Suppliers Privacy Policy

We are committed to protecting your personal data and we would like to provide you with the following information:

Click here for the GR version – Πατήστε εδώ για το ελληνικό κείμενο

1. What are the categories of personal data we process?

a. basic identification particulars and contact details (including full name, address, telephone and email address);
b. description of the services that you provide to us; and
c. financial and tax data (Tax Reg. No., bank accounts).

2. Why we process your personal data?

We process the personal data of our suppliers and external partners in order to manage the relationship between us, and in order to ensure compliance with our contractual obligations arising and the law.

The legal basis for the processing of your personal data is (i) the performance of our contract, (ii) our compliance with legal obligations, and (iii) the establishment, exercise or defence of legal claims.

3. To whom we disclose your personal data

As a rule, we do not disclose your personal data to third parties.

As an exception, we may disclose your personal data:
a. to competent public authorities (such as the Greek unified social security organisation “EFKA” or the competent Tax Offices) and to court authorities, in order to meet our legal obligations and to exercise and defend our legal rights;
b. to service providers engaged by us, such as IT companies, and only to the extent necessary for the provision of their services to us.

Such service providers act as data processors and are processing personal data exclusively on behalf and under our written instructions and do not have the right to further use your personal data for their own benefit.

4. Processing and retention of your personal data

We process only those personal data which are adequate, relevant and limited to what is necessary in relation to the above purposes, and we do not store them for any period longer than is necessary for the purposes of the data processing.

As a rule, the Company stores your personal data for a period of twenty (20) years from the termination of our contract for any reason -said time period being also the period of limitation for any claims brought against you or the Company, in order for the latter to be able to exercise and defend its legal rights and to comply with its legal obligations.

As soon as the processing of your personal data is no longer necessary, your data shall be either destroyed in a secure manner or anonymised, unless the law provides otherwise. We shall make every effort to ensure that your personal data processed by us are always accurate, complete and up to date, and to this end, we may ask you from time to time to update them.

5. Security of your personal data

The security of your personal data is of the utmost importance to us. We are committed to maintaining the highest technical and organizational measures to protect the integrity, confidentiality and availability of personal data and to protect such against unauthorized access, misuse, disclosure, unlawful destruction or loss.

6. Your rights

Pursuant to the General Data Protection Regulation and the applicable data protection laws, you have the right to request access to your personal data and to request rectification, erasure, restriction or objection to the processing of your data. You also have the right, under certain conditions, to request from us to receive your personal data in a structured, commonly used and machine readable format and to ask us to transmit them to another entity you indicate to us.

In case you want to exercise the aforementioned rights or if you have any questions in relation to the processing of personal data conducted by us, please send us an email at data.protection@zeya.com. If you consider that we violate the applicable data protection laws when processing your personal data, you have the right to lodge a complaint with the Hellenic Data Protection Authority.