Personal Data Protection Policy
MICHAIL ARAMPATZIS FOOD S.A.
For the company “MICHAIL ARAMPATZIS S.A. INDUSTRIAL & TRADE COMPANY OF FOOD” (hereinafter referred to as “COMPANY” or “Company”), as the controller, is committed to respecting and protecting your personal data. We understand and take seriously the fact that you are aware of and interested in the reasons why we process your personal data.
This Privacy Policy describes the personal data collected by COMPANY, how we use and protect them and the choices you have regarding the way we use these data.
The purpose of this COMPANY Policy is to inform you of our policy regarding your personal data that you provide to us, so that you are aware of the purpose of their processing by us, whether you are obliged to provide us with the relevant data, the categories of recipients, if any, whether we make automated decisions or profiles and the procedures you can follow to exercise your legal rights.
We recognize that the protection of personal data is an ongoing responsibility and therefore we shall periodically review this Policy to ensure that it is up to date and accurate. Please visit our website from time-to-time https://www.elzymi.gr to ensure that you are aware of and satisfied with any changes
More information about the processing carried out by COMPANY and your rights can be found in the next section of this Policy.
Data Protection Officer
The Data Protection Officer (DPO) of the COMPANY is Georgios Nikopolidis. In case of doubt about any term of this Privacy Policy or to exercise your rights, you can contact us by e-mail at the following e-mail address dpo@elzymi.gr or by post to the address 1st Street, Block 24, INDUSTRIAL AREA OF THESSALONIKI (BI.PE.TH.), P.O. Box 1238, P.C. 570 22. Please mark the envelope “For the Data Protection Officer”.
What personal data do we collect from you?
When you visit our website and the Company’s social media accounts and in any communication with us, the COMPANY may collect personal data:
When you sign up to receive informative or other promotional material: You provide us with your email address, your first and last name, enabling us to personalize our direct, non-transactional, communication with you.
When you take part in contests, questionnaires and surveys, when you fill in forms for questionnaires, surveys or contests, you provide us with your personal data including but not limited to: your name, address, email, telephone number.
When contacting customer service staff: When you contact us by email, telephone or post, for example, when you contact our customer service department, you will be asked to provide us with your personal information: name, email address, etc. Providing the above personal data is in no way mandatory. However, failure to provide the data that have been identified as mandatory will prevent you from visiting and browsing our website. The failure to provide the other, non-mandatory, personal data may in no way affect the provision of services by us.
The COMPANY does not collect or process personal data of minors.
How do we collect your personal data?
We collect your personal data when you express your interest in our services, when you use our contact form or when you subscribe to our newsletter.
We also collect your personal data by automated means, such as when you visit the company website, when you communicate via e-mail or other electronic communication.
Who else will receive your personal data?
Your personal data are not processed by third parties, except by those with whom we cooperate and who are necessary or facilitate the provision of our services to you, but always under conditions that fully ensure that your personal data are not subject to any unlawful processing, i.e. any processing other than the purpose of the transfer in accordance with the above.
As part of our activities, we use third party providers who provide services on our behalf. We inform you that the above categories of recipients of your personal data are processors on our behalf and therefore as such do not process your data beyond the purposes of the transfer mentioned above.
In any case, our Company will not forward or disclose personal data of visitors/users of its website to third parties, except those mentioned above, without the consent of the visitor/user, with the exception of the enforcement of relevant legal dictates to the competent authorities alone.
In any case, unauthorized persons, including our employees, are prohibited from accessing your personal data.
Why do we use (process) your personal data?
The Company collects, stores and processes only the personal data that are the minimum and strictly necessary to achieve the purpose of processing.
We use your personal data for the following purposes:
For direct marketing and/or promotional purposes, such as participation in contests or emails that we periodically send to those who have subscribed to our newsletter. In each newsletter, the recipient is given the opportunity to indicate that he or she does not wish to receive any more newsletters from us through the unsubscribe option or via e-mail at info@elzymi.gr
Where the processing of your personal data is necessary for the purposes of our legitimate interests or for the purposes of complying with national and European legislation.
How long do we keep your personal data?
We will retain your personal data for the period deemed strictly necessary to fulfil the purposes described in this policy, unless a longer period is required or permitted by law.
For the purposes of direct marketing/promotional activities, we will retain your personal data for three (3) years during which you retain all of your rights under applicable data protection legislation and as set out in this Policy. At the end of the three-year period, we will ask you to give your consent to the retention of the data again, otherwise it will be deleted.
Our Company may continue to store your personal data for a longer period if this is necessary to protect its legitimate interests in relation to possible liability related to the provision of the service.
Legal Basis of Processing
The collection, use and general processing of Personal Data is carried out with consent or if permitted by law. A legitimate ground for processing beyond the consent of the Subject is the performance of our contractual relationship as well as the legitimate interest of the COMPANY or its compliance with a legal obligation and any other grounds provided for in Article 6 of the GDPR, as well as national legislation. In any case, if you wish to be informed about the legal basis according to which we process your personal data, or if you have any objections in this regard, you can contact us at dpo@elzymi.gr or by post to 1st Street, Block 24, INDUSTRIAL AREA OF THESSALONIKI (BI.PE.TH.) P.O. Box 1238, P.C. 570 22 for further clarification.
Guarantees we receive for the protection of your data
When you provide us with your personal data, we take steps to ensure that it is processed securely. In order to protect your personal data, we take adequate physical, technical and organizational measures to protect it. We update and test the security technology we use on an ongoing basis. We restrict access to your personal data to only those employees who need to know such data to fulfil the purposes described in this policy.
In addition, we train all employees on the importance of confidentiality and maintaining the privacy and security of your personal data. Among other things, we have implemented the following technical and organizational measures and procedures to protect your personal data from any loss, alteration, unlawful processing or modification:
– access to your personal data is limited only to the number of persons authorized for the purposes in question
– access to the IT systems used for the processing of data is ensured only for authorized persons
– access to these IT systems is monitored to detect and prevent unauthorized access immediately
– use of computer information systems and computer programs installed in a way that minimizes the use of personal and/or authentication data of the user.
– adoption of individual procedures for the retention of personal data and their secure deletion/destruction.
– periodic checking and deactivation of inactive accounts.
Your rights
You may exercise the following rights in accordance with the terms and more specific provisions of Regulation (EU) 2016/679:
Right of access to your personal data that we process and to information relating to the processing.
Right to rectification of your personal data, i.e. the right to correct any inaccurate data.
Right to object to the processing of your personal data where there is a legitimate interest, including your right to object to automated processing of your data and processing for marketing purposes.
The right to restrict the processing of your personal data, which means to request its suspension if you question the accuracy of the data, object to its processing or if there is another reason provided for in the relevant Greek or European legislation on the protection of personal data.
Right to portability of your data, i.e. to receive your personal data that you have provided to us with your consent, to use it elsewhere.
The right to erasure / right to be forgotten of your personal data without undue delay upon your request, which shall be granted provided that there is no other legal basis for processing (such as, but not limited to, the obligation to process personal data imposed by law) and under the conditions set out in the relevant Greek and European legislation on the protection of personal data.
Right to withdraw consent. Where we process your personal data on the basis of your consent, you also have the right at any time to withdraw, with future effect, your consent or to change the degree of consent you have given, without affecting the lawfulness of the processing for the period prior to the withdrawal of your consent. In case of withdrawal of consent, the Company may further process the personal data only in cases where there is another legitimate reason for the processing.
Right to be informed of incidents of infringement.
The right to lodge a complaint with the competent Greek independent authority, which is the Hellenic Data Protection Authority, in case of unlawful processing of your data (complaints@dpa.gr).
To exercise your rights, you can send us your request by filling in the relevant form, either to the postal address of the Company MICHAIL ARAMPATZIS S.A. FOOD, 1st STREET, Block 24, INDUSTRIAL AREA OF THESSALONIKI (BI.PE.TH.), P.O. Box 1238, P.C. 570 22, Tel. (+30) 2310 723440 or to the e-mail address dpo@elzymi.gr with the heading “Exercise of the right of access/ rectification/ deletion/ restriction/ objection”, with a description of your request and we will make sure to examine it and reply to you within 30 days of receipt if this is feasible and no other reason exists, otherwise we will inform you of any extension of the deadline.
Transfer of personal data outside the EU
The personal data we collect from you is not transferred or processed outside the European Union.