Personal Data Protection Policy

 

The following Privacy Policy provides you with information about the processing of personal data by COGREXPO S.A. and describes how it protects personal information, as well as the procedure by which you as a natural person can exercise your rights. COGREXPO S.A. processes your personal data always with respect to the fundamental rights of natural persons, in accordance with the existing European and Greek legislation (including the General Regulation (EU) 2016/679, the Greek law N. 4624/2019 and any other relevant applicable legal text).

What is personal data?

Personal data is all information relating to an identified or identifiable person, called a data subject. Personal data contains information such as:

• Name
• Address
• Identity card/passport number
• Income
• Cultural profile
• Internet Protocol (IP) code
• Data held by hospitals or doctors (for the sole purpose of identifying a person for medical purposes).

Special categories of data

Personal data concerning the following characteristics of a person may not be processed:

• Racial or ethnic origin
• Sexual orientation
• Political opinions
• Religious or philosophical beliefs
• Participation in trade unions
• Genetic or biometric data and health data, except in specific cases (e.g. where you have given your full consent or where processing is necessary for reasons of substantial public interest under EU or national law)
• Personal data relating to criminal convictions and offences, unless permitted by EU or national law

TRANSFER OF DATA OUTSIDE THE EU

Όταν τα προσωπικά δεδομένα μεταφέρονται εκτός της Ε.Ε., η προστασία που παρέχει ο ΓΚΠΔ εξακολουθεί να ισχύει για τα εν λόγω δεδομένα. Αυτό σημαίνει ότι αν τα δεδομένα εξάγονται στο εξωτερικό, η επιχείρηση πρέπει να διασφαλίζει ότι τηρείται ένα από τα παρακάτω μέτρα:

• The non-EU country applies rules deemed adequate by the EU.
• The business takes the necessary steps to provide appropriate safeguards, such as including specific clauses in the agreed contract with the non-EU importer of personal data
• The company relies on specific arguments for the transfer (exceptions), such as the consent of the data subject.

PROCESSING OF PERSONAL DATA

Processing of personal data is any operation or set of operations which is performed, whether or not by automated means, on personal data or on sets of personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

CONSENT TO THE PROCESSING OF DATA

The GDPR lays down strict rules for processing data on the basis of consent. The purpose of these rules is to ensure that the data subject understands what he or she has actually consented to. This means that consent must be given freely, specifically and without ambiguity in a statement in plain and intelligible language. Consent must be given by an affirmative act, e.g. by ticking a box on a website or by signing a declaration.

 

Where consent has been given to process personal data, we can only process the data for the purposes for which consent was given. Finally, we should mention that the data subject has the possibility to withdraw his or her consent at any time.

PERSON RESPONSIBLE FOR PROCESSING YOUR DATA

Responsible for the processing of your data is COGREXPO S.A. - COGREXPO S.A. The contact details of SYNETATIRITIKES ELLINIKES EXPORTAGONES S.A. - COGREXPO S.A. are as follows:

- Postal address: 26 Arkadias Street, 115 26, Ampelokipi, Athens, Greece

- Telephone - phone: 210 77 50 213

- Email address: info@cogrexpo.com

RIGHTS OF THE SUBJECTS

Under the General Data Protection Regulation, you have the right to be informed about your personal data and the right to access them.

You also have the right to restrict the processing, rectification and erasure of the personal data concerning you and processed by us in accordance with this Statement. You also have the right to receive (right to portability) your personal data and to transfer it to another controller without any objection from us. You may also object to the processing of data for the purposes mentioned at any time and inexpensively, separately for each communication channel and with effect for the future, as well as to the creation of personalised usage profiles.

For the above purposes, any request by the subject should be addressed in writing to the COMPANY HELLENIC EXPORT COMPANIES S.A. - COGREXPO S.A. at e- mail: info@cogrexpo.com.

In case of your request, we have a notification obligation regarding the rectification or erasure of personal data or the restriction of processing in accordance with Article 19 of EU Regulation 2016/679.

We reserve the right to further processing if we can demonstrate compelling reasons requiring protection which override your interests, fundamental rights and freedoms or if the processing is necessary for the exercise or defence of legal claims.

In any case, you can submit your request, to which we are obliged to provide a reasoned reply.

We are obliged to respond to each request within one month of its submission. This time limit may be extended by a further two months if deemed necessary due to the complexity of the request and the number of requests. In the event of a delay in replying to the request, we are obliged to inform you of the reasons why we have not acted.

You have the right to complain to the Data Protection Authority if you are concerned about the way we have processed your personal data, visit the Data Protection Authority's website for more details at: http://www.dpa.gr/.

COLLECTION AND USE OF CHILDREN'S PERSONAL DATA

We do not collect and use personal data belonging to children under the age of 16.

If it is found that any personal information has been collected from a minor under the age of 16 without verifiable parental consent, this information will be deleted as soon as possible. If you believe that information may have been collected from a minor under the age of 16, please let us know by emailing us at info@cogrexpo.com.

OUR WEBSITE'S COOKIE POLICY

On our website we use so-called cookies in accordance with Article 6, paragraph 1, point f of Regulation EU 2016/679. Our interest in optimising our website must be considered as legitimate within the meaning of the aforementioned provision.

Cookies are small files that are stored on your terminal device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause damage to your terminal device, do not contain viruses, Trojan horses or other harmful programs. Information is collected in the cookie, which is generated each time depending on the specific terminal device used. This does not mean that we have direct knowledge of your identity through them.

The use of cookies is intended on the one hand to offer you a more comfortable use. For this reason, we use so-called session cookies to recognise that you have already visited individual pages of the website. These are automatically deleted as soon as you leave our website.

In addition, we use temporary cookies for the purpose of ease of use, which are stored for a specified period of time on your terminal device. If you revisit our website, we automatically recognise that you have already visited us, which entries / settings you have made, so that it is not necessary to perform the same actions again.

Please note that you can configure your browser so that cookies are not deposited locally and existing cookies are deleted immediately. If you wish to find out how to proceed with these settings in your Browser, please refer to the help options of your Browser or contact your software manufacturer directly.

This website may contain links to other websites which are under the responsibility of third parties (natural or legal persons). Under no circumstances shall the company COGREXPO S.A. be held responsible for the terms of protection and management of personal data which these websites follow.

DATA SECURITY

The company COGREXPO S.A. applies appropriate technical and organizational protection measures in order to prevent the loss, alteration, disclosure and use or access of your data in an unlawful manner. In addition, we limit the collection, processing and access to your data so that each employee and each partner processes the personal data strictly necessary for the performance of his/her tasks. We ensure that our employees and partners carry out each processing operation in accordance with our instructions and are committed to respecting relevant confidentiality conditions.

For any data breach of your personal data, COGREXPO S.A. will notify you and any competent authority of any breach when we are required by law to do so.