The company under the name "ENDLESS EC Monoprosopi S.A." ("we") in accordance with the provisions of Regulation (EU) 2016/679 (hereinafter "GDPR"), Law 4624/2019, the Decisions, Guidelines, and Opinions of the Personal Data Protection Authority, and in general, the relevant legislation on personal data protection (hereinafter referred to as "Applicable Legislation"), in its capacity as Data Controller, wishes to inform natural persons visiting its website (hereinafter referred to as "Data Subjects" or "you") about the processing of their personal data through this Notice.
I. What personal data we collect, for what purposes, and what the corresponding legal bases are
PURPOSE
PERSONAL DATA COLLECTED
LEGAL BASIS
1. Communication with potential customers (via the help form)
Name, email address, personal data that may be included in the subject line and message sent by the user.
Article 6(1)(b) GDPR: Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
2. Newsletter subscription
Article 6(1)(a) GDPR: the consent of the data subject. The data subject may withdraw their consent by selecting the "Unsubscribe" link at the end of each email they receive.
3. Social Plugins
Through these plugins, we can only access publicly shared information on the respective social media platforms. The operation of the plugins is governed by the terms of the Privacy Policy of each platform.
Article 6(1)(a) GDPR: the consent of the Data Subject, consisting of an explicit affirmative action by the user (selection of the respective social networking icon that takes the user to the corresponding platform).
II. How long we retain your personal data
We retain your personal data for as long as necessary for the purpose for which it was collected, as described in section I, unless otherwise required by law. At the end of the retention period, your data will be irrevocably deleted or securely destroyed, based on clearly defined standards and specifications, under the responsibility of the Data Controller, except for your contact details, which will be retained until you withdraw your consent to receive updates (via our newsletter) about our products and services.
III. To whom we disclose and/or transfer your personal data
Our Company discloses your personal data to its authorized employees.
In addition, we may transfer the data collected through this website:
a) To entities entrusted with the performance of specific tasks, such as, but not limited to, providers of IT products and/or services and/or support of all kinds of information and electronic systems and networks, marketing companies, consulting firms, etc. These entities provide sufficient assurances that they will implement appropriate technical and organizational measures to ensure that data processing is carried out in accordance with the requirements of the GDPR and relevant personal data protection legislation.
b) To supervisory, independent, judicial, prosecutorial, public, and/or other authorities or bodies or parties entrusted with the control/monitoring of the Company's activities within the scope of their responsibilities.
IV. Your rights
In accordance with applicable law, you have the right to request that we:
-inform you about the data we hold about you and how we process it. If you wish, we will provide you with a copy at no charge. (Right of access)
-correct inaccuracies or errors, fill in gaps, or update your data. (Right to rectification)
- delete data if we do not hold it for a specific, legitimate, and stated purpose. (Right to be forgotten or Right to erasure)
- suspend processing a) while you contest the accuracy of the data, b) if you consider the processing to be unlawful (but do not wish to have it erased), c) when the data is not necessary for the purpose of the processing, and d) for as long as it is disputed whether the reasons for which we process your data outweigh those you invoke to permanently discontinue the specific processing.
-object at any time on grounds relating to you to the processing of personal data carried out by us, in particular for direct marketing purposes or for profiling. The objection may, in particular, relate to your compliance with a decision we have made by automated means. In the latter case, you may request that we allow you to intervene. (Right to object – Automated individual decision-making)
-provide you with your data in a specific format (usually machine-readable) or to transfer it directly to another controller at your request, provided that this is technically feasible and always subject to the conditions laid down by law. (Right to portability).
-not to process your data from now on, giving you the opportunity to freely withdraw the consent you have given us.
You can send your requests by email to our company's Data Protection Officer (DPO). Our company will respond to all your requests within one (1) month. In extremely rare cases, where it is almost impossible for us to satisfy your rights, we will inform you immediately, explaining the reasons for our inability to do so.
If you believe that the applicable legislation has been violated, you have the right to file a complaint with the Personal Data Protection Authority (APDPCH).
V. Contact Details
DATA CONTROLLER DETAILS
ENDLESS EC Single Member S.A.
GEMI No. 121666507000
Faka, Aspropyrgos 193 00
210 5512800
info@endless.com.gr
DATA PROTECTION OFFICER (DPO)
dpo-custom@revivalsa.gr
VI. Effective date - Amendments
Version 1.1, Published on 17/01/2022