INFORMATION NOTICE ON THE PROTECTION OF PERSONAL DATA

 

In order to access the service, you must declare that you have read the Notice on the protection of personal data by clicking the link at the bottom of the page.

 

The Company CALIN GROUP would like to inform you that the processing of your personal data, which is performed through the website calin.gr or which are collected through this contact form (the “Form”) shall be performed in compliance with current legislation on the protection of data (Regulation (EU) 2016/679 – hereinafter the “GDPR”) and the Website’s Privacy Policy.

 

 

  1. Data Controller and DPO

The Data Controller is the company CALIN GROUP, with registered office at 3, Metsovou Street, Neo Irakleio, Attica, telephone +30 210 684 0005 (the “Data Controller”).

You may contact the Data Protection Officer (“DPO”) at the following address [email protected]

 

  1. The Data we process

With your consent, we process the following common and sensitive personal data that you provide when you interact with the Website and use the services and functionalities it offers. Such data include, namely, your name and surname, your contact details, your professional skills, your financial data and the content of your specific requests or reports, as well as the additional data that may be obtained by the Data Controller, also from third parties, during its business activities (the “Data”).

You must consent to the processing of data marked with an asterisk (*), so that we may fulfill the requests you submit through the contact form and/or provide updates regarding adverse reactions. We cannot proceed without these mandatory data or your consent. On the contrary, information requested in fields that are not marked with an asterisk and your consent to receive informative material are optional: there are no consequences to their non provision.

In any case, even without your prior consent, the Data Controller may process your data in order to comply with the legal obligations deriving from laws, regulation and EU law, to exercise rights in judicial proceedings, to exercise its own legitimate interests and in all cases foreseen, on a case by case basis, by articles 6 and 9 of the GDPR.

Processing shall be performed both with computers and in printed form, and always in conformity with the security measures foreseen by the applicable legislation.

 

 

 

  1. Why and how we process your data

The data are processed for the following purposes:

  • so that we may handle the requests that you submit for the provision of information via the Website and the Form. The legal basis for the processing of personal data for this purpose is your consent (article 6 paragraph 1 letter a) and article 9 paragraph 2 letter a) of the GDPR).
  • so that we may handle reports of adverse reactions submitted through the Website or the Forms. The legal basis of the processing for these purposes is your consent (article 6 paragraph 1 letter a) and article 9 paragraph 2 letter a) of the GDPR), as well as the pursuit of any public interest in the financial management of assets and the shaping of credit policy (article 9 paragraph 2 letter i) of the GDPR).

additionally, but only with your prior consent, which forms the legal basis of the processing pursuant to article 6 paragraph 1 letter a) of the GDPR:

  • so that you may receive advertising material (direct marketing) from the Company.

By selecting the apposite fields, you agree to the processing of your data for those purposes.

 

Your data may at any time be processed, even without your consent, for purposes of compliance with laws, regulations and EU law (article 6 paragraph 1 letter c) of the GDPR), in order to obtain statistical data regarding the use of the Website and its proper operation (article 6 paragraph 1 letter f) of the Regulation).

 

Personal data shall be entered into the Company’s IT system in full compliance with the legislation on data protection, including security and confidentiality profiles, and based on the principles of correctness, lawfulness and transparency as to processing.

The data shall be stored for the period of time that is strictly necessary for the achievement of the purposes for which they were collected. In any case, the criterion used for the determination of such time period shall be based on keeping the deadlines set by the law and the principles of data minimization, storage limitation and reasonable management of records.

 

All your data will be processed by printed or automated means, in all cases guaranteeing the appropriate level of security and confidentiality.

 

  1. Persons who have access to the data

The Data shall be processed by electronic and manual means, in accordance with the procedures and practices related to the aforementioned purposes and shall be accessible to the personnel of the Data Controller who are authorized to process the Personal Data and their supervisors and, in general, employees who belong to the following categories: technical personnel, product managers, facility security personnel, and any other members of staff who must process the data in order to carry out their duties.

The Data may also be disclosed to countries outside the European Union (“Third Countries”): The Data may also be disclosed to countries outside the European Union (“Third Countries”): i) to institutions, authorities, public bodies for institutional reasons; ii) to professionals, independent advisors – working either individually or collectively – and other third parties and vendors who provide the Data Controller with the commercial, professional or technical services required for the operation of the Website (e.g. provision of IT and Cloud Computing services) for the aforementioned purposes and to support the Company in providing the services you have requested; iii) to third parties in the case of mergers, acquisitions, transfer of business or their branches, audits or other extraordinary actions.

The aforementioned recipients only receive the data that are necessary for their respective operations and duly process them only for the aforementioned purposes and in compliance with the laws on data protection. The Data may also be disclosed to the other legal recipients determined from time to time by the applicable legislation. With the exception of the above, the Data shall not be disclosed to third parties, natural or legal persons, that do not carry out commercial, professional or technical duties for the Data Controller, and shall not be disseminated. The persons receiving the data will process them, depending on the occasion, as Data Controllers, Data Processors or persons authorized to process the personal data for the aforementioned purposes and in accordance with the applicable legislation on data protection.

With regard to the transfer of data outside the EU, even in countries the laws of which do not guarantee the same level of protection of the confidentiality of the personal data as that provided by EU law, the Data Controller hereby informs you that the transfer will be made, in any case, in accordance with the modalities allowed by the GDPR, such as based on the user’s consent, based on standard contractual clauses that have been approved by the European Commission, by choosing parties that participate in international programmes for the free circulation of data (e.g. EU-USA Privacy Shield) or implemented in countries that the European Commission deems to be safe.

 

  1. Your rights

You may contact the Data Controller at the addresses above, at any time, to exercise your rights pursuant to articles 15-22 of the GDPR, e.g. to receive an updated list of the persons who have access to your data, to receive confirmation regarding the existence or otherwise of personal data that concern you, to control their content, origin, correctness and location (also in relation to any third country), to request a copy, to request their rectification, and, in the cases foreseen by the GDPR, to request the restriction of their processing, their erasure, to object to direct communication activities (including the limitation to certain means of communication), to receive advertising material (direct marketing) from the Company. Equally, you may always report remarks regarding specific uses of the data with regard to specific personal situations that are deemed to be incorrect or unjustified by the existing relationship with the DPO or to lodge a complaint with the Data Protection Authority. You may withdraw your consent at any time, without prejudice to the lawfulness of the processing performed before said consent was withdrawn.