1. SUBJECT
1.1. This policy defines the terms and conditions, which are observed by our Company, to protect the privacy of the users of the Website . This policy includes the rules, based on which we proceed with any collection and processing of your personal data and ensure the confidentiality of this information.
1.2. Our Company reserves the right to modify and update this policy, whenever it deems it necessary, while any changes become effective upon their public appearance on the Site 's Website.
1.3. In the event that any of these terms are held to be invalid, illegal or abusive for any reason, the remaining terms will remain valid and effective as such to the extent that they do not conflict with the intent expressed through this policy.
2. PRINCIPLES OF PROCESSING
We fully respect your fundamental rights and make the protection of your privacy a priority of our Company. In this context, when processing your personal data, we follow the following basic principles:
2.1. We process your personal data lawfully and lawfully and maintain full transparency with you in relation to the way we manage your personal data.
2.2. We collect and process your data only for specified, express and lawful purposes as stated in this policy, and do not further process it in a manner incompatible with those purposes.
2.3. We process your personal data, only to the extent that it is suitable and relevant for the above purposes, at the same time limiting the relevant processing to the measure necessary for these purposes.
2.4. We make reasonable efforts and with your assistance, so that your data being processed is accurate and, when necessary, updated in relation to the purposes of the processing, taking all reasonable measures to immediately delete or correct it in case of inaccuracy.
2.5. We keep your personal data in a form that allows your identification only for the time required for the above processing purposes.
2.6. We process your personal data in a way that guarantees its security by using appropriate technical or organizational measures.
2.7. We do not intend to further process your personal data for a purpose other than that for which it was collected.
2.8. We inform you that there is no obligation for you to provide your personal data and there are no possible consequences from not providing them. Further, we inform you that your personal data will not be used for automated decision-making, including profiling.
2.9. Without prejudice to what is stated in this policy, we do not disclose or transmit your personal data to third parties without your consent, unless this is permitted by law or by the contract between us.
2.10. We inform you that we do not transmit your personal data to a third country or international organization, for which there is no adequacy decision of the European Commission according to the GDPR.
2.11. In general, we fully comply with the current legislation and comply with all our obligations arising from it, as the legal controller of your personal data.
3. TYPES OF DATA
3.1. The types of personal data we collect and process from you depend on the services you choose to provide. Thus, by (a) entering and using the Website , (b) subscribing to the newsletter service , (c) creating a personal account and (d) providing services, you grant our Company the following items personal data.
3.2. When browsing our Website you provide the following data:
- Internet protocol address ( IP Address ).
- Navigation data within the Website.
- Service preference information.
- Data on executed transactions.
- User Generated Content.
- Operating system type/screen range
3.3. When registering for the newsletter service , you provide us with the following data:
3.4. During the process of creating an account as an ALE User, provide us with the following data:
- Brand name
- Distinctive Title
- Full Address
- VAT number and DOU.
- Legal Representative
- Communication Manager
- Contact Information ( Email , Telephone)
- Facility Operation License
- ISO 14001/ EMAS certificate
3.5. During the process of creating an account as an ALE Collector, you provide us with the following data:
- Brand name
- Distinctive Title
- Full Address
- VAT number and DOU.
- Legal Representative
- Communication Manager
- Contact Information ( Email , Telephone)
- ALE Collection & Transfer License
- Type of License
- Traffic Permits of Declared Vehicles
- Liability Insurance policy in force
3.6. During the process of creating an account as an ALE Obligated Administrator, you provide us with the following data:
- Brand name
- Distinctive Title
- Full Address
- VAT number and DOU.
- Legal Representative
- Communication Manager
- Contact Information ( Email , Telephone)
- Type of Activity in the Lubricants Sector
3.7. When sending a Contact form to our Company, provide the following data:
- Name
- Email .
- Telephone
- Message
In addition, in the event that any user communicates with us by e-mail or other means, we collect and process personal data, related to such communications, under the terms and conditions herein, in order to respond to the relevant requirements and requests and to improve the services we offer.
3.8. When using the Website services , you provide us with the following data:
- Content generated by the User or Business User.
3.9. In addition, in the event that any user communicates with us by e-mail or other means, we collect and process personal data, related to such communications, under the terms and conditions herein, in order to respond to the relevant requirements and requests and to improve our services offered. (4.7)
3.10. Our Company does not collect or gain access in any way to special categories of ("sensitive") personal data or data related to criminal convictions and offenses of its users - customers. You have the obligation to refrain from posting such data, concerning your person or third data subjects. In the event that you post such data on our Website , it will be removed as soon as it comes to our attention. We bear no responsibility towards you or third parties for any posting and/or processing of sensitive data, due to your actions or omissions in violation of the above obligation.
4. PURPOSES AND LEGAL BASIS OF PROCESSING
4.1. Your personal data, which are necessary for the navigation and use of our Website in accordance with Article 6 § 1 (b) of the GDPR, are collected and processed by our Company for the following purposes:
- Technical possibility for the smooth operation of our Website .
- User-friendly and user-friendly operation of our Website .
- Improving your online experience when navigating and using our Website .
- Recording consumption habits through the use of anonymous statistical data.
- Sending informational electronic messages to the subscribers of the information service through electronic letters ( newsletter ). • Inclusion in the electronic register of ENDIALE of an entity or companies related to Oil Oils and their recycling.
4.2. Your personal data, which are necessary for the provision of our services within the framework of a contractual relationship between us in accordance with Article 6 § 1 (b) of the GDPR, are collected and processed by our Company for the following purposes:
- Fulfilling the contractual obligations of our Company towards the individual and Business Users of our Website .
- Prompt, adequate and efficient provision of our services.
- Fiscal use and use for invoicing and proof of provision of the ordered services.
- Communication with our customers in the context of the good performance of our services as well as to resolve any complaints.
- Improving and renewing our products and services to meet the needs of our customers as much as possible.
- Administrative organization and operation of our Company.
- Managing our clientele.
- Update and expansion of the business register.
- Legal claims support.
4.3. Our Company collects and processes personal data of its users - customers only for the aforementioned purposes and only to the extent necessary to effectively serve these purposes. This data is always relevant, useful and no more than is required in view of the above purposes, and it is accurate and, if necessary, submitted for updating. Furthermore, said data are kept during the period required to carry out the purposes of their collection and processing and for twenty (20) years after the end thereof, subject to any provisions of law that provide for longer retention.
5. CONSENT
5.1. Our Company may process personal data only with the legal consent of the Website users for the following purposes:
- For purposes of commercial communication, marketing and advertising of our services or services of third parties via SMS , telephone, email , internet, fax, mail, social media and/or any other appropriate communication channels.
- For research and/or analysis purposes to better understand your needs, preferences, interests, experiences and/or habits as a consumer.
- To operate and administer any reward programs.
- For the inclusion and publication of an electronic or printed directory of companies and organizations dealing with the collection, recycling and regeneration of Lubricating Oils.
5.2. You provide us with your consent to the processing of your personal data for the above purposes by electronic declaration in a manner clearly distinguishable from other subjects, in an understandable and easily accessible form. Your consent is given freely and your personal data is provided, without such provision being a legal or contractual obligation of yours or a requirement of our company for the conclusion of a contract between us.
5.3. In this context, by completing the relevant field online , you expressly declare that you wish and that you provide your consent for the above purposes in accordance with the terms and conditions of this policy. Provide your above consent in the following ways:
- When registering for the information service through electronic letters ( newsletter ).
- When creating your personal or business account.
- When ordering services as well as when drawing up contracts through our Website .
5.4. You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing that was based on the consent before its withdrawal. Withdrawing your consent is done in the same way as giving it.
6. THIRD PARTY RECEIVERS OF THE DATA
6.1. Our Company does not provide your personal data or link its file against any financial or other consideration with any third party private companies, natural or legal persons, public authorities or services or other organizations.
6.2. In order to serve the processing purposes stated in this policy, our Company may provide access to or transmit the following types of your personal data to the following processors on its behalf and at its direction:
- Your financial data at the credit institution, with which we cooperate each time for the processing of payments to and from your bank and credit card accounts, in order to pay off your financial debts towards our Company,
- The full address and contact information for the purpose of informing the public as well as interested parties.
- Your personal data to the web hosting service provider , with whom we maintain a contractual relationship, for the purpose of hosting them on the Website .
- Your personal data to the company, which provides us with maintenance and support services for software programs and databases, in order to support the Website .
- Preference data and contact information to third party marketing and advertising companies for the commercial communication, marketing and advertising of our services or third party services.
- Your personal data to third party consulting firms to provide data analysis services.
- Your financial details and contact details with you to debtor information companies, in case of overdue debts to our Company after your prior notification.
- Your personal data to auditors, accountants, financial or professional advisors as well as investors in the context of the transfer of part or all, merger, branch separation or other general succession, liquidation, bankruptcy or submission to another process of the bankruptcy code of our company.
6.3. The processing of your personal data by the above entities cooperating with us is carried out under our control and only at our command and is subject to the same data protection policy or a policy of at least the same level of protection.
6.4. In the event that it is required by a court or other administrative authority, as well as in any other case where it has a legal obligation to do so, our Company may provide your personal data to the extent provided by law, but after informing you.
7. PRIVACY AND DATA SECURITY
7.1. Our Company, in order to ensure the proper use and integrity of your personal data as well as to prevent unauthorized or accidental access, processing, deletion, alteration or other use thereof, applies appropriate internal policies, while taking all appropriate organizational, technical , physical, electronic and procedural security measures, as well as technological standards, in accordance with applicable laws and regulations.
7.2. The processing of data by our Company is carried out in a way that ensures the privacy and physical and logical security thereof, taking into account the latest developments, the cost of implementation and the nature, scope, context and purposes of the processing, as well as risks of varying likelihood and severity to your rights and freedoms;
7.3. The processing of your personal data is carried out exclusively by the Company's staff authorized for this purpose, who are bound by strict obligations to maintain their confidentiality.
8. DATA RETENTION PERIOD
8.1. We retain your personal data for as long as the purposes for which it was collected and stated above remain in force.
8.2. Our Company may retain your personal data even after the purposes of collection and processing have been fulfilled in the following limiting cases:
- As long as there is a legal obligation on our part by a relevant provision of the law.
- For use before tax and social security authorities as well as any other auditing authority within the legal limitation period.
- As long as it is required for the good organization and operation of our Business provided that anonymization or pseudonymization of your data takes place.
- Until the statute of limitations for the relevant claims for the defense of our rights and legal interests before any competent Court and any other public authority.
8.3. After the end of the retention period your personal data is destroyed from our files and system in compliance with our company policy and provided that its retention is no longer required to fulfill the purposes we have described to you above.
9. RIGHTS
9.1. Subject to applicable law, you have the following rights:
- Request access to your personal data as well as the information related to the processing and receive a copy thereof.
- Request the correction of any inaccurate and completion of any incomplete personal data.
- Request the deletion of your personal data.
- Request the restriction of the processing of your personal data for the cases expressly defined by law.
- Request the portability of your personal data to another controller in a structured, commonly used and machine-readable format (eg cd ).
- Object to the processing of your personal data for the cases expressly defined by law.
- Not be subject to a decision made solely on the basis of automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way. The above requests are addressed in writing by post to our Company headquarters.
9.2. Our Company will respond to each of your requests within one month of receipt. Upon your notification, this deadline may be extended by two more months, if necessary, taking into account the complexity of the request and the number of requests. Any rejection of your request will take place with reasons.
9.3. If your requests do not meet the requirements of the law, our Company reserves the right to either: (a) impose a reasonable fee, taking account for the administrative costs of providing the information or notice or performing the requested action, or (b) refuse to act on your relevant request.
9.4. In the event of a breach of your personal data, which may put your rights and freedoms at high risk and provided that it does not fall under one of the exceptions expressly provided by law, we undertake to inform you without undue delay delay.
9.5. If there is any doubt about the identity of the natural person making the request, we reserve the right to request the provision of additional information necessary to confirm their identity.
9.6. If your rights are violated, we inform you that you have the right to file a complaint with the Personal Data Protection Authority or another competent supervisory authority.
10. OBLIGATIONS OF USERS
10.1. By using the Website as well as when providing your personal data upon consent, you acknowledge that you have the obligation to provide the real, accurate and complete information requested by our Company. Further, you must notify our Company of any changes to this information in order to keep it up-to-date and accurate.
10.2. If it is found that you do not comply with your obligations above, or if our Company reasonably suspects that the information you provide is false or incomplete or in any way contrary to the law or to the Terms of Use or this Data Protection Policy, we retain the right to reject your application for registration or to immediately suspend or terminate your account without notice. In this case, you have no right to any compensation due to the rejection of your application, or the suspension or termination of your account.
10.3. You acknowledge that our Company may delete, cross-reference, supplement or modify the information you provide based on information lawfully provided by third parties. In this case, our Company will inform you accordingly, following the legal procedure.
10.4. By using the Website you certify that you are over sixteen (16) years of age. As long as you are under sixteen (16) years of age, you have the obligation to refrain from any use of the Website as well as from any provision of your personal data without the approval of the person exercising your parental care. If you do not comply with the above obligations, you must notify our company immediately. In any case, by using the Website you acknowledge that our Company is not responsible for your breach of the above obligations to the extent that it is unable, even if it makes reasonable efforts, to verify your age or consent of your guardian.
11. COOKIES
11.1. Our Website works with cookies.
12. INTERNATIONAL JURISDICTION AND GOVERNING LAW
12.1. For the resolution of any dispute arising between our Company and users of the Website regarding this data protection policy and its subject matter, the courts of Athens are competent and the applicable law is Hellenic, without regard to its conflict of law rules.
12.2. In the event that a provision of this policy is invalidated by a decision of a competent court as not legal, valid and enforceable, this fact will not affect the rest of its provisions, which will remain in force and be applied normally.
13. COMMUNICATION
13.1. For any further information or request regarding this data protection policy, you can contact the data protection officer of our Company at the following details:
