Privacy Policy
Who we are
Our Company with the name “HR and People Engagement” and the distinctive title “STEPWISE”, that is based in 196 Syngrou ave. 176 71 Athens, with contact phone number +30 210 277 7288 and contact email address info@stepwise.gr, ΤΙΝ 122103654, Tax Office of Α’ Kallithea (hereinafter “the Company”), with priority given to the security of data processing, urges you to read this Policy on the processing of personal data (hereinafter “Privacy Policy”) and get informed about the processing of your data provided to us, in the context of our relationship, as formed through our website www.stepwise.gr.
Our goal is to assist in the staffing and management of the human resources of our customers and other companies, especially in the tourism sector, while facilitating finding work for all interested parties, through the online services of our website.
Privacy Policy
Privacy Policy
Basic Definitions
The processing and protection of your personal data is governed by the provisions of the General Data Protection Regulation (EU) 2016/679 – GDPR (hereinafter “GDPR”), the current Greek legislation on personal data protection (Law 4624/ 2019, Law 2472/1997, Law 3471/2006, as in force, etc.), as well as the relevant decisions and guidelines of the Hellenic Data Protection Authority (hereinafter “DPA”), in addition to this Policy.
For a better understanding of the Policy, here are the definitions of key concepts you will find in the text:
| “Data Subject” |
| “Personal data” |
| “Processing” |
| “Controller” |
| “Processor” |
| “Recipient” |
| “Data Protection Officer” (“DPO”) |
«Data Subject»: The user of the website, visitor or registered user, interested employer or employee, and any other natural person, who interferes with our site.
«Personal data»: Any information relating to an identified or identifiable natural person (“data subject”), such as a name, an address, contact information (phone number), email address, etc.
«Processing»: Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making, available, alignment or combination, restriction, erasure or destruction of personal data that have come or will come to the knowledge of the Company, either directly by you through the website, or in the context of your business relations with it.
«Controller»: The Company with the name “HR and People Engagement” and the distinctive title “STEPWISE”, that is based in196 Syngrou ave. 176 71 Athens, with contact phone number+30 210 277 7288 and contact email address info@stepwise.gr, 122103654 ,Tax Office of Α’ Kallithea,, which determines the purposes and means of processing personal data through this site.
«Processor»: a natural or legal person, public authority, agency or another body, which processes personal data on behalf of the controller
«Recipient»: a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.
«Data Protection Officer, «DPO»: The Officer, who is designated by the Company as a Controller, who carries the position and duties, defined by the current legal framework on data protection.
Which data do we collect, for what purpose and on which legal basis
Through our website we collect and process on a case-by-case basis the necessary personal data, for the purpose of the best possible customer service and the fulfillment of the contractual obligations between us, but also our legal obligations in general, concerning electronic transactions and consumer protection. In particular, we process the following data in the following cases:
- Entry/browsing at the site: IP address, date and time of access, URL, access provider, browser, operating system
Purpose: Providing personalized services to you, proper connection, system security and stability, prevention of cyber fraud
Lawfulness: a) the relationship between us b) our legal obligation c) our legitimate interest of safe distribution of our website to the general public
- Contact, via contact form: name, email, comments
Purpose: Communicate with you, consider your request, query or complaint
Lawfulness: a) the relationship between us b) our legitimate interest of best customer service
- Creating an account as an employee/applicant (Sign in): first name, last name, email address, password
Purpose: register on the site to access the service
Lawfulness: a) the terms and conditions governing your registration (contract) b) our legitimate interest of best customer service
- Sign in, via social media: username, phone number, photograph (optional) or other relative information provided by these media services
Purpose: register on the site to access the service, search for a job, choose a seminar
Lawfulness: a) the terms and conditions governing your registration (contract) b) our legitimate interest of best customer service
In particular, in terms of connecting to our services through social networks (Facebook, LinkedIn, Google, etc.), it serves the purpose of creating a user account. If you are a social media user and you choose to access or connect through them, we may collect information, such as your username or other information available through such services. This information is provided automatically by the service provider itself, however you can modify it through your account settings of the relevant service provider. In the event that you choose to connect through your social networks and since we are not the only Controllers of the processing of your data in this case, we suggest that you get also informed through the Terms and Policies of these media.
- Creating an account as an employer (Sign in): name, surname, company’s name, email address, password
Purpose: register on the site to access the service, search for personnel, search for seminars/ webinars for your staff
Lawfulness: a) the terms and conditions governing your registration (contract) b) our legitimate interest of best customer service
- Registration in a seminar/webinar/training program (by a visitor): email address, first name, surname
Purpose: successful registration and seminar attendance
Lawfulness: a) the terms and conditions governing your participation through the website (contract) and your request to attend b) our legitimate interest of best customer service and collecting payment
- Submit interest for a seminar (by a registered user): first name and surname, email address, phone number, company’s name
Purpose: successful registration and seminar attendance
Lawfulness: a) the terms and conditions governing your participation through the website (contract) and your request to attend b) our legitimate interest of best customer service and collecting payment
- Submit interest for a job (by a registered user): first name and surname, email address, CV, comments
Purpose: data transmission to employers, recruitment
Lawfulness: a) your request for employment contract and the conditions governing your registration b) our legitimate interest of best customer service
- Newsletter: email address
Purpose: Sending newsletters about our offers, services and news
Lawfulness: a) your consent b) where applicable, our legitimate interest of promoting actions and services to our existing customers/users for related advertising purposes
Cookies (Cookies Policy)
Special categories of personal data
Regarding sensitive data (special categories of personal data), we do not process such data through our website in principle, such as data revealing racial or ethnic origin, religious or philosophical beliefs, data concerning health or data concerning a natural person’s sex life or sexual orientation, since the above data is not necessary for us. To this end, we urge you not to include such data when posting your CV, which otherwise will be processed by us on your own initiative and as an integral part of your CV.
Personal data of children
Our website is not intended for users who have not reached the age of eighteen (18). So, our Company does not process personal data of minors. However, we point out that, where point (a) of Article 6(1) applies, in relation to the offer of information society services directly to a child, the given consent and processing of the personal data of a child shall be lawful where the child is at least 15 years old, otherwise only if and to the extent that the consent is given or authorised by the holder of parental responsibility over the child.
Recipients of your data
The personal data we collect in the context of our relationship through our website are processed only by:
- Our authorized personnel, who are bound by terms of confidentiality and follow security measures,
- Partners of our Company, to whom according to art. 28 GDPR we assign the execution of specific tasks and thus the processing on our behalf (as Processors). We ensure that this processing is in accordance with GDPR, by contractual terms and commitment to follow adequate measures, in accordance with the relevant provisions of GDPR (Art. 28, 32), such as, for example, management and support of the website companies, marketing and promotional services companies, etc.
- Public entities and authorities, police and other authorities, prosecutors, other administrative services, etc., when required to do so by the applicable legal framework,
- In case you are interested in a job, your data is transmitted to the respective employer /employers, depending on the job, and for the purpose of the recruitment in which you are interested. From the moment of submitting your data to the employer(s), the processing will take place by them, as independent Controllers, for this purpose you should read the relevant Policies.
We do not in principle transfer your data to third countries or international organizations (outside the EU) that do not ensure an adequate level of protection. Any transmission will comply with the relevant provisions of the applicable legal framework and the required guarantees, in particular art. 44 et seq., and you will be informed about it.
Period of storage of personal data
We store your personal data for as long as the nature and purpose of the processing requires, for as long as defined by the applicable legal and regulatory framework, and in any case for as long as you remain registered and as required by our specific contractual commitments, taking into account relevant legal obligations of our Company but also any legal claims that may be raised by it, and thus justify the time of retention of personal data. After the expiration of the necessary period per case, the data that is no longer necessary, will be erased in a safe and irreversible way.
Your rights concerning the processing of your personal data
Any visitor or registered user, as data subject, may at any time exercise their rights, as provided in GDPR and in particular Articles 12 to 23 thereof, and the applicable national legislation, and in particular:
| Right to be informed, concerning the data processed, before and during the processing (art. 12, 13, 14 GDPR) |
| Right of access to the personal data processed by the Company, as a Controller (art. 15 GDPR) |
| Right to rectification (art. 16 GDPR). |
| Right to erasure/ to be forgotten (art. 17 GDPR). |
| Right to restrict processing (art. 18 GDPR). |
| Right to data portability (art. 20 GDPR). |
| Right to object (art. 21 GDPR) and rights in relation to automated decision making and profiling (art. 22 GDPR). |
| Right to withdraw your consent (art. 7 para. 3 GDPR) |
| Right to lodge a complaint with a supervisory authority (art. 77 GDPR). |
How to exercise your rights
You may exercise your rights in writing, so that they can be considered by us, in one of the following ways:
- By sending an email to our email address info@stepwise.gr, or
- By sending via post or in person delivery the signed request, at the headquarters of our Company, at 196 Syngrou ave. 176 71 Athens
Our Company, after receiving your written request, will make every effort to take the required actions within (1) month of receipt of your request, unless the actions related are characterized by particularities and/or complexity, based on which it reserves the right to extend the period. In any case, we will inform you about the progress of your request within one (1) month of receipt.
Security of data processing
Our Company takes care, among others, to implement the appropriate technical and organizational measures to ensure a level of security appropriate while processing your data, especially from an accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data, according to Article 32 of the GDPR. We implement specific Policies for this as well as the principles relating to processing of personal data (art. 5 GDPR), to ensure the availability, integrity and confidentiality of your data. In particular, regarding the measures we implement for the security of data processing through our website, inter alia: www.stepwise.gr
Updates
This Privacy Policy may be modified at any time and will be thus posted on our website with the latest updates. Therefore, we urge all users to read this Policy frequently.
Useful contact details
- Controller
Company name: «HR and People Engagement», «STEPWISE»
Headquarters: 196 Syngrou ave. 176 71 Athens
TIN/Tax Office: 122103654
Phone number: +30 210 277 7288
Email address: info@stepwise.gr
- Hellenic Data Protection Authority
Address: 1-3, Kifisias Avenue, P.C. 11523, Athens
Phone number: +30 210 6475600
Fax: +30 210 6475628
Email address: contact@dpa.gr
Website: www.dpa.gr
- Data Protection Officer (DPO)
Email: dpo@stepwise.gr
Last Update: 30/03/2021
Who we are
Our Company with the name “HR and People Engagement” and the distinctive title “STEPWISE”, that is based in 196 Syngrou ave. 176 71 Athens, with contact phone number +30 210 277 7288 and contact email address info@stepwise.gr, ΤΙΝ 122103654, Tax Office of Α’ Kallithea (hereinafter “the Company”), with priority given to the security of data processing, urges you to read this Policy on the processing of personal data (hereinafter “Privacy Policy”) and get informed about the processing of your data provided to us, in the context of our relationship, as formed through our website www.stepwise.gr.
Our goal is to assist in the staffing and management of the human resources of our customers and other companies, especially in the tourism sector, while facilitating finding work for all interested parties, through the online services of our website.
Basic Definitions
The processing and protection of your personal data is governed by the provisions of the General Data Protection Regulation (EU) 2016/679 – GDPR (hereinafter “GDPR”), the current Greek legislation on personal data protection (Law 4624/ 2019, Law 2472/1997, Law 3471/2006, as in force, etc.), as well as the relevant decisions and guidelines of the Hellenic Data Protection Authority (hereinafter “DPA”), in addition to this Policy.
For a better understanding of the Policy, here are the definitions of key concepts you will find in the text:
| “Data Subject” |
| “Personal data” |
| “Processing” |
| “Controller” |
| “Processor” |
| “Recipient” |
| “Data Protection Officer” (“DPO”) |
«Data Subject»: The user of the website, visitor or registered user, interested employer or employee, and any other natural person, who interferes with our site.
«Personal data»: Any information relating to an identified or identifiable natural person (“data subject”), such as a name, an address, contact information (phone number), email address, etc.
«Processing»: Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making, available, alignment or combination, restriction, erasure or destruction of personal data that have come or will come to the knowledge of the Company, either directly by you through the website, or in the context of your business relations with it.
«Controller»: The Company with the name “HR and People Engagement” and the distinctive title “STEPWISE”, that is based in196 Syngrou ave. 176 71 Athens, with contact phone number+30 210 277 7288 and contact email address info@stepwise.gr, 122103654 ,Tax Office of Α’ Kallithea,, which determines the purposes and means of processing personal data through this site.
«Processor»: a natural or legal person, public authority, agency or another body, which processes personal data on behalf of the controller
«Recipient»: a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.
«Data Protection Officer, «DPO»: The Officer, who is designated by the Company as a Controller, who carries the position and duties, defined by the current legal framework on data protection.
Which data do we collect, for what purpose and on which legal basis
Through our website we collect and process on a case-by-case basis the necessary personal data, for the purpose of the best possible customer service and the fulfillment of the contractual obligations between us, but also our legal obligations in general, concerning electronic transactions and consumer protection. In particular, we process the following data in the following cases:
- Entry/browsing at the site: IP address, date and time of access, URL, access provider, browser, operating system
Purpose: Providing personalized services to you, proper connection, system security and stability, prevention of cyber fraud
Lawfulness: a) the relationship between us b) our legal obligation c) our legitimate interest of safe distribution of our website to the general public
- Contact, via contact form: name, email, phone number, comments
Purpose: Communicate with you, consider your request, query or complaint
Lawfulness: a) the relationship between us b) our legitimate interest of best customer service
- Creating an account as an employee/applicant (Sign in): first name, last name, email address, password
Purpose: register on the site to access the service
Lawfulness: a) the terms and conditions governing your registration (contract) b) our legitimate interest of best customer service
- Sign in, via social media: username or other relative information provided by these media services
Purpose: register on the site to access the service, search for a job, choose a seminar
Lawfulness: a) the terms and conditions governing your registration (contract) b) our legitimate interest of best customer service
In particular, in terms of connecting to our services through social networks (Facebook, LinkedIn, Google, etc.), it serves the purpose of creating a user account. If you are a social media user and you choose to access or connect through them, we may collect information, such as your username or other information available through such services. This information is provided automatically by the service provider itself, however you can modify it through your account settings of the relevant service provider. In the event that you choose to connect through your social networks and since we are not the only Controllers of the processing of your data in this case, we suggest that you get also informed through the Terms and Policies of these media.
- Creating an account as an employer (Sign in): name, surname, company’s name, email address, password
Purpose: register on the site to access the service, search for personnel, search for seminars/ webinars for your staff
Lawfulness: a) the terms and conditions governing your registration (contract) b) our legitimate interest of best customer service
- Registration in a seminar/webinar/training program (by a visitor): username, email address, first name, surname
Purpose: successful registration and seminar attendance
Lawfulness: a) the terms and conditions governing your participation through the website (contract) and your request to attend b) our legitimate interest of best customer service and collecting payment
- Submit interest for a seminar (by a registered user): first name and surname, email address, phone number, company’s name
Purpose: successful registration and seminar attendance
Lawfulness: a) the terms and conditions governing your participation through the website (contract) and your request to attend b) our legitimate interest of best customer service and collecting payment
- Submit interest for a job (by a registered user): first name and surname, email address, CV, comments
Purpose: data transmission to employers, recruitment
Lawfulness: a) your request for employment contract and the conditions governing your registration b) our legitimate interest of best customer service
- Newsletter: email address
Purpose: Sending newsletters about our offers, services and news
Lawfulness: a) your consent b) where applicable, our legitimate interest of promoting actions and services to our existing customers/users for related advertising purposes
Cookies (Cookies Policy)
Special categories of personal data
Regarding sensitive data (special categories of personal data), we do not process such data through our website in principle, such as data revealing racial or ethnic origin, religious or philosophical beliefs, data concerning health or data concerning a natural person’s sex life or sexual orientation, since the above data is not necessary for us. To this end, we urge you not to include such data when posting your CV, which otherwise will be processed by us on your own initiative and as an integral part of your CV.
Who we are
Our Company with the name “HR and People Engagement” and the distinctive title “STEPWISE”, that is based in 196 Syngrou ave. 176 71 Athens, with contact phone number +30 210 277 7288 and contact email address info@stepwise.gr, ΤΙΝ 122103654, Tax Office of Α’ Kallithea (hereinafter “the Company”), with priority given to the security of data processing, urges you to read this Policy on the processing of personal data (hereinafter “Privacy Policy”) and get informed about the processing of your data provided to us, in the context of our relationship, as formed through our website www.stepwise.gr.
Our goal is to assist in the staffing and management of the human resources of our customers and other companies, especially in the tourism sector, while facilitating finding work for all interested parties, through the online services of our website.
Basic Definitions
The processing and protection of your personal data is governed by the provisions of the General Data Protection Regulation (EU) 2016/679 – GDPR (hereinafter “GDPR”), the current Greek legislation on personal data protection (Law 4624/ 2019, Law 2472/1997, Law 3471/2006, as in force, etc.), as well as the relevant decisions and guidelines of the Hellenic Data Protection Authority (hereinafter “DPA”), in addition to this Policy.
For a better understanding of the Policy, here are the definitions of key concepts you will find in the text:
| “Data Subject” |
| “Personal data” |
| “Processing” |
| “Controller” |
| “Processor” |
| “Recipient” |
| “Data Protection Officer” (“DPO”) |
«Data Subject»: The user of the website, visitor or registered user, interested employer or employee, and any other natural person, who interferes with our site.
«Personal data»: Any information relating to an identified or identifiable natural person (“data subject”), such as a name, an address, contact information (phone number), email address, etc.
«Processing»: Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making, available, alignment or combination, restriction, erasure or destruction of personal data that have come or will come to the knowledge of the Company, either directly by you through the website, or in the context of your business relations with it.
«Controller»: The Company with the name “…………………………” and the distinctive title “STEPWISE”, that is based in ………………., with contact phone number …………… and contact email address ………………, ΤΙΝ …………, Tax Office of …………., which determines the purposes and means of processing personal data through this site.
«Processor»: a natural or legal person, public authority, agency or another body, which processes personal data on behalf of the controller
«Recipient»: a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.
«Data Protection Officer, «DPO»: The Officer, who is designated by the Company as a Controller, who carries the position and duties, defined by the current legal framework on data protection.
Which data do we collect, for what purpose and on which legal basis
Through our website we collect and process on a case-by-case basis the necessary personal data, for the purpose of the best possible customer service and the fulfillment of the contractual obligations between us, but also our legal obligations in general, concerning electronic transactions and consumer protection. In particular, we process the following data in the following cases:
- Entry/browsing at the site: IP address, date and time of access, URL, access provider, browser, operating system
Purpose: Providing personalized services to you, proper connection, system security and stability, prevention of cyber fraud
Lawfulness: a) the relationship between us b) our legal obligation c) our legitimate interest of safe distribution of our website to the general public
- Contact, via contact form: name, email, phone number, comments
Purpose: Communicate with you, consider your request, query or complaint
Lawfulness: a) the relationship between us b) our legitimate interest of best customer service
- Creating an account as an employee/applicant (Sign in): first name, last name, email address, password
Purpose: register on the site to access the service
Lawfulness: a) the terms and conditions governing your registration (contract) b) our legitimate interest of best customer service
- Sign in, via social media: username or other relative information provided by these media services
Purpose: register on the site to access the service, search for a job, choose a seminar
Lawfulness: a) the terms and conditions governing your registration (contract) b) our legitimate interest of best customer service
In particular, in terms of connecting to our services through social networks (Facebook, LinkedIn, Google, etc.), it serves the purpose of creating a user account. If you are a social media user and you choose to access or connect through them, we may collect information, such as your username or other information available through such services. This information is provided automatically by the service provider itself, however you can modify it through your account settings of the relevant service provider. In the event that you choose to connect through your social networks and since we are not the only Controllers of the processing of your data in this case, we suggest that you get also informed through the Terms and Policies of these media.
- Creating an account as an employer (Sign in): name, surname, company’s name, email address, password
Purpose: register on the site to access the service, search for personnel, search for seminars/ webinars for your staff
Lawfulness: a) the terms and conditions governing your registration (contract) b) our legitimate interest of best customer service
- Registration in a seminar/webinar/training program (by a visitor): username, email address, first name, surname
Purpose: successful registration and seminar attendance
Lawfulness: a) the terms and conditions governing your participation through the website (contract) and your request to attend b) our legitimate interest of best customer service and collecting payment
- Submit interest for a seminar (by a registered user): first name and surname, email address, phone number, company’s name
Purpose: successful registration and seminar attendance
Lawfulness: a) the terms and conditions governing your participation through the website (contract) and your request to attend b) our legitimate interest of best customer service and collecting payment
- Submit interest for a job (by a registered user): first name and surname, email address, CV, comments
Purpose: data transmission to employers, recruitment
Lawfulness: a) your request for employment contract and the conditions governing your registration b) our legitimate interest of best customer service
- Newsletter: email address
Purpose: Sending newsletters about our offers, services and news
Lawfulness: a) your consent b) where applicable, our legitimate interest of promoting actions and services to our existing customers/users for related advertising purposes
Cookies (Cookies Policy)
Special categories of personal data
Regarding sensitive data (special categories of personal data), we do not process such data through our website in principle, such as data revealing racial or ethnic origin, religious or philosophical beliefs, data concerning health or data concerning a natural person’s sex life or sexual orientation, since the above data is not necessary for us. To this end, we urge you not to include such data when posting your CV, which otherwise will be processed by us on your own initiative and as an integral part of your CV.
Personal data of children
Our website is not intended for users who have not reached the age of eighteen (18). So, our Company does not process personal data of minors. However, we point out that, where point (a) of Article 6(1) applies, in relation to the offer of information society services directly to a child, the given consent and processing of the personal data of a child shall be lawful where the child is at least 15 years old, otherwise only if and to the extent that the consent is given or authorised by the holder of parental responsibility over the child.
Recipients of your data
The personal data we collect in the context of our relationship through our website are processed only by:
- Our authorized personnel, who are bound by terms of confidentiality and follow security measures,
- Partners of our Company, to whom according to art. 28 GDPR we assign the execution of specific tasks and thus the processing on our behalf (as Processors). We ensure that this processing is in accordance with GDPR, by contractual terms and commitment to follow adequate measures, in accordance with the relevant provisions of GDPR (Art. 28, 32), such as, for example, management and support of the website companies, marketing and promotional services companies, etc.
- Public entities and authorities, police and other authorities, prosecutors, other administrative services, etc., when required to do so by the applicable legal framework,
- In case you are interested in a job, your data is transmitted to the respective employer /employers, depending on the job, and for the purpose of the recruitment in which you are interested. From the moment of submitting your data to the employer(s), the processing will take place by them, as independent Controllers, for this purpose you should read the relevant Policies.
We do not in principle transfer your data to third countries or international organizations (outside the EU) that do not ensure an adequate level of protection. Any transmission will comply with the relevant provisions of the applicable legal framework and the required guarantees, in particular art. 44 et seq., and you will be informed about it.
Period of storage of personal data
We store your personal data for as long as the nature and purpose of the processing requires, for as long as defined by the applicable legal and regulatory framework, and in any case for as long as you remain registered and as required by our specific contractual commitments, taking into account relevant legal obligations of our Company but also any legal claims that may be raised by it, and thus justify the time of retention of personal data. After the expiration of the necessary period per case, the data that is no longer necessary, will be erased in a safe and irreversible way.
Your rights concerning the processing of your personal data
Any visitor or registered user, as data subject, may at any time exercise their rights, as provided in GDPR and in particular Articles 12 to 23 thereof, and the applicable national legislation, and in particular:
| Right to be informed, concerning the data processed, before and during the processing (art. 12, 13, 14 GDPR) |
| Right of access to the personal data processed by the Company, as a Controller (art. 15 GDPR) |
| Right to rectification (art. 16 GDPR). |
| Right to erasure/ to be forgotten (art. 17 GDPR). |
| Right to restrict processing (art. 18 GDPR). |
| Right to data portability (art. 20 GDPR). |
| Right to object (art. 21 GDPR) and rights in relation to automated decision making and profiling (art. 22 GDPR). |
| Right to withdraw your consent (art. 7 para. 3 GDPR) |
| Right to lodge a complaint with a supervisory authority (art. 77 GDPR). |
How to exercise your rights
You may exercise your rights in writing, so that they can be considered by us, in one of the following ways:
- By sending an email to our email address info@stepwise.gr, or
- By sending via post or in person delivery the signed request, at the headquarters of our Company, at 196 Syngrou ave. 176 71 Athens
Our Company, after receiving your written request, will make every effort to take the required actions within (1) month of receipt of your request, unless the actions related are characterized by particularities and/or complexity, based on which it reserves the right to extend the period. In any case, we will inform you about the progress of your request within one (1) month of receipt.
Security of data processing
Our Company takes care, among others, to implement the appropriate technical and organizational measures to ensure a level of security appropriate while processing your data, especially from an accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data, according to Article 32 of the GDPR. We implement specific Policies for this as well as the principles relating to processing of personal data (art. 5 GDPR), to ensure the availability, integrity and confidentiality of your data. In particular, regarding the measures we implement for the security of data processing through our website, inter alia: www.stepwise.gr
Updates
This Privacy Policy may be modified at any time and will be thus posted on our website with the latest updates. Therefore, we urge all users to read this Policy frequently.
Useful contact details
- Controller
Company name: «HR and People Engagement», «STEPWISE»
Headquarters: 196 Syngrou ave. 176 71 Athens
TIN/Tax Office: 122103654
Phone number: +30 210 277 7288
Email address: info@stepwise.gr
- Hellenic Data Protection Authority
Address: 1-3, Kifisias Avenue, P.C. 11523, Athens
Phone number: +30 210 6475600
Fax: +30 210 6475628
Email address: contact@dpa.gr
Website: www.dpa.gr
- Data Protection Officer (DPO)
Email: dpo@stepwise.gr
Last Update: 23/03/2021