PRIVACY AND PERSONAL DATA POLICY

Information on Processing of Personal Data

Introduction

The limited company under the name “OMIROS SA”, based in the Municipality of Katerini, 4th km PEO Katerini – Thessaloniki, email: info@omiros-sa.com , tel: 23510 91611, website: https://omiros-sa.com/ , informs you according to Regulation (EU) 2016/679 and the provisions of the relevant Greek data protection law, in its capacity as controller, that the company processes your personal data collected directly from you at the pre-contractual or contractual stage of our cooperation.

Data Protection Officer (DPO).

For any information regarding the processing of personal data, please contact the Data Protection Officer (DPO) directly: email: dpo@pas-consulting.gr , tel.: 2105230517, fax: 2105230281

WHICH PERSONAL DATA WE COLLECT

Personal information is information that can be used to identify or communicate with a person, as well as other information about that person. The personal information collected is the following:

a) Your identification data: full name, father’s name, TIN, IRS, distinctive business title / type, registered address. We collect this data directly from you and we may confirm it by displaying police ID, passport, or other appropriate document.

b) Your contact details: postal and email address, telephone number (landline or mobile).

c) Your financial information: payments, invoices etc.

d) Image data from the video surveillance systems of our offices, where there are relevant legal signs.

Why we collect your data and the purposes we process it for “OMIROS SA” collects and processes your personal data:

A. To execute a contract of sale between us or at a pre-contractual level. Such processing serves purposes such as your identification, pricing and communication with you both before and during our contractual relationship and after its termination. Thus, we may need to contact you by email or telephone for administrative purposes.

B. For the protection of you, of the employees and their property, of the facilities and in general of the property of “OMIROS SA”. Thus, we use closed-circuit television (CCTV) and security cameras to protect the safety of individuals (customers, associates, employees) and goods (materials and installations).

We do this based on our legitimate business interests. If we detect any criminal activity or alleged criminal activity through the use of CCTV, fraud and suspicious transaction, we will process this Data for the purpose of preventing or detecting illegal acts. Our goal is to protect our customers, associates and employees from criminal activity of any kind.

C. To comply with obligations imposed by Law, such as, for example, during pricing of your order and payment.

D. Our Company may search the Files of Liabilities, Mortgages, Annotations and Data of Companies from the Official Greek Gazette and the General Commercial Registry (GEMI) of TIRESIAS SA (Alamanas street No. 2 151 25 Maroussi, tel. 210 3676800) through the TSEK system (Tiresias risk checking system) for any data concerning you for the purposes of assessing and / or reassessing the underlying transaction risk regarding our contract and cooperation. Similarly, it may request relevant data from ICAP company. We do this based on our legitimate business interests with the aim of securing trade credit, credibility, security of transactions and the exercise of the right to financial freedom. For more detailed information on the data that can be extracted, the sources of data, the purpose of transmission and the rights of access and objection, please read the TIRESIAS SA policy, which is available online at www. tiresias.gr and the ICAP policy at www.icap.gr

E. Finding a Job: Our company processes your data to evaluate your qualifications and skills for the position you applied for or for another position within the company, as well as for communicating with you in this regard.

What is the legal basis for “Omiros SA” to process your Data

• Data protection laws specify a number of reasons why a company may collect and process your personal data, including the terms of our contractual relationship.

• Our Company’s obligations arising from the law (eg tax and insurance legislation)

• The legal interest of “OMIROS SA”. In certain cases, we collect your data in a way that is reasonably expected to be part of our business, without substantially affecting your rights, freedom or interests.

Where are your data shared

OMIROS SA will not sell or otherwise transmit or disclose any personal information of its customers to third parties that are not connected with it, except as stated below.

Only our Company staff, as well as third parties that provide services to the Company and who are bound to a confidentiality obligation, have access to your Data.

The data may also be disclosed:

– To third parties or public Authorities, to the extent necessary for the following purposes: (i) compliance with a state request, court order or applicable law, (ii) preventing illegal use of the websites, (iii) for our own protection against third party claims and (iv) to contribute to preventing or investigating criminal offenses (eg counterfeiting, theft).

– To partner financial institutions, to the extent required when submitting cheque dockets and other current transactions with them.

– To third parties providing services to the Company, such as lawyers / law firms (in the event of extrajudicial cases or judicial actions regarding legal claims of the Company or against the Company), credit insurance companies and their mediators. Such people, who act as the executors of the processing on behalf of our Company, are bound to full compliance with applicable legislations (European and National) for personal data and they have a relevant privacy policy.

Personal Data Retention / Storage Period.

In the event that you enter into a contract with our Company, your personal information will be kept for the entire duration of this agreement. In case of termination of the contract, “Omiros SA” shall keep your personal data for the period required by law during which public financial services and insurance organizations have the right to control our Company.

If legal action is ongoing with our Company or any related company regarding you directly or indirectly by the end of this period, this time period of keeping your personal data will be extended up to one year after the irrevocable court decision. If there is a shorter or longer time period for your data to be kept by provisions of the applicable legal framework, the above time will be reduced or increased for as long as the relevant provisions require. Unless the law provides for a shorter period of time, the above data shall be kept for twenty (20) years, equivalent to the statutory prescription period.

When processing your personal data is no longer necessary, your data will be destroyed in a way that is secure and can be proven.

What are your rights regarding your personal data

You have the following rights in relation to your personal data:

(a) Right of access. Know the categories of personal information we hold and process, their origin, the purposes for which they are processed, the categories of their recipients, their retention time, and your related rights.

(b) Right to rectification. Request the rectification or addition, modification or updating of your personal data so that they are complete and accurate, providing any necessary documents that indicate the need for rectification or addition.

(c) Right to restriction. Oppose to any further processing of your personal data: (a) when you contest the accuracy of your personal data and until verification is made, (b) when you oppose to the erasure of personal data and request, instead of erasure, the restriction of their use, (c) when personal data are not needed for the purposes of processing, but they are required for the establishment, exercise or defence of legal claims and (d) when you object to the processing and until verification that there are legitimate grounds concerning us that override the grounds for which you object to the processing.

Ask for the restriction of processing of your data for as long as your processing objections are pending.

(d) Right to object. You may at any time object to the processing of your personal data where, as described above, it is necessary for the purposes of legitimate interests that we pursue as controllers,

(e) Right to be forgotten. Request the erasure of your personal information from our records. In all other cases (such as, where there is a contract, an obligation to process personal data required by law, public interest), such right is subject to specific restrictions or does not apply, depending on the case.

(f) Right to data portability. Request your data to be transmitted to another controller or receive them in a readable format free of charge. This right exists for the data you have provided to us and are processed by automated means with your consent or under contract.

Please note that:

(i) Your rights under (c), (d) and (e) may not be satisfied, in whole or in part, if there are other compelling and legitimate reasons that prevail over your right or if they relate to data necessary to establish, exercise or defense legal rights or the fulfillment of the Company’s obligations, such as the drafting and continuation of our contract.

(ii) The exercise of the above rights is valid for the future and does not relate to data processing already performed.

(g) File a complaint with the Data Protection Authority (www.dpa.gr , Call Center: +30 210 6475600, Fax: +30 210 6475628, email: contact@dpa.gr ), if you believe your rights are being infringed in any way.

To exercise any of the above rights, but also for any questions regarding the processing of your personal data, you may contact the Data Protection Officer (DPO) in writing: PASIAL CONSULTING, mailing address: Mitropoleos 3 PC 10557, Athens, email: dpo@pas-consulting.gr , tel.: 2105230517, fax: 2105230281

“Omiros SA” shall make every effort to respond to your request as soon as possible and in any case within thirty (30) days of its submission. This deadline may be extended for thirty (30) more days, if necessary, at our sole discretion, taking into account the complexity of the request and the number of requests. “Omiros SA” shall notify you in the event of extension of the deadline within thirty (30) days. The above service is provided free of charge.

In the event, however, that the subject’s claims are manifestly unfounded, excessive or repetitive, “OMIROS SA” may either impose a reasonable fee on the Customer/ data subject by informing him/her or refuse to respond to his/her request(s).

Privacy

Recognizing the importance of securing your Personal Data, “Omiros SA” applies appropriate organizational and technical measures for the security and protection of your Data against accidental or unlawful destruction, loss, corruption, prohibited dissemination or access and any other form of illegal processing.

In any case, the nature and operation of the Internet cannot guarantee that unauthorized third parties will never be able to violate applicable technical and organizational measures gaining access to and possibly using personal data for unauthorized or unfair purposes.

Validity and Interpretation of Terms.

The above terms apply and are interpreted in accordance with applicable national and European laws and regulations on personal data protection. “OMIROS SA” reserves the right to change the terms of personal data protection in accordance with the applicable legal framework.

Consequently, these privacy policies may be revised and updated at any time without notice, but shall always be published on our website: https://omiros-sa.com . Please, review these Terms and Conditions regularly for any changes, as continuing our contractual relationship and the overall use of our services implies that you accept any changes to this Policy.

We encourage you to read this Policy from time to time in order to know how your Data is protected. This privacy policy was last modified on 30-6-2019.