PRIVACY POLICY – PERSONAL DATA PROTECTION
For the company PAPPAS P. ANTONIOS SINGLE-MEMBER P.C., the protection of personal data is of primary importance and is treated with the utmost seriousness. Respect for the personal data we process and ensuring their proper handling is one of our company’s top priorities.
For this reason, we take all appropriate technical and organizational measures to protect the personal data we process and ensure that their processing is always carried out in accordance with the requirements set by the applicable legal framework (Law 4624/2019) and, most importantly, the General Data Protection Regulation (EU) 2016/679.
- DATA CONTROLLER – CONTACT INFORMATION
The company PAPPAS P. ANTONIOS SINGLE-MEMBER P.C. acts as the Data Controller for all personal data it collects, records, organizes, structures, stores, modifies, retrieves, processes, transfers, restricts, or deletes.
Company Name: PAPPAS P. ANTONIOS SINGLE-MEMBER P.C. (Trade Name: BENEFIT MS P.C.)
Address: Olymbou 1, Peristeri, Attica, 121 31, Greece
Phone: +30 210 5749871
Email: For matters related to the processing and management of personal data, you can contact us at [email protected]
- OUR WEBSITE
To better serve you, PAPPAS P. ANTONIOS SINGLE-MEMBER P.C. has created and manages the website https://www.benefitms.gr, which serves as the company’s online platform where you can stay informed about corporate news, events, and our services.
- DEFINITIONS (Article 4, GDPR)
“Personal Data”: Any information related to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
“Processing”: Any operation or set of operations performed on personal data or sets of personal data, whether by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.
“Profiling”: Any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
“Data Controller”: The natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the data controller or the specific criteria for its nomination may be provided for by Union or Member State law.
“Processor”: A natural or legal person, public authority, agency, or other body that processes personal data on behalf of the Data Controller.
“Consent of the Data Subject”: Any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.
- WHAT DATA WE COLLECT AND PROCESS
We collect and process personal data to provide product promotion and advertising services. We ensure that we collect only the necessary data, which is appropriate and relevant to their intended purpose.
To provide these services to its clients, PAPPAS P. ANTONIOS SINGLE-MEMBER P.C. collects and processes the following personal data:
- Data collected when creating a user account for our newsletter: Required: email address*, first name*, last name*.
- Information collected from cookies in your browser. Learn more about our use of cookies [here].
- Your social media username, if you interact with us through these channels, to help us respond to your comments, questions, or feedback.
- Educational background information, such as studies, skills, foreign language proficiency, and professional experience (only when applying for a job position).
- HOW WE USE YOUR DATA
We aim to offer you the best possible experience while using our website. To achieve this, we need to develop a complete understanding of your preferences by combining the data we collect. We then use this data to provide you with service offers that might interest you.
Data protection laws allow us to do so under our legitimate interest and the need to understand our customers to provide high-level services.
Of course, if you ever wish to change how we use your data, you can find details in sections 9 & 10 “YOUR RIGHTS REGARDING YOUR PERSONAL DATA” and “RIGHT TO LODGE A COMPLAINT WITH THE DATA PROTECTION AUTHORITY (DPA)” below.
Please note that if you choose not to share your data with us or deny certain communication rights, we may not be able to provide some of the services you have requested.
Finally, we inform you that your data is processed either by specially authorized personnel of our Company or through IT systems and electronic devices, either by our Company or, in exceptional cases, by third parties. These third parties, bound by confidentiality and data protection agreements, perform necessary tasks related strictly to the use of our website and services. More information can be found in section 7: “Who Are the Recipients of Your Data? How Are Your Data Shared?”
Below, you will find details on how and why we use your data:
For Website Service Provision
- Newsletter Account Creation: The Company processes your data to provide account functionalities and facilitate your updates.
- Communication: We use your data to respond to your requests, inquiries, or complaints. The information you share helps us manage your requests and respond as efficiently as possible. We may keep records of your communications with us to enhance our customer service experience. This is based on our contractual obligations, legal obligations, and our legitimate interest in providing you with the best service and improving our services based on your experience.
- Third-Party Service Providers: Sometimes, we need to share your data with a third party providing a service (such as a courier for delivery). Without sharing your personal data, we would not be able to fulfill your request. More details about how we share personal data with third parties are provided below.
- Job Applications: The Company processes your data to evaluate your qualifications and skills for the position you applied for or any other available position within the Company. Your data is also used to communicate with you regarding this purpose.
For Service Promotion and Marketing Purposes
- Sending newsletters/offers: With your consent, we will use your personal data, preferences, and transaction history to inform you via email, online platforms, phone, or social media about relevant services, personalized offers, discounts, etc. You can withdraw your consent at any time.
For Business Operations, Service Improvement, and Maintenance
- Developing and improving systems and services: We process your data based on our legitimate business interests to enhance the services we offer.
- Providing tailored offers and recommendations: We want to offer you deals and proposals that best match your interests. To achieve this, we combine personal data collected during our interactions to gain a broader understanding of you as a customer.
- Sending surveys and evaluations: We may ask for feedback to improve our services. These messages are not promotional and do not require prior consent when sent via email or SMS. We have a legitimate interest in conducting these surveys to enhance our services. You are free to opt-out of receiving these requests at any time.
For Compliance with Legal Obligations
- Fulfilling legal or contractual obligations requiring data sharing with authorities. For example, we may be required to provide data to legal authorities based on a court order.
- Sending legally required communication: These include notifications about changes to our services and updates to this privacy policy. These messages do not contain promotional content and do not require prior consent when sent via email or SMS. If we do not use your personal data for these purposes, we may be unable to comply with our legal obligations.
- PURPOSES OF PROCESSING & LEGAL BASES FOR PROCESSING
All of the aforementioned personal data is collected and processed for the purpose of providing advertising services. Some data may also be used for informational and commercial promotion purposes of PAPPAS P. ANTONIOS SINGLE-MEMBER P.C., always with the relevant consent.
The legal bases for processing the data may vary depending on the case:
- The performance of the contract between PAPPAS P. ANTONIOS SINGLE-MEMBER P.C. and its clients, for them to receive its services.
- The compliance of PAPPAS P. ANTONIOS SINGLE-MEMBER P.C. with legal and regulatory obligations that arise from the applicable legal framework governing its business activities.
- The promotion, safeguarding, and protection of the legitimate interests of both PAPPAS P. ANTONIOS SINGLE-MEMBER P.C. and its clients, in cases where it is necessary to support legal claims or defend our rights and interests before the courts. Legitimate interests include, among others, the development and improvement of the services provided by the Company, as well as the uninterrupted and continuously improved operation of the Company.
- The consent that may be given to us for our clients (existing or potential) to receive updates regarding the services of PAPPAS P. ANTONIOS SINGLE-MEMBER P.C., its business actions, and activities.
- WHO ARE THE RECIPIENTS OF PERSONAL DATA
Access to your data is primarily granted to the authorized employees of PAPPAS P. ANTONIOS SINGLE-MEMBER P.C., within the scope of performing their job duties (only the strictly necessary personnel of the Company). Our staff is bound by confidentiality agreements, as are the businesses we collaborate with or third-party service providers, who process your data as Data Processors on our behalf and in accordance with our instructions.
Your personal data may be transferred to third-party partners of the Company, always under the condition of confidentiality, integrity, and availability. For example, such partners may include (indicatively): accountants, commercial partners, transportation and delivery service providers, hosting, management, and maintenance of our data, email distribution, research and analytics, Google, Facebook, as well as providers responsible for managing certain services and functionalities. When we use third-party service providers, we enter into agreements that require them to implement appropriate technical and organizational measures to protect your personal data.
Additionally, data may be disclosed—where required and/or permitted by applicable legislation—to government authorities or public bodies to ensure PAPPAS P. ANTONIOS SINGLE-MEMBER P.C. complies with its legal (legislative, regulatory, judicial) or contractual obligations.
The policy we implement regarding those with whom we share your data includes (but is not limited to) the following principles:
- Providing only the information necessary for them to perform the specific services.
- Allowing them to use your data only for the exact purposes specified in our contract with them.
- Ensuring the protection of your privacy.
- Ensuring that once their services are no longer in use, any data they hold will either be deleted or anonymized.
Sharing by You
When using certain social media features on our websites, you may create a public profile that includes information such as your username, profile picture, and city. You may also share content with your friends or the public, including information about your interactions with the Company. We encourage you to use the tools we provide to manage social media sharing on the Company’s platforms to control the information you make available.
- DATA RETENTION PERIOD
We store data for at least as long as necessary to fulfill the processing purposes for which it was collected.
Some examples of customer data retention periods:
Advertising Project Orders:
When you place an order, we retain the personal data you provide for 5 years, ensuring compliance with legal and contractual obligations.
Newsletter:
Your consent declaration for receiving newsletters is stored for as long as the company sends newsletters and, in any case, no longer than 6 months after the newsletter’s termination.
Additionally, we retain data for the period required by the legal framework governing the company’s business operations.
If processing is based on your consent, personal data is retained until that consent is revoked. It is clarified that withdrawing consent does not affect the legality of the processing carried out before the withdrawal.
In all cases, PAPPAS P. ANTONIOS SINGLE-MEMBER P.C. implements appropriate technical and organizational measures to ensure the protection of personal data and continuously works to prevent unauthorized access.
- RIGHTS OF DATA SUBJECTS REGARDING THEIR PERSONAL DATA
Regarding the processing of your personal data, you have the following rights:
Right of Access
You have the right to know what data we hold and process about you, why we process it, and other supplementary information. You may also request a copy of your data.
Right to Rectification
You can request the correction, modification, or completion of your personal data.
Right to Erasure (“Right to be Forgotten”)
You may request the deletion of your personal data when processing is based on your consent. If processing is based on another legal ground (e.g., contract execution, legal obligation, or protection of the company’s legitimate interests), this right may be limited or not apply.
Right to Restriction of Processing
You may request a restriction on the processing of your data in the following cases:
- When you contest its accuracy, until verification is completed.
- As an alternative to deletion.
- When we no longer need the data for processing purposes, but you require it to establish, exercise, or defend legal claims.
- When you object to processing, pending verification of whether the company has overriding legitimate grounds.
Right to Object to Processing & Withdraw Consent
You have the right to object to the processing of your personal data when it is based on legitimate interest, as well as for direct marketing and profiling purposes. You may also withdraw your consent for processing at any time, which will apply moving forward.
Right to Data Portability
You have the right to request and receive your data in a structured, commonly used format for easy access and processing. Additionally, for data processed automatically based on your consent or contract execution, you may request direct transfer to another data controller, where technically feasible.
Right to Withdraw Consent
If processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing conducted before the withdrawal.
To exercise any of these rights, ask questions, file complaints, or request further information about personal data processing, you can contact us at [email protected].
We respond to requests free of charge without undue delay and within one (1) month of receipt. If the request is complex or we have received a high number of requests, we will inform you within the month if an extension of up to two (2) additional months is necessary.
If your requests are manifestly unfounded or excessive (e.g., repetitive requests), the company may charge a reasonable fee or refuse to process the request.
- RIGHT TO LODGE A COMPLAINT WITH THE HELLENIC DATA PROTECTION AUTHORITY
You have the right to file a complaint with the Hellenic Data Protection Authority (www.dpa.gr) regarding the processing of your personal data.
Applicable law is Greek Law, as shaped by EU General Data Protection Regulation (GDPR) 2016/679 and other relevant national and EU legislation on personal data protection.
Any disputes related to your personal data will be settled in the Courts of Athens.