Data Processor
TRUEWORK Facility Solutions processes personal data of its suppliers.
This policy sets out the principles applied by the Company when processing such data (categories, legal basis, purpose, protection measures, rights, etc.) and aims to inform the subject-suppliers about the processing. It is posted on our website (https://www.truework.gr) and may be changed/updated from time to time. You will be informed of all significant changes and the version in force will be posted on the website each time.
We assure you that all information concerning you is processed only for the legitimate purpose of collection and is protected by high security systems.
Purpose for which we process your personal data. We process your personal data for the purpose of drawing up, executing, operating and terminating the contract between us and generally managing the contractual relationship between us, as well as for the compliance of our Company with its legal obligations (Income Tax Code, etc.), as well as for the legal substantiation of its claims or the defence of claims against it before courts, authorities, etc. In particular, we process your data for the purpose of order processing, invoicing and quality control of services/products.
We process your personal data for the purpose of drafting, executing, managing, and terminating our contract, as well as for the overall administration of our contractual relationship. Additionally, we process your data to ensure our Company’s compliance with legal obligations (such as the Income Tax Code), and to establish, exercise, or defend legal claims before Courts, Authorities, etc.
More specifically, we process your data for order fulfillment, invoicing, and quality control of the services/products.
Legal bases of processing
The legal bases of processing are, where applicable : (a) The legitimate interest we pursue (operation of our company) (b) Our compliance with obligations under the law, (c) The performance (drawing up, operation, termination) of the contract between us), (d) Your consent.
To whom we share your personal data
The Company does not share your personal data with third parties, but only authorized executives process them with absolute confidentiality. Exceptionally, your personal data may be disclosed. These persons, who act as processors on behalf of our Company, are bound by guarantees of absolute compliance with the applicable legislation (European and national) on personal data; and (c) Before the courts for the exercise and defense of the Company’s rights.
Principles of processing and protection
Our Company, indicatively and not restrictively:
- processes only your personal data that are necessary for the above purposes and only for these purposes,
- takes appropriate technical and organizational measures for the security of personal data (ensuring confidentiality, integrity and availability) by design and by default,
- implements procedures and systems for the confidentiality of processing complies with the principle of minimising personal data,
- has drawn up the documents, policies and procedures demonstrating its compliance with the principle of accountability (privacy policy, cookies policy, recording of the type, categories and flows of personal data, compilation of processing records, etc.) as referred to in the General Data Protection Regulation,
- has established a team for the protection of personal data,
- undertakes training and awareness raising of employees regarding the protection of personal data,
- It has prepared the necessary documents, policies, and procedures that demonstrate its compliance in accordance with the accountability principle (such as the privacy policy, cookies policy, documentation of the type, categories, and flows of personal data, drafting of processing records, etc.), as provided for by the General Data Protection Regulation (GDPR).,
- It has established a data protection team.,
- It provides training and raises awareness among employees regarding the protection of personal data,
- modifies its cooperation contracts with processors on its behalf, in accordance with the provisions of Article 28 of the GDPR in order to ensure full compliance of the latter.
How long we keep your personal data
We keep your personal data for the period of time required by law during which the competent authorities have the right to inspect our Company. When the processing of your personal data is no longer necessary, your data will be destroyed in a secure and demonstrable manner.
What your rights are and how they are exercised
You have the following rights: a) To know which personal data we hold and process, their origin, the purposes for which they are processed and the time for which they are held (right of access). b) To request that your personal data be corrected and/or supplemented so that they are complete and accurate (right of rectification). You should provide any necessary document showing the need for correction or completion. c) Request the restriction of the processing of your data (right to restriction of processing). d) Refuse and/or object to any further processing of your personal data held by us (right to object). e) Request that we transfer your personal data held by us to any other controller of your choice (right to data portability). (f) Request the deletion of your personal data from the records we hold (right to be forgotten).
In connection with the exercise of your rights above, the following are noted:
- The Company has in any case the right to refuse to comply with your request for restriction of processing or deletion of your personal data or to object to the processing, if the processing or data retention is necessary for the establishment, exercise or support of its legal rights or the fulfilment of its obligations.
- The exercise of the right to portability does not imply the deletion of your data from our records, which is subject to the terms of the immediately preceding paragraph and the conditions of the Regulation.
g) To lodge a complaint with the Personal Data Protection Authority (www.dpa.gr) if you consider that your rights are infringed in any way (right to lodge a complaint with the Authority). Postal address: 1-3 Kifissia Avenue, P.C. 115 23, Athens, Greece, telephone +30 210 6475600, email: contact@dpa.gr.
For any additional information, as well as for the exercise of the above rights, please contact us in writing at 2 Lykaonias & Anatolikis Thrakis, Evosmos, Thessaloniki, P.O. Box 56224 or at the e-mail address info@truework.gr . The information, any communication and all actions taken pursuant to Articles 15 to 22 and 34 GDPR are provided free of charge.
Η TRUEWORK Facility Solutions will make every effort to respond to your request(s) within thirty (30) days of the submission of the relevant request(s). Said period may be extended for sixty (60) additional days if deemed necessary in the Company’s sole discretion, taking into account the complexity of the request and the number of requests, upon your timely notification.
Please be advised that this policy may change from time to time. Changes will be displayed here.
