Privacy policy

“COMPANY” will collect the following data:

• COMMERCIAL CONTACT: Handling inquiries and contact requests received through any medium, regarding the services of “COMPANY,” as well as maintaining commercial relationships:
  • Data collected: Name, phone number, email, and inquiry.
  • Purpose: To respond to the information requests made by the interested party through any medium regarding the products and services of “COMPANY,” and to establish and maintain commercial relationships.
  • Legal basis: Based on the provision of consent, “COMPANY” is authorized to process the data provided by the interested party through the contact request, and in accordance with legitimate interest for the development and maintenance of commercial relationships.
  • Retention period: The data will be kept until the interested party requests the cancellation or deletion of their data, and once deleted, it will be kept available to public authorities, judges, and courts, for the legal periods established for the attention and defense of possible responsibilities arising from the processing.

• RESUME OR EMPLOYMENT: Sending a resume through the website or by any other means to “COMPANY.”
  1. Data collected: Professional area, name, surname, phone number, email, CV, cover letter, and any other personal data associated with the resume or professional profile.
  2. Purpose: Managing the interested party’s application for the published selection processes or for other vacant positions that may arise in the future within the activities of “COMPANY.”
  3. Retention period: The data will be kept until a job is assigned or until the interested party requests its deletion. Therefore, it will be kept for as long as necessary for the purpose of processing, and once the purpose is completed, it will be kept available to public authorities, judges, and courts, for the legal periods established for the attention and defense of possible responsibilities arising from the processing.
  4. Legal basis: Provision of consent by the interested party.
  5. Recipients: The data provided and derived from the selection process may be transferred to:

                    – Third-party companies identified by the interested party for requesting references that may be necessary for the candidate’s selection.

• PROMOTIONAL or NEWSLETTERS: Sending information, updates, notices, reminders, and promotions that may be of interest related to the activities of “COMPANY.”
  • Data collected: Email address, name, and surname.
  • Purpose: Registering interested parties for sending information, updates, and promotions, and establishing and maintaining commercial relationships.
  • Legal basis: Provision of consent by the interested party to “COMPANY” for registration in promotional services, and legitimate interest for the development of commercial relationships.
  • Retention period: The data will be kept until the interested party requests the cancellation or deletion of their data, and once deleted, it will be kept available to public authorities, judges, and courts, for the legal periods established for the attention and defense of possible responsibilities arising from the processing.

• SERVICES: Data provided for the provision of services by “COMPANY.” The services will be identified at the time of data collection and registration.
  • Data collected: Name, surname, ID, contact address, home address, email, phone number, and other necessary data depending on the requested service, which will be exclusively necessary for registration in the services of “COMPANY.”
  • Purpose: Registering interested parties for the provision of services and establishing and maintaining commercial relationships.
  • Legal basis: The legal or contractual relationship necessary for the provision of the service and legitimate interest for the development of commercial relationships.
  • Retention period: The data will be kept for as long as necessary for the purpose of processing, and once the purpose is completed, it will be kept available to public authorities, judges, and courts, for the legal periods established for the attention and defense of possible responsibilities arising from the processing.

• Social Media Accounts and Web Tracking: The personal data that is provided or enabled through social media when becoming a follower. “COMPANY” corporate social media accounts are as follows:
  
  • INSTAGRAM: https://www.instagram.com/dausrestaurant

• • Data collected: Name, surname, ID, contact address, home address, email, phone number, and other data provided by the corresponding social network.
  • Purpose: Social media following and establishing and maintaining commercial relationships.
  • Legal basis: Provision of consent by the interested party and legitimate interest for the development of commercial relationships.
  • Retention period: The data will be kept for as long as necessary for the purpose of processing, and once the purpose is completed, it will be kept available to public authorities, judges, and courts, for the legal periods established for the attention and defense of possible responsibilities arising from the processing.

• CLIENTS/SUPPLIERS: Professional personal data provided by Clients/Suppliers for the provision of services and management of the legal or contractual relationship.
  • Data collected: Name, surname, ID, professional contact address, email, phone number.
  • Purpose: Managing the contractual relationship of the service.
  • Legal basis: The legal or contractual relationship required for the provision of the service.
  • Retention period: The data will be kept for as long as necessary for the purpose of processing or its deletion, and once the purpose is completed or deleted, it may be kept for a period of six years available to public authorities, judges, and courts for the attention and defense of possible responsibilities arising from the processing.

• ACCESS CONTROL AND SECURITY: Data collected by video surveillance cameras or provided for access control to “COMPANY” buildings:
  • Data collected: Name, surname, ID, and images.
  • Purpose: To control access and manage internal security in “COMPANY” facilities.
  • Legal basis: Legitimate interest in ensuring security in the facilities by its owner, which justifies the registration of data in the access control system, and the necessary capture of images when accessing these facilities.
  • Retention period: The data will be kept for a maximum period of one month unless it is necessary to retain it longer to clarify any detected violation or illicit act.

Data may be communicated to third parties for the provision of third-party services as data processors with whom “COMPANY” has signed the corresponding Data Processor Contracts and verified that they meet the necessary guarantees to apply appropriate technical and organizational measures to ensure that the processing is carried out in accordance with GDPR requirements, ensuring the protection of the rights of the interested party.