Information on the Processing of Personal Data

Introduction

This Privacy Policy outlines the conditions for collecting and processing the personal data of visitors/users of the website www.aktor.gr. Please read this Privacy Policy carefully to understand all the information concerning the collection and processing of personal data gathered through our website, as well as how we intend to use it.

The data controller is the company “AKTOR ANONYMI ETAIREIA SYMMETOCHON, TECHNIKON KAI ENERGEIAKON ERGON”, trading as “AKTOR GROUP OF COMPANIES” (hereinafter “AKTOR” or the “Company”), located in Paiania, Attica (19th km Markopoulou Ave.).

Protection of Users’ Personal Data

At AKTOR, we recognize the importance of safeguarding the personal data collected through our website. We process this information strictly adhering to all requirements set forth by Greek and European laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.

How and What Personal Data We Collect

When you contact us via the contact form on our website: You voluntarily provide AKTOR with your name, surname, email address, and any other information you provide when expressing interest in transacting with the Company or applying for employment by sending your CV. We will maintain your resume in our database for two years.

By automated data collection means, when you visit our website: Besides voluntarily provided information, certain information is automatically collected through tracking technologies such as cookies when you visit our website. Cookies collect information from your computer each time you visit our website, including technical details such as your IP (Internet Protocol) address, operating system, browser type and version, referral website, and information about your activities on our site. For detailed information about cookies and the data collected while browsing our website, please refer to our Cookie Policy.

Minors

It is the Company’s intention not to collect personal data from minors who may access its website. However, since ensuring or verifying this is not feasible, any minors providing personal data through the website must obtain consent from those exercising parental responsibility. If we discover we have collected personal information from minors under the age of 16 without verifiable parental consent in accordance with Article 8 of the EU GDPR 679/2016, we will delete the information from our database as soon as possible.

How and Why We Use Your Personal Data

Your personal data is used only to the extent necessary for pursuing our legitimate interests:

– To communicate with you and manage our relationship, for example, responding to your questions or comments via the website’s contact form, aiming to improve our relationship and service quality.
– To ensure the proper functioning of our website.
– To investigate fraud or violations and establish, defend, or exercise legal claims.

We may also use your personal data to comply with legal obligations, such as publishing acts and data related to the company, including shareholders’ personal identification information.

If you request or consent, we will use your personal data:

– To provide you with information regarding our field of activities and developments (including sending newsletters and organizing events), and/or
– To assess your application for career opportunities within our Company.

Who We May Share Your Personal Data With

Your personal data recipients are exclusively authorized employees of AKTOR or its subsidiaries, who process it only to the extent necessary to achieve the above-described purposes.

We may share aggregated or non-personally identifiable information with third parties to improve our website’s content and services.

We may currently or in the future use third-party services related to our website, such as database management, maintenance, analytics, marketing, data processing, and email/text messaging distribution. These third parties will only access the strictly necessary identifiable information to perform their duties on our behalf and under explicit contractual obligations regarding the confidentiality and protection of your personal data.

Under certain conditions, AKTOR may need to share information about you in response to subpoenas, search warrants, court processes, court orders, legal proceedings, or law enforcement actions by competent authorities, and to safeguard and defend our legal rights or counter claims against us.

AKTOR does not transfer your personal data to third countries outside the European Economic Area. Should the Company need to transfer personal data outside the EU as part of its legitimate activities, it complies fully with the applicable provisions of Chapter V of the GDPR.

Your Rights

Under current legislation and subject to its limitations, you have the following rights concerning your personal data:

– Right of information and access: The right to be informed about the processing of your personal data and to access your data.
– Right to rectification: The right to request correction of inaccurate or incomplete data held by the Company.
– Right to erasure: The right to request the deletion of your data if allowed by current legislation.
– Right to restrict processing: The right to request the restriction of processing your data if allowed by current legislation.
– Right to data portability: The right to receive your data in a specific format and request its transfer to another controller, if permitted by applicable law.
– Right to object: The right to object to processing your data within legal limits. In any case, you may object to using your data for direct marketing purposes, including profiling.

If consent has been given, you have the right to withdraw it without affecting the legality of the processing prior to withdrawal.

You can exercise these rights by sending an email to dpo@aktor.gr. We may ask for additional information to verify your identity before complying with your request.

If you are not satisfied after exercising your rights, you can lodge a complaint with the Hellenic Data Protection Authority via their website: https://dpa.gr/index.php/en/polites/katagelia_stin_arxi. Contact details for the Authority: 1-3 Kifissias Ave., 115 23 Athens, Greece, tel: +30 210 6475600, email: contact@dpa.gr.

Data Retention

The Company stores your personal data only as long as necessary for the purpose of its collection as described in this Privacy Policy, based on its nature, any contractual relationship, and legal obligations. Data is deleted (or anonymized) when the processing purpose no longer exists, according to current legislation.

Data Security

AKTOR commits to making reasonable efforts to ensure your information is secure. We implement reasonable technical and organizational measures to protect your data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, please remember the internet is an open system, and we cannot guarantee that unauthorized third parties will never overcome these measures or misuse your personal data.

Changes to this Policy

AKTOR reserves the right to amend this Policy in compliance with applicable privacy and data protection laws. Visitors to our website should periodically review this Privacy Policy and Cookie Policy for updates.

This version is dated 15 April 2025.