Vis Consultants
ESPA 2014-2020

Privacy Notice for Associates / Experts

With this Information Notice, the company with the name “VIS ECONOMIC & ENERGY CONSULTANTS CONSULTING SERVICES S.A.” based in Athens, at 1 Mavromichali Street, PO Box 10679, (hereinafter the “Company”) intends to inform prospective associates/experts (hereinafter as “candidates”) to be engaged in consulting projects, regarding the processing of their personal data, in accordance with the General Data Protection Regulation 2016/679(EU), Law 4624/2019, the Decisions, Instructions and Opinions of the Personal Data Protection Authority and in general the national and EU legislation and jurisprudence for the protection of personal data (hereinafter referred to as “Existing Legislation”).

This Privacy Notice concerns and applies to candidates’ personal data, in the context of submitting their resumes to seek collaboration with the Company, either electronically or in physical form at the Company’s headquarters.

  1. DEFINITIONS

“Controller”: The natural or legal person, public authority, agency or other entity that alone or jointly with others, determines the purposes and manner of personal data processing, i.e. in this particular case the Company.

“Processing”: Any act or series of acts carried out with or without the use of automated means, on personal data or sets of personal data, such as the collection, registration, organization, structuring, storage, adaptation or alteration, retrieval, retrieval of information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction, whether in electronic or paper form.

“Personal Data” : Any information relating to an identified or identifiable natural person, which is the natural person whose identity can be ascertained, directly or indirectly, in particular by reference to an identification element, such as a name, an identification document number, location data, online identifier (such as IP address , cookies ) or to one or more factors that characterize the physical, physiological, genetic, psychological, economic, cultural or social identity of the natural person in question.

“Sensitive personal data”: personal data revealing race or ethnic origin, political opinions, religious or philosophical beliefs or membership of a trade union, as well as the processing of genetic data, biometric data for the purpose of indisputable identification of the person, data relating to health or data relating to the sex life or sexual orientation of a natural person. Data treated as a special category, are also those relevant to criminal prosecutions and convictions, offences, and related security measures.

  1. WHICH PERSONAL DATA IS PROCESSED BY THE COMPANY

Based on the prospect of future cooperation, the Company collects personal data of candidates such as name, surname, father’s name, mother’s name, marital and family status, date and place of birth, national identity card number/passport and its issuing details, nationality, gender, address, telephone numbers, email, professional status, professional experience, degrees, certifications, army service status, as well as other personal information of the candidates included in the CVs and in the expression of interest applications that are sent/submitted to the Company. The Company does not seek to collect sensitive personal data at the stage of evaluating the candidates.

  1. PURPOSE AND LEGAL BASIS OF PERSONAL DATA PROCESSING

The purpose of processing the personal data of candidates is to evaluate their suitability for a specific job position. The legal basis for processing candidates’ personal data is the Company’s legitimate interest in recruiting the appropriate candidate for the job/work position. When candidates send their resumes or personal data to the Company on their own initiative, without the Company having advertised a specific open job position, the candidates provide their consent for the processing of their data, in accordance with what is defined by the applicable legal framework. The purpose of transferring candidates’ resume to international bodies (even outside EU/EEA) is for the participation of the Company in international technical assistance and consulting tenders and projects worldwide.  The legal basis for the abovementioned transfer of candidates’ resume, is their prior, explicit consent.

  1. SECURITY OF PERSONAL DATA AND RECIPIENTS

Considering the latest developments, the cost of implementation and the nature, scope, context and purposes of data processing, as well as the risks of different probability of occurrence and severity for the rights and freedoms of candidates, the Company implements appropriate technical and organizational measures to ensure the appropriate level of security, integrity and confidentiality of candidates’ personal data, in accordance with Existing Legislation.

For this purpose, the Company has and has adopted Policies and Procedures for the protection of personal data and has implemented important information protection measures, which include secure storage and operating environments, classified access, etc.

The Company may transfer candidates’ personal data to the relevant staff members or to external partners to whom it has entrusted the processing of personal data on its behalf or to international bodies (even outside EU/EEA) in the context of its participation in international technical assistance and consulting tenders and projects worldwide. In case your personal data is transferred to a country outside the European Union (EU) or the European Economic Area (EEA), we will ensure that the third parties to which candidates’ data may be transferred, are bound towards the Company to ensure the required confidentiality obligation. The Company will under no circumstances transfer your personal data to unauthorized third parties.

 

  1. PLACE AND PERIOD OF STORAGE OF PERSONAL DATA

Personal data shall be retained for as long as necessary for data collection purposes, as specified in article 2,3, unless otherwise specified by law. It is our responsibility, once the retention period expires, to ensure that your data will be safely deleted or destroyed in accordance to explicitly described standards and specifications, apart from your data that we use with your consent. That data will be retained until you recall your consent.

  1. RIGHTS

According to the Existing Legislation, candidates have and can exercise:

  • Right of access and information, so that they receive information from the Company about their personal data that it processes and receive a copy of them,
  • Right to rectification, i.e. to request the correction and/or completion of inaccurate, incomplete data held for them,
  • Right to deletion, i.e. to request the deletion of their data, as long as the Company keeps it without any legal basis for processing,
  • Right to restrict processing, if one of the conditions of Article 18 of the GDPR is met,
  • Right to data portability, i.e. to request the provision of their data in a structured, commonly used and readable format, or to request their transmission to a third party.
  • Right to object to the processing of their personal data, including objecting to automated decision-making and profiling.
  • Right to withdraw their consent, (only for processing for which it could be considered that the consent is freely given according to the above).

In case of exercising one or more of the above-mentioned rights, the Company will endeavour to respond immediately and in any case no later than one (1) month from the submission of the request and the identification of the applicant. This deadline can be extended by two (2) more months, if necessary, if the request is complex or there is a large number of requests. In the event that the candidates believe that their personal data has been violated in accordance with the Existing Legislation, they have the right to submit a complaint to the Hellenic Data Protection Authority.

  1. COMMUNICATION

If you have any questions or queries regarding the way the Company processes your personal data, or wish to exercise your rights referred to in Article 6 hereof, you may contact the Company by email at: GDPR@vis-consultants.com