INTRODUCTION
We would like to assure you that for ARMOS the protection of personal data in general and in particular of our employees and external partners is of primary importance. For this reason, we take appropriate measures to protect the personal data we process and to ensure that the processing of personal data is always carried out in accordance with the obligations set by the legal framework, both by the company itself and by third parties that process personal data on behalf of the company.
Processing Officer – Data Protection Officer
ARMOS company with headquarters in Larisa, Thessaly, 4th km of Larisa Sykourio, info@armosprokat.gr, tel: 2410-575035-37, website: www.armosprokat.gr, informs that, for the purposes of carrying out its business activities and for the management of the official relationship or cooperation with the object of providing services, it processes personal data of its employees and external partners in accordance with the applicable national legislation and the European Regulation 2016/679 for the protection of natural persons against the processing of personal data and for the free movement of such data (General Data Protection Regulation, hereinafter “Regulation”) as applicable.
For any issue related to the processing of personal data, each employee or external partner can directly contact the contact person responsible for personal data protection issues at info@armosprokat.gr or t.gouvris@armosprokat.grand on the phones 2410575035-37
What are the purposes and legal grounds for processing and how we use your personal data
In order to take the necessary actions (a) during the process of evaluating candidates at the pre-recruitment stage, (b) during the process of managing the employment relationship or the relationship of an external partner from the date of recruitment/start of cooperation until the end of the contract in any way , (c) during the stage after the end of the employment relationship or the external collaboration, ARMOS processes personal data of its employees and external partners.
The provision of all data requested by employees or external partners is necessary because it constitutes a legal or contractual obligation, or a requirement for the conclusion of a contract. Therefore, any failure to provide the requested personal data makes it impossible either to comply with the law, or to perform the contract between employer and employee or external partner, or to perform actions in order to conclude a contract.
The source of the personal data is basically the employee himself or an external partner. In the event that ARMOS seeks or receives personal data from third parties, it will inform the employee accordingly.
The personal data you provide to us (e.g. personal and contact details, marital status, education/training, work experience, tax details, bank account details, social security details, information related to employee health issues such as reasons absence due to illness or injury from an accident (medical opinions from private doctors, opinions and certificates of hospitalization from private and public nursing institutions, etc.), we process them only when there is a legal reason.
Legitimate reasons for processing your personal data are:
(a) the execution of the employment or service contract and the fulfillment of the relevant obligations contained therein. The actions taken in this context include the calculation and payment of the agreed salary, the payment of the agreed fee to external partners, the calculation, withholding and return of the due payroll tax and insurance contributions, the fulfillment of the contractual obligations that they derive from the workers’ insurance in which each worker participates (e.g. withholding of the amount of an individual worker’s contribution, payment of compensations, etc.). In addition, ARMOS processes personal data for the purposes of evaluating the performance of its employees and the services provided by external partners. In relation to the evaluation process and always in accordance with the announced company policies and procedures, the relevant departments of the company and the executives authorized for this purpose receive and process information that constitutes personal data from persons who are in charge of evaluating the company’s employees and the external partners (head of departments, managers, procurement department, etc.).
(b) safeguarding and protecting our legitimate interests, both yours and ours. We ask for your information when entering the company’s main facilities and office spaces, parking lots, secondary facilities, etc. In addition, personal data may be processed for the purposes of prevention, investigation, and/or suppression of illegal acts or omissions , and/or acts or omissions that violate internal regulations, approved policies, and/or codes of ethics and conduct, and taking the necessary measures. Further personal data is processed in the context of achieving the business purposes of our company, such as for the submission of tenders, the undertaking and execution of private projects or our participation in private tenders (e.g. transmission of personal data to private organisations).
(c) compliance with obligations imposed by law, such as the posting of the annual salary statement in the relevant application of the Independent Public Revenue Authority, the submission of consolidated statements of suppliers, the posting of the staff list in a visible place at the workplace, the assurance of working conditions health and safety in the workplace and any other related action. Further personal data is processed for the submission of offers the undertaking and execution of projects of public organizations, as well as for our participation in public tenders (e.g. transmission of personal data to public organizations) in compliance with the relevant regulatory framework of public contracts..
(d) the consent you provide under the specific conditions set by the legal framework, in order to receive updates on products, services, offers, etc. both from ARMOS and from other companies of the Group to which ARMOS belongs or from third parties partner companies, which process personal data in accordance with the applicable framework. You have the right to revoke the consent provided at any time by contacting the contact persons responsible for personal data protection issues at the above contact details.
Recipients of personal data outside the company
ARMOS transmits personal data to third parties, to whom the company entrusts the processing of personal data on its behalf. Therefore, personal data is sent to Banks, social security organizations, public organizations, government authorities and services, insurance companies, mobile phone service companies, car rental companies, companies providing assessment, training and human resources development services, technical consultants, legal consultants , doctors and healthcare providers. In the above cases, ARMOS remains responsible for the processing of your personal data and defines the individual elements of the processing, and signs a special contract with the third parties to whom it entrusts the execution of processing activities, in order to ensure that the processing is carried out in accordance with the applicable legal framework and that every natural person can freely and unhindered exercise the rights granted by the legal framework.
In addition, the data is also transmitted to other companies of the Group to which ARMOS belongs, as well as to insurance companies within the framework of the group insurance programs for ARMOS personnel currently in force, if any.
Further personal data is transmitted to public and private organizations, in the context of submitting offers, undertaking projects and our participation in public or private tenders.
To withdraw your consent, contact the contact persons for personal data protection issues.
Storage Period
The period of data storage is decided based on the following specific criteria depending on the case:
When the processing is imposed as an obligation by provisions of the applicable legal framework, your personal data will be stored for as long as the relevant provisions impose.
When the processing is performed on the basis of a contract, your personal data is stored for as long as is necessary for the performance of the contract and for the establishment, exercise, and/or support of legal claims based on the contract.
For the purposes of promoting products and services (marketing activities) of the company and the other companies of the Group, your personal data is kept until the withdrawal of your consent. This can be done by you at any time. The withdrawal of consent does not affect the lawfulness of the processing that was based on the consent during the period before its withdrawal.
To withdraw your consent, contact the contact persons responsible for personal data protection issues
What are your rights in relation to your personal data
Every natural person whose data is processed by ARMOS enjoys the following rights:
Right of access
You have the right to be aware of and verify the lawfulness of the processing. Therefore, you have the right to access the data and receive additional information about its processing.
Right of rectification
You have the right to review, correct, update or modify your personal data by contacting the Data Protection Officer (DPO) at the above contact details.
What are your rights in relation to your personal data
Every natural person whose data is processed by ARMOS enjoys the following rights:
Right of access
You have the right to be aware of and verify the lawfulness of the processing. Therefore, you have the right to access the data and receive additional information about its processing.
Right of rectification
You have the right to review, correct, update or modify your personal data by contacting the Data Protection Officer (DPO) at the above contact details.
Right to erasure
You have the right to request the erasure of your personal data when we process it based on your consent or in order to protect our legitimate interests. In all other cases (such as indicatively when there is a contract, an obligation to process personal data imposed by law, public interest), the said right is subject to specific limitations or does not exist depending on the case.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data in the following cases: (a) when you dispute the accuracy of the personal data and until verification is made, (b) when you object to the deletion of personal data and request instead of deletion the restriction of its use, ( c) when the personal data are not needed for the purposes of processing, but are nevertheless necessary for the establishment, exercise, support of legal claims, and (d) when you object to the processing and until it is verified that there are legitimate reasons concerning us that override the reasons for which you object to the processing.
Right to object to processing
You have the right to object at any time to the processing of your personal data in cases where, as described above, this is necessary for the purposes of legitimate interests pursued by us as controllers, as well as to processing for the purposes of direct marketing and consumer profiling.
Right to portability
You have the right to receive your personal data free of charge in a form that will allow you to access it, use it and process it with commonly used processing methods. You also have the right to ask us, if technically possible, to transfer the data directly to another data controller. This right of yours exists for the data you have provided to us and the processing thereof is carried out by automated means based on your consent or in execution of a relevant contract.
To exercise any of your above rights, you can contact the contact persons responsible for personal data protection issues.
The exercise of the above rights is done free of charge, via e-mail or by hand delivery to the Data Protection Officer at our central facilities. The abusive exercise of the above rights, especially in the form of unjustified repeated requests or behavior which is manifestly in bad faith, will result in being charged with the corresponding administrative costs.
Right of complaint to PDPH
You have the right to submit a complaint to the Personal Data Protection Authority (www.dpa.gr): Telephone Center: +30 210 6475600, Fax: +30 210 6475628, Email: contact@dpa.gr
Security of Personal Data
ARMOS implements appropriate technical and organizational measures aimed at the safe processing of personal data and the prevention of accidental loss or destruction and unauthorized and/or illegal access to, use, modification or disclosure. In any case, the way the internet works and the fact that it is free to anyone does not allow guarantees to be provided that unauthorized third parties they will never be able to violate the technical and organizational measures in place by accessing and possibly using personal data for unauthorized and/or illegal purposes.
