right to Withdraw Consent: at any time.
  • Right to Lodge a Complaint: with the Hellenic Data Protection Authority (www.dpa.gr) if their rights are violated.

To exercise these rights, data subjects may contact the company by phone at +30 210 2533213 or by email at [email protected].

The company will make every reasonable effort to satisfy data subjects’ requests and respond within a reasonable time. If more time is needed, the data subject will be informed accordingly.

4. Personal Data Protection Measures

Our company implements appropriate technical and organizational measures to ensure a sufficient level of security, addressing risks and offering the best possible protection of personal data using up-to-date security technologies.

For electronic data processing, we use advanced technologies and procedures to prevent data loss, misuse, unauthorized access, disclosure, alteration, or destruction.

Should any visitor/user become aware of any unlawful, malicious, or improper use of personal data, they are required to immediately report the incident to the company.

5. Contact for Data Protection Issues

If you have any questions, concerns, or requests regarding the processing or protection of your personal data, or if you wish to exercise any of your rights, please contact us at:

Email: [email protected]