PRIVACY AND PERSONAL DATA PROTECTION STATEMENT

For the company THOMAIDIS ACHILLES, the protection of the Personal Data of our customers and partners and the respect of the private life of the individual is a self-evident commitment and the company takes all the necessary measures to collect and process personal data in accordance with the General Regulation on the Protection of Data (EU) 679/2016 and other applicable legislation. We take all the necessary organizational and technical measures required to ensure the security, availability and validity of our customers’ and partners’ data.

It is very important to us that this strong commitment is clear to all our customers and partners. For this reason, we have created this “Privacy and Personal Data Protection Statement” which describes and explains what kind of personal data of our customers and partners we collect, how we manage it and what it can be used for. Please take some time to read and understand this update.

Personal data and method of collection

Your personal data, if any, is collected directly from you or directly from representatives of our company or by other remote means of communication and mainly through the athensrentacar.gr platform that operates at the athensrentacar.gr website (other remote means of collection may is, as the case may be, e-mail, electronic forms, phone/fax, etc.). In some cases, it is possible that you have provided your data in the past, in the context of a previous cooperation or relationship with FlexCar. Finally, in specific cases of cooperation, it is possible, after your explicit information, to collect your data from other agencies or registries, in the context of a possible check of your creditworthiness for the purposes of checking the solvency, financing or insurance of claims of our company.

In the course of the commercial activity of our company we may collect the following personal data of our customers, partners or prospective customers and partners:

• Personal data (such as first name, last name, address, VAT number, identity card number, sample signature)
• Contact details (phone, contact email, mailing address).
• As part of your rental relationship, we also collect data that is necessary for the legal and orderly execution of the contract, such as your driver’s license, details of the vehicle you have rented, details regarding its maintenance, as well as the person(s) who are authorized for its use.
• Finally, in the context of your relationship with the company THOMAIDIS ACHILLES you may be required to provide information that demonstrates your creditworthiness, such as tax information that proves your income.

Legal basis and purpose of use of personal data

The company THOMAIDIS ACHILLEAS only collects personal data that is absolutely necessary to satisfy the requests of our customers and partners, for the execution of our cooperation with them and the smooth conclusion and operation of contractual relations with them, the rental and sale of vehicles and in general commercial activity and its operation. Also, part of this data is collected and used, in order for our company to meet its legal obligations towards public authorities (tax, insurance, health legislation, etc.). Also, data collection and processing takes place for critical functions of our business, such as the control of its credit policy, the solvency of its customers and the insurance of its claims. In the event that additional, optional information is sought on our behalf, you will be informed about this at the time of data collection. Finally, your contact data (such as your e-mail address, telephone or postal address) may be used by our company in order to inform you about new vehicles, offers, discounts and other promotional activities. In any such communication from us, you will be given the immediate and inexpensive option to choose not to receive such updates and communications from the company THOMAIDIS ACHILLES in any way in the future.

In the context of these purposes, the company THOMAIDIS ACHILLES processes personal data of its customers and partners based on the following legal bases, in the case of more specific processing operations:

• Contract performance: processing necessary to fulfill and comply with our contractual obligations.
• Fulfillment of our company’s legal obligations, such as recording in our accounting books, fulfillment of tax and other legal obligations (e.g. issuance and registration of legal documents, etc.).
• Managing our customers and suppliers and ensuring the smooth running of our company and the proper servicing and processing of customer and supplier requests.
• To safeguard our legitimate interests, to the extent that processing does not violate overriding legitimate interests of the subjects, such as for example keeping data for the defense of our company against legal claims, asserting claims, as well as documentation in case of administrative and similar nature checks or audits creditworthiness of our counterparties and processing for credit insurance purposes.
• Your consent: in case our company communicates to you updates about new products, offers, discounts and other promotional activities. In such a case, you will always have the possibility to immediately, easily and inexpensively withdraw your consent, as a result of which any sending of such material will immediately stop.

Disclosures of personal data – categories of recipients

The company THOMAIDIS ACHILLES does not disclose your personal data to third parties that are not affiliated parties, unless this is required for the purposes of legitimately fulfilling our professional and business needs, in order to meet our contractual obligations to our customers and partners or is required or permitted by law or there is express consent of the data subject.

The data of our customers and partners are processed in the context of what is defined herein, by departments and employees of our company responsible for the conclusion, execution and management of our contractual commercial relationships, as well as by any of our partners for the same reasons. Likewise, they will be processed by the other departments of our company in the context of our legal operation, to fulfill our obligations by law (e.g. accounting, legal service).

Also, your data, to the extent that this is appropriate for the fulfillment of our contractual or other obligations and to better serve you, satisfy your requests and smoothly cooperate with us, may be transmitted to Banking Institutions or other payment service providers or to providers cooperating with the Company, such as insurance companies, cooperating debtor information companies, companies providing consulting and auditing services, any cooperating record keeping and management companies, cooperating IT companies, cooperating companies providing printing, organization and delivery of forms, cooperating advertising companies and promotion, workshops and vehicle technicians, etc.. The company, in any case where such data transfer becomes necessary, takes care to transfer to third parties, if and only if they meet high levels of data security and confidentiality and provide sufficient guarantees and commitments for their protection, which they undertake, among other things, by virtue of written contracts.

Your data may be processed for the purposes of examining your solvency, creditworthiness and for the purposes of credit insurance of our company by notification to relevant bodies and registries, as well as to cooperating claim insurance companies.

Finally, the company may disclose data to public authorities of all kinds (public services, tax authorities, insurance organizations, etc.) or to judicial or independent authorities, prosecutorial authorities or investigative bodies, if this is foreseen or required by law or absolutely deemed necessary necessary to defend our legal rights.

Data Retention Time

The personal data are kept for the period that is absolutely necessary for the execution and completion of the processing purposes mentioned above. The exact retention time of each category of data is linked to: (a) the time necessary, in reasonable commercial and operational contexts to fulfill our contractual and commercial obligations (b) to any applicable statutory provisions on data retention from time to time, such as applies to the maintenance of the accounting and tax records of our company or the data addressed to insurance organizations (c) with the duration of our commercial or contractual relationship with our customers or partners (d) with the possible necessity of maintaining data for the defense of legal interests us, proof of compliance, defense against claims and the judicial pursuit of our claims (e) if the processing is based on the consent of the subject the retention time is determined by the retention time of this consent.

Privacy and data security

The company THOMAIDIS ACHILLES maintains appropriate technical and organizational measures to ensure the confidentiality and integrity of Personal Data and to protect them from accidental or illegal destruction, loss, alteration, unauthorized access or disclosure, as well as any other illegal form of processing. The processing of data by the company THOMAIDIS ACHILLES is carried out only in a way that ensures the privacy and security of the data, based on the latest developments, the cost, the nature, the context and the purposes of the processing, with an assessment of the risks and the possibility their impact and the effects thereof on the data subjects. In this context, we ensure that the processing is carried out exclusively by staff authorized for this purpose, who are bound by confidentiality obligations and provide the necessary protection guarantees. The same happens with all our possible partners, who may be involved in the process (see above under “Disclosures of personal data – categories of recipients).

The rights of the subject

In accordance with existing legislation and with the limitations provided therein, you have the following rights in relation to your personal data:

• Right to information and access: You have the right to be informed about the processing of your personal data and for this reason you are informed of this Privacy Statement and personal data protection. At the same time, you have the right to access the personal data concerning you, upon your request.
• Right to rectification: You have the right to request the correction of your inaccurate data, which is held within the framework of this or the completion of any incomplete data.
• Right to erasure: You have the right to request the erasure of your data. We remind you that this right is not absolute and is subject to the limitations of the law. We may have legitimate reasons not to respond to such a request.
• Right to restriction of processing: You have the right to request the restriction of the processing of your data, i.e. you have the right to request that their further processing ceases and that your data is simply retained by our company. The exercise of this right is subject to the condition that such possibility is granted to you by the existing legislation. If the legal requirements are not met, the company may not be obliged to fulfill your request.
• Right to portability: You have the right to receive the data concerning you in a specific format and to request their transfer to another controller, as long as this is provided for in the law for the processing being carried out.
• Right to object: You have the right to object at any time to the processing of your data, within the limitations provided for in existing legislation. Similarly, this right is not absolute and the company may have valid reasons to refuse its satisfaction.
• Right to withdraw your consent: If a processing of your personal data is based on your consent, you have the right to immediately, easily and inexpensively withdraw your consent at any time for the continuation of this processing. The withdrawal of your consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.
• Right to complain to the Personal Data Protection Authority: In order to exercise any of your rights, as well as for any information or clarification regarding them and the conditions for their exercise, you should contact the company THOMAIDIS ACHILLES at the contact details listed in present. The authorized representative of the company THOMAIDIS ACHILLES will provide you with any further information and guidance on the steps you need to take. Likewise, you can address any queries, questions, comments or complaints regarding the management of your data to the authorized representative of our company.

Candidate Employee Privacy Policy

Your personal data relating to your CV will be collected by the Personnel Department of the company THOMAIDIS ACHILLES (VAT number 036591757, with registered office at 41 Katsoni Street, Kallithea) which will act as data controller, if you choose to use the application applications to cover jobs or contact our Company directly for this purpose. Depending on the job position you are interested in, your resume will be forwarded to the corresponding department of our Company. For any communication regarding the processing of your data, you can address this via email to the address info@athensrentacar.gr.

The legal basis of the processing of your data in this case is your consent and the receipt of your data comes from you and on your own initiative only. You choose in each case the data you choose to share with us for the purpose of registering a job application.

Your personal data will undergo the following processing operations:

• Collection and management of job vacancies
• Evaluation of job vacancies
• Selection of candidates

Your personal data will be shared with the Personnel Department, as well as with specific employees with staff duties in the field related to your job, for the purpose of managing, evaluating and selecting candidates.

If your application is not successful, your data will be retained for a maximum period of twenty-four (24) months from the application process. After this period your data will be permanently deleted. Even if your application is not successful, we reserve the right to contact you in the future in the event of a new job opening, unless we are informed otherwise by you. It is possible for your data to be permanently deleted from our files before the expiry of the above period, if we receive an express request to this effect from you.

Regarding the processing of your personal data, you have all the rights provided for by law and described in this privacy policy of our Company under the chapter “The rights of the subject”.

In order to exercise any of your rights, as well as for any information or clarification regarding them and the conditions for their exercise, you should contact the Company via email at info@athensrentacar.gr. Our representatives will provide you with any further information and guidance on the steps you need to take.

Changes to this Privacy and Personal Data Protection Statement

The THOMAIDIS ACHILLES company may unilaterally and at any time modify this Privacy Statement, so that it reflects changes from time to time regarding the existing relevant policies and practices of our company. We recommend that you regularly visit our company’s website in order to be immediately informed of any changes to this Privacy and Personal Data Protection Statement.