This Privacy Policy (hereinafter referred to as “the Policy”) provides information about the collection, storage, processing and use of your personal data.

Identity of the controller
The company Anastasiou G. – Baltogianni F.O.E. Forest & Environmental Studies company with the name “Sylvestris” (hereinafter the “company”) located at 26 Neophytou Douka Street, in Ioannina, with the email address info@sylvestris.gr, informs that, for the purposes of carrying out its activities and acting as Controller, processes personal data in accordance with applicable National law and European Regulation 2016/679 (hereinafter “Regulation”).

Processing of personal data
The processing is limited to what is absolutely necessary and is performed by the Company, as well as cooperating third companies and subcontractors in order to ensure the successful implementation of the agreed objectives. The processing of personal data includes the collection, registration, storage, alteration, retrieval of information, and disclosure by transmission. No automated decision-making process takes place, nor a corresponding process of creating a profile based on personal data.

Purpose of processing
The company handles personal data solely for the agreed purposes, such as establishing and fulfilling a contractual obligation, complying with legal obligations, protecting its legal interests or taking any action for which you consent.

Categories of data subjects
The personal data that are processed concern the customers, suppliers, subcontractors or associates of the company, natural or legal persons, as well as the natural persons who have submitted a job application. The data of clients, subcontractors or partners who are legal entities, refer to the contact details of the legal representatives and contacts such as name, job title, work address, e-mail address, telephone number and where required by law the tax registration number. The data of customers or associates who are natural persons refer to contact and invoicing data, such as name, registered office address, e-mail address, telephone number and VAT number.

Transfer of personal data
The company may transmit personal data to cooperating third party companies or subcontractors or partners, legal or natural persons who have undertaken the implementation on behalf of the company of its contractual obligations. Personal data may be passed on to National Tax Insurance or other public authorities if required by law. In the case of collaborators, legal or natural persons, for the implementation of National or European subsidized research projects, personal data may be transmitted to the respective National or European Managing Authorities of the projects.

Processing of personal data
The personal data is processed by authorized personnel, who undertake to act in accordance with the company’s instructions in order to ensure the protection of personal data from unauthorized access, use, disclosure, loss and modification. The cooperating third companies, subcontractors or associates, who undertake the execution of the processing on behalf of the company, are bound by a contract which determines the object and duration of the processing, the nature and purpose of the processing, the type of personal data and the categories of data subjects and processes the data only on the basis of recorded instructions of the Data Controller.

The processing time
The retention period of the data is decided based on the following criteria:
– When processing is required as an obligation by provisions of the applicable legal framework, your personal data is retained for as long as the relevant provisions require.
– When processing under contract, personal data is retained for as long as is necessary for the performance of the contract and for the establishment, exercise, and / or support of legal claims under the contract.
– It is possible for the company to retain the data for a longer period of time, if required by law or by law of the company until such interests are no longer active.

Privacy
The company, as well as external partners, when used, take all necessary organizational and technical measures to ensure the protection of personal data from unauthorized access, use, disclosure, loss and modification. The above measures are reviewed and updated when necessary.

Your rights as a subject of personal data
The company undertakes to provide, in writing or by other means, inter alia, if appropriate, to the data subject any information referred to in Articles 13 and 14 of the Regulation, regarding the processing of his personal Data. The company undertakes to facilitate the data subjects in exercising all their rights provided in articles 15 to 22 of the Regulation if the company is able to verify the identity of the data subject.
More specifically, you can exercise the following rights under the conditions and within the limits set by law and without prejudice to the confidentiality obligations to which you are subject:
– the right of access to your personal data as processed by our company and, if you believe that any information relating to you is incorrect, outdated or incomplete, request that it be corrected or updated,
– the right to request the deletion of your personal data or their restriction to specific processing categories,
– the right to withdraw your consent at any time, without prejudice to the legality of the processing prior to such withdrawal,
– the right to object, in whole or in part, to the processing of your personal data,
– the right to request their portability, ie the return to you of the personal data you have provided to our company or the transfer to a person of your choice, in a structured, widely used and machine-readable form.

Policy updates
In our effort to continually improve the protection of your data, your clear and unambiguous information regarding their processing and compliance with European and national law, this privacy policy is subject to change.

Contact info
For any issue regarding the processing of personal data or the exercise of your rights, you can contact the person in charge of personal data protection of our company at the email address info@sylvestris.gr.

In case you wish to make a complaint regarding the processing of your personal data, we inform you that the Competent Authority is the Personal Data Protection Authority (APDPX), which is located at 1-3 Kifissias Ave., 115 23, Athens, tel. . 210.6475600 and email address contact@dpa.gr.