GDPR

PERSONAL DATA PROTECTION POLICY

This Policy was updated on 14/4/2021

Purpose of this policy                               

The protection of your personal data is important for “TRUST FACILITY SERVICES S.A.” . This policy informs you on the practices of personal data collection of “TRUST FACILITY SERVICES S.A.”, via its website, including the data categories they may collect, keep, process, their collection purpose, the categories of persons to which your data are being notified, as well as the rights you have. “TRUST FACILITY SERVICES S.A.” makes all possible efforts for the protection of your personal data, under the condition that, the personal details you provide are correct and true Also, it describes some of the safety measures taken by the company, in order to protect the confidentiality of the data and offers some guarantees that for certain things the company will not do.

Commitment of “TRUST FACILITY SERVICES S.A.”

In “TRUST FACILITY SERVICES S.A.” we believe that the protection of the private life and the data of our clients are of the utmost importance and we are committed to provide to them personalized services that cover their requests, in a way that secures their private life. Personal details (personal data) are used exclusively from “TRUST FACILITY SERVICES S.A.” and its employees, in order to respond to your demands and better serve you, according to this Policy. The people processing personal information are trained for the use of the proper procedures. The representatives and the service providers of “TRUST FACILITY SERVICES S.A.” keep your personal information confidential and do not use these for any other reason besides those that serve the provision of certain services to us.

Additionally, it is possible that you are questioned on whether we can share information with other trusted third parties. We will inform you on the moment of data collection, if such a common use of information with third parties is to be expected. “TRUST FACILITY SERVICES S.A.” will define the types of businesses at the specific point of information collection, shall describe the type of information that will transfer (such as the address or your e-mail) and shall transfer data to other parties only if you provide your respective clear consent.

Legal and regulative frame

The Society Anonyme under the trade name “TRUST FACILITY SERVICES S.A.”, that is seated in Thessaloniki, in 22, Adrianoupoleos street (Kalamaria, 55133), tel.: 2310 455000, email: info@trustfs.gr, with objective security services, collects and processes personal data, for the exercise of its responsibilities, the implementation of its electronic services and the fulfillment of its legal obligations. For the purposes of this policy, “TRUST FACILITY SERVICES S.A.” is the “Data Processing Responsible” in the sense of article 4, art. 7 of the General Data Protection Regulation.  The management and protection of the personal data of the visitor/ user of this website https://trustfs.gr, property of “TRUST FACILITY SERVICES S.A.” , is subject to these terms, as well as the respective provisions of the European Regulation 2016/679 for the General Data Protection (GDPR) and Law no. 4624/2019. These terms are formulated taking into consideration the rapid technology development, and more specifically the Internet development, as well as the existing net of legal regulations regarding these issues. This website https://trustfs.gr, shall not proceed to any unfair and without previous approval from you use, following the principles of personal data protection that are provided for by the respective laws and international treaties. The website https://trustfs.gr, under no way shall disclose, publish, exchange any personal details and information you may confide to it. Additionally, it does not transfer personal details and user data to any other organization or partner not connected to it, electronic addresses or in general any other information that has to do with its users.

What is “GDPR” – Legislation in force.

The GDPR (General Data Protection Regulation, Regulation 2016/679 (EU) of the European Council and the Council of the 27th April 2016, henceforth “the Regulation”), has to do with the shaping of a unified legislative framework for the process of personal data in the member states of the European Union and replaces the previous Legislation (Directive 95/46/EC). The protection of natural entities against personal data processing is a fundamental right. Article 8, paragraph 1 of the Map of Fundamental Rights of the European Union (“Map”) and article 16 paragraph 1 of the Treaty on the Functioning of the European Union, define that each person has the right to personal data protection that concern them. The Regulation is binding to all of their parts and is directly in force in all member states (that is, there is no need for special adjustment of the National Legislation, article 83 of the Regulation).

What do we mean by personal data?

The term “personal data” refers to information refers to information of natural entities, such as full name, postal address, e-mail address, telephone number, etc., which define or may define your identity, henceforth called “Personal Data or Data”.

What is Personal Data processing?

Any action or series of actions that is realized with or without the use of automated means, in personal data or groups of personal data,  such as collection, entry, organization, structure, storage, adaptation or change, repossession, search for information, use, disclosure with transfer, dissemination or any  other form of distribution, correlation or combination, limitation, deletion or destruction.

What do we mean by data processing responsible?

The data processing responsible is the natural or legal entity, the public authority, the service or other body, which, alone or together with others, define the purposes and the processing method of personal data.

What do we mean by person executing data processing?

The person executing data processing is the natural or legal entity, the public authority, the service or other body, which handles personal data on behalf of the data processing responsible.

Is the concession of your Data obligatory?

The provision of personal data to “TRUST FACILITY SERVICES S.A.” through this website may be essential in order to achieve the purposes mentioned in this Policy or optional. If you deny to provide the data that are mentioned as obligatory in the website (https://trustfs.gr), it would be impossible to achieve the main purpose of the collection of the specific Data, and it may be, for example, impossible for ATA “TRUST FACILITY SERVICES S.A.” to provide the services that are available in the website (https://trustfs.gr).

What kind of data does “TRUST FACILITY SERVICES S.A.” collect through this website

Regarding the information that are included within the notion of personal data of the General Data Protection Regulation and their collection is not based on the Law or the entering into or execution of a contract, are collected by “TRUST FACILITY SERVICES S.A.”, only in case you choose to explicitly consent.

We collect the below mentioned personal data:

We do not collect, nor have access in any way to special categories (“sensitive”) personal data (with the exception of the time period of the COVID-19 pandemic due to strict instructions from the Ministry of Health) or data that have to do with criminal convictions and offenses of our clients. The client has the obligation to refrain from the provision of such data, which concern them or third party subjects of data (with the exception of the time period of the COVID-19 pandemic due to strict instructions from the Ministry of Health). In case a client proceeds to provide such data to “TRUST FACILITY SERVICES S.A.”, these will be deleted as soon as they are perceived by us (with the exception of the time period of the COVID-19 pandemic due to strict instructions from the Ministry of Health).  At “TRUST FACILITY SERVICES S.A.” we do not have any responsibility towards clients or third parties for any provision and/or processing of sensitive data that takes place due to actions or omissions of clients who violate the aforementioned obligation. The visit to the website of “TRUST FACILITY SERVICES S.A.” does not presuppose necessarily the provision of any kind of personal data from you. In several cases, however, it is necessary for you to provide certain personal data, which are shown in the respective parts of data input in the website of “TRUST FACILITY SERVICES S.A.”.

At “TRUST FACILITY SERVICES” it is possible to collect and store the following of your personal details from the following restrictively mentioned sources:

identification details, contact details, transaction details, contractual relation and transactional behavior details, when you enter into a contract with us for the provision of any services provided from “TRUST FACILITY SERVICES”.

identification details, contact details, transaction details, contractual relation and transactional behavior details, when you proceed to electronic purchases of products or services provided from “TRUST FACILITY SERVICES”.

contact details, when you contact us in order to submit questions or to ask for information concerning the services offered by “TRUST FACILITY SERVICES”.

from publicly available sources.

The data we collect through this website, https://trustfs.gr, may also be combined with data provided in other cases, for example, when you call their telephone center. The personal data provided to “TRUST FACILITY SERVICES S.A.”, in these cases, may be integrated to existing databases and be stored, aiming to simplify your data management systems. “TRUST FACILITY SERVICES” may proceed, within the framework of the provision of security and safety services, to videotaping, photographing or recording of public or private areas upon written assignment of security project by the respective private or public body. The collection of the aforementioned personal data is, one the one hand, governed by the respective provisions of the General Data Protection Regulation for the protection of the individual from the protection of personal data, from the decisions-suggestions of the Authority of Protection of Personal Data , and other respective national laws and provisions, as well as by this Policy for the Protection of Privacy and Personal Data and, on the other hand, it is executed within the responsibility of the respective owner of processing under the status of the one assigning the project to us.

Collection and use purposes of personal data

The use of personal data, collected by “TRUST FACILITY SERVICES S.A.” by you, serves the following purposes:

Transactions: “TRUST FACILITY SERVICES S.A.” may use personal details of visitors/users for the implementation of any transactions with them

Advertisement/ Marketing: “TRUST FACILITY SERVICES S.A.” may use personal contact details of visitors/users for informative purposes and promotional actions regarding the provisions of discounts to its services.

Improvement and adjustment of the website: “TRUST FACILITY SERVICES S.A.” may use these information only for the reasons for which they were collected and in order to provide information to you, Also, it will use these to adjust the content of the website to your needs and to improve the composition, the changes and its dynamic.

Receipt of CVs: “TRUST FACILITY SERVICES S.A.” will use these information in order to execute your electronic application.

Legal use: At “TRUST FACILITY SERVICES S.A.” we may collect, store, discover and in general process personal details of visitors/users, when this is required by the Personal Data Protection Regulation and/or by Law, or when this is necessary, in order to protect the interests of both sides, as these result from the transactional and contractual relation between them or the relation between business and consumer.

COVID 19: For public health prevention purposes (contact tracing) and public interest, due to the COVID-19 pandemic.

IMPORTANT NOTE: For the collection of personal data, that does not take place digitally, through the websites owned by “TRUST FACILITY SERVICES S.A.” and has to do with the processing of personal data of employees, prospective employees, partners, contractors, suppliers, private parties, customers and in general natural entities, a special written and analytical notification is provided to the subjects of the data, during the collection of the aforementioned data, also based on the respective obligation put by the demands of articles 13 and 14 of GDPR.

Maintenance-Storing of data

In “TRUST FACILITY SERVICES S.A.” we save personal data only for the time needed in order for a service you have asked to take place or for which you have given your approval, without prejudice in case of existing provisions of law stating the opposite, as is the case in any issues governed by commercial and/or tax legislation, the various respective provisions, etc. In any case, the personal data you provide to us and appear in written deals, contracts and the related to the execution of contract or the carrying out of a commercial transaction electronic e-mail, are stored for 20 years in both a hard copy and a digital copy in the legal department, the department of sales/contracts and at the accounting department of “TRUST FACILITY SERVICES S.A.” or any other third party that provides directly or indirectly the aforementioned services or supports the aforementioned departments in the execution of their work or provides management services to us.

The health data that may be collected during the period of the COVID-19 pandemic will be immediately erased upon the end of the pandemic and according to the instructions of the Ministry of Health.

Deletion of data

Your data are deleted per case and always based on the provisions set out by the respective Legislation.

Transfer of personal data

“TRUST FACILITY SERVICES S.A.” does not transfer personal data to third parties, except if needed for legal purposes, in order to respond to your requests and/or it is obligatory or allowed by law. In any case, access to your personal data is allows only to authorized persons, which are required to have access in order for the purposes of collection, use and processing to be fulfilled, as this is made known with this Statement. In some cases, “TRUST FACILITY SERVICES S.A.” may transfer your personal data to respective Public Authorities or to natural or legal persons, to which the execution of a certain processing has been assigned, under the condition that we will inform you beforehand and we shall receive your previous consent, if this is required for any respective processing. People that have access to these data, are obligated to keep these confidential.

Log files

We use IP (Internet Protocol) addresses for the analysis of trends in the use of Internet, for the administration of computer resources and our network, for the monitoring of any not allowed, illegal or malicious activities (attacks) and for the collection of general demographic information (country of origin) for collective use.

IP addresses

The IP address through which the Computer (PC) of the visitor/ user/ member has access to the Internet and then to the Website/Application, is stored and may be used by the page, if necessary, in case the Terms of Use of the Website/Application are violated on behalf of the visitor/user/member.

Data safety

The Internet, as well as any means used for the transfer of information, cannot be considered 100% safe. Internet safety is a sensitive issue and is mainly based on trustworthy organizations and businesses that respect confidentiality and safety of the data of their Users.  “TRUST FACILITY SERVICES S.A.” tries to keep strict safety measures and checks for the protection of your personal information, in order to secure compliance with all the implemented legal demands. In “TRUST FACILITY SERVICES S.A.” we implement safety measures, at a technical and organizational level, our aim being the safety of data collected from you, against any voluntary or involuntary attempt, processing, loss, destruction or in general access from a non-authorized person. Our safety measures are subject to continuous rechecks and restructures, according to the latest technological advancements. “TRUST FACILITY SERVICES S.A.” implements an information security management system ISO 27001:2013 and use the latest tools of cryptography and information protection (256bit cryptography, secure web pages, firewall-network protection system, digital signatures, etc.). The access to your personal data is limited only to employees authorized to do so, in order to provide you with products and services and which come to contact with these data. Natural, electronic and procedural safeguards have been activated, which are in harmony with the regulations of protection of your personal data. “TRUST FACILITY SERVICES S.A.” takes all measures necessary, in order to secure the safety of your personal data. However, due to the nature of Internet, it cannot guarantee the protection of communications or the data stored in their browsers from any arbitrary access from third parties.

Internet access

If you communicate with “TRUST FACILITY SERVICES S.A.” via network, then occasionally we may use e-mail or phone number, in order to communicate with you, as long as you have provided these on your own will. You need to know that the communications via Internet, such as emails, etc., are not safe, except if they have been cryptographed. “TRUST FACILITY SERVICES S.A.” does not bear any responsibility for any non-authorized access or loss of your personal details which are beyond its control.

Privacy policy and children

This website has been designed and is destined to be used by adults. If you are a minor under the age limit, for which parental consent is needed in your country (in Greece this limit is over 15 years old – Law no. 4624/2019), you must check the terms of this Statement, together with your parent or guardian, in order to ensure that you understand and accept these terms. If it is found that we have collected details of a minor without the parent’s or guardian’s consent, while such a consent should have been acquired, we will delete these details the soonest possible.

Communication through the website platform

In case a user contacts us, through the communication form or in any other way, the provision, on behalf of the user, of their personal data is done willingly and exclusively per the free will of the user. We will process the provided personal data in question only to the extent that is necessary for this particular purpose.

Social Networks

It is possible, within our Website, to offer the possibility to share to Social Networks and other similar tools that allow you to share your activities within the website, with other applications, websites or mass news media, and vice-versa. The use of such features, allows the exchange of information with your friends or the general public, depending on the settings you have set out in your personal profile. Please refer to the Privacy policies of these services of social networking for more information regarding the processing of your data.

Special Categories of Data

We ask you not to send via e-mail and not to reveal to us, through the use of the communication platform, sensitive personal data of yours. The personal data processing of this category does not serve in any case the purpose of processing as this is defined in this Policy.

Monitoring communications

All communications “TRUST FACILITY SERVICES S.A.” with you (including the phone conversations, e-mail, etc.) are not monitored and not recorded.

Links

Our website may contain links that redirect to other websites. This Statement on the protection of personal data is valid as long as it concerns the access of the user in this website, as well as other websites handled exclusively by “TRUST FACILITY SERVICES S.A.”. The administrator of this network gate is not responsible in any case for the terms of personal data protection of other websites, which are under the responsibility of third parties (natural or legal entities).

Revisions of the Statement

“TRUST FACILITY SERVICES S.A.” maintains the right to modify or revise periodically this Statement, at their absolute discretion. In case there are changes, “TRUST FACILITY SERVICES S.A.” shall record the date of modification or revision in this Statement and the updated Statement shall be valid for you from this date onwards, We encourage you to review from time to time this Statement in order to examine whether there are any changes in the way we handle your personal data.

Applicable Law and Jurisdiction

For any dispute that may arise between the user and “TRUST FACILITY SERVICES S.A.”, the Greek legislation is applicable and the competent courts are the Courts of the Region of Thessaloniki, which have material competence.

What are your rights?

According to the EU General Data Protection Regulation (GDPR) 2016/679, as in force, you have the following rights:

a) the right to access,

b) the right to correction,

c) the right to deletion, under certain circumstances, such as when processing is no longer necessary for the reason the data were initially collected and there is no pressing reason to continue processing (or storing)

d) the right to limit processing,

e) the right to transfer data,

f) the right to objection and the right to not be subject to a decision that is taken exclusively based on automated processing, including profiling.

g) the right to complaint to the controlling authority,

That is, you have the right to receive, upon request, free information for the stored personal data that concern you, to raise, upon request, objections for the processing of data that concern you, with effect for the future and revocation of your consent, as well as, according to the existing provisions, the right of correction, limitation of processing, data transfer, deletion of the data in question and complaint to a controlling authority. We kindly ask that, for these cases, you address in writing, with a respective original letter or via fax or e-mail, the competent department of Personal Data Protection of the Company, mentioned below.

Right to submit a complaint

In case you believe that the processing of data that concern you, violates Regulation (EU) 2016/679, you have the right to submit a complaint to a controlling authority.  Controlling Authority responsible for Greece is the Authority for the Protection of Personal Data, 1-3 Kifisias str., 115 23, Athens, https://www.dpa.gr/, tel. 2106475600.

Communication

“TRUST FACILITY SERVICES S.A.” notifies you that it has appointed Data Protection Officers with the following e-mail for communicationprivacy@trustfs.gr. Should you have any questions or suggestions regarding this Policy, you may address these to the aforementioned e-mail address. The constant Internet development makes necessary the periodical adjustments of our regulations regarding the protection of digital data. “TRUST FACILITY SERVICES S.A.” reserves its right to proceed to any indicated in each case changes of the regulations in question at any time.

Cookies policy

“Cookies” are data files sent by a website to your computer during your website surfing. These data files include data that allow our website to remember important information that shall make the use of the website more efficient and useful for you. Our website uses cookies for various reasons. We use cookies technology and IP addresses for obtaining of non-personal details regarding the visitors of each website and in order to provide to our registered users the best possible personalized experience.

How do we use cookies? The visitors of the website “TRUST FACILITY SERVICES S.A.” use different navigation software online and different computers. In order to make your visits even easier with the technology you use, we automatically record the type of the browsing program and the operating system used by a visitor, as well as the name of the Internet service provider of the visitor. Additionally, we record the total number of visitors of the website in a cumulative way, so that we can update and improve our website. Through this process there is no extraction of personal details. These data show us that whether more visitors prefer certain operations or parts of the website from other, a fact that helps us to maintain our website updated with new material which is interesting for the majority of our visitors. More specifically, the types of cookies used are:

Absolutely necessary for the operation of the website (necessary): The necessary, or otherwise, absolutely necessary cookies, are of essential importance for the correct operation of our Website, and allow you to navigate and to use their operations, such as access to safe regions. These cookies do not know your personal identity. Without these cookies, we cannot offer effective operation of our Website.

Performance cookies (google analytics): These collect information regarding the performance of our website and help us recognize which services have high visitation percentages, which pages may have a problem with navigation, etc. These cookies are only used for the improvement of our website and to make your navigation easier.

How do we use cookies to personalize your experience in our website? Cookies technology helps us provide material that fits the visitor’s interests and allows us to enable for our visitors’ sale access to other functions that are provided in our website. Wherever it is possible, we may, in such cases correlate personal details with some cookie file.

What happens if you do not want cookies? In case you do not want cookies, you may, via a special banner that emerges each time which of the settings you wish for your computer I ACCEPT/MORE SETTINGS/I DONT ACCEPT (Control the Help menu/ Help for the browsing program that you use in order to learn how to change or update correctly the settings about cookies).

What are webbeacons and how does the Company use them? Some of the webpages and the informative e-mails of “TRUST FACILITY SERVICES S.A.”, may contain electronic images called webbeacons, also known as GIF type files of a pixel, pure GIF type files or pixel labels. Their use in the website allows for the counting of visitors that have accessed the pages of “TRUST FACILITY SERVICES S.A.”. Their use in promotional products/services e-mails and newsletters allows us to count the amount of registered users that have read the material we sent. Webbeacons allow us to develop statistical information regarding activities and functions that interest more our visitors/users, so that we provide more specialized material. They are not used to access personal information without your consent.

Rejecting cookies may influence your ability to use some of the products/services in the website of “TRUST FACILITY SERVICES S.A.”.

2nd Level Notification for personal data processing through a system of video surveillance

Processing Officer Details: The Societe Anonyme under the trade name “TRUST FACILITY SERVICES S.A.”, that is seated in Thessaloniki, in 22, Adrianoupoleos street (Kalamaria, 55133), tel.: 2310 455000, email: info@trustfs.gr. ).

Processing purpose and legal basis: We use a monitoring system for the purpose of people and goods protection. Processing is necessary for reasons of legal interests we seek as Data processing responsible (article 6 par. 1Στ GDPR).

Legal interests analysis: Our legal interest consists of the need to protect our area and the goods situated within it from illegal actions. The same goes for the security of life, physical integrity, health, as well as assets of our staff and third parties that are legally situated in the monitored area, given our activity as a company providing security for VIP persons. We only collect image data and we restrict recording in areas that we have evaluated as highly possible for illegal actions to take place, e.g. theft or destruction of documents, mechanic equipment, databases, operating systems. The recording takes place at the central entrance of our offices (outside, at the common corridor of the building) and the Reception of our offices, without focusing on areas where the private life of the people whose image is recorded may be limited excessively, including their right to respect of the personal data. The CCTV cameras, in some cases, have the ability to zoom and do not collect sound data.

Access-Transfer: Access to the recording of the CCTV system is done by a certain group of people with the use of a unique security code which is regularly updated for safety reasons. RECEIVERS OF THESE ARE OUR AUTHORIZED EMPLOYEES FOR THE CONTROL ROOM. The material kept is accessible through access control and only by our authorized/responsible staff, and our contracting and bound by us with processing contracts of article 28 of GDPR partners. The transfer of the data collected by the CCTV to third parties is generally allowed only upon your previous notification and only if the conditions of the European and Greek legislation on the protection of personal data are fulfilled, as in force each time. This footage is transferred to third parties in the following cases: A) to the competent judicial, prosecuting and police authorities, when it includes evidence that are necessary to investigate an offense, which has to do with people or goods of the data processing responsible, b) to the competent judicial, prosecuting and police authorities, when they legally request for data while executing their duties, and c) to the victim or offender of an offense, when this concerns data which may be evidence for the offense.

Maintenance period: We keep these data, to which this Notification refers to (CCTV) for a period of fifteen (15) days, and after this period, these are automatically erased. In case a certain incident is discovered within this period, we isolate a part of the video and we keep it up until one (1) more month, in order to investigate the incident and begin lawful procedures for the defense of our legal interests, and if the incident concerns a third party, we will keep the video up to three (3) months more.

Rights of the Subjects of data: The Subjects of the data have the following rights, regarding the processing this Notification is about (CCTV): • the right to access: you have the right to know if we process your image, and, if this is true, to receive a copy of it. • the right to restriction: you have the right to ask us to limit processing, as for example, to not delete data which you consider necessary for the establishment, exercise or support of legal claims. • the right to objection: you have the right to object to processing. • the right to deletion: you have the right to request that we delete your data. You may exercise your rights by sending an e-mail, at the e-mail address privacy@trustfs.gr or a letter to our postal address or by submitting in person your request at our offices. In order for us to examine a request that is related to your image, you will have to define approximately when where you exposed to the range of the cameras and to provide us with a photo of yours, in order to make the location of your data easier and to hide the data of third parties appearing. Alternatively, we provide you with the possibility to come to our facilities in order to show you the images to which you appear. We also note that the exercise of the right to objection or deletion does not mean the direct deletion of data or the modification of processing. In any case, we will provide you with an answer the soonest possible, within the deadlines defined by GDPR.

CCTV records: “TRUST FACILITY SERVICES S.A.” as “Data Processing Responsible” keeps a record in their offices with requests concerning the processing of CCTV data that concern you. Also, it keeps a record where the following are described and included: (a) the technical features of the cameras, (b) a schematic depiction of the location of the cameras, (c) the area where data collected from CCTV are kept.

Updates in this Notification: “TRUST FACILITY SERVICES S.A.” maintains the right to modify and update this Notification, regarding the processing (CCTV) this Notification is about, at any time and without warning. In all such cases, you will be updated for changes the soonest possible. In case you have any questions regarding this Notification or in general as to the protection of your personal data, you may contact the Data Protection Officer (dpo) at the following e-mail: privacy@trustfs.gr.

Right to submit a complaint: In case you believe that the processing of data that concern you, violates Regulation (EU) 2016/679, you have the right to submit a complaint to a controlling authority.  Controlling Authority responsible for Greece is the Authority for the Protection of Personal Data, 1-3 Kifisias str., 115 23, Athens, https://www.dpa.gr, tel. 2106475600.

CVs Policy

The data from the CV and the supporting documents to it, are collected by “TRUST FACILITY SERVICES S.A.” directly and only from the party interested for collaboration, since these are absolutely necessary for the assessment of their suitability for this particular collaboration. Additionally, it should be noted that (in this voluntary method) the submission/sending of personal data and information included in the aforementioned CV and the supporting documents to it, the interested party consents to the collection, storage, use, processing and transfer of these data for the purposes detailed in this notification. For the safe processing of the personal data of the interested party from the submitted CV, “TRUST FACILITY SERVICES S.A.” receives all the necessary technical and other means.

Access to personal data stemming from the CV is only allowed to the authorized, per case and depending on the processing purpose, staff of “TRUST FACILITY SERVICES S.A.” and/or the staff of third party partner companies (“Executing processing” or “Data Processing Responsible parties” for which “TRUST FACILITY SERVICES S.A.” is the one “Executing the processing”), with which “TRUST FACILITY SERVICES S.A.”, under the term of keeping the respective confidentiality obligations that are included in the respective contracts. The details (may be) processed by “TRUST FACILITY SERVICES S.A.” and are sent to the interested cooperating companies. “TRUST FACILITY SERVICES S.A.” shall not reveal, sell, exchange, concede or in any other way distribute without the consent of the interested party to third parties, legal or natural entities, personal data from the collection and processing of the CV, except for the cases mentioned above to cover a job position and for the selection procedure and due to the legalizing basis or article 6 par. 1B’ of the General Regulation. These companies shall process the data exclusively for the needs of their cooperation with “TRUST FACILITY SERVICES S.A.”.

Regarding the personal data transferred by the interested party, within the frame of sending or submitting the CV, the purpose of processing is the intention of entering into a contract of cooperation upon application of the interested parties (“Subject of the Data”), checking their qualifications before entering into contract (6.1b’ General Regulation), the minimum processing necessary for these data for the assessment of the CV and if what is mentioned in this correspond to this particular job position with “TRUST FACILITY SERVICES S.A.”, as well as the defense of the interests of “TRUST FACILITY SERVICES S.A.”. Also, the classification of the interested parties in work programs of the company and the need of communication between “TRUST FACILITY SERVICES S.A.” and the Subject.

Since the consent of the interested to collaborate party is also received, the data of the CV shall be stored by “TRUST FACILITY SERVICES S.A.” for purposes of use/evaluation, in case of new work positions in “TRUST FACILITY SERVICES S.A.”, for a period up to 3 years upon their submission and then they shall be destroyed/deleted/made anonymous in a safe way.

If no such consent has been received, the data of the CV, upon coverage of the respective employment position, for which the interested party has sent or submitted this CV, shall be destroyed/deleted/made anonymous in a safe way and within a time period of 3 months from the coverage of the position, unless “TRUST FACILITY SERVICES S.A.” has legally the right or is obliged to maintain these. Also, no matter how many additional elements are requested and are necessary for the needs of the insurance-tax legislation shall be processed only for reasons that are directly related to the partnership of the classified. Once the cooperation period is terminated or expired, these shall be maintained for as long as the legislation required and then, the data shall be destroyed/deleted/made anonymous in a safe way.