DATA PROTECTION PRIVACY NOTICE

Interoperability Systems International Hellas Single Member Societe Anonyme (Scytalys S.A.), hereinafter, the “Company” or “we” or the “Controller”, proceeds with the collection, use and processing of the personal data in accordance with the General Data Protection Regulation (EE) 2016/679 (hereinafter the “GDPR”).

This Data Protection Privacy Notice describes how the Company acting as the Controller of the Personal Data you have shared with us, processes this data in accordance with the applicable national and European legislative and regulatory framework on the protection of personal data.

a) Categories of personal data

The Company collects the below information:

  • Email address
  • Name/Surname
  • Company
  • Profession
  • Telephone number

Any other personal data you may share with the Company while submitting the aforementioned details, will not be processed or used in any way.

b) Purpose of processing personal data

The Company collects and processes personal data for marketing purposes, i.e. to send to you personalized newsletters, Company’s brochure material etc., to respond to any requests and provide clarification in connection with the production of the Company.

The legal basis for the processing is your consent in accordance with Article 6 of the GDPR.

c) Transmission, protection and retention of personal data

We might share or transmit your personal data to our employees, ΙΤ service providers, or to carefully selected third-party business partners strictly on a need-to-know and confidential basis exclusively for the performance of their duties, to provide you with information about the Company.

The Company will not transmit any personal data to third parties, other than those mentioned above. The collection and the processing of your data will be carried out electronically. The Company has also adopted and established all necessary technical and organizational security measures to secure your personal data.

Your personal data will be retained in our system for a period of three (years) unless otherwise required by any applicable law and will be deleted as soon as it is no longer necessary for the purposes for which it was collected. Your data will not be erased should its continued retention is required for our compliance with statutory or official obligations.

d) Your rights under the GDPR

Under the GDPR, you have the following rights:

  1. Right of access to your personal data. You may at any time request the Company to confirm whether your data are being processed and you can submit any questions in relation to the processing of the data, the categories of the data, the recipients or categories of recipient to whom your data have been or will be disclosed;
  2. Right to rectification. You have the right to obtain from the Company without undue delay the rectification of inaccurate personal data that concerns you;
  3. Right to erasure. You have the right to obtain from the Company the erasure of your personal data without undue delay where: i) your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; ii) you withdraw consent on which the processing is or there is no other legal ground for the processing; iii) your personal data have been unlawfully processed; iv) your personal data have to be erased for compliance with the applicable laws;
  4. Right to restriction of processing. You have the right to obtain from the Company the restriction of processing where: i) the accuracy of your personal data is contested by you, for a period enabling the Company to verify the accuracy of your personal data; ii) the processing is unlawful and you oppose the erasure of your data and request the restriction of their use instead; iii) the Company no longer needs your personal data for the purposes of the processing, but these are required by you for the establishment, exercise or defense of legal claims; iv) you have objected to processing, pending the verification whether the legitimate grounds of the Company override yours;
  5. Right to data portability. You have the right to receive your personal data, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the Company;
  6. Right to object. You have the right to object, at any time, to processing personal data concerning you, including profiling for direct marketing purposes.

To exercise your rights in relation to the processing of your Personal Data you may contact the Company at the email address: dpo@scytalys.com

For any further information in relation to your rights or in case of complaint you may contact the Hellenic Data Protection Authority: https://www.dpa.gr/en.