1.1 In order to manage our cooperation relationship and/or our contractual relationship, our company, named BIOSOLIDS S.A. (hereinafter referred to as the “Company”, which has its registered office in Kalochori, Thessaloniki (6 Karavaggeli St), will collect and use your personal information in electronic and/or hard copy format.
1.2 This notification intends to provide you with information on how the Company manages your personal data, as well as on your rights as data subjects.
2.1 The legal basis and necessity which the processing of the personal data of the data subjects is based on is, in this case, the fulfilment of the Company’s obligations and rights under the terms of the existing contract / transaction relationship between us and/or the legal obligations and rights under the law, or the satisfaction of the Company’s legitimate interests, such as the pursuit of legitimate business purposes.
3.1 The Company, with regard to your personal data which it collects, acts as Controller within the meaning of Regulation (EU) 2016/679 (hereinafter referred to as the “Regulation”). The purposes and manner in which your personal data are collected, processed and used and/or may be communicated to third parties by the Company are specified by this Policy/Statement of Notification.
4.1 In the context of the existing relationship between us, we will collect simple and potentially sensitive personal data, such as, indicatively:
4.2
(i) Name/Company name, contact details of the data subject and other identification data such as, indicatively, telephone number (mobile and fixed), fax, Tax Identification Number, Tax Office, postal address, email.
(ii) Data of a financial nature, such as credit/debit card details, bank account details and other relevant billing information.
(iii) Any other information you disclose to the Company on your own initiative under the aforementioned communication and your transaction relationship with us.
4.3 Data provided by you to the Company regarding other persons (e.g. your partners etc.) will be processed by us according to the terms of this Statement. You are responsible for the accuracy of this data and information and you must also ensure that the above subjects are informed about the personal data provided by you to the Company as well as about the way in which such data will be processed by the Company.
5.1 Your personal data will be used in the context and for the needs of serving and managing our cooperation relationship, in particular for the fulfilment of our obligations under the terms of our contract and/or the Company’s legal obligations, or for the Company’s legitimate business purposes.
5.2 The personal data that will be processed will be only those data that are relevant to and associated with a particular processing purpose and, on our part, we will always try to limit the use of your personal data to what is strictly necessary.
5.3 Your personal data may be used for the following indicative purposes:
(i) To manage our transactional relationship and monitor the course of our cooperation, including the conduct and monitoring of any financial transactions or the conduct of judicial as well as extrajudicial actions, where required;
(ii) For reasons of internal operational and IT service or for statistical and historical reasons;
(iii) To provide input to the Company’s commercial and accounting software and to fulfil the Company’s tax formalities as required by the law;
(iv) To improve our company’s operation and to communicate with you, always in accordance with the framework set by the applicable national and European legislation on personal data protection.
6.1 Your personal data will be made available only to duly authorised employees or, to a lesser extent, external partners of the Company (external accountant, transport companies, lawyer), who are charged with duties related to the management of our relationship and the execution of the transactions between us.
6.2 All the above persons are expressly prohibited from using your personal data for purposes other than those specified herein or from disclosing them with anyone and for any other purpose.
6.3 For strategic or other business purposes, we may decide to sell or transfer our business in whole or in part. In the context of such sale or transfer, we may transfer information that we have collected or stored, including your personal information, to each party involved in the sale or transfer.
6.4 By way of exception, we may disclose your personal information to third parties, including the competent police authorities and public prosecutor offices, only if there is a legal obligation to do so, or if we are obliged by decision/order of a judicial, regulatory or public authority.
7.1 The personal data that we collect are stored on secure servers located in Greece.
7.2 In the context of processing described in this Statement of Notification, we may assign the processing or disclose your personal data to third parties established in countries outside of the EEA. Therefore, your personal information may be processed by personnel that is operating outside of the EEA and is working for us or one of our suppliers. Said personnel may be working, inter alia, with the provision of support services.
7.3 Regardless of the country in which your personal data are disclosed, we will disclose your personal data only in those cases where there is a strict need to do so and always in accordance with appropriate security guarantees (such as the Approved Standard Contractual Clauses).
7.4 You have the right to request a copy of the above by sending an email to info@biosolids.gr.
8.1 We will keep your personal data for the period that is strictly necessary to achieve the purpose of their collection, but also in accordance with the relevant legislation. Your personal data that we collect in accordance with this Statement will still be kept after the termination of our existing cooperation, in order to ensure compliance with our legal obligations and to serve the Company’s legitimate interests. 8.2 Where your personal data are not necessary for the above purposes, they will be securely destroyed.
9.1 Without prejudice to the applicable legislation, you have the right of access, i.e. following your request you can be informed of whether or not your personal data are being processed and receive further information regarding this issue. 9.2 Moreover, you have the right to require the rectification of your inaccurate personal data or to notify us of the alteration of any of them. Furthermore, if the conditions of the law are met, you have the right to erasure, the right to restrict the processing, the right to the portability of your data and the right to object to the processing. 9.3 To the extent that processing is based on your consent, you may withdraw your consent at any time, without prejudice to the lawfulness of the processing that was based on your consent prior to its withdrawal. 9.4 Finally, you may submit a complaint to the competent Data Protection Authority. 9.5 You may exercise the above rights by contacting the aforementioned email address info@biosolids.gr. 9.6 If such a request submitted by you results in the breach of your legal or contractual obligations, or would jeopardise the performance of our obligations or the safeguarding of our legitimate interests, there is a possibility that your request might not be accepted.
10.1 We undertake that the Company has the appropriate technical infrastructure and has adopted internal procedures in order to protect the integrity and security of all our information, including your personal data.
11.1 If you have any questions regarding this Company Statement or if you wish to exercise one of your rights as a data subject, you can do so by contacting us at the email address info@biosolids.gr. 11.2 The person within the Company who is responsible for supervising compliance with the Regulation and the content of this Statement is Ms Anastasia Savvaki, whom you can contact not only at the aforementioned e-mail address but also at the telephone number 2310 538799, or by sending correspondence expressly addressed to the Company and with its details as the recipient, at the address of the Company’s registered office that is stated at the beginning of this document. 11.3 Only your written communication with the Company will constitute proof of its content.
12.1 If we modify this Statement of Notification, we will communicate the revised statement with an updated revision date. In case of significant changes to the Company’s Statement of Notification, which significantly differentiate our personal data protection practices, we will inform you by posting a relevant notice on the corporate website.
13.1 If you have any objection or even doubt as to the content of this Statement or need any clarification regarding it, you may communicate with us as specified in Article 11.