The following personal data protection policy provides you with information about the processing of personal data by the Business & Rural Development company (hereinafter the "Company") and describes how the Company protects personal information as well as the process with which you as natural persons can exercise your rights. The Company always processes your personal data with respect to the fundamental rights of natural persons in accordance with the current European and Greek legislation (including the General Regulation (EU) 2016/679, the Greek Law N. 4264/2019 and any other relevant applicable legal text).

PERSONAL DATA PROCESSOR

The company under the name of Business & Rural Development companybased in Ptolemaida, at Vas. Sofias 5, Ptolemaida 502 00, is the controller of personal data. Contact details of the controller for questions about personal data can be found at the end of this personal data protection policy.

PERSONAL DATA

Any information concerning an identified or identifiable natural person ("data subject") (e.g. name, surname, e-mail address).
Special categories of personal data are personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, as well as genetic data, biometric data, health-related data, a person's sex life or sexual orientation.

PROCESSING OF PERSONAL DATA

Processing of personal data is any act or series of acts carried out with or without the use of automated means, on personal data or sets of personal data, such as collection, registration, organization, structuring, storage, adaptation or alteration, retrieval, information retrieval, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction.

WHAT PERSONAL DATA DO WE PROCESS?

The personal data we process are absolutely necessary for the purpose we are pursuing. More specifically, we may collect, but not limited to, the following:

• Identity data: eg first name, last name
• Contact data: e.g. phone, email address
• Details that you further state in the contact form
• Data collected through the use of Cookies: eg the IP address Image
• Data through the video surveillance system Information about possible position filling / recruitment: e.g. resume
• Information about possible position filling / recruitment: e.g. resume

FOR WHAT PURPOSE DO WE PROCESS PERSONAL DATA?

We only process your personal data for the purpose we are pursuing. By way of example and not limitation, we use your personal information to:

-to communicate with you in order to answer any question you have put to us or to satisfy any of your requests.
-to send you updated content via push notifications
-to administer our website and to be able to provide you with our services to the best extent
-to ensure the protection of persons and goods through the video surveillance system

POSTING COMMENTS ON ARTICLES

When you provide personal comments on articles published on our website, the information, comments you post and your personal information are publicly accessible and may be processed by third parties without our knowledge. For this reason, we urge you to be careful in the comments and posts you make, as we cannot guarantee the privacy of your personal information.

WHAT IS THE LEGAL BASIS FOR US TO PROCESS YOUR PERSONAL DATA?

We process your personal data only if there is a relevant legal basis, such as:
Consent: where required, we may process your personal data if you have given us your consent for that purpose. You can revoke the relevant consent at any time.

Legitimate interest of the Company: the Company sometimes has a legitimate interest in processing your personal data as long as the pursuit of the legitimate interest does not have a serious impact on the fundamental rights and freedoms of the data subjects.

Performance of a contract: we may process your personal data in order to fulfill contractual obligations. Legal obligation: in some cases we need to process your personal data to comply with a legal obligation.
Legal obligation: in some cases we need to process your personal data to comply with a legal obligation.
Vital interests: the processing of personal data is necessary to protect the vital interests of the data subject or another natural person.
Public Interest: processing is necessary for the performance of a task carried out in the public interest.

WHO IS THE RECEIVER OF YOUR DATA?

Your personal data is processed internally in the Company by the personnel absolutely necessary for this purpose, who observe a condition of confidentiality.
If we use a third party supplier or business partner who will process personal data on our behalf and in accordance with our instructions, we will ensure that the third party performing the processing for us has appropriate security and protection measures in place for personal data as defined by law and will process personal data only to fulfill its contractual obligations to us and always in accordance with the instructions we have given it and for no other reason.

In some cases, your personal data may be transferred to the competent police or judicial authorities for the defense of our legal claims and only for the cases where it is required by the applicable legislation.

SECURITY OF PERSONAL DATA

We ensure that we take all necessary technical and organizational measures and procedures to prevent illegal access and misuse of information and personal data. The measures we take include preventive security procedures, technical and physical access restriction mechanisms as well as control of granting access rights to authorized personnel.

IS YOUR DATA SENT TO COUNTRIES NON-EU?

Your personal data is not knowingly sent to countries outside the EU/EEA. If your data is sent to such countries we will take all necessary measures to ensure an adequate level of protection of personal data in accordance with applicable legislation. In the event that we are informed and/or suspect data being sent or processed outside the EU/EEA by our partner or a third party and in the context of ensuring the lawful processing of your personal data, we will make every effort to quickly investigate the event and act accordingly as soon as possible. At the same time, where deemed appropriate and in the context of the proper exercise of your rights, we will make sure to inform you of the above actions by whatever means the Company deems appropriate.

HOW LONG IS YOUR DATA STORED?

We only process your personal data for as long as is necessary to fulfill the respective purpose, unless there is a legal provision for further retention or we need it to meet and fulfill our legal claims.

SOCIAL MEDIA

Our Company has its own social media pages (Facebook). Let us remind you that these pages are publicly accessible and any content, comment, personal information you provide will be visible to the general public and for this reason we recommend that you be careful with the content of the information you post.

Information on the processing of personal data by the relevant social media can be found in their privacy terms.

COOKIES

Cookies are small text files that are stored on your computer or mobile device when you visit a website.

The cookie policy provides further details on the use of cookies as well as the ways in which you can delete or prevent certain cookies from being stored on your computer or mobile device.

WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?

As subjects of personal data you have the following rights:

• Right of access: You can be informed by us if and how we process your personal data, for what purpose we use your data, exactly what data we keep about you, for how long, if an automated decision is made.
• Right to rectification: You can ask us to correct inaccurate information or complete incomplete information about you.
• Right to erasure: You can ask us to erase your data as long as there is no reason to justify non-fulfillment on our part.
• Right to portability: You can ask us to receive the data you have given us in human-readable form or ask us to transfer it to another controller.
• Right to restriction: You can ask us to restrict the processing of your personal data for as long as any objections to the processing are pending.
• Right to object: You can object at any time to the processing of your personal data or withdraw your consent in which case we will stop processing if there are no legitimate and compelling reasons justifying the further use of your data by us.

HOW CAN YOU EXERCISE THE ABOVE RIGHTS?

You can exercise your rights at any time through the Data Subject Right Exercise Request [Request Form] and the Company will respond to you within thirty (30) days from the date of receipt and confirmation of your identity, unless the request is unusually large and complex where upon your notice the response may be delayed another sixty (60) days.

Basically the satisfaction of your request is free. However, in the event that a request is manifestly unfounded or excessive, a reasonable fee may be imposed.
In any case, if we do not respond to the satisfaction of your request, you have the right to complain to the Personal Data Protection Authority (PDPA): Kifisias 1-3, Athens / www.dpa.gr, tel. 2106475600.

CONTACT THE COMPANY

Natural persons can contact for any information or clarification regarding the processing of their personal data by the Company either by post at the address: Attn. Data Protection Officer, Business & Rural Development companyVas. Sofias 5, Ptolemaida 502 00 or electronically at the address: info@agro-epixeirein.gr.

CHANGES TO THIS POLICY

From time to time it is necessary to adapt the content of this data protection information. Therefore, we reserve the right to change it at any time for the future. We will also post the modified version here. If you visit us again, you should therefore read the data protection information again.

TRANSMISSION AND DISCLOSURE OF PERSONAL DATA

The website undertakes not to sell, rent or in any way publish and/or communicate the personal data of website users to any third party.