Privacy Statement

WHO WE ARE

As the person in charge of processing, the NPDD Cave of Perama processes data of its employees, citizens (visitors), associates of natural persons or their employees, its suppliers, persons who use its website and the online platform of electronic accounts.

FROM WHERE WE RECEIVE YOUR DATA

The NPDD Cave of Perama receives the data which is processed mainly by the subjects-natural persons themselves. It can further obtain data through its partners-suppliers, or through published data from publicly accessible sources. For reasons that may relate to force majeure or legal obligation, the NPDD Cave of Perama can request data from public bodies, as long as it has a documented legal interest and following the legal procedures.

YOUR PERSONAL DATA - TREATMENT PURPOSES

The NPDD Perama Cave processes simple personal data such as identification data, contact data, financial data, education data, personal status data, etc. It also processes special categories of data, such as health data - certificates of disability (for reduced costs) and data related to court decisions and criminal records (for tenders for supplies, services, etc.).

The reasons that the NPDD Cave of Perama processes your data can be:

• Personnel management procedures (recruitment, licenses, payroll, etc.).
• Citizen-consumer management procedures (contracts, bill receipts, settlements).
• Partner / supplier management procedures (contracts, payments, project progress monitoring, service evaluation, etc.).
• Communication procedures (sending electronic invoices, website use, customer management system, etc.).
• Procedures that have to do with our communication with you and the satisfaction of your requests, with the assurance of the quality and safety of the services provided, with our compliance with legal obligations in general.

LEGAL BASIS OF TREATMENT

• For the processing of simple personal data, the legal bases, according to which the NPDD Cave of Perama processes data, can be:
• The compliance of the body with a legal obligation, as it arises from Union or National Law.
• Processing that is necessary for the fulfillment of a public interest purpose.
• Your consent to one or more specific processing purposes.

Regarding the special categories of data, they are processed by the NPDD Cave of Perama based on:

• or your explicit consent,
• or because the processing is necessary for the performance of the obligations and the exercise of specific rights of the controller or data subject in the field of labor law and social security and social protection law, if permitted by the law of the Union or of a Member State or by collective agreement in accordance with national law providing appropriate guarantees for the fundamental rights and interests of the data subject,
• or because processing is necessary to protect the vital interests of the data subject or other natural person, if the data subject is physically or legally incapable of consent
• either because the elaboration is necessary for the establishment, exercise or support of legal claims or when the courts act in their jurisdiction,
• or because the processing is necessary for reasons of substantial public interest, under Union or Member State law, which is proportionate to the objective pursued, respects the substance of the data protection right and provides for appropriate and specific rights and interests of the data subject.

SHARING YOUR PERSONAL DATA

Your personal data is treated with complete confidentiality and security and is not disclosed further, except in cases where their disclosure may be required by the relevant legislation, or for reasons of protection of vital interests of persons or force majeure, in which case they may be disclosed to public services. judicial authorities or persons having jurisdiction over it. In case the NPDD Cave of Perama uses the executors of the processing on its behalf, it ensures that they provide the appropriate guarantees for the protection of personal data.

TIME OF KEEPING YOUR DATA

The NPDD Cave of Perama keeps your personal data for as long as the purpose of processing lasts and after its completion, for as long as it is imposed by legal obligations, arising from provisions of Union or National Law, or for as long as there are contractual obligations and possible legal claims between of the parties. In case of consent the processing stops with its recall.

RIGHTS OF SUBJECTS

As data subjects you have the following rights, subject to the inclusion of some of the exceptions set by the Regulation and all relevant legislation.

1) You have the right to request a copy of the personal data we hold about you. In particular, you have the right to receive confirmation as to whether or not your personal data is being processed and, if so, you have the right to be informed of the following information:

• the purposes of the processing,
• the relevant categories of personal data,
• the recipients or categories of recipients to whom personal data have been disclosed or will be disclosed, in particular recipients in third countries or international organizations,
• if possible, the period for which the personal data will be stored or, where this is not possible, the criteria for determining that period,
• the existence of a right to request the correction or deletion of personal data or a restriction on the processing of personal data or the right to object to such processing,
• the right to lodge a complaint with a supervisory authority,any available information about the origin of the personal data, in case it does not come from you but was obtained through a third party.
• the existence of an automated decision-making process, including the preparation of profiles and information on the logic followed, as well as the significance and intended consequences of such processing.

2) You have the right to request the correction of your personal data if it is found that it is inaccurate or to fill in the data that is kept if it is incomplete.

3) You have the right to request the deletion of your personal data when one of the following reasons applies:

• Personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
• you have revoked the consent on which the processing is based and there is no other legal basis for the processing,
• you have stated your opposition to the processing and there are no compelling and legitimate reasons for processing
• personal data have been processed illegally; (e) personal data must be
• deleted in order to comply with a legal obligation under EU law or domestic law
• personal data has been collected in connection with the provision of information society services.

4) You have the right to revoke your consent to the processing, at any time in cases where we process your personal data based on it.

5) In case your data is processed with consent or under a contract you have the right to request that we hand over your personal data or transfer it directly to another data controller.

6) You have the right to request a restriction on the further processing of your personal data in the following cases:

• if you dispute the accuracy of the personal data, for a period of time that will allow us to verify the accuracy of the personal data,
• if the processing is illegal and instead of deleting personal data you want to restrict their use,
• if the purpose of the processing has been completed but you wish to restrict it for reasons relating to legal claims,
• if you have objections to the processing and you have exercised the right to object to it for as long as it takes to verify whether the legal processing grounds take precedence over the reasons put forward by you.

7) You have the right to state your objection to the processing of personal data, at any time and for reasons related to your particular situation, including profiling, in accordance with the relevant provisions. As soon as your objection is declared, the processing of personal data ceases unless there are compelling and legal reasons for the processing which take precedence over the interests, rights and freedoms of the data subject or for the establishment, exercise or support of legal claims.

8) The data subject has the right not to be subject to a decision taken solely on the basis of automated processing, including profiling, which produces legal effects that affect or significantly affect it in a similar way.

MEASURES FOR THE PROTECTION OF YOUR PERSONAL DATA

The NPDD Cave of Perama implements appropriate technical and organizational measures for protectionyour personal data to prevent destruction, loss, alteration, unauthorized access, disclosure or transmission to an unauthorized person or entity in any way and to ensure their confidentiality, integrity and availability. It has a complete safety plan and procedures for managing safety incidents or disaster recovery. It has policies for the collection, use and processing of your personal data depending on the category to which you belong (employees, associates, citizens-consumers), as well as procedures for the satisfaction of your rights. The company binds its associates and employees with confidentiality and confidentiality clauses, as it commits itself, while it has incorporated in its contracts with external partners the requirements of article 28 of the GDPR.

DATA TRANSFER TO THIRD COUNTRIES OUTSIDE THE EU OR INTERNATIONAL ORGANIZATIONS

For the purpose of processing, your personal data is not transferred to countries outside the EU, and in case this happens will be modified and you will be notified again with the individual protection measures and related safeguards. For the use of web platforms or media you are further subject to these terms.

REQUEST PROCEDURE

For the exercise of your rights, for the application for a copy of the policy of the company to which you belong, for information and for any question in relation to the protection of your personal data, you have the possibility to submit a relevant request. The NPDD Cave of Perama undertakes to respond and provide the relevant information without delay within one month from the proven receipt of the request. This period may be extended by a further two months, if necessary, taking into account the complexity of the request and the number of requests. In this case the applicant will be informed within one month of receipt of the request. In case of inability to respond within the stipulated time frames, the applicant will be informed of its reasons within one month from the proven receipt of the request. The requests are checked for their size and repeatability per applicant for possible abuse in order to provide DEYA Trikala the rights of art. 12 par. 3 of the GDPR. The submission process is done only in writing by sending a relevant mail to dpospileoperama@ioannina.gr or by registered letter at the company's headquarters, 19 Spilaiou, Perama, Ioannina, 45500. Your request must include clear wording, your name and exact contact details (mail, phone, address). In case of inability to exercise the rights provided by the Regulation, but also in general, in case of questions, clarifications and complaints, you have the right to contact the Personal Data Protection Authority, for support and assistance. Contact Information: Postal Address: Personal Data Protection Authority, Offices: 1-3 Kifissias, PC 115 23, Athens Call Center: + 30-210 6475600 Fax: + 30-210 6475628 E-mail: contact@dpa.gr