PRIVACY POLICY
The company under the name “EXPOSYSTEM S.A.”, headquartered at VIPE, Sindos Thessaloniki, P.C. 57022, tel. +30 2310 253160, ensures the confidentiality and privacy of your personal data and adopts the General Data Protection Regulation 679/2016 of the European Union in all procedures and stages of communication with you.
Purpose of this policy
This policy provides every person and every visitor/user of the Company’s website who wishes to receive clear and transparent information from the Company regarding the practices followed for the management and protection of personal data.
It concerns any act or series of acts performed with or without the use of automated means, on personal data or sets of personal data, such as collection, registration, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
This Policy is periodically updated and may be amended whenever deemed necessary, without prior notice, always within the applicable legal framework and according to any changes in the current legislation on personal data protection. Therefore, we recommend checking this Policy at regular intervals in order to be informed of any changes that may occur.
What are personal data?
Personal data are any information concerning a specific natural person or a person whose identity can be verified (e.g. name, ID number, address, etc.). Data related to health (physical or mental condition, receipt of medical services, etc.) are included in the general term “personal data” but constitute a special category of data.
How is your personal data collected?
Your personal data is collected in the following ways:
(a) When you submit a job application to the Company or send your CV. The provision of your personal data within the context of submitting a CV for employment consideration by our Company is naturally done voluntarily, as otherwise, it would not be possible to assess the likelihood of your hiring.
The processing is necessary in order to take steps at the request of the data subject prior to entering into a contract, according to Article 6(b) of the Regulation.
For more information, please refer to the CV Processing Policy.
(b) We receive it from third parties (e.g. exhibition organizers) having ensured that your consent for the transfer and processing of your personal data has been obtained. The processing of your personal data is carried out in the capacity of Data Processor.
(c) You provide it yourself when you complete the “Consent & Confirmation Form for the Use of Personal Data.” The submission of your data is optional, and the processing is based on your consent according to Article 6(a) of the Regulation, for the purpose of using them for promotional purposes.
(d) Automatically, through the browser or mobile device you use to access our website www.exposystem.gr
(e) When you fill in electronic forms (e.g., for our newsletter) or send an email to be informed about the services we provide through our website www.exposystem.gr. The submission of your basic information is optional and the processing is based on your consent solely for the purpose of informing you about our services, in accordance with Article 6(a) of the Regulation.
What types of personal data are collected and for what purpose?
The personal data collected and further processed may include:
– Identity data, demographic information, your address, and generally your contact details (including your email address and telephone number). The purpose of this collection is the execution of the contract between us, in accordance with Article 6(1)(b) of the Regulation.
– Identification data such as those contained in your curriculum vitae, information about your education, professional training, and work experience. The collection, processing, and retention of this data is based on your consent, in accordance with Article 6(1)(a) of the Regulation, and serves the exclusive purpose of evaluating and selecting candidates for potential employment within the Company. Your data is processed solely for this purpose and only by authorized personnel (e.g., the Accounting Department, Management, etc.).
– Identification, financial, tax, and communication data, such as Tax Identification Number (TIN), Tax Office (DOY), contact details, address, etc. The collection, processing, and retention of your data in these categories is necessary for the Company’s compliance with its legal obligations, pursuant to Article 6(1)(c) of the Regulation.
The Company shall not process your personal data without your consent. However, it reserves the right to process such data in exceptional circumstances to the extent permitted or required by law, or pursuant to court decisions or prosecutorial orders or directives.
Are your data disclosed to third parties?
Your personal data may be disclosed (in whole or in part, as appropriate) to the following indicative categories of recipients:
(a) Your personal data may be disclosed (in whole or in part, as appropriate) to the following indicative categories of recipients:
(b) specific members of our personnel involved in the recruitment process or contract execution, including departments such as Accounting, Management, Production, etc.;
(c) providers of data processing system support services;
(d) judicial, regulatory, or supervisory authorities, within the scope of their legal jurisdiction;
(e) third parties with a legitimate interest, for the establishment, exercise, or defense of legal claims.
Where your explicit consent is required for the disclosure of your data to third parties (i.e., where such disclosure is not legally mandated), such consent will be requested in advance, and you retain the right to withdraw it at any time. In such cases, the Company assures you that it remains vigilant and adopts all necessary security measures to ensure that any transfer of personal data is carried out in the safest possible manner.
The Company further commits not to commercially exploit your personal data by selling, renting, transferring, publishing, or otherwise disclosing it to third parties, nor to use it for any other purpose that may endanger your privacy, rights, or freedoms, unless such use is required by law, judicial or administrative order, or is contractually necessary for the proper operation of the Company’s website and services.
Your personal data may be transferred to associates or third parties who comply with the terms of this Policy and are bound by confidentiality obligations. These third parties shall act on behalf of the Company solely for the purposes of providing services, managing data, and technical support — but only after the user has been duly informed and their consent has been obtained.
Such third parties are contractually bound to use the personal data only for the above-stated purposes and not to transfer or disclose such data to any third parties unless legally obliged to do so.
How long are my personal data retained?
The retention period may vary significantly depending on the type of data and how it is used. The duration is determined based on criteria such as statutory retention periods, pending or potential legal disputes, intellectual or property rights, contractual obligations, operational guidelines, or archiving needs.
The Company is committed to retaining your CV for a period of six (6) months from the date it was received.
Tax-related data are retained in accordance with applicable tax legislation.
For the fulfillment of the processing purpose related to the performance of the contract and informing you about our services, a reasonable retention period is deemed to be the duration of the relevant commercial activity of the Company.
What are my rights regarding the processing of my personal data?
You have the right at any time to request:
(a) Access to your personal data,
(b) Correction of your personal data if it is inaccurate or incomplete,
(c) Deletion of your personal data, unless its processing is necessary for the exercise of the Company’s or third parties’ legitimate rights, the fulfillment of a legal obligation, reasons of public interest, or the defense of the Company’s legal rights before judicial or other authorities,
(d) Restriction of the processing of your personal data to specific purposes only.
To exercise any of the above rights, please use the “Rights Request Form” and send it either by post to the Company’s headquarters (VIPE, Sindos Thessaloniki, P.C. 57022, tel. +30 2310 253160), or via email to: exposystem@exposystem.gr, always stating your full contact details and the purpose of your communication.
Upon receiving your request, the Company will take all reasonable steps to fulfill it within one (1) month and will inform you in writing of either the satisfaction of your request or the reasons preventing its fulfillment, as well as any possible delay beyond the aforementioned timeframe, which will not exceed three (3) months. Furthermore, the Company will inform you of your further rights in the event of an inadequate response.
If you believe that the Company is in breach of the applicable personal data protection legislation in any way, you have the right to file a complaint with the Hellenic Data Protection Authority: http://www.dpa.gr, Kifisias 1-3, P.C. 115 23, Athens, Tel: +30 210 6475600, Email: contact@dpa.gr.
In such a case, we would greatly appreciate prior communication with the Company’s Management, either by post to our headquarters (VIPE, Sindos Thessaloniki, P.C. 57022, Tel. +30 2310 253160), or via email to exposystem@exposystem.gr), clearly stating your full contact details and the reason for your communication.
