DATA PROTECTION POLICY AND INFORMATION FOR INTERNET USERS

Preamble

The purpose of this Policy is to inform you in detail how and for what purpose we use your personal data in connection with your participation in the exhibitions organised by our company, which you intend to attend, as well as the relevant rights and options you have. Our company takes all necessary measures to guarantee the protection and security of your personal data.

This Policy is addressed to all natural persons, who enter and navigate the Company’s website. https://www.omind.gr and carry out or may carry out any contact with the Company, through the Company and its affiliated specialised websites

• https://www.supply-chain.gr/
• https://meatplace.gr/
• http://www.grillmagazine.gr/
• http://www.dairynews.gr/
• https://logistics-expo.gr
• https://sce.gr/
• https://ctvexpo.gr/
• https://mdfexpo.gr/
• https://logisticsconferences.gr/

In order to be transparent about how your personal data are collected, used and stored, the Company encourages visitors to its websites and any interested party to read this Privacy Policy in order to obtain the following information:

1. What personal data we process and how we use such data

Our Company informs you, as visitors/users of its websites, that through them, it may collect information about you, if and only if you provide it and personal data, which are necessary for the initiation, maintenance and execution of your business relations (such as, but not limited to, your participation in our exhibitions, your subscription to the Company’s magazines, etc.) and contacts with the Company, existing or future, depending on the trade fair and service provided and the Company’s applicable procedures and policies. More specifically, the Company collects and processes the following minimum personal data:

• Your name and email address, when you wish to contact our company for a specific question and for the purpose of answering it.
• Your e-mail address, when you enter it, in order to subscribe to our newsletter service and receive relevant updates and promotional activities / actions of our Company.
• Any personal data that you fill in and share with us voluntarily in the “Message” field.
• Your IP address, when and whenever you browse our websites and how you use them.
• The operating system of your mobile device, if you visit the websites via a mobile device, the redirecting website, message to us or about us on social media, sections relating to how you use our websites and the sections you visit.

The collection and processing of your personal data by our Company is necessary for the initiation, performance and maintenance of the business relationship between us and our communication with you to answer your questions. Any objection to the provision or processing of your personal data may lead to the impossibility of starting or maintaining/continuing your existing business relationship with the Company or our inability to contact you and respond to you.

• We will also collect personal data through the “Work With Us!” link, which is located on the Company’s website https://www.omind.gr and related to your CV or job application for the purposes set out in the following paragraph. This includes any information you provide to us directly through the above documents or as free text, accompanying email and any information derived from such collected data.

This usually includes the following categories of data:

Personal data such as name, address, date of birth, marital status, contact details, place of residence

Professional details such as a description of your responsibilities, contact details of previous employment, education, employment and career details, details of your qualifications, relevant experience and skills, letters of recommendation

Other documents such as activities, volunteering, interests

We collect these data directly from you. We may collect or cross-check your personal data from third parties at your request (letters of recommendation from previous employers/teachers) only with your consent. The retention period for the personal data you submit with your CV is twelve (12) months.

2. Purposes of processing

With regard to the legal basis for the processing of your personal data, the Company processes personal data lawfully, which are deemed necessary for specific purposes and in particular:

• In case you do not have a certain transactional relationship with our Company, it is necessary to provide us with your consent if you wish to subscribe to the Company’s newsletter service and receive updates on the Company’s activities and promotions. The specific form of your consent will be provided by you freely and clearly and under the main condition that you have actively chosen to receive corresponding e-mails – newsletters.
• We collect the personal data you provide to us on the basis of one or more of the following legal bases:
  1. When their processing is necessary to serve, support and monitor both your personal needs and your business relations with our Company and the proper performance of the contracts between you,
  2. As required for our Company to comply with its legal obligations under the law,
  3. As required to pursue the legitimate interests of our Company (or third parties), including our interests in providing innovative, personalised, secure and profitable services to our Company’s users and partners, in particular:
     1. Use of your mobile phone number to send newsletters mainly via Viber, where you will be given the option to unsubscribe.
     2. Use of your email to send you surveys and questionnaires related to the improvement of our services (such as, for example, through the company Survey Monkey); and
     3. Use of the data you have provided to us to send you invitations, updates, and promotional newsletters by email and post. If you do not wish to receive the above, please let us know at the contact details at the end of this document.
  4. When the processing of your personal data is necessary for the performance of a task of our Company, carried out in the public interest, within the framework of the applicable legal and regulatory framework,
  5. In accordance with the prior explicit consent you have given us, provided that the processing is not based on one of the legal bases for processing listed below.

3. Withdrawal of consent

You have the right to withdraw your consent, where required, at any time, by a simple declaration of withdrawal, which will be addressed to our Company in writing, physically or electronically, at our Company’s e-mail address, without affecting the lawfulness of the processing based on such consent until its withdrawal. You also have the right to be informed about the status of your request. In particular with regard to sending newsletters, in any case, you have the right to unsubscribe to any newsletter you receive from our Company.

4. Data retention period

Our Company retains your personal data for as long as required by the respective purpose of processing and for as long as provided by the respective applicable legal and regulatory framework, as well as for the entire duration of the business relationship between us, but in any case for a period of ten (10) years from the last calendar day of the year of termination of your respective business relationship with the Company, especially in the event of any form of claim and for as long as such claim is retained. After the above period of time, they will be erased in a secure and non-recoverable manner.

With regard to the information that is deemed necessary when you register for our services, such as your e-mail address, such information is retained for as long as your registration as a member of the website’s newsletter service or the business relationship between us continues.

In case of litigation, your personal data will be retained in any case until the end of the pending litigation even if the above period of ten (10) years is exceeded.

5. Who are the recipients of personal data

Our Company, respecting the privacy of visitors/users of its website, does not disclose/transmit their personal data to third parties. Access to your personal data is available to the employees of our Company’s business and operational units, in the context of the proper performance and fulfillment of their contractual, legal and regulatory obligations and under a regime of absolute confidentiality and secrecy.

Subsequently, our Company may transmit/disclose to third legal entities (domestic and foreign, but generally within the EU), to which it has partially or fully entrusted the processing of your personal data on its behalf (Processors), for specific purposes, such as, for example, the provision of bulk e-mail services, in the context of providing you with the best possible service.

Our Company lawfully ensures the processing of your personal data by our partners – third party companies by means of contractual clauses restricting the purpose of processing and providing adequate safeguards for the implementation of appropriate technical and organisational measures, in accordance with the relevant provisions of the GDPR, in order to ensure the correct and secure processing of your personal data.

6. International Transfers of Personal Data

Our Company does not directly transfer your personal data to third (non-EU) countries or international organisations, unless the transfer is required by the applicable regulatory or legislative framework or you have been informed and expressly consented in advance and explicitly to such transfer (in those cases where this is required).

7. Rights of the data subject

In any case, you are in control of the processing of your personal data. In particular, in accordance with the applicable provisions of the GDPR, as a data subject, you have the following rights:

1. Right to transparent information, communication and modalities for the exercise of your rights (Art. 12, 13, 14 GDPR), concerning your right to be informed about how your personal data are used (as detailed in this Policy).
2. Right of access to the personal data concerning you and if they are processed by our Company, as the Controller, the purposes of the processing, the categories of data and the recipients or categories of recipients (Art. 15 GDPR). Please note, our Company will provide you with a copy of your personal data upon your request, but for any additional copies we reserve the right to charge a reasonable fee.
3. Right to rectification of inaccurate data and to have incomplete personal data completed (Art. 16 GDPR).
4. Right to erasure of your personal data (“right to be forgotten”), without prejudice to the obligations and legal rights of our Company to retain your personal data under the applicable legislative and regulatory provisions (Art. 17 GDPR).
5. The right to restriction of processing of your personal data where the accuracy of the personal data is contested by the data subject, or the processing is unlawful, or the purpose of the processing has ceased to exist and provided that there is no legitimate reason for their retention (Art. 18 GDPR).
6. Right to portability of your personal data to another controller, provided that the processing is based on your consent and carried out by automated means. The satisfaction of this right is without prejudice to the legal rights and obligations of our Company to retain the data and for the performance of a task carried out in the public interest (Art. 20 GDPR).
7. Right to object on grounds relating to your particular situation in the event that your personal data are processed for the performance of a task carried out in the public interest or in the exercise of official authority vested in our Company or for the purposes of the legitimate interests pursued by the Company or a third party.
8. Right to withdraw your consent already given (Art. 7 GDPR), concerning the possibility to withdraw your consent at any time for processing based on consent. The lawfulness of the processing of your data is not affected by the withdrawal of consent up to the point in time when you requested the withdrawal.

8. Consent to these practices

By using the above mentioned websites of the Company you accept these practices. If you do not agree to the terms of these practices, please do not use the websites and do not provide any of your personal data.

9. How to exercise your rights and submit a complaint

Any request concerning your personal data and the exercise of your rights must be addressed to the Company by telephone.

Our Company reserves the right, after studying your request, to proceed within the period of thirty (30) days or more, in case of justified delay, to satisfy such request, provided that it is legitimate and justified. Before we provide you with personal data upon request, we may ask you for proof of your identity through a relevant legal document and sufficient information about your transactions with us in order to identify your personal data.

Our Company’s refusal or unjustified delay in meeting your requests in the exercise of your rights entitles you to appeal to the Data Protection Authority as the competent supervisory authority for the application of GDPR.

In any case, you reserve the right to lodge a complaint with the competent supervisory authority if you consider that your personal data are processed in breach of the applicable legislation. For more information please visit www.dpa.gr.

If you make the decision to unsubscribe from a particular service or communication, we will make every effort to erase your data as soon as possible, although it may take some time and/or information before we can process your request. Our Company reserves its rights to retain your personal data in cases where there is a legal obligation or in the exercise of claims or the fulfilment of its contractual obligations.

10. Technical and organisational measures

Our Company, with a view to the security and protection of your personal data, shall implement appropriate and necessary technical and organisational measures to safeguard both technological and physical security in accordance with Art. 32 GDPR (indicative: encryption and regular testing, restricted access, placing cameras in special areas, special codes for authorised persons to access its databases, etc.) and respects the principles of processing in accordance with the letter of the GDPR, namely the principles of lawfulness, objectivity and transparency, restriction of purpose, data minimisation, accuracy, retention period limitation, integrity and confidentiality (Art. 5 GDPR).

In order to safeguard your privacy, we apply the best practices for securing your personal data through the implementation of the necessary technical and organisational measures required by the GDPR. The data are safeguarded against the loss of availability, integrity and confidentiality of the information.

Finally, our Company applies on its website the SSL (Secure Sockets Layer) protocol with strong encryption, through which the confidentiality and inviolability of transactions and personal data of users is ensured.

Our Company informs you that it is in continuous harmonisation and compliance with the terms of the General Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and is constantly making every effort to comply with it.

11. Specific declarations of our Company

• Our Company declares that, based on its current data protection policy and in the context of the applicable legal and regulatory framework, it may revise or amend this Policy, which will always be available on our website. The Policy, as it applies by the most recent amendment, shall always be deemed to apply.
• We would like to inform you that our Company uses “cookies” on its website in order to improve your online experience. For details about cookies, you can find out more about our Cookies Policy, which you can find here.
• The user/visitor of the website, by reading this, takes note of the above processing which is in accordance with Regulation 2016/679 and its recitals, exclusively for the purposes mentioned above and for purposes compatible with them.

12. Useful contact details

For any questions regarding this privacy policy, as well as for further information and advice on your rights, you can contact the Legal Department at the following address info@omind.gr or at the telephone number +30 210 9010040.