{"id":3070,"date":"2025-11-11T10:31:32","date_gmt":"2025-11-11T10:31:32","guid":{"rendered":"https:\/\/gefsinus.gr\/?page_id=3070"},"modified":"2026-07-21T11:32:34","modified_gmt":"2026-07-21T11:32:34","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/gefsinus.gr\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
  1. Introduction<\/span><\/b><\/li><\/ol>

    Our company,\u00a0<\/span>GEFSINOUS S.A.<\/span><\/b>, a Soci\u00e9t\u00e9 Anonyme (Anonymous Commercial and Industrial Company) duly incorporated and existing under the laws of Greece, with its registered office at\u00a0<\/span>7\u00a0Asklipiou\u00a0Street,\u00a0Kryoneri, Attica, Greece<\/span><\/b>, Tel.:\u00a0<\/span>+30 210 6254950<\/span><\/b>, Email:\u00a0<\/span>info@gefsinus.gr<\/span><\/b><\/a>\u00a0(hereinafter referred to as the “<\/span>Company<\/span><\/b>“, “<\/span>we<\/span><\/b>“, “<\/span>our<\/span><\/b>“, or “<\/span>us<\/span><\/b>“), respects your privacy and is committed to the lawful processing, protection, and security of your personal data. To this end, the Company has adopted and implements this Privacy Policy (the “<\/span>Privacy Policy<\/span><\/b>“).<\/span>\u00a0<\/span><\/p>

    Through this Privacy Policy, we provide you with the information required under applicable data protection legislation regarding the processing of the personal data you provide to us in the context of your relationship with the Company.<\/span>\u00a0<\/span><\/p>

    The processing of your personal data is governed by the provisions of the\u00a0<\/span>General Data Protection Regulation (EU) 2016\/679 (“GDPR”)<\/span><\/b>, the applicable Greek data protection legislation (including\u00a0<\/span>Law 4624\/2019<\/span><\/b>,\u00a0<\/span>Law 3471\/2006<\/span><\/b>, and any other applicable legislation, as amended and in force from time to time), as well as the decisions, guidelines, and regulatory acts issued by the\u00a0<\/span>Hellenic Data Protection Authority (HDPA)<\/span><\/b>.<\/span>\u00a0<\/span><\/p>

    1. Definitions<\/span><\/b><\/li><\/ol>

      For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:<\/span>\u00a0<\/span><\/p>

      “Data Subject”<\/span><\/b>\u00a0means any user of our website (whether registered or not), as well as any other natural person who interacts with our website.<\/span>\u00a0<\/span><\/p>

      “Personal Data”<\/span><\/b>\u00a0means any information relating to an identified or identifiable natural person (“Data Subject”), including, without limitation, name, postal address, contact details (telephone number, mobile number), email address, and any other information capable of identifying that individual, directly or indirectly.<\/span>\u00a0<\/span><\/p>

      “Processing”<\/span><\/b>\u00a0means any operation or set of operations performed on Personal Data or on sets of Personal Data, whether or not by automated means, including collection, recording,\u00a0organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction of Personal Data that the Company obtains either directly from you through the website or in the course of your commercial or contractual relationship with the Company.<\/span>\u00a0<\/span><\/p>

      “Controller”<\/span><\/b>\u00a0means\u00a0<\/span>GEFSINOUS S.A.<\/span><\/b>, with its registered office at\u00a0<\/span>7\u00a0Asklipiou\u00a0Street,\u00a0Kryoneri, Attica, Greece<\/span><\/b>, Tel.:\u00a0<\/span>+30 210 6254950<\/span><\/b>, Email:\u00a0<\/span>info@gefsinus.gr<\/span><\/b><\/a>, which determines the purposes and means of the processing of Personal Data.<\/span>\u00a0<\/span><\/p>

      “Processor”<\/span><\/b>\u00a0means any natural or legal person, public authority, agency, or other body that processes Personal Data on behalf of the Controller.<\/span>\u00a0<\/span><\/p>

      “Recipient”<\/span><\/b>\u00a0means any natural or legal person, public authority, agency, or other body to whom Personal Data are disclosed,\u00a0whether or not\u00a0they are a third party.<\/span>\u00a0<\/span><\/p>

      “Third Party”<\/span><\/b>\u00a0means any natural or legal person, public authority, agency, or body other than the Data Subject, the Controller, the Processor, and persons who, under the direct authority of the Controller or the Processor, are\u00a0authorised\u00a0to process Personal Data.<\/span>\u00a0<\/span><\/p>

      “Consent”<\/span><\/b>\u00a0means any freely given, specific, informed, and unambiguous indication of the Data Subject’s wishes by which the Data Subject, by a statement or by a clear affirmative action, signifies agreement to the processing of Personal Data relating to him or her.<\/span>\u00a0<\/span><\/p>

      “Data Protection Officer” (“DPO”)<\/span><\/b>\u00a0means the individual appointed by the Company in accordance with the GDPR and the applicable data protection legislation to perform the duties and responsibilities prescribed by such legislation.<\/span>\u00a0<\/span><\/p>

      \u00a0<\/span><\/p>

      \u00a0<\/span><\/p>

      \u00a0<\/p>

      1. What Personal Data We Collect, Why We Collect It, and the Legal Basis for Processing<\/span><\/b><\/li><\/ol>

        Depending on the nature of our relationship with you, we collect and process the following categories of Personal Data for the purposes and on the legal bases set out below:<\/span>\u00a0<\/span><\/p>

        \u00a0<\/span><\/p>

        \u00a0<\/span><\/p>

        \u00a0<\/span><\/p><\/td>

        Data<\/span><\/b>\u00a0<\/span><\/p><\/td>

        Purpose<\/span><\/b>\u00a0<\/span><\/p><\/td>

        Legal basis<\/span><\/b>\u00a0<\/span><\/p><\/td><\/tr>

        Accessing Our Website<\/span>\u00a0<\/span><\/p><\/td>

        IP address, Date and time of access, Requested URL, Referring URL, Internet service provider (ISP), Browser type, Operating system.<\/span>\u00a0<\/span><\/p>

        \u00a0<\/span><\/p><\/td>

        To enable the proper operation of the Website, establish secure connections, maintain system security and stability, and improve the services provided through the Website.<\/span>\u00a0<\/span><\/p>

        \u00a0<\/span><\/p><\/td>

        Our legitimate interests in operating, maintaining and securing our\u00a0Website\u00a0and providing our online services.<\/span>\u00a0<\/span><\/p>

        \u00a0<\/span><\/p><\/td><\/tr>

        Contacting Us by Email<\/span>\u00a0<\/span><\/p><\/td>

        Email address<\/span>\u00a0<\/span><\/p>

        First name and surname (where provided)<\/span>\u00a0<\/span><\/p>

        Contents of your message<\/span>\u00a0<\/span><\/p><\/td>

        To communicate with you and to manage, respond to and\u00a0resolve your enquiry, request or complaint.<\/span>\u00a0<\/span><\/p><\/td>

        a)Performance\u00a0of pre-contractual measures or our\u00a0contractual relationship with you, where applicable; and\/or<\/span>\u00a0<\/span><\/p>

        \u00a0<\/span><\/p>

        b) Our legitimate\u00a0interests\u00a0in responding to enquiries and providing customer support.<\/span>\u00a0<\/span><\/p><\/td><\/tr>

        Contacting Us by Telephone<\/span>\u00a0<\/span><\/p><\/td>

        Telephone number<\/span>\u00a0<\/span><\/p>

        First name and surname (where provided)<\/span>\u00a0<\/span><\/p>

        Details of the communication<\/span>\u00a0<\/span><\/p><\/td>

        To respond to your enquiries, requests or complaints and to provide customer support.<\/span>\u00a0<\/span><\/p><\/td>

        a)\u00a0Performance of pre-contractual measures or our contractual relationship with you; and\/or<\/span>\u00a0<\/span><\/p>

        b)\u00a0Our legitimate\u00a0interests\u00a0in providing effective customer service.<\/span>\u00a0<\/span><\/p><\/td><\/tr>

        Marketing Communications (Newsletter)<\/span>\u00a0<\/span><\/p><\/td>

        Email address<\/span>\u00a0<\/span><\/p>

        \u00a0<\/span><\/p><\/td>

        To send newsletters and information regarding our products, services, offers, promotions and other marketing communications.<\/span>\u00a0<\/span><\/p><\/td>

        Your consent.<\/span>\u00a0<\/span><\/p><\/td><\/tr>

        Submit your CV to hr@gefsinus.gr.<\/span><\/a>\u00a0<\/span><\/p><\/td>

        Full name<\/span>\u00a0<\/span><\/p>

        Employment history<\/span>\u00a0<\/span><\/p>

        Educational background<\/span>\u00a0<\/span><\/p>

        Date of birth<\/span>\u00a0<\/span><\/p>

        Telephone number<\/span>\u00a0<\/span><\/p>

        Postal address<\/span>\u00a0<\/span><\/p><\/td>

        To assess your application, manage recruitment procedures and fill available positions within the Company.<\/span>\u00a0<\/span><\/p><\/td>

        a)Taking\u00a0steps at your request prior to\u00a0entering into\u00a0an employment contract; and\/or\u00a0 b)Our legitimate interests in recruiting suitable personnel.<\/span>\u00a0<\/span><\/p><\/td><\/tr>

        Cookies<\/span>\u00a0<\/span><\/p>

        (please\u00a0refer to our Cookie Policy.)<\/span>\u00a0<\/span><\/p><\/td>

        \u00a0<\/span><\/p><\/td>

        \u00a0<\/span><\/p><\/td>

        \u00a0<\/span><\/p><\/td><\/tr><\/tbody><\/table>

        \u00a0<\/span><\/p>

        We would like to inform you that the Personal Data you provide to us through our website for the above purposes\u00a0are\u00a0necessary to enable us to provide you with the best possible service and to process, manage, or resolve your request, enquiry, or complaint. Consequently, failure to provide the requested Personal Data, where applicable, may\u00a0render\u00a0communication between you and the Company through the website ineffective and\/or impossible and may prevent us from establishing or maintaining our business relationship with you.<\/span>\u00a0<\/span><\/p>

        Furthermore,\u00a0with regard to\u00a0the submission of Curriculum Vitae (CVs) via\u00a0<\/span>hr@gefsinus.gr<\/span><\/b><\/a>, you will receive an automated response informing you that your CV will be retained as follows:<\/span>\u00a0<\/span><\/p>

        1. a)<\/span><\/b>where you are hired by the Company, for the entire duration of your employment relationship;<\/span><\/li>
        2. b)<\/span><\/b>where you are not hired, for a period of six (6) months from the date of receipt, after which it will be securely deleted or destroyed. Appropriate technical andorganisational\u00a0measures are implemented throughout both the retention and deletion\/destruction processes.<\/span>\u00a0<\/span><\/li><\/ol>

          \u00a0<\/span><\/p>

          1. Processing of Special Categories of Personal Data<\/span><\/b><\/li><\/ol>

            The Company does not intentionally collect or process, through its website, Special Categories of Personal Data (sensitive personal data), including data revealing racial or ethnic origin, religious or philosophical beliefs, health data, or data concerning your sex life or sexual orientation, as such data are not necessary for the purposes of our processing activities.<\/span>\u00a0<\/span><\/p>

            Should you voluntarily provide such Personal Data when submitting an enquiry, request, comment, or otherwise communicating with us, such data will be processed only where your explicit consent has been obtained or where such processing is necessary for the establishment, exercise, or\u00a0defence\u00a0of legal claims, in accordance with applicable data protection legislation.<\/span>\u00a0<\/span><\/p>

            1. Personal Data Relating to Minors<\/span><\/b><\/li><\/ol>

              The Company does not knowingly collect or process Personal Data relating to individuals under the age of eighteen (18).<\/span>\u00a0<\/span><\/p>

              If we become aware that a minor has provided us with Personal Data without the consent of their parent or legal guardian, we reserve the right to delete such data without undue delay.<\/span>\u00a0<\/span><\/p>

              If you become aware that a minor has disclosed Personal Data to us without the required consent of their parent or legal guardian, please contact us immediately.<\/span>\u00a0<\/span><\/p>

              Notwithstanding the above, where the processing of Personal Data is based on consent pursuant to Article 6(1)(a) GDPR in connection with the direct provision of information society services to a child, such consent shall be valid where the child is at least fifteen (15) years of age. Where the child is under the age of fifteen (15), such processing shall be lawful only if, and to the extent that, consent has been given or\u00a0authorised\u00a0by the holder of parental responsibility over the child, in accordance with Article 8 GDPR and Article 21 of Greek Law 4624\/2019.<\/span>\u00a0<\/span><\/p>

              1. Who Receives Your Personal Data<\/span><\/b><\/li><\/ol>

                The Personal Data collected in the context of our relationship with you may be processed by:<\/span>\u00a0<\/span><\/p>