Z. & G. HALCOUSSIS Co. Ltd. (hereinafter called "the Company") collects, processes and uses personal data in compliance with the applicable local legislation as amended and/or replaced from time to time, the provisions of the GDPR, in force from 25 May 2018, and other legal and/or regulatory requirements.

Specifically, "the Company" process personal data in accordance with the General Data Protection Regulation 2016/679 (GDPR) and any other relevant data protection laws and codes of conduct in accordance to the below principles:

1. Personal data are processed lawfully, fairly and in a transparent manner ('lawfulness, fairness and transparency')
2. Personal data are collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes;
3. Personal data are adequate, relevant and limited to what is necessary in relation to the purpose that are processed ('data minimization');
4. Personal data are accurate and, where necessary, kept up to date; every reasonable step is taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay ('accuracy');
5. Personal data are kept in a form which permits identification of data subjects for no longer period than necessary ('storage limitation');
6. Are processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures ('integrity and confidentiality').

According "to Company’s" Data Protection Policy, "the Company" provides data subject, with information about the processing of their data and their rights under the current legislation and regulatory framework.

"The Company" has developed policies, procedures, audits and measures to ensure maximum and continued compliance with relevant data protection laws and principles. -The ensurance and the maintenance of security and confidentiality of personal data and special categories data, is one of the "Company’s" top priorities. The "Company" operates a 'Privacy by Design' approach, assessing changes and their impact from the start and designing systems and processes to protect personal information at the core of its business.

The Company has appointed a Data Protection Officer (DPO) in accordance with the GDPR requirements and has ensured that the assigned person has an adequate and expert knowledge of data protection law and practices and is fully able to, and capable of, assisting the Company in monitoring its internal compliance with the Regulation and to support and advise employees and associated third parties with regards to data protection laws and requirements.

Finally the "Company" has in place a robust and systematic process for responding to any reported data security breach, to ensure it can act responsibly and protect its information assets as far as possible.

• Data protection policy
• Πολιτική προστασίας προσωπικών δεδομένων