Last updated: November 2023.
Welcome to the Website of Motor Oil (Hellas) CORINTH REFINERIES S.A. (“the Company”)
In this Privacy Notice we intend to inform you of how the Company protects the privacy of your communications and collect, process, use and store your personal data through our Website as well as the rights you have with regard to the foregoing collection and processing of your personal data. By visiting our Website you acknowledge of having read and fully taken into account this Privacy Notice.
This Privacy Notice (“the Notice”) applies only to the Company’s Website. Users should be aware that our Website may also contain links to other websites, yet our Company cannot be held responsible for the data processing terms and practices or the content of such websites.
1.1. The present Notice sets out the terms and conditions which the Company follows in order to protect your privacy. It describes the conditions under which we make any collection and processing of your personal data and ensure their confidentiality.
1.2. The Company reserves the right to amend and update this Notice, whenever it deems it appropriate, and any changes thereof shall come in force and effect from the instance they appear online at the present webpage of the Website. In this context, we encourage you to read the Notice regularly in order to ensure that you are aware of its content and the processing of your personal data.
1.3. If any provision of this Notice is declared void, unenforceable or abusive, such provision shall be severed from this Notice, which shall otherwise remain in full force and effect to the extent that the original intent of this Privacy Notice will not be altered in any material respect.
- Principles of Data Processing
We fully respect your fundamental rights and render protection of your privacy a priority of our Company. In this context, when processing your personal data, we follow the following basic principles:
2.1. We submit your personal data to lawful and legitimate processing, and we maintain full transparency regarding the way we handle your personal data.
2.2. We collect and process your data only for specified, explicit, and legitimate purposes as outlined in this Notice, and we do not process it further in a manner incompatible with these purposes.
2.3. We process your personal data only to the extent that it is appropriate and relevant to the above purposes, while limiting the processing to the measure necessary for these purposes.
2.4. We make reasonable efforts with your own assistance to ensure that your processed data is accurate and, where necessary, updated with regard to the purposes of the processing, taking all reasonable steps to immediately delete or correct it in case of inaccuracy.
2.5. We keep your personal data in a form that allows you to identify yourself only for the time required for the above processing purposes.
2.6. We process your personal data in a way that guarantees its security by using appropriate technical or organizational measures.
2.7. We do not intend to further process your personal data for purposes other than the one for which they are collected.
2.8. We inform you that there is no obligation to provide your personal data and that there are no possible consequences from the choice not to provide it unless this is necessarily required, specifically for the examination and acceptance of a Community Contribution request submitted via the Company’s Website. You may, however, visit the Website without revealing your identity and without providing us with any of your personal data. Furthermore, we inform you that your personal data, if provided, will not be used for automated decision making, including profiling.
2.9. Without prejudice to what is stated in this Notice, we do not disclose and transfer your personal data to third parties without your consent, unless permitted by law or by our contractual agreement with you.
2.10. Please be advised that we do not transfer your personal data to a third country or international organization for which there is no European Commission adequacy decision under the General Data Protection Regulation.
2.11. In general, we adhere to all applicable laws and comply with all our statutory obligations, as data controllers of your personal data.
- Types of Data Collected
3.1. The types of personal data that we collect, and process depend on the services that you choose to receive. In this context, at the point of submitting your Community Contribution request, you provide our Company with the following types of personal data:
- Name / Surname,
- Tax Office,
- Contact details (phone number, email address).
3.2. In addition, if you communicate with us via email or by other means, we will collect your personal data related to such communications under the terms and conditions of this Notice, in order to respond to your requests and to improve our services.
3.3. Our Company does not collect or gain access in any way to special categories (“sensitive”) of personal data or data relating to your criminal convictions and offenses. You have an obligation to refrain from posting such data concerning yourself or third party data subjects. In the event that you submit such data to our Website, these will be removed as soon as we become aware of them. We have no liability to you or to any third parties for any submission and/or processing of sensitive data due to your actions or omissions in breach of this obligation.
- Purposes and Legal Bases of Data Processing
4.1. Personal data necessary for the provision of our services within our contractual relationship is collected and processed by our Company pursuant to article 6 § 1 (b) of the GDPR for the following purposes:
- Communicating with our clients in the framework of the execution of our services and for the resolution of any complaints.
- Improving specific beneficial activities and/or purposes for local communities and society.
- Administration, organization and function of our business.
4.2. Our Company collects and processes your personal data solely for the purposes mentioned above and only to the extent that is strictly necessary to effectively serve them. Data collected are relevant, appropriate and no more than what is required in view of the above purposes, whereas we strive to keep them accurate and up to date. Furthermore, your data are retained only for the period required to achieve the purposes, for which they are collected and processed, and are afterwards deleted.
5.1. Our Company may process personal data only with your lawful consent for the following purposes:
- For the purposes of commercial communication
- For personified market research and / or analysis purposes to better understand your preferences and/or experiences.
- For the promotion of the Company’s social and beneficent profile.
5.2. You give us your consent to the processing of your personal data for the above purposes with an electronic statement in a manner clearly distinguishable from other consents or notice and in an intelligible and easily accessible form. Your consent is freely given, and your personal data is provided without such a provision being a legal or contractual obligation or a requirement on behalf of our Company for the performance of a contract between us.
5.3. In this context, by completing the relevant field online, you explicitly state that you wish to give your consent for the above purposes in accordance with the terms and conditions of this Notice. You may provide your consent in the following ways:
- When sending us an e-mail, and
- When submitting a Community Contribution request
5.4. Failure to provide your personal data and/or refusal to consent to the terms of their processing results in the inability to collect and therefore process your personal data to achieve the aforementioned purposes.
- Data Recipients
6.1. Our Company does not assign your personal data or interconnect its database with any third parties, individuals or legal entities, public authorities, or other organizations for financial or other considerations.
6.2. For the execution of the purposes mentioned in this Notice, our Company may provide access to or transfer the following types of your data to the following processors for and on behalf of:
- Your personal data to our information technology maintenance and support providers for the smooth operation of Website and our information and communication systems.
- Your personal data to third-party consultants to provide data analysis services.
- Your personal data to associates in the context of implementing a Community Contribution request.
6.3. The processing of your personal data by our data processors mentioned above is executed under our control and orders and is subject to the same data protection policy or to a policy of at least the same level of protection.
6.4. In the event that we are required by a court or other administrative authority and in any other case that we are legally bound to do so, our Company may transfer your personal data to public authorities to the extent specified by law prior to you being informed.
- Data Security and Confidentiality
7.1. In order to ensure the proper use and integrity of your personal data and to prevent their unauthorized or accidental access, processing, deletion, alteration or other use, our Company applies appropriate internal policies and takes all appropriate organizational, technical, physical, logical and procedural security measures, as well as technical standards, in accordance with applicable laws and regulations.
7.2. The processing of your data by our Company is conducted in a manner that ensures their confidentiality and physical and logical security, taking into account the latest developments, implementation costs and the nature, scope, context and purposes of the processing, as well as the risks for your rights and freedoms, which are applicable in each circumstance.
7.3. Your personal data is processed solely by authorized personnel of our Company, bound by strict obligations of confidentiality.
- Retention of Personal Data
8.1. We keep your personal data for as long as the purposes for which it was collected and stated above remain in force.
8.2. Our Company may retain your personal data after the expiration of their relevant processing purposes in the following limited cases:
- In case that there is a legal obligation under a relevant legislative provision.
- For the proper organization and operation of our business provided that anonymity or pseudonymization of your data takes place.
- In case of any claims against our Company, for as long as necessary to defend our rights and legitimate interests before any competent court and any other public authority.
8.3. After the period of retention, your personal data is erased from our databases and systems in accordance with our data protection policies and provided that their retention is no longer required for the fulfillment of the purposes we have described above.
- Your Rights
9.1. Subject to applicable law, you have the following rights:
- Request for access to your personal data and information related to their processing (e.g., processing purposes, period retention etc.) and obtain a copy thereof.
- Request for the rectification of any inaccuracies or any missing personal data of yours.
- Request for the erasure of your personal data.
- Request for the restriction of the processing of your personal data in cases explicitly provided for by law.
- Request for the portability of your personal data to another data controller in a structured, commonly used, and machine-readable format (e.g., cd).
- Object to the processing of your personal data in cases explicitly provided for by law.
Object to a decision taken solely on the basis of automated processing, including profiling, which has impact on you or significantly affects you. Any requests relevant to the above are addressed in writing to our Company’s headquarters.
Withdraw your consent at any time. Withdrawal of your consent does not affect the lawfulness of the processing of your data prior to its revocation. 9.2. Our Company will respond to any of your requests within one (1) month of their receipt. Upon prior notice, this period may be extended by a further two (2) months, if necessary, considering the complexity of the request and the number of any other pending requests. In case of rejection of your request, we will provide relevant justification.
9.3. If your request does not meet the requirements of applicable law, our Company reserves the right either to: (a) impose a reasonable fee, taking into account the administrative costs of providing the information or communicating or executing the requested action, or (b) reject your request.
9.4. In the event of any violation of your personal data, which may place your rights and freedoms at a high risk, and provided that it does not fall under one of the exceptions expressly provided for by applicable law, we undertake to inform you without undue delay.
9.5. If there are any doubts as to the identity of the individual submitting the request, we reserve the right to request the provision of additional information necessary to confirm his / her identity.
9.6. If your rights are infringed, we inform you that you have the right to file a complaint with the Greek Data Protection Authority or with any other competent supervisory authority.
- Your Obligations
10.1. By using our Website and by providing your personal data upon your consent, you acknowledge that you are required to state your actual, accurate and complete information requested by our Company. Furthermore, you must inform our Company of any changes to your information to ensure it is kept up-to-date and accurate.
10.2. If you post and/or provide in any way to the Company data concerning third-party data subjects, you guarantee that the data subjects have been duly informed, and you have received their explicit consent to this in accordance with what is foreseen in the current legislation.
10.4. You acknowledge that our Company may delete, cross-check, supplement or modify the information you provide based on information lawfully provided by third parties. In this case, our Company will provide you with relevant notice in compliance with applicable law.
10.5. By using our Website you confirm that you are over sixteen (16) years old. If you are under the age of sixteen (16) you have the obligation to abstain from any use of our Website and from any transfer of your personal data without the consent of the person who exercises your parental responsibility. If you fail to comply with the foregoing obligations, you must immediately notify our Company. In any case, using the Website, you acknowledge that our Company is not responsible for your violation of the obligations mentioned above to the extent that it is unable, even if it makes reasonable efforts, to verify your age or to receive consent from your guardian.
- International Jurisdiction and Applicable law
11.1. Any dispute between you and our Company arising from or in relation to the subject matter of this Privacy Notice shall be governed and construed in accordance with Greek law without reference to its conflict of laws principles and shall be subjected to the exclusive jurisdiction of the competent courts of Athens, Greece.
11.2. If a provision of the present Privacy Notice is canceled by a decision of a competent court as unlawful, invalid or unenforceable, this will not affect the validity and enforceability rest of its provisions, which will remain in full force and will be accordingly applied.
For information or any request in relation to this Notice or in case you wish to exercise your rights, as mentions above, you may at any time contact our Company’s Data Protection Officer as follows:
- Adress: 12A, Herodou Attikou Street, 151 24, Maroussi, Greece
- Email: [email protected]