The Company with the name “SIGMA INFORMATION TECHNOLOGIES LIMITED LIABILITY COMPANY” with distinctive title “SIGMA SOFT” located at 173-175 Ethnikis Antistaseos Street, P.K. 55134, Kalamaria, Thessaloniki ensures the privacy and confidentiality of your personal data and adopts the General Data Protection Regulation 2016/679 of the European Union in all procedures and stages of communication with you.

Purpose of this policy

This policy provides every person and every visitor/user of the Company’s website who is interested in receiving from the Company concise and transparent information regarding the practices followed for the management and protection of personal data.
It concerns any act or series of acts carried out with or without the use of automated means, on personal data or sets of personal data, such as the collection, registration, organization, structure, storage, adaptation or change, retrieval, information retrieval, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction.

The Policy is updated from time to time and can be modified whenever deemed necessary, without prior notice, always within the applicable legal framework and in accordance with any changes in the current legislation on personal data protection. We therefore recommend that you check this Policy at regular intervals in order to be informed of any changes that have been made.

What is personal data?

Personal data is any information concerning a specific natural person or a person whose identity can be ascertained (eg name, ID number, address, etc.). Data related to health (physical or mental condition, receipt of medical services, etc.) are included in the general term personal data but are a special category of data.

How is your personal data collected?

Your personal data is collected in the following ways:

(a) when you apply for a job with the Company or your CV is sent. The provision of your personal data in the context of submitting a CV to find a job in our Company is of course voluntary as otherwise it would not be possible to evaluate your employment potential.
The processing is necessary to take measures at the request of the data subject before entering into a contract, in accordance with Article 6.1b of the Regulation.
For more information, ask us for our Resume Processing Policy.
(b) you provide them to us in the context of the transactions between us, for the execution of our contractual obligations but also in the context of the company’s compliance with its legal obligations. The processing of the personal data we receive is carried out in accordance with articles 6.1b and 6.1c of the Regulation.
(c) automatically through the browser or mobile device you use to access our websites https://www.sigmasoft.gr/.
More details about the technologies used on our website are listed in the Cookies Policy. (d) you provide them to us when you fill in forms and forms in the context of software application support in our Company. The data is processed in accordance with article 6.1f of the Regulation.
(e) you provide them to us to fulfill the following purposes:

• Tax purposes (e.g. conclusion of contracts – cooperation agreements, invoicing)
• Financial information (costing of services, account balances)
• Design and Development of software applications.
• Support software applications.
• Staff training by our Company for the use of the provided software applications.
The legal basis for the processing of the data you provide us for the above purposes is to comply with a legal obligation as Processors in accordance with the GDPR, Article 6, par. 1, item (c’), as well as the execution of the contract between us, in accordance with GDPR, Article 6, par. 1, item (b’).
(f) you provide them to us when you complete electronic forms, e.g. “newsletter” or send an electronic mail “e-mail”, in order to be informed about the services available on our Company’s website https://www.sigmasoft.gr/. The submission of your basic data is done by your choice and their processing with your consent for the sole purpose of informing you about the services and products provided by our Company in accordance with article 6.1a of the Regulation.

What kind of personal data is collected and for what purpose?

The personal data collected and further processed include:

– identification data such as your identity information, demographic information, address and generally your contact information (including email address and telephone number, financial, tax and accounting information, etc. The purpose of the collection is to perform the our contract in accordance with article 6.1b of the Regulation as well as the provision of the services required by our company.

-identifying data such as your CV data, knowledge, professional training and professional experience. The receipt, in accordance with article 6.1b of the Regulation, processing and storage of the above data is done for the satisfaction of the exclusive purpose of the selection and evaluation of prospective employees by the Company for the possibility of obtaining a certain job position. Your data is kept only for this purpose and is processed by the relevant staff, Accounting Department, Administration, etc.

-identification, financial, tax and contact data, such as VAT number, DOU, contact details, address, etc. The receipt, processing and storage of your data belonging to the above categories, in accordance with article 6.1c of the Regulation, is necessary for the Company’s compliance with its legal obligations.
The Company will not process your personal data without your consent. However, the Company reserves the right, in exceptional cases, to process your personal information to the extent permitted or required by law, and/or by court decisions or prosecutorial orders/orders.

Is the data passed on to third parties?
We may disclose your personal information (in whole or in part, as required from time to time) to, but not limited to:

a) all authorized persons of our Company, e.g. legal advisors, external accountants, etc.,
b) specific persons of our Company, necessary for the process of selecting prospective employees and the execution of the contract between us, e.g. Financial & Administrative Management Division, Customer Support Division, Commercial Division, etc.
c) external partners (certification bodies, etc.), necessary for the execution of the contract between us,
d) judicial or other supervisory or auditing authorities, within the framework of their jurisdiction,
e) third parties who have a legal interest, for the establishment, exercise or support of legal claims
In cases where your consent is required for the disclosure of your data to third parties (where they are not mentioned by law), this will be expressly requested from you and you have the right to withdraw it at any time. In these cases, the Company assures you that it is constantly vigilant and takes all the necessary security measures, so that the transfers of personal data are carried out in the safest possible way.

The Company undertakes not to market your personal data by making them available for sale/rent, giving/transferring/publicizing or communicating them to third parties or to use them in any other way and for other purposes that may endanger privacy, rights or your freedoms, unless required by law, court decision/order, administrative act or if it is a contractual obligation necessary for the proper functioning of the Company’s website and the realization of its functions.

Personal data may be transmitted to partners, or to third parties, complying with the terms of this Policy and committed to maintaining confidentiality, who act on behalf of the Company for further processing for the purpose of providing services, data management and technical support, only , after the user has been informed in advance and his consent has been obtained.

The said third parties have contractually committed to the Company, that they will use the personal data only for the above reasons, and will not transmit the personal information to third parties, and will not share it with third parties unless required by law.

How long is my personal data kept?
The retention period can vary significantly depending on the type of data and how it is used. Determining how long to retain data is based on criteria such as legal retention periods, pending or potential litigation, intellectual property or proprietary rights, contractual requirements, business instructions or archival needs.
The company undertakes to keep your CVs for three (3) months after the job has been filled.
Tax information is maintained in accordance with tax legislation.
For the fulfillment of the purpose of processing related to the execution of the contract and to inform you about our services, a reasonable time for keeping your data is considered the time of the relevant commercial operation of the company.

What are my rights regarding the processing of my personal data?
You have the right at any time to request: a) access to your personal data, b) correction of your personal data if it is inaccurate or incomplete, c) deletion of your personal data, unless its processing is necessary for the exercise of legal rights of the Company or third parties, to fulfill a legal obligation, for reasons of public interest or to defend our legal rights before judicial or other authorities, d) limiting the processing of your personal data only for specific purposes e) transferring the personal your
data in accordance with the existing legal conditions f) objection to the processing of your personal data.

In order to exercise any of the above rights, please send it either by letter to the Company’s headquarters (Ethnikis Antistaseos 173-175, P.O. 55134, Kalamaria, Thessaloniki, tel. 2310482300), or by Electronic Letter (to the Electronic Mail: privacy@sigmasoft.gr) always stating your full details and the reason for your communication.
In the case of exercising one of your above rights, the Company will take every possible measure to satisfy the request within one (1) month of receiving it, informing you in writing of the satisfaction of your request or of the reasons that prevent satisfaction of one or more of them, as well as for the reasons of any delay beyond the above-mentioned period of one (1) month and in any case no later than three (3) months. Also, the Company will inform you of your further rights in case of inappropriate response. In principle, this information is provided free of charge by the Company, subject to the condition that the request for notification and information is not repeated, excessive and/or manifestly unjustified.

If you believe that the Company in any way violates the existing legislation on personal data, you reserve the right to submit a complaint/complaint to the competent Supervisory Authority for the Protection of Personal Data: http://www.dpa.gr, Kifissias 1-3, P.O. . 115 23, Athens, tel. 210 6475600, email: contact@dpa.gr
In this case, we would greatly appreciate your prior communication with the Company’s Personal Data Protection Officer, either by letter to its headquarters (Ethnikis Antistaseos 173-175, P.K. 55134, Thessaloniki, tel. 2310482300), or by e-mail (email : privacy@sigmasoft.gr), always stating your full details and the reason for your contact.