Privacy Policy

The Company, Smile Vosmandros D. SA which is based in Industrial Area of Thessaloniki, DA 12A, PC 57022 Sindos, tel. +30-2310-680544 ensures the confidentiality of your personal data and adopts the General Regulation for the Protection of Personal Data 679/2016 of the European Union and the current Greek legislation in all procedures and stages of communication with you.

Purpose of this Policy

This Personal Data Protection Policy concerns Smile Vosmandros D. SA and the personal data of individuals processed by the Company. This Policy provides to any individual, customer or visitor the website of our Company https://www.smilevos.gr/ with concise and transparent information regarding the practices followed for the management and protection of personal data. It concerns any transaction or series of transactions performed with or without the use of automated means, in personal data or in personal data sets, such as the collection, registration, organization, structure, storage, adaptation or modification, retrieval, search for information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction. The Policy is updated from time to time and may be amended whenever necessary, without prior notice, always within the applicable legal framework and in accordance with any changes in the current legislation on personal data protection. We therefore suggest that you check our website https://www.smilevos.gr/ in which, any posted revised version of this policy, prevails over the printed version.

Definitions

The term “personal data” hereinafter referred to as “Personal Data or Data”, is any information concerning a specific natural person or person whose identity can be verified (e.g., name, identity number, address, etc.). Data related to health (physical or mental condition, receiving medical services, etc.) are included in the general term personal data; however, they constitute a special category of data. For the purposes of this Privacy Policy, the definitions of the EU General Data Protection Regulation (GDPR) (2016/679) apply.

Legal Basis

Personal Data are obtained with the following methods:

When you apply for a job. The provision of your personal data in the context of submitting a CV to find a job in our Company takes place automatically and voluntarily as otherwise, it would not be possible to assess the possibility of your recruitment. The legal basis for the processing is in accordance with article 6 (1) (b) of the GDPR. For more information, please check our CV Policy.
When you fill out forms and consent forms for the use and processing of your data in the context of promoting the Company and participating in promotions. The submission of your data is of your choice and their processing is in accordance with article 6 (1) (a) of the Regulation 2016/679.
In the context of the transaction between us for the execution of our contractual obligations but also in the context of compliance of the Company with its legal obligations, in accordance with articles 6 (1) (b) and 6 (1) (c) of the Regulation 2016/679.
When you fill out forms in the context of the application of Management Systems (ISO) in the Company, in accordance with article 6 (1) (f) of the Regulation 2016/679.
Automatically, via your browser or the mobile device you use to access our website. For more information, please check our Cookies Policy.
When you fill out electronic forms or send an e-mail in order to be informed about our products and services, in accordance with articles 6 (1) (b) and 6 (1) (a) of the Regulation 2016/679.

Categories of Personal Data – Purposes of Processing

Personal data which are collected and further processed include:

Identification data such as your name, address, general contact details (including email address and telephone number), etc. — for the provision of our services in accordance with article 6 (1) (b) of the Regulation 2016/679.
Identification data such as CV, education status, work experience, etc. — for the sole purpose of the selection and evaluation of prospective employees, in accordance with article 6 (1) (b) of the Regulation 2016/679.
Identification data, financial data, tax and contact details, such as VAT, Tax Office, address, etc. — in accordance with article 6 (1) (c) of the Regulation 2016/679.
Identification data such as name, contact information (including email address and telephone number), etc. — for informing you about Company actions and events, in accordance with article 6 (1) (a) of the Regulation 2016/679.

The Company will not process your personal data without your consent, where required. However, the Company reserves the right, in exceptional cases, to process your personal data to the extent permitted or required by law, and/or by court decisions or prosecutorial orders.

Recipients of your data

We may disclose your personal information indicatively to:

All authorized persons of our Company (e.g. legal advisers, business consultants, external accountants, security technicians, etc.)
Specific persons of our Company necessary for the selection process of candidate employees (e.g., Administration, Head of Departments, HR Manager, etc.)
Authorized external partners (logistics companies, transport companies) necessary for the execution of the contract between us
Providers of support for these data processing systems
Judicial or supervisory or control authorities, within the scope of their jurisdiction
Third parties who have a legal interest in establishing, exercising or upholding legal claims

The Company undertakes the obligation to not trade your personal data by making it available for sale or rental by transferring or disclosing it to third parties, unless required by law, court decision/order, administrative act or if it is a contractual obligation necessary for the smooth operation of the Company’s website.

Data Retention

The retention period can vary significantly depending on the type of data and how it is used. Determining the retention time of data is based on criteria such as legal retention periods, pending or potential disputes, intellectual property or rights, contractual requirements, business instructions or archiving needs.

CVs are kept for one (1) year after the job position is filled.
Tax data are kept in accordance with the current tax legislation.
Data collected via video surveillance system is kept for up to 15 days, after which it is automatically deleted. If an incident is found during this period, the relevant footage may be retained for up to one (1) additional month for investigation purposes, or up to three (3) months if it concerns a third party.

CCTV – Data Processing

We use a surveillance system for protecting persons and property. The processing is necessary for the purposes of our legitimate interests as a Controller and in accordance with article 6 (1) (f) of the Regulation 2016/679. Our legal interest consists in the need to protect our property and the goods located in it from illegal acts, such as theft, as well as the safety of life, physical integrity, health and the property of our staff, customers and third parties legally located in the supervised area. The kept material is accessible only by our authorized personnel. This material shall not be transmitted to third parties, except: (a) to the competent judicial, prosecutorial and police authorities when it contains information necessary for the investigation of a criminal offense; (b) to the competent judicial, prosecutorial and police authorities when lawfully requesting data; and (c) to the victim or perpetrator of a crime, in the case that data may constitute evidence of the act.

Data Subject’s Rights

With regard to your personal data, you may exercise the following rights: right of access, right of information, right of rectification, right of erasure, right of restriction of processing, right of data portability, and right of objection. In order to exercise any of the above rights, please send an email to: info@smilevos.gr, always stating your complete details and the reason for your communication. The Company will take every possible measure to satisfy your request within one (1) month of receiving it. If you consider that the Company in any way violates the current legislation on personal data, you reserve the right to file a complaint to the Personal Data Protection Supervisory Authority: www.dpa.gr, 1-3 Kifissias, PC 11523, Athens, tel. 210 6475600, e-mail: contact@dpa.gr.

Cookie Policy

What is a cookie?

The term «cookie» refers to a small data file consisting solely of a set of text information that the site transmits to the web browser on your computer’s hard disk, either temporarily throughout your visit, or sometimes for longer periods, depending on the type of cookie. Cookies are used by most websites to improve your user experience.

Types of cookies

Session cookies — Temporary cookies that remain in the cookie file of your device’s browser only during your visit and are deleted when you close the browser.
Persistent cookies — These remain in the cookie file of your device’s browser even after the browser closes, sometimes for one year or more.
First-party cookies — Cookies installed on your browser from the site you are visiting, used to handle visits and for identification purposes.
Third-party cookies — Cookies used by third parties, such as social networks, to track your visits across various sites. The site administrator has no control over these cookies.

Cookies on this site and how to manage them

On this site, we use cookies to improve your user experience. Site functionality will be significantly affected if you disable or disagree with the use of cookies. If you need any help on how to manage certain types of cookies, please visit www.aboutcookies.org.

Google Analytics cookies

Google Analytics cookies are performance analytics cookies that allow us to collect anonymous information about how visitors use our site (number of visitors, visit duration, navigation patterns). This information helps us improve the way our site works and does not contain personal information. For more information, please visit Google Analytics privacy information. You may opt out at any time via the Google Analytics opt-out tool.

Video provider cookies

Video providers can place cookies on your device if you watch their video on our site. If you disable these cookies you may not be able to see the embedded videos on our site.

Social network cookies

Third-party social networks can place cookies on your device if you choose to share a web page of our site by clicking on one of the «share» buttons. If you disable these cookies, you will not be able to share our content with third-party social networks.

About this site’s web server

All web traffic between this site and your browser is encrypted and transferred via the HTTPS protocol using Secure Sockets Layer (SSL). Our servers record the user’s IP and, in case of failed connections, the username, in log files through security systems (firewalls, DDoS filters, HTTP filters, SQL injection filters, visit statistics, Cloudflare services) and backup. All of the above data is kept for short periods on our servers with modern security protocols so only authorized personnel can access them.

Third-party personal data processors

We use a number of third parties to process personal data on our behalf (e.g. datacenter services, hosting services, backup services, payment gateways, shipping companies, marketing services, etc.). These third-party processors have been carefully selected to comply with the legislation mentioned in this document.

Data breaches

For any personal information stored in our database, all necessary action will be taken to keep it as secure as possible. We will report any unlawful violation of our database to all relevant stakeholders and authorities within 72 hours of the violation, if it is obvious that personal data stored in recognizable form have been stolen.

Data Protection Officer

You may contact the Data Protection Officer (DPO) of this site by using the email address on our contact page.