Notification of Personal Data Processing in Accordance with Article 13 of Regulation (EU) 2016/679 (GDPR)
Dear valued user,
At EPAFOS we are pleased to welcome you to our website and would like to draw your attention to the following notice, which is issued in accordance with Article 13 of the Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data, as well as the free circulation of such data (GDPR).
Our Privacy Policy is founded on the relevant provisions of both National and Community Law. Specifically, we adhere to the National Law on the Protection of Personal Data and the Confidentiality of Communications, including N. 4624/2019 on the protection of personal data, L. 3471/2006 on the protection of privacy in the field of electronic communications, and the Regulations for Ensuring the Confidentiality of Communications of the A.D.A.E. as published in Official Gazettes 87 & 88/26-1-2005 and applicable P.D. 47/2005. Additionally, we comply with the European General Data Protection Regulation/GDPR – 2016/679.
As a visitor or registered member of our services on https://www.epafos.gr, you are subject to the provisions of Greek law (Law 4624/2019 on personal data protection as applicable, 3471/2006 on personal data protection in the telecommunications sector) and European law: Directives 2001/29/EC, 2000/31/EC and 910/2014/EC. By using our website, you agree and accept the processing of personal data in accordance with what is described in this statement.
This document outlines the processing of personal data carried out by the Data Processor through our website. Please note that the information provided only pertains to our specific website and excludes any website to which you may be redirected from it.
As a responsible data processor, EPAFOS IT SYSTEMS SINGLE MEMBER S.A. takes pride in managing the website and ensuring that your personal data is processed in accordance with the Regulation and other applicable legislation. Our one-person anonymous company, with VAT No: EL095345731 of the Tax Office: Commercial Companies’ Piraeus Office is headquartered at Eleftheriou Venizelou Avenue, No. 46-48, Kallithea Attica – P.O. 17676. You can reach us via email at www.epafos.gr or by phone at +30 210 69 90 401.
We understand the importance of protecting your personal data, which is why we have designated a representative for matters of personal data protection. You can contact our representative at
At our Company, we take the collection and processing of personal data seriously. First and foremost, we collect personal data directly from you. We do not obtain any information from third-party sources. Your personal data is provided to us when you visit our Website and engage in various activities such as searching for contact with our Company, submitting a CV, completing an offer form, placing an online order, providing feedback on our services, and subscribing to our newsletter.
We understand that your personal data is sensitive and private, which is why we only collect the information that is necessary to fulfill the service you have requested. Without this information, we would be unable to provide you with the level of service you deserve.
To ensure transparency and clarity, we would like to outline the purposes for which we process your personal data and the legal basis for such processing. The table below provides a comprehensive overview of the processing purposes, the categories of personal data involved, and the legal basis for their processing by our Company. We believe that this information will help you understand how we handle your personal data and provide you with the necessary assurance that we are committed to protecting your privacy.
| Processing Purposes | Categories of Personal Data | Processing Legal Basis |
| User Communication with the Company | Personal identifiers, contact information and data that the user communicates to us for this purpose | article 6, par. 1, sub. f - the processing is necessary for the purposes of the legal interests pursued by the Company and specifically the service of the user's request. |
| CV submission | Personal identifiers, contact information, resume content | Article 6, par. 1, sub. f - the processing is necessary for the purposes of the legal interests pursued by the Company and specifically the evaluation of any future cooperation with the user. |
| Offer form supplementation | Personal identifiers, contact information | Article 6, par. 1, sub. f - the processing is necessary for the purposes of the legal interests pursued by the Company and specifically to serve the user's request by formulating a financial offer for the service requested. |
| Service Evaluation- customer feedback submission | Personal identifiers, contact information | Article 6, par. 1, sub. f - the processing is necessary for the purposes of the legal interests pursued by the Company, specifically the improvement of its services. |
| Newsletter subscription | Contact details (email) | Article 6, par. 1, sub. f - the processing is necessary for the purposes of the legal interests pursued by the Company, specifically corporate promotion and communication. |
The www.epafos.gr website may use cookies to identify visitors / users of certain services and pages of the site, such as newsletters. Cookies are small text files that are stored on the hard drive of each visitor / user, without containing any information from documents or files on their computer. They are used to facilitate visitor / user access to specific services of the site, for statistical purposes to determine which areas of the network are useful or popular, or for marketing-related activities. Visitors / users of www.epafos.gr can configure their server to either warn them about the use of cookies in specific services of the site, or to not allow the acceptance of the use of cookies in any case. If a visitor / user of the specific services and pages of the site does not wish to use cookies for their identification, they will not be able to access these services.
EPAFOS website may collect the IP address through which the computer has access to the Internet and subsequently to the Network, exclusively for the purpose of gathering statistical information and for system security reasons.
EPAFOS website may record the content of messages sent by visitors / users of the relevant services exclusively for the purpose of determining violations of the terms of use and for no other purpose. The site cannot disclose the content of such messages to third parties unless the author of the messages agrees.
EPAFOS processes your personal data in a manner that ensures their protection by implementing all necessary organizational and technical measures for data security, protecting them from accidental or unlawful destruction, accidental loss, alteration, unauthorized dissemination or access, and any other form of unlawful processing.
To achieve the purposes described in the above paragraph 3, it is possible that your personal data may be disclosed to external service providers who have entered into agreements with the Company for this purpose, or, as the case may be, to other public authorities to satisfy your requests.
The Company does not transfer your personal data to a third country or international organization.
In this section, your rights regarding your personal data are presented. These rights are subject to certain exceptions, reservations, or limitations. Please submit your requests responsibly. The Company will respond to you as soon as possible and in any case within one (1) month from the receipt of your request. If the examination of your request requires more time, you will be notified accordingly. To exercise your rights, you can contact us at the email:
The Company ensures the unhindered exercise of the following rights:
You have the right to request and receive clear, transparent, and easily understandable information regarding how we process your personal data, in accordance with the Company's policies and procedures at any given time.
You have the right to access your personal data free of charge, in accordance with the Company's policies and procedures, except in the following cases where reasonable administrative fees may be charged by the Company:
You have the right to request the correction of your personal data if it is inaccurate or incomplete, in accordance with the Company's policies and procedures.
You have the right to request the deletion or removal of your personal data when it is no longer necessary for the purposes for which it was collected, or there is no lawful basis for its continued processing, in accordance with the Company's policies and procedures. The right of erasure is not absolute to the extent that there is a specific legal obligation or other legitimate reason for the Company to retain your personal data.
In certain cases, you have the right, in accordance with the Company's policies and procedures, to restrict or cease further processing of your personal data. In cases where processing has been restricted, your personal data remains stored without undergoing further processing.
You have the right to request the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and to transmit this data to another data controller, in accordance with the Company's policies and procedures.
You have the right to object, at any time and for reasons related to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the Regulation (processing for the legitimate interests pursued by the Company), according to the aforementioned provision. In such cases, the Company, as the data controller, shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.
The Company does not engage in automated individual decision-making, including profiling.
The exercise of your aforementioned rights requires the submission of a written request to the Company, in accordance with its respective policies and procedures. The Company reserves the right to respond no later than one month from the receipt of the request, in accordance with the terms of the Regulation and its policies and procedures.
Retention period of personal data
For each category of personal data, the Company determines the retention period of personal data in accordance with the provisions of the law for each category of personal data and its internal policies and procedures.
Protection of minors
Visitors / users of www.epafos.gr who are minors have access to the services of the site only with the consent of their parents or guardians and are not obligated to submit their personal information. In the event that such information is submitted by minors, the site deletes the relevant information.
Contacting the supervisory authority
For further information and advice regarding your rights or to file a complaint, you can contact the Hellenic Data Protection Authority:
Postal Address: Hellenic Data Protection Authority, Offices: Kifisias Avenue 1-3, Postal Code 115 23, Athens
Call Center: +30-210 6475600
Fax: +30-210 6475628
Email:
Revisions of this Privacy Notice
Our aim is to regularly review and update this Privacy Notice in order to comply with personal data legislation and new developments. Any updates to this Privacy Notice will be communicated to you promptly.