General
ADR point’s personal data processing protection policy is compliant to the General Data Protection Regulation (GDPR) (EU) 2016/679 of the European Union and the Greek Law 4624/2019 (Personal Data Protection Authority, implementing measures of Regulation (EU) 2016/679 on the protection of individuals against the processing of personal data, transposition into national law of Directive (EU) 2016/680 and other provisions). It applies to any natural person who wishes to receive any of the services provided by ADR point and listed on its website. ADR point publishes this policy informing the users on the terms, the rights and the way to exercise them, regarding the processing of personal data.
ADR point
ADR point is a private capital company (PC) in the field of Alternative Dispute Resolution, an ADR entity approved by the Greek Ministry of Development & Investment, an official ADR entity notified to the European Commission for consumer disputes and registered to the EU ODR platform. ADR point has its headquarters in Thessaloniki, Greece, 7 Tsimiski Street, 546 25, VAT number 800713456, (contact details: website: www.adrpoint.gr, email address: info@adrpoint.gr, T: 2310 510005.)
Controller
ADR point processes as a Controller the personal data of the natural persons to whom it provides its services or who use its website or other online applications, providing their personal data, in accordance with the provisions of ADR point’s articles of association, its rules of procedure and the legal framework governing its incorporation and operation.
Confidentiality
ADR point, respecting its role as an official ADR entity and the principles of privacy and protection of personal data, is committed to maintaining the privacy and confidentiality of the information that comes to its knowledge (according to the European Regulation 2016 / 679 and Greek Law 4624/2019). For this purpose, it implements internal procedures, adopts policies and takes the necessary technical means and the necessary organizational measures, which ensure the legal and fair processing as well as the security and confidentiality of personal data disclosed to it in the course of its operations.
Privacy
“Personal data” is any information that concerns a natural person which constitutes the "data subject", such as name, postal & email address, mobile & landline number, identity number, tax or social security identifier, which alone or in combination can determine the identity of the natural person.
Processing of personal data
“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
What personal data do we collect and from what sources
At ADR point we collect and keep in a physical and / or electronic file, the personal data of natural persons which have been disclosed to us both by sending documents and messages in physical and / or electronic form and / or the personal data sent to us through any form included in the ADR point website, including, but not limited to: name, father’s name, ID number, TIN, postal & e-mail address, contact numbers, references to debts and their description, references with concise or extensive content regarding disputes of natural persons with third parties, references requested in the forms of the website etc.
Email Address - Media
The natural person recognizes that ADR point is entitled to send data of the natural person and to use as a communication channel one or more e-mail addresses and / or any other form contact information for communication purposes (SMS, MMS, VIBER, WHATSUP, MESSENGER, INSTAGRAM etc) that the natural person has stated in the printed /electronic forms sent to ADR point.
For what purpose do we process data
a) ADR point processes the above data both for the provision of the service requested by natural persons as well as for reasons of identification of the natural persons for the needs of communication. This means that the above processing is done to satisfy the legal interest that is individually pursued by the natural person who has previously agreed effectively, providing their data to ADR point on their own initiative, either by sending signed documents in physical form, or by sending data via e-mail, or through the ADR point website by filling in any form they have submitted after first becoming aware of the framework of personal data protection and their rights. Natural persons have the right to revoke the above consent, without prejudice to the legality of the processing of the data based on it. However in this case, ADR point will not be able to continue providing its services to fulfill the purpose for which the natural person provided their personal data.
b) ADR point processes some of the data of natural persons for statistical purposes, always making sure that there is no correlation with the natural person from whom they were drawn.
Who are the recipients of the data?
ADR point’s staff acquires knowledge of the personal data of natural persons, within the framework of its responsibilities. Third party technology service providers to ADR point may also acquire knowledge, in the context of the execution of a support service contract, which meet strict standards of data processing and security. The above persons and providers are committed to comply with the security and confidentiality of the data, to comply with the legal framework for their processing and protection while they are subject to controls for the effective observance of the above commitments. ADR point may transmit data of natural persons to competent Judicial, Prosecutorial and other Public and / or Independent Authorities, if this results from or is imposed by judgments, legal obligations or rights.
Data retention time
At ADR point we process the personal data of individuals for as long as required for the purpose for which they were provided to us. Due to the long duration of some procedures and in order to have a uniform treatment regarding the data retention time, at the ADR point the data of the natural persons are kept for a period of five years from the completion of the service for which the natural persons requested. The above period may be extended, a) if requested by any judicial or other Public Authority b) if there are legal reasons for maintaining the above data and c) for statistical reasons, but without any correlation with the natural person, as the data are subject to pseudonymization.
Exercise of legal rights of natural persons
Every natural person has the opportunity to contact ADR point at any time in order to exercise their legal rights a) physically, at 7, Tsimiski Street ( 1st floor), PC 546 25, Thessaloniki, b) by phone at + 30 2310 510005, c) by fax at +30 2310 512612 and electronically at dpo@adrpoint.gr or through the contact form on the institution's website. ADR point, for the protection of natural persons, may request from the natural persons who wish to exercise their legal rights, the information that ADRpoint deems necessary for their identification.
Rights of the natural person
- RIGHT TO BE INFORMED AND ACCESS personal data kept by ADR point
- RIGHT TO RECTIFY any inaccurate data and to fill in missing data
- RIGHT TO ERASE DATA ("right to be forgotten") if there is no reasonable or legal reason, or obligation for ADR point to maintain them
- RIGHT TO RESTRICT DATA PROCESSING in cases where their accuracy or legality of processing is questioned or when data is no longer necessary for the purpose for which they were provided
- RIGHT TO DATA PORTABILITY, ie to transfer them to another controller provided that the processing is performed by automated means and therefore does not include printed files and the exercise of the above right does not adversely affect the rights and freedoms of others
- RIGHT TO OBJECT the processing of personal data, provided that there are no compelling and legitimate reasons which take precedence over the interests, rights and freedoms of the natural person, such as the establishment, exercise or support of legal claims or reasons related to public interest.
Competent authority
If the natural person considers that their rights regarding the protection of personal data are violated in any way, they have the right to file a complaint to the Personal Data Protection Authority (1-3 Kifissias Avenue, PC Athens 115 23, Tel: +30 210 6475600, email address contact@dpa.gr ).
Contact
Any natural person who has provided ADR point with personal data and wishes to receive more information and clarifications regarding their processing, to submit to the entity any comment or complaint, or to exercise any of their rights can use the email address dpo@adrpoint.gr. The personal data protection policy that is posted on the website of the organization www.adrpoint.gr is always updated with the provisions in force at any given time and the possible changes in the internal procedures of ADR point.