Data Privacy
INFORMATION NOTIFICATION FOR THE PROTECTION OF PERSONAL DATA
To access the service, you must state that you have read the Personal Data Protection Notification by clicking on the link at the bottom of this page.
The Company with ". Informs you that the processing of your personal data, which is carried out through the website ("Website") or collected through this contact form ("Form") is carried out in accordance with applicable data protection law (Regulation (EU) ) 2016/679 - hereinafter the "GDPR" regulation) and the Privacy Policy of the Website.
1. Data Processing Manager and YPD
The Data Controller is the Company with "".
You can contact the Data Protection Officer ("DPO") at the following address dataprotection@bpc.gr
2. The Data we process
With your consent, we process the following common and sensitive personal data you provide when you interact with the Website and use the services and functions it provides. This data includes in particular the name and surname, contact details, professional qualifications, financial details, and the content of your specific requests or reports as well as the additional data that the Data Controller may obtain, including from third parties , in the context of conducting its business activity ("Data").
In order to be able to fulfill the requests you submit through the contact form and / or to provide updates on the side effects, it is necessary to consent to the processing of the data marked with an asterisk (*). Without these mandatory data or your consent we can not proceed further. Instead, the information requested in fields not marked with an asterisk and your consent to the download of information material is optional: failure to provide it has no consequences.
In any case, even without your prior consent, the Data Controller may process your data to comply with legal obligations under EU laws, regulations and law, to exercise judicial rights, to exercise its own legitimate interests and in all cases provided for, where applicable, in Articles 6 and 9 of the GDPR.
The processing is done both using computers and in printed form and always implies the application of the security measures provided by the current legislation.
3. Why and how we process your data
The data are processed for the following purposes:
(i) to handle requests for information through the Website and the Form. The legal basis for the processing of personal data for this purpose is your consent (Article 6 (1) (a) and Article 9 (2) (a) of the GDPR);
(ii) to manage the reports of unwanted actions submitted through the Website or the Forms. The legal basis for processing for these purposes is your consent (Article 6 (1) (a) and Article 9 (2) (a) of the GDPR Regulation), as well as the pursuit of any public interest in the area of financial asset management and shaping. credit policy (Article 9 (2) (i) of the GDPR);
in addition, but only with your optional consent which is the legal basis for the processing in accordance with Article 6 (1) (a) of the GDPR Regulation:
(iii) to receive promotional material (direct marketing) from the Company.
By choosing the right frameworks, you agree to the processing of your data for these purposes.
Your data may in any case be processed, even without your consent, for compliance with laws, regulations, EU law (Article 6 (1) (c) of the GDPR), for obtaining statistics on the use of the Website and its proper operation (Article 6 (1) (f) of the Regulation).
Personal data is entered into the Company's computer system in full compliance with data protection legislation, including security and confidentiality profiles, and is based on principles of good practice, legality and transparency regarding processing.
The data are stored for as long as is absolutely necessary to achieve the purposes for which they were collected. In any case, the criterion used to determine this period is based on compliance with the deadlines set by law and the principles of data minimization, storage limitation and rational file management.
All your data will be processed in printed or automated media, ensuring in each case the appropriate level of security and confidentiality.
4. People who have access to the data
The Data is processed by electronic and manual means in accordance with the procedures and practices related to the aforementioned purposes and is accessible by the staff of the Controller who is authorized to process the Personal Data and the supervisors and in particular the employees belonging to the following categories: technical staff, Information and Network Security staff, and administrative staff, product managers, facility security staff and other staff members who have to process data in order to perform their duties.
Data can also be notified to countries outside the European Union ("Third Countries"): Data can also be notified to countries outside the European Union ("Third Countries"): i) to institutions, authorities, public bodies for (ii) professionals, independent consultants - whether working individually or collectively - and other third parties and providers providing the Data Processing Officer with commercial, professional or technical services required for the operation of the Website (eg provision of IT services). and Cloud Computing) for the purposes mentioned above and for the Company's support in providing the services you requested; iii) to third parties in the event of mergers, acquisitions, transfers of companies or their branches, audits or other extraordinary operations;
The mentioned recipients receive only the necessary data for their respective functions and duly undertake their processing only for the purposes mentioned above and in accordance with the data protection laws. The Data may also be disclosed to other legal recipients determined from time to time by applicable laws. With the exception of the above, the Data will not be disclosed to third parties, natural or legal persons, who do not perform commercial, professional or technical duties for the Controller and will not be disseminated. The data recipients will be processed, as appropriate, as Data Processors, Editors or authorized persons to process personal data for the purposes set out above and in accordance with applicable data protection legislation.
With regard to the transfer of data outside the EU, even in countries whose laws do not guarantee the same level of protection of personal data privacy as provided by EU law, the Data Controller informs that the transfer will in any case take place in accordance with with the methods allowed by the GDPR, for example on the basis of the user's consent, on the basis of standard contractual clauses approved by the European Commission, by selecting parties participating in international programs for the free movement of data (e.g. . EU-US Privacy Shield) or implemented in countries considered safe by the European Commission.
5. Your rights
You can contact the Editor at the addresses listed above, at any time, to exercise your rights under Articles 15-22 of the GDPR Regulation, such as, for example, to obtain an updated list of individuals who have access to the data. you, to receive confirmation of the existence or non-existence of personal data related to you, to check their content, origin, correctness and location (also in relation to any third country), to request a copy, to request their correction and, in the cases provided for in the GDPR Regulation, request that their processing be restricted, that they be deleted, that they engage in direct communication activities (including restriction on certain means of communication), that they receive advertising material (direct marketing) from the Company. Similarly, you can always report comments on specific uses of the data regarding specific personal situations that are deemed incorrect or unjustified by the existing relationship with the DPO or file complaints with the Data Protection Authority. You can withdraw your consent at any time, without prejudice to the legality of the processing carried out prior to the withdrawal of your consent.