DEKRA privacy policy

PERSONAL DATA PROTECTION STATEMENT BY THE COMPANY DEKRA

This Personal Data Protection Statement of company Dekra Arbeit Greece MON. IKE, Laertou 16, Pilaia, 55535, Thessaloniki (Data Controller), was prepared in accordance with the General Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 which has been in application since 25 May 2018.

The companyDekra Arbeit Greece MON. IKE, Laertou 16, Pilaia, 55535, Thessaloniki, will handle your personal data in accordance with the General Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and free movement of such data, the Act on Implementing the General Data Protection Regulation (OG 42/2018) and other national laws based on the Regulation in question, with the application of appropriate technical and security measures for the protection of personal data against unauthorized access, abuse, disclosure, loss or destruction.

1. General Data

This Statement describes which data we collect, how we process it and for what purposes we use it, as well as your rights relating to your data.

The company Dekra Arbeit Greece MON. IKE, Laertou 16, Pilaia, 55535, Thessaloniki is responsible for data processing.

Contact email address: [email protected]

Contact telephone: +30 6984237674

Contact details of the data protection officer: [email protected] 

If we use the services of external providers to process your personal data, it is the processing (of personal data) by order and in that case, we are also responsible for the protection of your personal data.

2. The Types of Personal Data We Process

The company Dekra Arbeit Greece MON. IKE, Laertou 16, Pilaia, 55535, Thessaloniki processes the personal data which you have entrusted to us by accessing our official website or accessing our official profiles on social networks, by requesting a contact or requesting information about the activities of the Controller, by expressing a remark or a compliment, by requesting to receive job advertisements, by submitting job applications, by requesting to receive newsletters and by establishing a business relationship with us.

The personal data collected by filling out the contact form on our official website, by sending e-mails to the Controller’s e-mail addresses or by calling the Controller to the phone number listed on our official website, by posting on our official social media profiles, and based on your request for contact, request for information about the activities of the Controller, expressing a remark or a compliment, request to receive job advertisements, submission of job applications, request to receive newsletters and establishing a business relationship with us are: your name, your e-mail address, your telephone number, your CV, etc., as well as all the personal data that you have provided to us at your own initiative.

The personal data collected for the purpose of participating in the competition for granting scholarships to students for the best business ideas are: name and surname, mobile phone number, e-mail address, certificate of active student status and photograph.

The personal data collected for the purpose of contacting representatives / owners of business associates and / or clients which are legal entities, and for the purpose of efficiently implementing business contracts are: landline number of the person authorized for representation / owner, mobile phone number of the person authorized for representation / owner, e-mail address of the person authorized for representation / owner, name and surname of the employee, position of the employee, work place of the employee, and working hours of the employee.

By entering the scope of the Controller’s video surveillance system, it is possible that personal video data will be collected. The video is collected for the purpose of protecting persons and property.

Prior to entering the premises of the Controller, the name and surname and PIN of the visitor are collected for the purpose of protection of persons and property.

As part of the business relationship, you are obliged to make available the personal data necessary for the establishment and implementation of the business relationship and the fulfilment of related contractual obligations, or the personal data for which collection is an obligation. Without that data, as a rule, we are forced to decline to conclude a contract, execute an order or suspend execution and terminate an existing contract. You are not obliged to give your consent to the processing of data which are not relevant or prescribed by the law for the implementation of a contract.

3. Legal Basis and Purposes of Personal Data Processing

All types of your personal data are processed by the Controller for the following purposes and based on:

  1. Fulfillment of legal obligations – We process your personal data in accordance with the applicable regulations as well as for the purpose of informing and reporting which we are obliged to make in accordance with the applicable regulations, all for the purpose of fulfilling legal obligations;
  2. Contract implementation –We process personal data for the purpose of implementing the contract and fulfilling the contractual obligations which are the subject of the contract (e.g. the Civil Obligations Act), and based on the fact that the processing is necessary to fulfill the contractual obligations;
  3. For the purpose of contacting for the efficiency of implementation of business contracts, requests for information, subscription to the newsletter, etc., based on the consent you have given us or based on the legitimate interest of the Controller;
  4. For the purpose of protecting persons and property – Video surveillance of the premises and records of visitors to the premises of the Controller, based on the legitimate interest of the Controller;
  5. For the purpose of participating in competitions and sweepstakes – The Controller processes the personal data of participants in competitions and sweepstakes based on legal obligations and based on the consent you have given us by applying for them;
  6. For the purpose of promotion – The Controller publishes the photographs of the winners of competitions and sweepstakes, based on the consent you have given us.

All your personal data is processed based on the law, contract, legitimate interest or consent.

4. Retention Period

We generally erase your personal data after the termination of the contractual relationship, and at the latest after the expiration of all legal obligations relating to the storage of personal data and until the withdrawal of consent, i.e. until the moment we request renewal of consent, and you no longer wish to give it.

5. Consent Management for Personal Data Processing

You can change your consent (full or partial revocation) by contacting us by e-mail to [email protected] or by post to Laertou 16, Pilaia, 55535, Thessaloniki.

If you revoke the given consents, your data will no longer be used for the stated purposes, however, this may result in the inability to use some additional benefits related to them.

The withdrawal of consent has no effect on the lawfulness of processing which was based on the consent before it was withdrawn.

If you wish to give your consent again, you can do so in the same way as revoking it.

If you do not provide us with your personal data which do not require consent and which are necessary to conclude a contract with us, implement a concluded contract or due to our obligations under the law, we will not be able to fulfil our contractual obligations towards you nor conclude a contract with you.

6. Rights of the data subject

  1. Right to access and information on the processing of personal data:You have the right to ask us to confirm whether the personal data relating to you are processed or not and the purpose of processing if such personal data are processed, the groups of your personal data we retain, third parties or groups of third parties with whom your personal data is shared, the time period during which we retain the data as well as the source of your personal data which we have not collected directly from you.
  2. Right to rectification: If we process your personal data which is incomplete or inaccurate, you may at any time request from us to rectify or supplement it.
  3. Right to erasure: You may request from us to erase your personal data.
  4. Right to restriction of processing – You may request a restriction of processing of your data:
    1. If you dispute the accuracy of the data during a period that allows us to verify the accuracy of that data,
    2. if the data processing was unlawful but you reject erasure and instead request a restriction on the use of the data, and
    3. if we no longer need the data for the intended purposes, but you still need it to meet legal requirements or if a complaint has been lodged for the processing of such data.
  5. Right to object to the processing of personal data
  6. Right to data portability – You may request from us to provide you with the data you have entrusted to us in a structured form, in a commonly used machine-readable format:
    1. If we process those data based on the consent you have given us and which you may revoke and
    2. if the processing is performed using automated processes.
  7. Right to lodge a complaint with the supervisory authority: If you are of the opinion that we have violated Croatian or European data protection regulations during the processing of your data, please contact us to clarify any issues. You certainly have the right to lodge a complaint with the Croatian Personal Data Protection Agency.

Confirmation of identity: In the case of doubt, we may request additional information to verify your identity in order to protect your rights.

Abuse of rights: If you were to exercise any of these rights too frequently and with obvious intent to abuse, we may charge an administrative fee or refuse to process your request.

7. Transfer of Data to Third Persons

We undertake to safeguard your personal data and will not disclose or make it available to third persons except in the following cases:

  • If you expressly agree in writing to disclose certain confidential data for a specific purpose or to a specific person,
  • if the data is needed by the Ministry of the Interior or the competent state attorney's office for the purpose of performing tasks within their competence,
  • if the data is needed by the court, lawyers or a notary public for the proceedings they are conducting, and the presentation of this data is required in writing,
  • if this data is needed by the Croatian Tax Administration, the Pension Insurance Institute and Health Insurance Fund, all based on legal obligations that the Controller has towards them,
  • if this data is needed by the Ministry of Finance or the tax authority in the procedure they conduct within their competences and
  • if we have to provide the data to third persons based in a contractual relationship.

8. The Use of Digital Services (Website, Applications)

We collect only those personal data that the visitors to our official website voluntarily make available to us when submitting requests for contact and business information, requests to establish a business relationship, job advertisements, callback services and other electronic forms. This personal data is used confidentially and only for the purpose specified on each form. We transfer personal data to third parties if there is a legal obligation or an order of an official authority, when this personal data can be transferred to the competent authority and only the data that is necessary for this purpose. Access to the website is protocoled and technical data such as page traffic, operating system used, screen resolution, time of visit and size of transferred data are recorded.

In order to improve our offer, our website contains cookies which are stored on the computer of the visitors to our official website. The storage of cookies can be prevented, but a limited offer of our official website is possible in relation to this. Cookies provide the ability to store the characteristic preferences of website visitors, to optimize technical processes and to continuously improve our offer.

9. Technical and Organizational Measures

We have taken all technical and organizational measures to protect your data from loss, alteration or access by a third party. If you have any questions, do not hesitate to contact us, and we will respond to your requests and concerns and help you exercise your rights as soon as possible.

Any changes regarding our personal data protection policy will be published in the Personal Data Protection Statement and on our official website, and you will be notified about them in a proper way.