Privacy Statement for website

The Company under the name Petrakis Transport  SA, located at Piraeus, 40, Zannetou str., V.A.T. 099021010 P.F.C. FAE PIRAEUS, Branch at 31, Georgiou Kouvidi str., Elefsina, P.C. 192 00, e-mail: [email protected]  (hereinafter “the Company”), is Controller and responsible for managing and protecting visitors’ / users’ of the website www.petrakis-transport.gr  personal data as well as users’ of social media and communication media personal data maintained by the Company, in accordance with the General Regulation of Data Protection (EU 679/2016), the current national legislation, as well as the Decisions, Instructions and Opinions of the competent supervisory Authority.

We hereby notify the visitor/ user of the Company’s and its Branches’ website, its social media, its communication media, regarding the Personal Data we process.

PERSONAL DATE CATEGORIES – PROCESSING PURPOSES- LEGAL BASIS OF PROCESSING

1.ENTERING THE WEBSITE

When entering our website, the following personal data are automatically sent to us by the terminal browser you use and without your own action:

• the date and time of access,
• the IP address of the device with Internet access, that requested access,
• the name and URL of the requested file,
• the web site / application from which access was made (referrer-URL),
• the browser you are using, the operating system of your computer that has Internet access, as well as the name of the access provider,

to the server of our website and they are temporarily stored in a log file for the following purposes:

• guarantee of proper connection creation,
• guarantee of comfortable use of our website / application,
• assessment of system security and stability.

The legal basis for processing the IP address is our legitimate interest, resulting from the above-mentioned purposes regarding the processing of Personal Data.

2.CONTACT FORM / COMMUNICATION VIA E-MAIL / TELEPHONE CALLS.

The Company enables the visitor / user to communicate by providing personal data via telephone or e-mail or by filling out a form in a predefined field of the website (Name, Surname, telephone, e-mail address).

Purpose/ Legal Basis of processing

Replying to a visitor’s / user’s request. In this case, the legal basis of processing is the legitimate interest of the Company.

• In case there is a contractual relationship with the Company, the purpose of processing is our communication within it. In this case, the legal basis for processing is the execution of a contract.
• For starting a cooperation if the visitor / user sends us a relevant message on his own initiative. In this case, the legal basis for processing is our necessary actions to take measures at the request of the data subject, before concluding a contract.

3.NEWSLETTER

The Company processes Personal Data such as e-mail address for those users / visitors who already have a professional relationship with it, in order to send them a newsletter.

Purpose of processing/ Legal Basis of processing

for informing the visitor / user regarding actions, developments, events, achievements, initiatives, business news of our Company, by sending e-mails to supplier’s / customer’s e-mail addresses, which were legally acquired within the framework of our professional relationship. In this case, the legal basis of processing is the Company’s legitimate interest.

4.SENDING CVS VIA ELECTRONICAL PLATFORM/ E-MAIL [email protected]

The user / visitor is able to submit a job application, through the electronical platform in a predefined field on the website, providing personal data, such as name, surname, training details and work experience (by sending a CV), contact details (address, phone, e-mail) and any additional information he/she may give us.

Purpose of processing/ Legal Basis of processing

• for candidates’ selection for employment in a specific job position and for the communication with the candidate within the evaluation process. In this case, the legal basis for processing is the Company’s legitimate interest to select the appropriate employees it desires, based on specific criteria which it has established and its needs.
• for establishing, exercising, or defending legal claims before competent judicial bodies or other out-of-court dispute resolution bodies. In this case, the legal basis of processing is the Company’s legitimate interest.

For further information, please read the unit “Candidates”.

5.SOCIAL MEDIA

The Company owns official accounts on the following social media:

• Facebook
• Instagram
• Linkedin
• YouTube

With the help of each of these platforms we collect and process some of your data (such as your username or/ and  your photo).

Purpose of processing/ Legal Basis of processing

All data that we collect about you, whether anonymized or not, for providing updates on our content or for contacting you. In this case, the legal basis for processing is your consent. You provide your consent by liking or following our pages and you can revoke it just as easily, in the exact same way (unlike, unfollow).

Please note that we are not responsible for the way or means by which each of the above platforms processes your data. Find out about the policy of these media in the following links:

• Facebook: https://www.facebook.com/policy.php
• https://www.facebook.com/business/GDPR
• Instagram: https://help.instagram.com
• Linkedin: https://www.linkedin.com/legal/privacy-policy
• Youtube: https://www.youtube.com/intl/en-GB/yt/about/policies/#community-guidelines

• Comments on social media

There is a possibility to submit comments on the social media owned by the Company. The Company has no general obligation to control the content submitted by the users of these media, however it makes efforts to ensure a secure online environment. The Company has the right to remove any kind of content deemed to violate the terms of use of the website, such as abusive, obscene, pornographic, threatening, defamatory or infringing intellectual property rights or contains a false statement about the user, maintaining at the same time the possibility of excluding users who submit it.

6.USE OF COOKIES

This website, like other websites, uses cookies.

Our website uses strictly necessary cookies for the operation of the website, as well as non-strictly necessary cookies, which you can select by your own positive action – consent.

For more information, click on Cookies Policy.

For settings regarding cookies please click here

7.USE OF GOOGLE MAPS

On our website, we use the Google Maps API application in order to visually represent geographic information about our company. When you use Google Maps, your data – regarding the use of their function by the visitor- are collected, processed and used by Google. We declare that we do not bear any responsibility, nor do we provide any guarantee for the accuracy of this Google Maps content. For further information on data processing by Google Maps, please refer to Google’s protection policy, https://www.google.com/intl/el-GR_GR/help/terms_maps/ , which can be found below the map which exists on our website, with the indication Terms of Use.

8.MINORS

The content and services of this site are exclusively for people over 18 years old.

The Company does not knowingly collect any information about people below this age limit. If you are under 18 years old, you are not allowed to submit to us your details in any way.

If personal data relating to minors are reported and verified, we immediately delete all relevant information. This deletion is valid under the reservation of the need to comply with the data in case of establishing, exercising, or  defending our legal claims, or the provision of consent by the legal representative of the minor.

9.DATA SOURCE

The Company collects and processes directly from the user / visitor the Personal Data when he/she:

-uses the contact form, telephone lines of the Company, communication via e-mail (paragraph 2)

-has a previous commercial relationship with the Company in order to send him/her a newsletter (paragraph 3)

-sends a CV and / or job application to the email address [email protected]  (paragraph 4)

-uses the Company’s social networking platforms (paragraph 5)

-activates the non-strictly necessary cookies (paragraph 6).

The Company collects Personal Data by automated means:

-because of the nature and the way of internet operation, as soon as the visitor / user visits the website, when our server registers its IP address and the other data mentioned in paragraph 1 “Upon entering the Website”, from the strictly necessary cookies (paragraph 6).

10.RECIPIENTS / PERSONS RECEIVING KNOWLEDGE OF PERSONAL DATA.

The following indicatively and not restrictively mentioned categories have access to personal data, depending on the purpose of processing:

1. The Management of the Company.
2. The competent employees of the Company.

• Persons or legal entities who offer services to our Company, such as the providers of IT services of the Company (IT), the providers of hosting and management of the website, e-mail, social media, e-mail distribution (news letter), legal advisors of the Company, bailiffs.

1. Technology Providers (such as third party cookies providers, social networking platforms, etc.).
2. Public authorities or services, judicial, prosecutorial and investigative authorities, when the transmission or disclosure of data is required by law, by a domestic or foreign court decision or by a decision of another Authority, accredited mediators and mediation centers, arbitral tribunals and alternative dispute resolution bodies.
3. Persons or legal entities who have and demonstrate a legal interest and in accordance with legal procedures.

The Company, where required, concludes relevant contracts with persons or legal entities, which process your data and which act as processors of the processing, ie processing personal data on its behalf.

We transmit all the data that are necessary for the purposes of each processing. In each transmission we take every measure so that the data that will be transmitted are always the minimum necessary.

In the event that the transmission concerns a country outside the European Union (EU) or the European Economic Area (EEA), the transmission is based on appropriate guarantees and in accordance with applicable data protection legislation, in order to maintain the required level of protecting your personal data.

11.SUBJECT RIGHTS

As a data subject you have the following rights, under the reservation of the applicable law:

• access right (to find out what data we are processing, why your data categories and recipients and / or categories of recipients)
• request right (to correct any deficiencies or inaccuracies of your data)
• recognition right (right to forgiveness) (deleting them from our records, if they are no longer needed),
• right to limit processing (in case of questioning the accuracy of data, etc.),
• the right of portability (get your data in a structured and commonly used format, for what data is kept in an electronic file),
• the right of objection (for reasons relating to your particular situation in the case your personal data is processed for the purposes of the Company’s legitimate interests)
• request to revoke (you have the right to revoke your consent at any time, as appropriate, without prejudice to the legitimacy of the processing based on it until its revocation).

The potential exercise of these rights and any clarification regarding your personal data is made at no cost for you:

• by submitting a written letter to the email address: [email protected]
• in person or with a relevant letter to the Company (31, Georgiou Kouvidis str. Branch, Elefsina, PC 192 00).

Exceptionally:

-For the revocation of the consent regarding the installation of the non-strict necessary cookies, you can unselect them from the relevant pop- up window, here. This recall will not have a retroactive effect on the processing done so far.

– If you wish not to receive a newsletter from the Company and to exercise your right to object, you can select by clicking on the option “unsubscribe from this list”, which is available in each newsletter of the Company.

Each request submitted must be accompanied by the appropriate identification evidence. The Company may request the provision of additional information necessary to confirm your identity. In the event that you have authorized a third person to apply for a right of exercise, that person must bring the appropriate legal documents (such as a proxy or authorization certified by a Public Authority).

If your claims are manifestly unfounded or excessive, especially because of their recurring nature, then we have the option of either:

1. imposing a reasonable fee, taking into account the administrative costs of providing information or

1. refusing to follow up on the request.

If you exercise any of these rights, we will take all possible measures to satisfy your request within one month of receiving the relevant request, after informing you either of its satisfaction or of the objective reasons that prevent its satisfaction. The above deadline may be extended by another two months, if required, considering the complexity of the request and the number of requests, after informing you.

Your above rights are restricted for the reasons provided by applicable law.

A refusal of the Company or an unjustified delay in the satisfaction of your claims in the exercise of your rights, entitles you to address to the Personal Data Protection Authority as the competent supervisory authority for the enforcement of the GDPR and before the competent judicial authorities.

CONTACT WITH THE PERSONAL DATA PROTECTION AUTHORITY

If you believe that your rights regarding the protection of your personal data are being infringed, you have the right to file a complaint to the Personal Data Protection Authority, at its postal address (Personal Data Protection Authority, Offices: 1-3, Kifissias Str. 115 23, Athens, tel. 210 6475628, email: [email protected]  fax: + 30-210 6475628, www.dpa.gr ).

12.PROCESSING SECURITY

The Controller acknowledges the importance of the security of Personal Data. For processing, we take all modern and appropriate technical and organizational measures, the response of which is checked at regular intervals, in order to ensure maximum security.

13.RETENTION OF PERSONAL DATA

The Company will maintain and process the above personal data for as long as is required to serve the aforementioned processing purposes, to comply with its legal obligations (such as tax, commercial law), to resolve judicial or extrajudicial disputes, in accordance with the current legal framework.

Especially for job applicants, the Company will keep your personal data for a maximum period of two (2) months from the receipt of the application, taking into account our need to evaluate your application. After the end of the evaluation and the non-commencement of our cooperation / your recruitment, the Company is responsible for the safe destruction of your data, unless a shorter or longer period of retention of your data is provided by law or regulations, in which case the above period of data retention will be reduced or increased accordingly or unless judicial or extrajudicial actions are underway with the Company, which concern you directly or indirectly, in which case the above data retention time is extended until the resolution of the dispute.

In case of expiration of the retention period your data will be deleted safely.

14.AMENDMENTS – REVISIONS

The Company reserves the right to modify and update this Information, when necessary, based on its current policy for the protection of personal data and within the applicable legal and regulatory framework, which Information will always be available up to date, on the Company’s website, www.petrakis-transport.gr .

VERSION 2.2: 08.06.2022.