We are pleased to welcome you to the Website of
ERMA FIRST ESK Engineering Solutions S.A.
- Subject Matter
- Principles of Data Processing
We fully respect your fundamental rights and render protection of your privacy is a priority of our Company. In this context, when processing your personal data, we follow the following basic principles:
2.1. We submit your personal data to legitimate processing, and we maintain full transparency vis-à-vis the way we handle your personal data.
2.2. We collect and process your data only for specified, explicit, and legitimate purposes as outlined in this policy, and we do not process it further in a manner incompatible with these purposes.
2.3. We process your personal data only to the extent that it is appropriate and relevant to the above purposes, while limiting the processing to the measure necessary for these purposes.
2.4. We make reasonable efforts with your own assistance to ensure that your processed data is accurate and, where necessary, updated in respect to the purposes of the processing, taking all reasonable steps to immediately delete or correct it in case of inaccuracy.
2.5. We keep your personal data in a form that allow us to identify yourself only for the time required for the above processing purposes.
2.6. We process your personal data in a way that guarantees its security by using appropriate technical or organizational measures.
2.7. We do not intend to further process your personal data for purposes other than the one for which they are collected.
2.8. We inform you that there is no obligation to provide your personal data and that there are no possible consequences from the choice not to provide them. Furthermore, we inform you that your personal data may not be used for automated decision making, including profiling.
2.9. Without prejudice to what is stated in this policy, we do not disclose and transmit your personal data to third parties without your consent, unless permitted by law or by our contractual agreement with you.
2.10. Please be advised that we do not pass on your personal data to a third country or international organization for which there is no European Commission decision under the GDPR.
2.11. In general, we comply with all applicable laws and comply with all our statutory obligations, as data controllers of your personal data.
- Types of Data Collected
At the point in the process of services, you may provide the following types of personal data to our Company:
3.1. At the point of submitting your CV:
- Name / Surname.
- Father’s name
- Date of Birth
- Military Status
- Marital Status
- Address and contact data.
3.2. Any other personally identifiable information directly provided by you during the use of our electronic commerce services or during interaction with our social media channels.
3.3. Our Company does not collect or gain access in any way to special categories (“sensitive”) of personal data or data relating to criminal convictions and offenses by its clients. You have an obligation to refrain from posting such data concerning yourself or third party data subjects. In the event that you submit such data to our Website, these will be removed as soon as we become aware of them. We have no liability to you or to any third parties for any processing of sensitive data due to your actions or omissions in breach of this obligation.
- Purposes and Legal Bases of Data Processing
4.1. Personal data necessary for the navigation and use of our Website is collected and processed by our Company pursuant to Article 6 § 1 (b) of the GDPR for the following purposes:
- Technical capability for the smooth operation of our Website.
- Friendly and user-friendly operation of our site.
- Improve your online experience while navigating and using our site.
4.2. Personal data necessary for the provision of our services within our contractual relationship is collected and processed by our Company pursuant to article 6 § 1 (b) of the GDPR for the following purposes:
- Performance of our contractual obligations towards our Users and Clients.
- Immediate, adequate and efficient provision of our services.
- Communicating with our clients in the framework of the execution of our services and for the resolution of any complaints.
- Improvement, management and review of our products and services to meet the needs of our clients as much as possible.
- Administration, organization and function of our business.
4.3. Our Company collects and processes your personal data solely for the purposes mentioned above and only to the extent that is strictly necessary to effectively serve them. Data collected are relevant, appropriate and no more than what is required in view of the above purposes, whereas we strive to keep them accurate and up to date. Furthermore, your data are retained only for the period required to achieve the purposes, for which they are collected and processed, and are afterwards permanently deleted.
5.1. Our Company may process personal data only with your lawful consent for the following purposes:
- For the purposes of commercial communication, marketing and advertising of our services or third party services via SMS, telephone, e-mail, internet, fax, mail, social media and/or any other appropriate communication channels.
- For personified market research and/or analysis purposes to better understand your needs, preferences, interests, experiences and/or habits as a consumer.
- To operate and manage any reward programs.
5.2. You kindly agree to give us your consent to the processing of your personal data for the above purposes with an electronic statement in a manner clearly distinguishable from other consents or Policies and in an intelligible and easily accessible form using clear and plain language. Your consent is freely given and your personal data is given without such a provision being a legal or contractual obligation or a requirement on behalf of our Company for the performance of a contract between us.
5.3. In this context, by giving your consent, you explicitly state that you wish to provide your consent for the above purposes in accordance with the terms and conditions of this Policy. You may provide your consent in the following ways:
- When sending to our Company an e-mail
- When submitting your CV.
5.4. You have the right to withdraw your consent at any time. Withdrawal of your consent does not affect the lawfulness of the treatment of your data prior to its revocation. Your consent is also revoked in the same manner as provided.
- Data Recipients
6.1. Our Company does not assign your personal data or interconnect its database with any third parties, public authorities or other organizations for financial or other consideration.
- Data Security and Confidentiality
7.1. In order to ensure the proper use and integrity of your personal data and to prevent their unauthorized or accidental access, processing, deletion, alteration or other use, our Company applies appropriate internal policies and takes all appropriate organizational, technical, physical, logical and procedural security measures, as well as technical standards, in accordance with applicable laws and regulations.
7.2. The processing of your data by our Company is conducted in a manner that ensures their confidentiality and physical and logical security, taking into account the latest developments, implementation costs and the nature, scope, context and purposes of the processing, as well as the risks for your rights and freedoms, which are applicable in each circumstance.
7.3. Your personal data is processed solely by authorized personnel of our Company, bound by strict obligations of confidentiality.
- Retention of Personal Data
8.1. We keep your personal data for as long as it is each time necessary for the relevant purposes of their processing.
8.3. After the period of retention, your personal data is erased from our databases and systems in accordance with our data protection policies and provided that their retention is no longer required for the fulfillment of the purposes we have described above.
- Website Users’ Rights
9.1. Without prejudice to applicable law and subject to any limitations thereof, you have the following rights:
- Request for access to your personal data and information related to their processing and obtain a copy thereof.
- Request for the rectification of any inaccuracies or any missing personal data of yours.
- Request for the erasure of your personal data.
- Request for the restriction of the processing of your personal data in cases explicitly provided for by law.
- Request for the portability of your personal data to another controller in a structured, commonly used and machine-readable format (e.g CD, DVD, USB stick).
- Object to the processing of your personal data in cases explicitly provided for by law.
- Object to a decision taken solely on the basis of automated processing, including profiling, which has impact on you or significantly affects you.
Any requests relevant to the above are addressed in writing to our contact details mentioned in this Policy.
9.2. Our Company will respond to any of your requests within one (1) month from their receipt. Upon prior notice, this period may be extended by a further two (2) months if necessary, taking into account the complexity of the request and the number of any other pending requests. In case of rejection of your request, we will provide relevant justification.
9.3. If your request does not meet the requirements of applicable law, our Company reserves the right either to: (a) impose a reasonable fee, taking into account the administrative costs of providing the information or communicating or executing the requested action, or (b) reject your request.
9.4. In the event of any violation of your personal data, which may place your rights and freedoms at a high risk, and provided that it does not fall under one of the exceptions expressly provided for by applicable law, we undertake to inform you without undue delay.
9.5. If there are any doubts as to the identity of the individual submitting the request, we reserve the right to request the provision of additional information necessary to confirm his/her identity.
9.6. If your rights are infringed, we inform you that you have the right to file a complaint with the Greek Data Protection Authority or with any other competent supervisory authority.
- Website Users’ Obligations
10.1. By using our Website and by providing your personal data upon your consent, you acknowledge that you are required to state your actual, accurate and complete information requested by our Company. Furthermore, you must inform our Company of any changes to your information so as to ensure it is kept up-to-date and accurate.
10.3. You acknowledge that our Company may delete, cross-check, supplement or modify the information you provide based on information lawfully provided by third parties. In this case, our Company will provide you with relevant notice in compliance with applicable law.
- International Jurisdiction and Applicable law
12.1. For any request in relation to the protection of your personal data you may contact our Data Protection Officer as follows:
- 24, Dervenakion Street
- 185 45, Piraeus