PRIVACY POLICY NOTICE

For SELLAS OLIVE OILTRADE Ltd. (SELLAS OLIVE OIL) the protection of the Personal Data of our partners, suppliers, customers and in general citizens that interact with the Company, as well as the respect for individual privacy, constitute a self-evident commitment.  The company is committed to collect and process personal data according to the General Data Protection Regulation (EU) 679/2016 and the rest of the applicable legislation. In this context we undertake all necessary organizational and technical measures required to ensure security, availability and validity of the data of our partners and citizens interacting with SELLAS OLIVE OIL. 

For us it is extremely important this strong commitment to be clear to all our partners and citizens. For this reason, we created the present “Privacy Policy Notice” which describes and explains what kind of personal data we may collect, how we manage them and how they may be used. 

The SELLAS OLIVE OIL company operates in the wholesale Commerce of Greek conventional and organic olive oil farming and certified services of processing, standardization and storage of olive oil. At the beginning of 2011 we presented our own extra virgin olive oil and followed a series of standardized olive oils labeled SELLAS.

Personal Data and ways of collection 

In the context of its activities, SELLAS OLIVE OIL collects personal data through its authorized employees and partners, which may include:

  • Personal details (such as surname, first name, father’s name, address, V.A.T. number, id or passport number, signature);
  • Data regarding financial transactions (such as bank accounts, credit and debit card details and other means of payment); 
  • Data necessary for transactions with legal entities and companies of the wider public sector, such as tax or social security clearance, criminal records etc.;
  • Data that may be included in files submitted by companies to participate in procurement procedures for the provision of services or works;
  • Data regarding marine traffic, such as full names/corporate names, addresses, contact details, V.A.T. numbers of ship owners, administrators, charterers, agents and contact persons; 
  • Data regarding image and location through CCTV, which supervises the facilities for the security of SELLAS OLIVE OIL and the infrastructure which it manages; 
  • Contact details (telephone, email address, mail address);

The SELLAS OLIVE OIL company takes all reasonable steps to collect personal data directly from the data subjects, through any appropriate mean. Only in exceptional cases SELLAS OLIVE OIL may collect personal data from any other source, after prior specific notification to the data subjects. 

Legal Basis and purpose of personal data use 

The SELLAS OLIVE OIL company collects only personal data that are absolutely necessary for the performance of its activities, its duties entrusted to it for safeguarding public interests, as described in the present, the performance of legal obligations and the performance of its contractual obligations. Specifically, the company collects and processes data of partners and suppliers for the trade of  Greek olive oil of conventional and organic cultivation, processing, standardization and storage of olive oil,  collects and process data that are necessary for the control and safety of the product based on the applied quality and food safety management system (ISO 9001, ISO 22000, BRCGS, FSSC 22000), collects and processes data for the performance of its contractual obligations in the context of the provision of its products and services, as well as for the performance of its legal obligations, such as, among others, regarding tax legislation. 

In the context of pursuing these goals, our company processes personal data, according to the following legal bases, depending on each time particular act of processing: 

  • Performance of contract: processing necessary for performance and compliance with contractual obligations. 
  • Compliance with legal obligations of our company, such as recording in our accounting records, issuance of lawful receipts etc. for compliance with tax and relevant obligations. Collection and processing of data, such as social security and tax clearances and criminal records for the compliance with obligations that arise from the legislation applicable to procurement. 
  • Management of customers and suppliers and safeguarding the smooth operation of our company and the correct provision of its products and services. 
  • Processing of data, such as the control of facilities (Offices, Product and Material Warehouses, Standardization area, Outdoor facilities).  In this context, we collect and process data, which includes collection of data entering our facilities, recording of image of infrastructure through CCTV, etc. 
  • To safeguard our legal interests, to the extent that processing does not violate the overriding legal interests of the subjects, such as the record keeping for defending against claims, litigation, as well as documentation in case of administrative and similar controls, and also processing necessary for the safety and security of the facilities and infrastructure.

Disclosures of personal data – categories of recipients

The SELLAS OLIVE OIL does not disclose the personal data it collects and processes to third party, except if it is necessary for the purposes for the performance of legitimate professional and business needs, in order to perform contractual obligations to our suppliers and partners or is required or allowed by law. 

The data of our partners, suppliers and citizens that engage with SELLAS OLIVE OIL may be processed according to those mentioned in the present notice, by departments and employees of our company that are competent to perform each given task. The data may be processed by collaborating third parties, by order and on behalf of SELLAS OLIVE OIL, in cases of outsourcing of functions of our company, such as IT services, accounting services etc. There are no stable collaborations of this sort and for this reason it is impossible to mention the particular details of such partners. In any case, the company takes all necessary steps to ensure that it assigns parts of processing to third parties only if they ensure high levels of security and confidentiality of the data, provide enough guarantees and commitment about their protection and undertake the contractual obligations required by law.  Furthermore, the data, to the extent necessary for the performance of the purposes of processing, may be transferred to Banks or business partners such as insurance companies, consultants or auditors, security services providers or archive managing services providers, IT companies, courier companies or companies providing printing services etc. Our company, under any circumstance in which such a transfer of data is necessary, takes all reasonable steps to disclose data only to third parties that demonstrate high levels of security and confidentiality and provide enough guarantees and commitment for their protection. 

Finally, the company may disclose data to public authorities of any nature (public services, tax authorities, social security institutions etc.) or to judicial authorities or independent public authorities, prosecuting authorities etc., if such a disclosure is allowed or required by law or such a disclosure is deemed absolutely necessary for the protection of our legal rights or legal compliance. 

Timeframe of retention of personal data

Personal data are retained for the period that is absolutely necessary for the performance and completion of the purposes of their processing mentioned above. The exact period of retention of each category of personal data is determined by (a) the needed period, within a reasonable business framework, for the performance of our contractual obligations (b) each time applicable legislation about mandatory retention of certain data, as indicatively applies in accounting and tax records or data regarding social security obligations (c) the duration of our commercial or otherwise contractual relationship with suppliers, partners or customers (d) the possible need for the retention of data in order to safeguard our legitimate interests, demonstrate compliance, protection against claims and judicial pursuit of our claims (e) obligations for retention that arise from the public duties assigned to our company and any special provisions governing the operation of companies. 

Confidentiality and security of personal data

The SELLAS OLIVE OIL maintains appropriate technical and organizational measures to ensure the confidentiality and integrity of the personal data in its possession and to protect them from incidental or deliberate destruction, loss, change, unauthorized access or disclosure, as well as any other form of illegal processing. 

The processing of personal data from our company is conducted only in a way that ensures confidentiality and security of the data, taking into consideration the latest developments, costs, nature, context and purposes of processing, through evaluation of the risks and the chances of their occurrence and its consequences for the data subjects. In this context, we take all reasonable steps to ensure that processing is carried out by authorized for such a procedure personnel, which is bound by confidentiality obligations and demonstrate the appropriate protection standards. The same applies to all our partners, which may be involved in the process (see above under “Disclosure of Personal Data – Categories of recipients”). 

Data Subject’s Rights

According to applicable legislation and under the restrictions provided therein, data subjects have the following rights in respect to their personal data: 

  • Right to Information and Access: You have the right to be informed and access data concerning you. This is the purpose of the present Privacy Policy Notice. Simultaneously, you have the right of access to your personal data, upon relevant request (articles 12-15 of the GDPR).
  • Right to Rectification: You have the right to request the rectification of inaccurate data, which are kept in the context of this or the completion of any incomplete data concerning you (articles 16 & 19 of the GDRP).
  • Right to Erasure: You have the right to obtain from the controller the erasure of personal data concerning you, given that such an erasure is permitted by applicable law. We note that this right is subject to the restrictions provided by law (articles 17 & 19 of the GDPR).
  • Right to Restriction of Processing: You have the right to obtain from the controller restriction of processing, if conditions set forth in applicable legislation are met. The exercise of such a right is possible if applicable legislation provides for such a possibility. If the relevant conditions are not met, the company may have no obligation to accept your request (articles 18 & 19 of the GDPR).
  • Right to Data Portability: You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller, if such a possibility is provided by applicable legislation for the type of data concerned (article 20 of the GDPR).
  • Right to Object: You have the right to object to processing of data concerning you, given that such a possibility is provided by applicable legislation. This right is subject to the conditions provided by law and the company may have legitimate reasons to deny your request (article 21 of the GDPR).
  • Right to withdraw your consent: If an act of processing is based on your consent you have the right to immediately, easily and without cost withdraw your consent at any time. The withdrawal of your consent does not affect the lawfulness of processing before the time of the withdrawal.
  • Right to file a complaint with the Data Protection Authority: We note that you also have the right, according to applicable legislation, if you deem that some of your rights are being violated, to file a complaint with the competent Data Protection Authority (for Greece: Data Protection Authority – DPA, 1 Kifissias Ave., 11523 Athens, telephone: 302106475600, www.dpa.gr) 

To exercise any of your rights, as well as for any information or clarification in respect to those rights and their conditions, you have to contact with our Data Protection Officer at given contact details below. The Data Protection Officer will provide any further information and guidance for the steps that you must follow. Furthermore, you can contact our DPO for any queries, comments or complaints in respect with the management of your personal rights. 

Data Protection Officer:  Fani Panousopoulou

Email: fp@sellas.gr

Telephone: +30 2746 0 24250

Address: 201 Papakonstantinou Ave. – GR 20500 Nemea, Korinthia, Greece

Deputy Data Protection Officer:  Georgia Sella

Email: g.sella@sellas.gr

Telephone: +30 2746 0 24250

Address: 201 Papakonstantinou Ave. – GR 20500 Nemea, Korinthia, Greece

Changes in the present Privacy Policy Notice

The company may unilaterally change the present Privacy Policy at any time, without prior notice, in order to reflect accurately each time changes regarding the applicable policies and practices of our company. We strongly recommend visiting frequently our website, to get directly information about any changes in the present Privacy Policy Notice.