PERSONAL DATA PROTECTION POLICY

Anagnostou D. & Co LTD’s Personal Data Protection Policy

It is a fundamental right of natural persons to the protection of the processing of their personal data, based on Article 8, paragraph 1 of the Charter of Fundamental Rights of the European Union ("Charter") and Article 16, paragraph 1 of the Treaty on the Functioning of the European Union. And as of 2018, the European Parliament's new General Data Protection Regulation (GDPR) has been in force with a stricter framework for the protection of individuals with regard to the processing of personal data.

The term "personal data" refers to information of natural persons, name, full name, home address, email address, contact telephone number, salary amount, bank account details, etc. which identify or can identify the identity of a natural person. The company Anagnostou D. & Co LTD takes all necessary organisational and technical measures in order to fully ensure the privacy and security of personal data, in accordance with Greek and European legislation.

Thus, personal data is collected and processed only in accordance with the above regulations and where this is required for the smooth operation of employment relations and the Company's business activity. Only authorised persons of the Company are allowed to have access to it in order to protect the data from loss, mishandling, unauthorised access, modification or disclosure.

Retention of personal data

Our company retains personal data of individuals for as long as the reasons (tax, insurance, etc.) for which they were collected are valid or as long as required by legal obligation or protection of the company's interests by a relevant legal provision.

Deletion of personal data

Personal data of individuals are destroyed or deleted in accordance with applicable law when their retention is no longer required to fulfil the purposes for which they were originally collected.

Rights of natural persons

Natural persons have the right to access, retrieve, rectify, challenge, restrict or delete their personal data or even to complain to the Data Protection Authority.