Privacy and Protection notice regarding personal data

1. Who is responsible for your data – Where do you go to exercise your rights?

1.1. Responsible for processing your Data is “GLM HELLAS SA.”, based in the industry. Stavrochoriou – Kilkis and is legally represented, with a call center 2341 071 100 and e-mail contact info@glmhellas.com (“the Company”). For the exercise of the following rights (under 3.1 – 3.7) you can contact the contact email dpo@glmhellas.com .

2. General principles adhered to by the Company regarding transparent information

2.1. Any information we give you with this document as well as any information you may request from us in the future is provided free of charge, provided that the request is not repeated, in excess. or be manifestly unjustified (see more in 2.3.)

2.2. For each of the above rights exercised by the Company will respond to you within one (1) month of receipt of the request or in case of objective difficulty, complexity of the request or the number of requests, the Company will respond within a maximum period of three (3) months regarding either the termination of your application or the justified refusal to execute what you requested for legal reasons explicitly specified in European General Regulation 679/2016.

2.3. In case the Company deems that any of the above rights are exercised manifestly unfounded or the request is excessive or (much more) of a repetitive nature, it is entitled on the one hand to impose your charge with some reasonable end to provide further information (which is in principle free) and to refuse to follow up on the request.

2.4. In the event that the Company has reasonable doubts about your identity when you request the exercise of any of the above rights, it may request the provision of additional information necessary to confirm your identity before processing the request.

2.5. You reserve the right to revoke your (any) consent at any time by submitting your request document to the e-mail address dpo@glmhellas.com (see 1.1.)

3. What are your Rights in relation to the Personal Data you provided to us?

3.1. Right to Information

You reserve the right to request information about the personal data we receive from you and hold for one or more purposes as described below under A to D. This text is in its entirety a handbook of basic information and understanding of the regulatory philosophy governing the protection of your personal data. Update, deepening and clarifications in this text can be given to you upon request for exercise of the right to information. (see how in 1.1)

3.2. Right of Access

You reserve the right to request from our Company access to your information which we maintain and confirmation in relation to whether they are processed and more specifically information about the purposes of processing, the categories of personal data, the recipients or the categories of recipients, the time retention and processing, the existence of a right of complaint to the Personal Data Protection Authority, any available information on the origin of the data when it has not been made available by you, the existence or non-automated decision-making including profiling and related methodology, guarantees regarding the policy we follow when the transfer takes place in third countries, a copy of the personal data that is kept and processed. (see how in 1.1.)

3.3. Right of Correction

You reserve the right to request from our Company correction of your data in case any of the items for which we have the right to edit has changed or has been entered incorrectly. (see how in 1.1.)

3.4. Right to Delete

You reserve the right to request from our Company the complete or partial deletion of your data in which we have the right to keep and process either because they are no longer necessary for the fulfillment of the purposes for which they were collected, or because you revoke your consent, or because data was collected for a purpose you deem illegal. Our Company, in a reasonable time (not more than one month and under conditions if there is a difficulty of not more than three months in total) will respond by confirming the total or partial deletion of your data or the inability to delete specific data if a law or the performance of a duty in the public interest, whether the right to freedom of expression and information or the exercise or support of a legal claim requires that they be upheld.

3.5. Restriction Right

You reserve the right to request from our Company a restriction on the processing of your data, quantitatively, temporally or in relation to the purpose of their processing and more specifically (a) either because you question the accuracy of your data and for how long the Company needs to confirm their accuracy, (b) either because you consider the processing illegal but instead of deletion you choose restriction (c) or because their use is no longer necessary by the Company but you do not want to delete them as their retention will serve you for a court claim, (d) or in the event that you have objections regarding the processing of the data and until it is verified whether your rights as a Subject prevail over the legal reasons for processing the Company. (see how in 1.1.)

3.6. Portability Right

You reserve the right to receive the personal data you have provided to us in a structured commonly used and machine-readable format as well as the right to transmit it further without objection, as your data is processed on the basis of consent. In the context of the exercise of this right, you also have the opportunity to request immediate transfer from the Company to the third party without your mediation.
This right is exercised subject to the restrictions of the right of cancellation (see above under 3.4. ) and its exercise may not adversely affect the rights and freedoms of others.

3.7. Right of Objection

3.7.1. You reserve the right to object to the use of your personal data for the purpose of direct marketing and in particular the creation of a profile related to this direct marketing. (see how in 1.1.)

3.7.2. There is no relevant right in the case of Employees / Prospective Employees and visitors of the company’s facilities as this data is not transmitted to the Marketing department and is not treated as such.

4. Can your data be forwarded elsewhere?

Your data is not intended to be transmitted to any organization outside the Company with the exception of (a) our business partner under the name “ALUMIL SA” from which we have received assurances of its compliance with the European Regulation and any relevant Greek law related to it, (b) the service providers of our Company’s electronic systems and networks – and for the sole purpose of their execution of the contract in support of our Company, (c) authorized manufacturers, upon your request and approval, to obtain a quote for pergolas; required and (d) the relevant tax authorities in the context of our mandatory compliance with tax legislation and to the extent (and subject to the position) required.

5. Guarantees

We assure you that the Company will exhaust all technical and organizational measures of Data protection and will make the optimal, minimum and absolutely necessary use and processing of the Data as defined by law and strictly and exclusively for the purpose for which you have provided it to us. Special provisions for the individual categories of Personal Data Subjects that cumulatively meet the above general provisions of the Policy

(A) CONTACT RECIPIENTS

Α.1. Purpose: The receipt, processing and retention of your data provided exclusively in the context of communication is done to satisfy the sole purpose of informing you about the Company’s products and actions. All your data is kept only for this purpose and is processed only by the Marketing Department of the Company.

Α.2 .. Legal basis for processing: Legal basis for the processing of your data is your consent to it for the fulfillment of the respective above purposes, according to article 6 par. 1 item a of the Regulation on protection of personal data

A.3. Data Retention Time: In order to fulfill the above processing purpose, ie to inform you about our products and actions, we consider a reasonable and necessary retention time of your relevant data for a period of three (3) years. After this, the relevant data will be deleted unless your consent is provided again under the above conditions. In any case you have the right to revoke your consent at any time.

(B) CUSTOMERS – SUPPLIERS and POTENTIALLY CUSTOMERS – SUPPLIERS

Β.1. Purpose – Legal basis:

(a) during the pre-contractual stage and in case of filling in an electronic communication form on our website or sending an email or telephone communication or filling in a printed form, (in which case you provide us with name / email address and / or telephone or / and Management and / or capacity and / or our products that interest you), the purpose is to investigate the possibility of transaction with the Company and its authorized manufacturers and the legal basis is to serve the legitimate interest of the Company to pursue its commercial purposes in accordance with requested communication to investigate the possibility of a transaction with you.

(b) In case of a transaction with the Company, your Data that you have provided to us pre-contractually (as well as what you will provide to us in the context of our transaction) will be processed for the purpose of its implementation between us contract but also our compliance with tax legislation. In this case, the legal basis of the processing is the execution of the contract between us as well as our compliance with the legislation (article 6 par. 1b and 1c of the Regulation on Personal Data Protection.

Β.2. Data Retention Time:

We will keep the above data under B.1. (A) for five (5) years and then we will delete them. With regard to the above under B.1. (B) the data will be kept for as long as necessary by the tax legislation
Β.3. Especially for the personal data of the subjects we receive during During trade fairs, the Privacy Policy is in force, which is an integral part of the “Attendee Form” that interested parties are required to complete.

(C) VISITORS TO THE COMPANY FACILITIES

C.1. Purpose: The receipt, processing and retention of your data relating to the identification of you and the length of your stay at the company’s premises is done to meet the sole purpose of security and protection of both persons at its premises. company (eg employees, visitors) as well as the general equipment of the company (indicatively building, electronic, etc.).

C.2. Legal basis for processing: The legal basis for the processing of your data is your consent to it for the fulfillment of the aforementioned purpose, according to article 6 par. 1 item a of the Regulation on protection of personal data.

C.3 Data Retention Time: For the fulfillment of the processing purpose concerning the security and protection of both persons present at the company’s premises (eg employees, visitors) and in general equipment of the company (indicative of building, electronic, etc.), we consider a reasonable and necessary time of keeping your relevant data the period of fifteen days (15) days. After the lapse of fifteen (15) days from the time of your entry into the company’s premises, the relevant file with all your details will be deleted.