HERACLES PACKAGING SA fully understands the importance of safeguarding your privacy and the protection of your personal data in the digital age and is committed to always ensuring an adequate level of protection for all individuals whose data is processed.
HERACLES PACKAGING COMPANY SA collects, processes and protects the personal data in full compliance with existing legislation and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of fundamental rights and freedoms of natural persons with regard to their right to the protection of their personal data (General Regulation on Data Protection, hereinafter referred to as “the GDPR”).
This Privacy and Processing Policy (hereinafter referred to as “the Policy”) describes how we collect, process and maintain personal information about you as well as the purpose of the collection and processing of your personal data by HERACLES PACKAGING COMPANY SA, as well as to explain your rights and choices regarding this data, providing all the necessary information to you under Articles 12 and 13 of the GDPR.
This Policy applies only to personal data collected and processed in the context of our business activities:
Personal Data that you communicate to us in various ways and means (submission of contact form, online application, request for information, subscription to newsletter etc.).
Personal Data that we collect automatically, such as when we follow your interaction with our websites, newsletters, platforms, applications and services, through specific technologies, such as cookies.
Ι. Definitions
For the purposes of this Policy:
“Personal data” means any information relating to an identifiable or identifiable natural person (“data subject”); ID number, location data, online ID or one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of the individual concerned;
“Processing” means any operation or sequence of operations performed with or without the use of automated means, on personal data or on personal data sets, such as collection, registration, organization, structure, storage, adaptation or change, retrieval, search for information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction;
“Controller” means a natural or legal person, public authority, service or other entity which, alone or in conjunction with others, determines the purposes and manner of processing personal data when the purposes and manner of such processing are specified by the law of the Union or the law of a Member State, the controller or the specific criteria for his appointment may be laid down by the law of the Union or the law of a Member State;
“Processor” means a natural or legal person, public authority, department or other body which processes personal data on behalf of the controller;
“Consent” of the data subject” means any indication of will, free, specific, express and fully aware, by which the data subject expresses his or her consent, by declaration or clear positive action, to the processing of personal data concern it, “Breach of personal data” means breach of security resulting in accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access of personal data transmitted, stored or otherwise processed;
II. Controller
“HERACLES PACKAGING COMPANY SA “, based in Glyfada, Attica, 85 Vouliagmenis Ave., p.c 16674 (contact phone: 210- 9690310, fax: 210-9607376, e mail: sysk1@herpack.com.gr).
III. Collection and processing of Personal Data
The personal data that can be processed by HERACLES PACKAGING SA are the personal data that you disclose to us in various ways (submission of contact form, subscription to newsletters). Particularly:
| Identification data | Name, other ways of identification |
| Contact Data | Home address, Contact telephone or other contact details |
| Other Data | Any other personal data you share with us on your own initiative |
IV. Processing Purpose
The collection and processing of personal data by HERACLES PACKAGING COMPANY SA is done in accordance with existing legislation, in full compliance with GDPR and with full respect for the principles governing processing by law, in order to ensure security and confidentiality.
Our company collects and processes personal data, as detailed in the above, which are intended to serve specific purposes, always in the context of our business activities.
In particular, the purpose of collecting the above personal data is:
A) The promotion of our business activities (sales, promotion, etc.).
B) The improvement and development of our products (to identify usage trends, to develop new products, to determine the efficiency of our promotions).
C) The personalization of your experience when using our products (to understand your professional interests, needs and preferences, to present you products and offers specialized for you).
D) The communication with you (to respond to your requests or questions, to provide support for products, promotional material, to send you news and information in relation to our products, our services, our distinctive features).
E) Optimize the user experience on our website and the services we offer and compile statistics for the use of our website. Also, see our cookie policy.
V. Lawfulness of Processing
HERACLES PACKAGING COMPANY SA collects and processes personal data to the extent that this processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; in accordance with article 6 par. 1 point b of the GDPR.
In addition, we collect and process personal data, as controllers, in case it is necessary to comply with a legal obligation according to article 6 par. 1 item c of the GDPR.
Where appropriate, it is possible that the data subject has consented to the processing of his personal data for one or more specific purposes, in accordance with article 6 par. 1 item a of the GDPR, such as e.g. to receive newsletters.
Furthermore, in some cases, the processing of personal data is necessary for the purposes of the legitimate interests pursued by HERACLES PACKAGING COMPANY SA as a controller, according to article 6 par f e.g. the defense of the interests and legal assets of our company, exercise of legal claims of our company.
VI. Receipt and Transmission of Personal Data
The personal data are processed by the responsible staff of HERACLES PACKAGING COMPANY SA (e.g. sales department, marketing department, accounting department, members of the Management of the company).
In addition, recipients of personal data are the public services and authorities to which they are notified according to the provisions of the current legislation and in accordance with the respective obligations of HERACLES PACKAGING COMPANY SA.
HERACLES PACKAGING COMPANY SA may be obliged to disclose to third parties, such as government and judicial authorities, certain personal data, always in accordance with existing legislation, as well as for the establishment, support or exercise of legal claims and protection her rights.
Furthermore, HERACLES PACKAGING COMPANY SA may on a case by case basis disclose personal data to cooperating third parties, such as e.g. clients management software providers.
In any case, HERACLES PACKAGING COMPANY SA ensures that there are adequate guarantees for the secure processing of this data by third parties. Contracting partners acting as controllers will be subject to contractual obligations, which will be established to ensure that personal data is processed in accordance with HERACLES PACKAGING COMPANY SA instructions only and that they use adequate measures to protect the confidentiality and security of the data.
Some recipients of data may be located in countries outside the Union where the same level of protection of personal data is not guaranteed. In the context of these transfers, we implement appropriate mechanisms for the protection of the personal data, including agreements on personal data based on standard contractual clauses approved by the European Commission.
HERACLES PACKAGING COMPANY SA in no case does it trade and as a rule does not transfer personal data to countries outside the Union or international organizations and undertakes an obligation to fully inform the data subject in advance, in case it intends to do so. In the event of a merger and / or acquisition of the company, the personal data may be disclosed to the respective third parties, upon clear information for this purpose.
VII. Personal Data Protection Measures
HERACLES PACKAGING COMPANY SA maintains the appropriate technical and organizational measures to ensure the confidentiality and integrity of your personal data and to protect them from accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to them and to prevent any other unlawful processing.
For this purpose, our company, among other things, stores any documents that state the personal data in locked cabinets and / or has defined specific and secure data storage environments with encryption software, to which access is restricted to the absolutely necessary persons and is controlled using passwords.
The integrity of the data and the limited access to them exclusively by the authorized and competent persons of the company act as a guide for each individual processing activity, to which the personal data are submitted. HERACLES PACKAGING COMPANY SA has implemented specific policies for the protection of personal data, which we manage as a Controller and has established procedures for dealing with any incidents of personal data breaches.
HERACLES PACKAGING COMPANY SA takes care of the continuous training of the personnel responsible for the processing of data, which acts only after explicit authorization for this purpose and always in accordance with the instructions of the company.
VIII. Personal Data Breach
The Company takes all appropriate technical or organizational measures to deal with incidents of personal data breach, in order to prevent incidents of harm to individuals, such as loss of control over their Personal Data or restriction of their rights, discrimination, misuse or interception of identity, financial loss, unlawful removal of the pseudonym, damage to reputation, loss of confidentiality of Personal Data protected by professional secrecy or other significant economic or social disadvantage for the individual concerned.
Notification to the supervisory authority
As soon as HERACLES PACKAGING COMPANY SA becomes aware that a personal data breach has occurred, we notify the personal data breach to the supervisory authority without undue delay and, where feasible, not later than 72 hours after having become aware of it, unless we are able to demonstrate, in accordance with the accountability principle, that the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons. Where such notification cannot be achieved within 72 hours, the reasons for the delay should accompany the notification and information may be provided in phases without undue further delay.
Communication to the Data Subject
HERACLES PACKAGING COMPANY SA should communicate to the data subject a personal data breach, without undue delay, where that personal data breach is likely to result in a high risk to the rights and freedoms of the natural person in order to allow him or her to take the necessary precautions. The communication should describe the nature of the personal data breach as well as recommendations for the natural person concerned to mitigate potential adverse effects. Such communications to data subjects should be made as soon as reasonably feasible and in close cooperation with the supervisory authority, respecting guidance provided by it or by other relevant authorities such as law-enforcement authorities. For example, the need to mitigate an immediate risk of damage would call for prompt communication with data subjects whereas the need to implement appropriate measures against continuing or similar personal data breaches may justify more time for communication.
The communication to the data subject shall not be required if any of the following conditions are met:
( a ) HERACLES PACKAGING COMPANY SA. has implemented appropriate technical and organizational protection measures, and those measures were applied to the personal data affected by the personal data breach, in particular those that render the personal data unintelligible to any person who is not authorized to access it, such as encryption;
( b ) HERACLES PACKAGING COMPANY SA. has taken subsequent measures which ensure that the high risk to the rights and freedoms of data subjects is no longer likely to materialize;
( c ) it would involve disproportionate effort. In such a case, there shall instead be a public communication or similar measure whereby the data subjects are informed in an equally effective manner.
IX. Place of keeping Personal Data
The personal data are kept (a) in physical form in special folders stored securely in cabinets and (b) on servers of HERACLES PACKAGING COMPANY SA. The place of observance in both cases is the headquarters (85 Vouliagmenis Ave., Glyfada) and / or the premises of the Company’s factory (2nd km Giannitsa-Axos).
X. Time of keeping Personal Data
HERACLES PACKAGING COMPANY SA maintains and processes personal data, according to the GDPR, for as long as and to the extent required for the performance of the contract and in accordance with applicable law.
Upon expiration of the retention period, your personal data are destroyed by the files and information systems of HERACLES PACKAGING COMPANY SA or are anonymized.
XI. Individual’s Rights
A) Right to information: You have the right to know what personal data we collect about you, so that you first understand how and why we collect and process your personal data.
B) Right of access to the data concerning you and if they are processed by HERACLES PACKAGING COMPANY SA, as Controller, the purposes and the legal basis of the processing, the categories of data and the recipients or the categories of these recipients (according to Article 15 of the General Data Protection Regulation).
C) Right to rectification of inaccurate personal data as well as the right to have incomplete personal data completed (according to article 16 of the General Data Protection Regulation).
D) Right to erasure (right to be forgotten) of personal data concerning you without undue delay (according to article 17 of the General Data Protection Regulation).
E) Right to restriction of processing of your personal data if, as a result, the accuracy of the processing is contested, the processing is unlawful, or we as controller no longer need the personal data and provided that there is no legal reason for their retention (according to Article 18 of General Data Protection Regulation).
F) Right to data portability, you shall have the right to receive your personal data, which you have provided to HERACLES PACKAGING COMPANY SA, as controller, in a structured, commonly used and machine-readable format and transmit those data to another controller without hindrance from the controller to which the personal data have been provided. This right does not apply necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in to HERACLES PACKAGING COMPANY SA (according to article 20 of the General Data Protection Regulation).
G) Right to object on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6 par.1 of GDPR, including profiling based on those provisions (in accordance with Articles 21-22 of the General Data Protection Regulation).
H) Right to withdraw your consent at any time in case processing has as its legal basis your consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
(I) Right to lodge a complaint with a supervisory authority. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority (Personal Data Protection Authority) in case you consider that the processing of personal data relating to you infringes GDPR (in accordance with Article 77 of the General Data Protection Regulation). For more information you can visit the website
www.dpa.gr.,
Postal Address: 1-3 Kifissias Avenue, PC 115 23, Athens,
Call Center: +30 210 6475600, Fax: +30 210 6475628,
E-mail: contact@dpa.gr or complaints@dpa.gr
The exercise of the above rights is done exclusively in writing by submitting a relevant application to the postal or electronic contact address of our company.
Our company responds without delay and in any case within one (1) month from the receipt of your request.
Upon your information, this deadline may be extended by two (2) months, if required, taking into account the complexity of the request and the number of requests.
Refusal of HERACLES PACKAGING COMPANY SA or unjustified delay in satisfying your requests in the exercise of your rights, as well as any general violation of the relevant framework regarding the collection, storage, processing and protection of your personal data, gives you the right to appeal to the Personal Data Protection Authority, as the competent supervisory authority for the implementation of the GDPR.
Where requests from you are manifestly unfounded or excessive, in particular because of their repetitive character, HERACLES PACKAGING COMPANY SA may either:
(a) charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or
(b) refuse to act on the request.
XII. Contact info
The subjects of personal data, which are mentioned in this Policy, can contact our company for possible questions, comments, etc. regarding the Policy to exercise any of the above rights, to submit a relevant request or to request access to and / or rectification of their personal information.
HERACLES PACKAGING COMPANY SA
85 Vouliagmenis Avenue, 16674,
Glyfada, Attica, Greece.
Phone: +30 210 9690310
Email: sysk1@herpack.com.gr
Website: www.herpack.com.gr
XIII. Amendment and Update to this policy
HERACLES PACKAGING COMPANY SA reserves the right to modify and / or update this Policy at any time, whenever deemed necessary. In case of updating and / or substantial changes herein, it will be notified to the interested parties, in the way that our company deems appropriate and more effective, always with a view to ensuring thorough and clear prior information and / or obtaining consent where required, and the “update date” hereof will be modified accordingly.