CUSTOMERS & TRADERS
PERSONAL DATA
INFORMATION FOR THE PROCESSING OF PERSONAL DATA
The Company under the name Petrakis Transport SA, located at Piraeus, 40, Zannetou str., V.A.T. 099021010 P.F.C. FAE PIRAEUS, Branch at 31, Georgiou Kouvidi str., Elefsina, P.C. 192 00, e-mail: [email protected] (hereinafter “the Company”), as a Controller of Personal Data Processing, hereby provides you with the following information for the processing of your personal data and your rights as a subject of processing, according to the General Data Protection Regulation (EU 679/2016), hereinafter (GDPR), the respective national legislation, as well as the Decisions, Instructions and Opinions of the competent supervisory Authority.
This information is addressed to customers and other traders of the Company and the branches it operates (hereinafter the “Company”), whether they are persons (including sole proprietors, tradesmen) or legal entities (for example, legal representatives, managers, contact persons, position in the legal entity).
It is also addressed to the persons associated with them, (indicatively staff, associates, representatives, agents, managers, executives, subordinates, servants, assistants, contact persons, etc.), whom the above when giving their data to the Company, should inform of the disclosure of their data to the Company and have referred them to this information, which as applicable, is posted on www.petrakis-transport.gr .
The Company collects and processes the following data (indicatively and not restrictively), depending on the type of cooperation or contract.
PERSONAL DATA
-Basic identification data (name, surname, father’s name, ID number or passport), contact data (e-mail address and / or postal address, landline or mobile phone number)
– Tax data: Tax Identification Number, Tax Office
– Distinctive title / type of business, location
– Bank accounts
– Invoices
– Title, position in the company, details of legal representatives
– Financial offer
-Capture image in CCTV mode.
DATA SOURCE
The Company processes personal data:
- which are being or will be declared by the customer or other trader in the future during the development of the contractual relationship with the Company such as for example through relevant communications, telephone, electronic (e-mail), through documents that you send and whatever data arise from our conventional relationship (conclusion, development, and solution).
- Collected by third party publicly accessible sources (such as commercial registers, internet), where there are public entries regarding your professional activity and if such data are necessary for the purposes of the processing.
- relating to your image when you enter a Company space that is monitored by closed circuit television (CCTV).
PROCESSING PURPOSES/ LEGAL BASIS OF PROCESSING
We process personal data:
-in a pre-contractual stage for the verification and identification of your data, for the receipt of an offer you have sent and its evaluation and in case of contract preparation, for its management, such as execution (concluding, maintaining, terminating), communication within this, the fulfillment of our obligations on both sides (for example payments, provision of services and supply of products). In this case, the legal basis for processing is that the processing is necessary for the execution of a contract of which the Customer / trader is a contracting party or for measures to be taken at his request before concluding a contract.
– for Company’s compliance with the current national or
EU legislation, (indicatively in the field of tax law, commercial law, such as for example the issuance of invoices, the maintenance of tax data, the disclosure of your data to competent bodies (indicatively competent D. O.Y.), the audit by certified public accountants / auditors. In this case the legal basis for processing is the compliance with a Company’s legal obligation.
-for the execution of transactions, the management of Company’s relations and the communication with suppliers / associates, and traders in general, within the framework of the contractual, business relations and the proper operation of our Company. In this case, the legal basis of processing is the Company’s legitimate interest.
– for establishing, exercising, or defending legal claims before competent judicial bodies or other out-of-court dispute resolution bodies. In this case, the legal basis of processing is the legitimate interest of the Company.
– for the protection of safety of the Company’s persons and goods (CCTV). In this case, the legal basis of processing is the Company’s legitimate interest.
– for informing you regarding actions, developments, events, achievements, initiatives, business news of our Company, by sending electronic messages (such as a newsletter or e-mail), to e-mail addresses legally acquired within the framework of our business relationship. In this case, the legal basis of processing is the Company’s legitimate interest.
RECIPIENTS/ PERSONS RECEIVING KNOWLEDGE OF YOUR PERSONAL DATA
The following indicatively and not restrictively mentioned categories have access to personal data, depending on the purpose of processing:
i) The Management of the Company.
ii) The competent staff and persons or legal entities who provide services to the Company such as tax and legal advisers, bailiffs, notaries, auditing firms, chartered accountants, payroll service companies, facility security companies, IT companies, website hosting and management companies, e-mails, e-mail distribution providers, credit institutions, file and data destruction companies, postal services companies, geolocation / routing services companies.
iii) Any person or legal entity, public authority or service, judicial, prosecutorial and investigative authorities, when the transmission or disclosure of data is required by law, by a court decision of domestic or foreign law or by a decision of another Authority or at the request of a person or legal entity who has and proves a legitimate interest and in accordance with legal procedures.
iv) Suppliers, associates.
v) Companies associated (affiliated) with Petrakis Transport SA.
The Company, where required, concludes relevant contracts with persons or legal entities which process your data and which act as processors of the processing, ie processing personal data on its behalf.
We transmit all the data that are necessary for the purposes of each processing. In each transmission we take every measure so that the data that will be transmitted are always the minimum necessary. In the event that the transmission concerns a country outside the European Union (EU) or the European Economic Area (EEA), the transmission is based on appropriate guarantees and in accordance with applicable data protection legislation, in order to maintain the required level of protecting your personal data.
SUBJECT RIGHTS
As a data subject you have the following rights, under the reservation of the applicable law:
– access right (to find out what data we are processing, why your data categories and recipients and / or categories of recipients)
– request right (to correct any deficiencies or inaccuracies of your data)
– recognition right (right to forgiveness) (deleting them from our records, if they are no longer needed),
– right to limit processing (in case of questioning the accuracy of data, etc.),
– the right of portability (get your data in a structured and commonly used format, for what data is kept in an electronic file),
– the right of objection (for reasons relating to your particular situation in the case your personal data is processed for the purposes of the Company’s legitimate interests)
– request to revoke (you have the right to revoke your consent at any time, as appropriate, without prejudice to the legitimacy of the processing based on it until its revocation).
The potential exercise of these rights and any clarification regarding your personal data is made at no cost for you:
– by submitting a written letter to the email address: [email protected]
– in person or with a relevant letter to the Company (31, Georgiou Kouvidis str. Branch, Elefsina, PC 192 00).
Exceptionally, if you wish not to receive a newsletter from the Company, you can exercise your right of objection by clicking on the unsubscribe / Remove link located at the end of each newsletter and in this case we will not send you relevant messages.
Each request submitted must be accompanied by the appropriate identification evidence. The Company may request the provision of additional information necessary to confirm your identity. In the event that you have authorized a third person to apply for a right of exercise, that person must bring the appropriate legal documents (such as a proxy or authorization certified by a Public Authority).
If your claims are manifestly unfounded or excessive, especially because of their recurring nature, then we have the option of either:
a) imposing a reasonable fee, taking into account the administrative costs of providing information or
b) refusing to follow up on the request.
If you exercise any of these rights, we will take all possible measures to satisfy your request within one month of receiving the relevant request, after informing you either of its satisfaction or of the objective reasons that prevent its satisfaction. The above deadline may be extended by another two months, if required, considering the complexity of the request and the number of requests, after informing you.
Your above rights are restricted for the reasons provided by applicable law.
A refusal of the Company or an unjustified delay in the satisfaction of your claims in the exercise of your rights, entitles you to address to the Personal Data Protection Authority as the competent supervisory authority for the enforcement of the GDPR and before the competent judicial authorities.
CONTACT WITH THE PERSONAL DATA PROTECTION AUTHORITY
If you believe that your rights regarding the protection of your personal data are being infringed, you have the right to file a complaint to the Personal Data Protection Authority, at its postal address (Personal Data Protection Authority, Offices: 1-3, Kifissias Str. 115 23, Athens, tel. 210 6475628, email: [email protected] fax: + 30-210 6475628, www.dpa.gr ).
PROCESSING SECURITY
The Controller acknowledges the importance of the security of Personal Data. For processing, we take all modern and appropriate technical and organizational measures, the response of which is checked at regular intervals, in order to ensure maximum security.
RETENTION OF PERSONAL DATA
The Company will retain and process the above personal data for as long as is required to serve the aforementioned processing purposes, to comply with its legal obligations (such as tax, commercial law), to resolve judicial or extrajudicial disputes, including mediation, in accordance with the applicable legal framework.
After the end of the retention period, the Company takes care of the safe destruction of your data.
AMENDMENTS – REVISIONS
The Company reserves the right to modify and update this Information, when necessary, based on its current policy for the protection of personal data and within the applicable legal and regulatory framework, which Information will always be available up to date, on the Company’s website, www.petrakis-transport.gr .
VERSION 2.1: 8.6.2022