Privacy Policy
"Atis" respects private life, your privacy and personal data and takes every step to protect the aforementioned.
This Privacy Policy for the Protection of Personal Data (henceforth "Policy", in accordance with the General Data Protection Regulation of the E.U. 2016/679 (GDRP), explains all about Personal Data and "Atis" for the persons that belong in the groups of: a) Users of the website(s) of "Atis", b) Employees or Prospective/Candidate Employees of "Atis", c) Clients of "Atis", d) Prospective/Potential Clients of "Atis", e) Suppliers and other third parties f) Emergency Contacts & Employees' and/or suppliers' and/or other third parties' Referees. The Policy is updated at times through this webpage, it is applied to the entirety of Atis' business and has the following characteristics:
When will we share your personal data.
We shall not share your personal data with any third parties for marketing purposes without your express consent. We shall however, share your personal data with third parties for the following reasons:
· To fulfil contract/for the purposes of data security.
· If transfer data outside of EEA, state safeguards in place to enable lawful transfer.
We reserve the right to disclose or share your personal data in order to comply with any legal requirements, enforce our terms and conditions, or any other agreement we enter into with you, or to protect the rights, property, or safety of our business and other customers. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
What kinf of information we collect.
We only collect what is absolutely necessary for the uninterrupted and smooth day-to-day operation of Atis its promotion and advertisement as well as any additional non-sensitive information the members of the aforementioned groups supply us.
The categories of information collected and/or processed depends on the aforementioned group each individual and/or company belongs to and generally include the following: a) Users of Atis websites: (through Google Analytics ®, under coded identifiers non-decodable by Atis) Frequency of visits and behaviour during visit, Language preferences, general location on town/city level, type of browser and device, and (directly by you in forms and/or communication with Atis) Name and Contact details, subject, comments, b) Employees or Prospective Employees: Name, Date of birth, Marital status, contact details, education level, work experience, emergency contacts and depended persons, referees, place of birth, passport copy and/or ID, VAT number, NI number, Criminal Record, Drivers Licence, any other information provided by you, c) Clients: Name, Contact Details, Addresses, Invoicing Details, Accounting details/balance with Atis, Record of business with Atis, d) Prospective Clients: Name, Publicly available contact details, Publicly available address, e) Suppliers and other third parties: Name of business, name of contact persons within business, contact details, address, Invoicing details, accounting details/balance with Atis, Record of business with Atis, Products/Services Specifications, f) Emergency Contacts & Employees' and/or suppliers' and/or other third parties' Referees: Name, Contact details, relation with employee/supplier and/or other third party, any other information you provide us.
Sensitive Personal Data
Under no circumstances do we collect any form of sensitive personal data as they are defined in GDPR.
Ways we collect information
All information considered personal data under GDPR that are collected by Atis, is done so in fully legitimate and lawfull ways, in particullar depending on which of the aforementioned groups you belong to, as follows: a) Users of Atis websites: Through coockies of Google® (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and its service Google Analytics® under coded identifiers (non-decodable by Atis), as well as any information you provide us through filling forms, b) Employees or Prospective Employees: Any information you provide us (including but not limited to phone conversations with Atis), any additional information supplied by the persons specified by you as referees or emergency contacts, any information occuring as a product of your activities with and/or for Atis and your employment (including but not limited to phone conversations with clients/prospective clients and/or suppliers and/or other third parties), c) Clients: Any information provided by you (including but not limited to phone conversations with members/employees of Atis, Catalogs and/or lists and/or registries and/or other sources of information publicly and freely available), d) Prospective Clients: Any information provided by you (including but not limited to phone conversations with members/employees of Atis, Catalogs and/or lists and/or registries and/or other sources of information publicly and freely available), e) Supplies and other third parties: Any information provided by you (including but not limited to phone conversations with members/employees of Atis, Catalogs and/or lists and/or registries and/or other sources of information publicly and freely available) f) Emergency Contacts & Employees' and/or suppliers' and/or other third parties' Referees: Any information you provide us and/or any information provided by your employees and/or employees of Atis and/or suppliers and/or referees.
Ways we use information
The use of your personal data is strictly limited to the absolute essential length dictated by the smooth function and service continuation of Atis and depending on which of the aforementioned groups you belong it only extends to: a) Users of Atis websites: Statistical Analysis for website improvements and the of the services/utilities/information within, Contact with you if you have filled in a form and/or newsletter sign-up, b) Employees or Prospective/Candidate Employees: Contact for your current or potential employment, Quality assurance, Code of Conduct compliance checks, Employee Contractual Obligations fulfilment checks, c) Clients: Contact, Customer Satisfaction Surveys, business conduct, service and/or product sale/promotion and/or compatibility, Contractual Obligations towards you by Atis, d) Prospective Clients: Contact, business conduct, service and/or product sale/promotion and/or compatibility, e) Suppliers and other third parties: Contact, Contractual Obligations between you and Atis, f) Emergency Contacts & Employees' and/or suppliers' and/or other third parties' Referees: Contact, Quality assurance questionnaires.
Why do we collect information
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances, and on the following lawful bases:
-
Where we need to perform the contract we are about to enter into or have entered into with you we will need to process.
-
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
-
Where we need to comply with a legal or regulatory obligation.
-
Where we need to contact you in response to a request or query you have submitted on the website.
We also use your personal data in the following ways:
Name, address and email address in order to send marketing material and/ newsletters if you have requested or opted in to receive such documentation. Data is stored on Atis’ document management system until it has been requested to be removed.
Means of Protection and Updates on Personal Data.
We recognise the confidential nature of the personal data Atis processes and we have taken every practically possible oranizational & technical measure for their protection from either malisious attacks or accidental loss, corraption, unlawful distribution or access. The place of storage is defined to be the headquarters of Atis as mentioned in the opening paragraph of this policy.
Automated Processing & Profiling
Under no circustances does Atis use automated processing means and does not create user profiles as defined in Article 4, part 4 of GDPR.
How long will we keep hold of your personal data.
How long we store your personal information depends upon the type of information we are holding and the purpose for which we need it, [and in accordance with our Data Retention Policy from time to time, which is available on request].
We shall keep your data for the period of time you hold an account with us, to enable us to contact you, keep a record of your past orders and supply you with any new orders. We shall not keep your personal information for any longer than necessary to fulfil our obligations to you or to meet our legitimate business interests or legal requirements.
Where you have given us your permission to contact you for marketing purposes, we shall contact you once a year from the date on which you originally gave your permission to ensure that you still wish to be contacted in this way.
Your Rights
Under certain circumstances, you have the following rights:
-
to request that we provide you with a copy of the information we hold about you (“Access Request”);
-
to request that we rectify any information we hold about you (“Right to Rectification”);
-
to request that we erase any information we hold about you (“Right to be Forgotten”);
-
to restrict the level of processing we carry out with your information (“Restriction of Processing”);
-
to obtain from us all personal data we hold about you in a structured, machine readable form, and have this information transmitted to another organisation (“Data Portability”);
-
to object to our processing your information in certain ways (“Right to Object”); and
-
to withdraw your consent at any time to our processing of your data.
Please see the relevant sections below for further details on your rights as a data subject. You can exercise any of the above rights by emailing us at info@atisgroup.gr. You also have the right to lodge a complaint with the Information Commissioners Office if you are unhappy in any way with how we treat your personal information.
We shall comply with any request made under this section as soon as possible, and normally within one month from the date of your request. However, if necessary, for example if your request is particularly complex or we receive a number of similar requests, we may extend this period by an additional two months, but we shall notify you if we need to do this.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). Please note that where we receive requests under this section which are manifestly unfounded or excessive, for example because they are repetitive in nature, we may charge a reasonable fee taking into account the administrative costs of providing the information or taking the action requested or refuse to act on the request.
Access Request
You have the right to request a copy of the information that we hold about you at any time. Please note that in most circumstances, we shall not make a charge for this, however we may make a reasonable fee based on administrative costs for any further copies requested. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Right to Rectification
You have the right at any time to ask us to rectify any personal data that we hold for you which is incorrect or incomplete. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
If we have disclosed any incorrect or incomplete data to any third parties, we shall inform them of any necessary amendments or corrections made to your personal data under this section.
Right to be Forgotten
This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Restriction of Processing
You can ask us to restrict how we use your data in the following circumstances:
-
where you believe that the information we hold about you is inaccurate, you can ask that we refrain from using your data until we can verify the accuracy of it;
-
where we have unlawfully processed your data, you can ask that we restrict our usage of it rather than erase it completely; or
-
where we no longer need to hold your information, but you wish us to retain your information for the purpose of establishing, exercising or defending a legal claim.
Data Portability
You have the right to obtain from us all personal data which you have provided to us in a structured, commonly used and machine readable form, provided that such data was processed based on your consent, or for the purpose of a contract between us and the processing was carried out by automated means. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Right to object
You have the right to object, on grounds relating to your particular situation, to our processing of your personal data where we are doing this for the performance of a task carried out in the public interest (which we shall have told you about, if applicable), or where we are carrying out processing for the purposes of legitimate interests pursued by us.
You also have the right at any time to ask us not to process your personal data for direct marketing or profiling purposes (to the extent that such profiling is related to such direct marketing). We shall have informed you before the time we obtained your personal data whether we intend to process your personal data for this purpose, or if we intend to disclose your information to any third party for such purposes.
If we process your personal data for automatic decision making or profiling purposes (i.e. to analyse or predict your personal preferences and purchase behaviour, and such profiling is automated) we shall ensure that we tell you about this beforehand, and will only do this where this is a necessary condition of entering into a contract between you and us, or where you have given us your explicit consent to do this.
Right to withdraw consent
Where you have given us your consent to our processing of any of your personal data, you have the right to withdraw your consent at any time, for example if you no longer wish for us to share your information with third parties for marketing purposes (where you have previously consented to this). However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
Third party websites
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.