The Company «GEOSPATIAL INFORMATION TECHNOLOGIES P.C. » under the distinct title «KIKLO» located at 3 Panagias Deksias Str, PO: 546 36, Thessaloniki, ensures the confidentiality of your personal data and adopts the General Regulation for the Protection of Personal Data 679/2016 of the European Union and the current Greek legislation in all procedures and stages of communication with you.
Purpose of this Policy
This Personal Data Protection Policy concerns KIKLO and the personal data of individuals processed by the Company. This Policy provides any individual or visitor to the website of our Company https://kiklo.eu with concise and transparent information regarding the practices followed for the management and protection of personal data.
It concerns any transaction or series of transactions performed with or without the use of automated means, in personal data or in personal data sets, such as the collection, organization, structure, storage, adaptation or modification, retrieval, search for information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction.
The Policy is updated from time to time and may be amended whenever necessary, without prior notice, always within the applicable legal framework, and in accordance with any changes in the current legislation on personal data protection. We therefore suggest that you check our website https://kiklo.eu, in which, any posted revised version of this policy, prevails over the printed version.
The term “personal data” hereinafter referred to as “Personal Data or Data”, is any information concerning a specific natural person or person whose identity can be verified (e.g., name, identity number, address, etc.).
Personal Data are obtained with the following methods:
(a) When you apply for a job. The provision of your personal data in the context of submitting a CV to find a job in our Company takes place automatically and voluntarily as otherwise, it would not be possible to assess the possibility of your recruitment. The legal basis for the processing is in accordance with article 6 (1) (b) of the GDPR “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”. For more information, please check our CV Policy (in greek).
(b) You provide them to us in the context of the transaction between us for the execution of our contractual obligations but also in the context of compliance of the Company with its legal obligations. The processing of personal data we receive is carried out in accordance with articles 6 (1) (b) of the Regulation 2016/679 “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract” and 6 (1) (c) “processing is necessary for compliance with a legal obligation to which the controller is subject”.
(c) You provide your personal data to us when you send an e-mail in order to be informed about the services provided. The submission of your personal data is at your option and their processing is in accordance with article 6 (1) (b) of Regulation 2016/679 “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract” and 6 (1) (a) of the Regulation 2016/679 “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”.
Categories of Personal Data – Purposes of Processing
Personal data that are collected and further processed include:
-identification data such as your name, address, general contact details (including email address and telephone number), etc. The purpose of the collection and processing is the provision of our services in accordance with article 6 (1) (b) of Regulation 2016/679 “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”.
-identification data, financial data, tax and contact details, such as VAT, Tax Office, address, etc. The collection, processing, and retention of your data belonging to the above-mentioned categories, is in accordance with article 6 (1) (c) of Regulation 2016/679, “processing is necessary for compliance with a legal obligation to which the controller is subject”.
-identification data such as CV, education status, work experience, personal photo, etc. The collection, processing, and maintenance of the above data are for the sole purpose of the selection and evaluation of prospective employees by the Company for the possibility of finding a job and in accordance with article 6 (1) (b) of the Regulation 2016/679 “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”.
The Company will not process your personal data without your consent, where required. However, the Company reserves the right, in exceptional cases, to process your personal data to the extent permitted or required by law, and/ or by court decisions or prosecutorial orders.
Recipients of your data
We may disclose your personal information (in whole or in part, as each time it appears) indicatively to:
a) all authorized persons of our Company, e.g. legal advisers, business consultants, external accountants, security technicians, etc.,
b) specific persons of our Company, necessary for the selection process of candidate employees, e.g., Administration, Head of Departments, etc.,
c) authorized external partners (business consultants), necessary for the execution of the contract between us,
d) to Greek public bodies and the European Union public bodies in the context of the implementation of European projects and public works,
(e) providers of support for these data processing systems,
(f) judicial or supervisory or control authorities, within the scope of their jurisdiction.
In cases where your consent to the disclosure of your data to third parties is required (where it is not mentioned by law, it will be explicitly requested by you and you have the right to revoke it at any time. In these cases, the Company assures you that it is in constant contact and takes all necessary security measures so that the transfer of personal data is carried out in the safest possible way.
The Company undertakes the obligation to not trade your personal data by making it available for sale or rental by transferring or disclosing it to third parties or using it in any other way and for other purposes that might jeopardize your privacy and your rights and freedoms unless required by law, court decision/ order, administrative act or if it is a contractual obligation necessary for the smooth operation of the Company’s website and the performance of its functions.
Your personal data may be transferred to partners or third parties, complying with the terms of this policy and committed to maintaining confidentiality and who act on behalf of the Company for further processing in order to provide services (e.g. data management, technical support, etc.). These third parties have contractually agreed with the Company, that the personal data will be used only for the above purposes and will not transmit personal information to third parties, as well as will not disclose any personal data to third parties unless law requires it.
The retention period can vary significantly depending on the type of data and how it is used. Determining the retention time of data is based on criteria such as legal retention periods, pending or potential disputes, intellectual property or rights, contractual requirements, business instructions or archiving needs.
The Company is committed to keeping your CV for one (1) year after the job position is filled and as it referred to our CV policy.
The tax data are kept in accordance with the current tax legislation.
In order to fulfill the purpose of processing that concerns the execution of the contract and to inform you about our services, a reasonable retention time of your data is the time of the operation of the Company and according to the current legal framework governing its operation, the legal framework governing the tax obligations of the Company as well as the Personal Data Protection Legislation.
Data subject’s rights
With regard to your personal data, you may exercise the following rights: right of access, right of information, right of rectification, right of erasure, right of restriction of processing, right of data portability, and right of objection.
In order to exercise any of the above rights, please send us an email at the following address: email@example.com always stating your complete details and the reason for your communication.
In case of exercise of one of the above rights, the Company will take every possible measure to satisfy your request within one (1) month of receiving it, informing you in writing of the satisfaction of your request or the reasons that prevent the satisfaction of one or more of them, as well as for the reasons of any delay beyond the above period of one (1) month and in any case not later than three (3) months.
The Company will also inform you of your further rights in case of improper response. This information is in principle provided free of charge by the Company, subject to the request for notification and information not to be exercised repeatedly, in excess, and/ or to be manifestly unjustified.
In this case, we would highly appreciate your previous communication with the Company via email at the following address firstname.lastname@example.org always stating your complete details and your reason for contact.