Privacy Policy

Privacy Policy
(according to GDPR)

Controller

The controller within the meaning of the General Data Protection Regulation is

Company, SPEC MEDIA GREECE – SPEC MEDIA M I K E
Registered office, Agias Varvaras 4, Ellinikou – Argyroupolis, Southern Sector of Athens, 16452 Athens, Greece
E-mail, spec@specmediagreece.com

Legal Framework

The processing of personal data is carried out in accordance with the General Data Protection Regulation EU 2016/679 GDPR and the applicable Greek data protection legislation, in particular Law 4624/2019, as amended

Categories of Data Processed

As a rule, we only process the personal data that you provide to us, in particular identification data such as name and surname, contact details such as e-mail address and telephone number if provided, information relating to your request such as subject, content and description of your situation, and where required for the provision of the service, your date of birth
We do not collect more data than is strictly necessary for each specific purpose

Purposes of Processing

Your personal data is processed exclusively for handling and responding to your enquiries, preparing, performing and administering the services you request from us, complying with legal obligations in particular accounting and tax requirements, and for the establishment, exercise or defence of legal claims

Legal Bases of Processing Art 6 GDPR

Depending on the individual case, the processing is based on one or more of the following legal grounds
Article 6 1 b GDPR, performance of a contract or taking steps prior to entering into a contract, for example communication, preparing offers or scheduling
Article 6 1 c GDPR, compliance with legal obligations, in particular tax and bookkeeping obligations
Article 6 1 f GDPR, legitimate interests pursued by the controller, for example IT security, prevention of misuse or legal enforcement
Article 6 1 a GDPR, your consent, where this is expressly obtained in specific situations

Recipients of the Data

Your personal data is only disclosed to third parties where this is necessary or where a legal obligation exists, for example to technical service providers such as hosting or e-mail providers acting on our behalf, to tax advisers, lawyers or other professional consultants where necessary for compliance with legal obligations or for legal enforcement, and to public authorities and institutions where we are legally obliged to do so
Where service providers act as processors within the meaning of Article 28 GDPR, we have concluded appropriate data processing agreements with them

Data Transfers to Third Countries

As a general rule, we do not transfer personal data to countries outside the European Union or the European Economic Area
Should such a transfer be required in exceptional cases, it will only take place in compliance with Articles 44 and following GDPR, for example on the basis of an adequacy decision or standard contractual clauses

Storage Period

Personal data is stored only for as long as necessary for the respective purposes or as required by statutory retention periods
Once the purpose of processing no longer applies and any applicable retention periods have expired, the data will be deleted or anonymised

Your Rights as Data Subject

Subject to the conditions laid down in the GDPR, you have in particular the right of access to your personal data, the right to rectification of inaccurate data, the right to erasure, the so called right to be forgotten, the right to restriction of processing, the right to data portability where applicable, and the right to object to processing
Where processing is based on consent, you have the right to withdraw your consent at any time with effect for the future
To exercise your rights, you may contact us at any time by e-mail at spec@specmediagreece.com

Right to Lodge a Complaint

If you consider that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a supervisory authority
The competent authority for SPEC MEDIA GREECE is in particular the Hellenic Data Protection Authority in Athens, Kifisias 1–3, 115 23 Athens, Greece, www.dpa.gr

Data Security

We implement appropriate technical and organisational measures pursuant to Articles 24 and 32 GDPR in order to protect your personal data against loss, alteration, unauthorised access or any other unlawful form of processing