PERSONAL DATA

1. Data we collect automatically via our website

The website www.floroil.gr uses the SSL (Secure Sockets Layer) protocol, which employs methods to encrypt data exchanged between two devices (most commonly computers), establishing a secure connection between them via the internet, thereby protecting your personal data.

When you visit our website, our server collects what are known as server log files, specifically:

• The date and time of your visit to the website.
• The volume of data transmitted in bytes.
• The browser and operating system you used to access the website.
• Your Internet Protocol (IP) address when you access the website. Your IP address constitutes personal data, together with the date and time of your visit, although we cannot identify you solely on the basis of this data.

The legal basis on which we collect your IP address and store it in specific files (log files) is our legitimate interest in processing this data in order to ensure the security of networks, information and services against accidental events or unlawful or malicious acts that compromise the availability, authenticity, integrity and confidentiality of stored or transmitted data (e.g. defence against DDoS ‘denial-of-service’ attacks), as well as our legal obligation to provide a more secure environment for the processing of your personal data (GDPR Article 6(1)(f) and (c)). The data will not be transferred or used in any other way. However, we reserve the right to check server logs (server logs) if specific indications of unauthorised use are detected.

2. Customer Data

When you visit our company, we may collect your personal data, such as your full name, telephone number, email address and, where applicable, other contact details.

The purpose of processing your data is to provide you with the products you have requested, and the legal basis for the processing is the performance of the contract between us (Article 6(1)(b) and Article 9(2)(h) of the GDPR). Your data will be retained for as long as required by tax legislation.

3. Data we collect via email, the contact form or for the purpose of sending our newsletter

When communicating with us via email or via the on our website, or for the purpose of sending our newsletter, we collect your name, email address and any other information you provide to us. This data is stored and used exclusively to respond to your enquiry. The legal basis for the processing of your personal data is your consent (GDPR, Article 6(1)(a)). Your data will be deleted once processing of our correspondence. This will take place once the purpose and scope of our correspondence have been fulfilled, provided there are no legal requirements for the storage of such data.

4. Social media pages

Our Company maintains pages on social media platforms – Facebook, Twitter and LinkedIn. You can contact us via our pages to receive further information about our products and services by ‘Send a message’ option. In order to respond to your enquiries, we collect and process your social media username, as well as other information that is publicly available via your profile.

The very act of sending a message for the purpose of communicating with us implies your consent to the aforementioned processing of your data.

If you choose to ‘connect’ with our page (by clicking ‘add’), this implies that you are giving your consent to view the news and promotional activities (via the newsfeed) carried out by the Company through its social media page. If you do not wish to receive such updates, you may at any time click on the ‘Delete’, ‘Unfollow’ or similar option.

We take all necessary security measures (both technical and organisational) to ensure the security of data processing via Facebook and other social media platforms, such as, for example, restricting the number of people who have access to manage our social media account. Our company accepts no liability for the manner or means by which social media platforms process your data. You can find out more about how your data is processed by social media platforms such as Facebook, Twitter and LinkedIn.

5. Supplier data

In order to fulfil the contract between us, we collect data from our suppliers, such as full name, company name, address, contact details, delivery details and financial data, which you provide to us yourselves. The legal basis for processing your data is the performance of a contract and our compliance with legal obligations (GDPR Article 6(1)(b) and (c)), and we retain this data for a period of up to twelve years from the last provision of services, or for as long as required by tax and any other relevant legislation.

6.Submission of a CV

When you submit a CV to our Company online or at our offices, you provide us with the personal data contained in your CV, such as your first name and surname, your education, experience, professional skills and preferences, etc., as well as any other information you may wish to disclose to us, such as your photograph.

We retain your personal data for up to three years to consider the possibility of recruiting you, and the legal basis for processing your personal data is your consent, as well as your request prior to entering into a contract with us (GDPR Article 6(1)(a)and (b)).