INTRODUCTION
The protection of personal data is very important to our Company (PIMA S.A.). We ensure full compliance with Regulation (EU) 679/2016, as in force at any given time, and with all laws in force now or in the future on the protection of personal data, and we process Personal Data in accordance with the applicable basic principles.
This policy explains how we use your personal data:
- when you register to our website https://www.pima-group.com/ or
- when you communicate with us or ask us for information.
Our website uses a valid SSL certificate. An SSL certificate is a digital object that allows systems to verify the identity & subsequently establish an encrypted network connection to another system using the Secure Sockets Layer/Transport Layer Security (SSL) protocol. Certificates are used within a cryptographic system known as a public key infrastructure (PKI). PKI provides a way for one party to establish the identity of another party using certificates if they both trust a third-party – known as a certificate authority. SSL certificates thus act as digital identity cards to secure network communications, establish the identity of websites over the Internet as well as resources on private networks.
DATA CONTROLLER
Pima S.A. is the data controller. If you have any questions about processing of personal data, please find our contact information below:
| Data Controller: | PIMA S.A. |
| Email: | dpo@pima.gr |
| Phone: | +30 210 60 85 892 |
| Address: | Vasilissis Sofias Ave. 14, 10674 Athens – Greece |
PRINCIPLES OF PROCESSING OF PERSONAL DATA
Pima S.A., acting, either as data controller or in certain cases as data processor for specific processes strictly adheres to the data processing principles as defined at the GDPR.
LAWFULNESS, FAIRNESS AND TRANSPARENCY
The company will process personal data only if a legal ground exists and to the extent the processing is carried out in a fair and transparent manner towards the individuals whose personal data is collected and used.
PURPOSE LIMITATION
We collect and process personal data to accomplish specified, explicit and legitimate purposes and not process personal data beyond such purposes unless the further processing is considered compatible with the purposes for which the personal data was originally collected.
DATA MINIMIZATION
We only collect and process personal data that is relevant, necessary and adequate to accomplish the purposes for which it is processed. When storing personal data, we ensure that the information retention period is limited only to the minimum strictly necessary in relation to the purpose intended, using the appropriate procedures and technical measures.
ACCURACY
We take all reasonable measures to ensure the data is accurate and, where necessary, kept up to date by implementing processes to prevent inaccuracies during the data collection process (i.e., verifying the data is accurate, complete and not misleading), as well as during the ongoing data processing in relation to the specific use for which the data is processed.
STORAGE LIMITATION
We are always keeping track of personal data not being kept for longer than necessary for the purposes for which the personal data were processed. Once the information is no longer needed, personal data is securely deleted with proportionately available technical measures.
INTEGRITY AND CONFIDENTIALITY
The Company collects and processes personal data in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures (integrity and confidentiality).
WHICH INFORMATION WE COLLECT FROM YOU
| Through our website (Contact page) | When you send us a request. In this case, you provide us with your name, your email, your phone number and a brief description of your request. |
| Social media | Either on our website or otherwise through a social provider Media, we may access information about you through this social provider Media, according to their policies. When you use a social media feature and if you have chosen to include it in your social media account, we may access information such as your name, profile picture, gender, birthday, email address, city or region and any other information available. Depending on your and your friends’ privacy settings, we may access the information you provide to a social media provider about your respective locations (“Location Data”) to provide you with relevant content. Please note that your location data may also be shared with your friends on a social media provider, in accordance with your privacy settings for that social media provider. |
PURPOSE OF THE PROCESSING OF PERSONAL DATA
We process your personal data only for the specified purpose we intend to pursue. Depending on the case, we may process the personal data to:
- recruit personnel to fill a vacant position.
- respond to any questions we receive from you and satisfy any requests you may have.
LEGAL BASIS OF THE PROCESSING OF PERSONAL DATA
PIMA S.A., in compliance with the provisions of the related EU and national legislation, manages the Personal Data with which it is provided with the greatest possible care, ensuring, in any case, their protection and confidential nature. To ensure the confidentiality and security of the Personal Data, the Company has adopted all necessary organizational and technical measures, establishing internal security policies, using suitable electronic means, adequately informing and training its personnel.
PIMA S.A. shall lawfully process Personal Data, as it collects and processes such data exclusively for specific, explicit and legal purposes and only to the extent that such processing is necessary for the fulfilment of such purposes. All personal data is kept accurate and updated, seeking for this purpose the assistance of the data subjects, i.e. of the people with whom this data concern; it shall retain such data for the time necessary for the fulfilment of the specific purposes.
We will use and disclose Personal Data as we believe to be necessary or appropriate:
- To comply with applicable laws,
- To comply with legal processes,
- To respond to requests from public and government authorities, including authorities outside your country of residence and to meet national security or law enforcement requirements,
- To enforce our terms and conditions,
- To protect our operations,
- To protect our rights, privacy, safety or property of our own, or others and
- To allow us to pursue available remedies or limit the damage that we may sustain.
RECIPIENTS OF PERSONAL DATA
Your personal data will be processed within our Company by the necessary/authorized personnel for this purpose, in compliance with all data protection principles.
STORAGE PERIOD OF PERSONAL DATA
We only process your personal data if it is necessary for the fulfilment of the respective purposes, unless there is legal provision for their further storage, or we need them to cover and fulfil our legal requirements.
COOKIES
Cookies are small text files that are stored on your computer or mobile device when you visit a website.
Our website DOES NOT use Cookies of any kind. If it will use cookies in the future, the appropriate cookies management will be installed as demanded.
DATA SUBJECT’S RIGHTS
Under the Data Protection legislation, you have the following rights with regards to their personal information:
- the right to be informed about the collection and the use of your personal data,
- the right to access your personal data and supplementary information,
- the right to have inaccurate personal data rectified, or completed if it is incomplete,
- the right to erasure (to be forgotten) in certain circumstances,
- the right to restrict processing in certain circumstances,
- the right to data portability, which allows you to obtain and reuse your personal data for your own purposes across different services,
- the right to object to processing in certain circumstances,
- rights in relation to automated decision making and profiling,
- the right to withdraw consent at any time (where relevant),
- the right to complain to the relevant Authority.
The Company handles your requests with due care, to safeguard the security of your data and the protection of your rights. For this reason, in case of doubts regarding the person who requests the disclosure of Personal Data, we may ask you for additional information that is necessary for your identification.
EXERCISE OF RIGHTS
You may contact us at any time free of charge, in order:
- To obtain confirmation about whether personal data concerning you is being processed by us,
- To access your personal details,
- To rectify any inaccurate or incomplete data,
- To request the deletion of your personal data when, among other reasons, the data is no longer necessary for the purposes for which they were collected,
- To confirm revocation of consent,
- To obtain from us the limitation of data processing when any of the conditions provided in the data protection regulations are met,
- To request the portability of your data,
CHANGES TO THIS POLICY
Any future related regulations that may take effect will form part of this announcement. In any case, PIMA S.A. shall reserve the right to change the terms related to the protection of personal data in accordance with the applicable legal framework.
Therefore, these Personal Data protection terms may be revised and updated at any time without prior notice. The users of the website are invited to observe the examined terms for changes at regular intervals, since the continuous use of the website suggests that they accept all possible modifications thereof.
The current version of the Personal Data Protection Policy entered into force in January 2025.