WHAT IS THE GENERAL DATA PROTECTION REGULATION
The General Data Protection Regulation (Regulation (EU) 2016/679), commonly known as the GDPR, forms a central part of the European legal framework for the protection of personal data.
Its purpose is to strengthen the protection of individuals when organisations, businesses or other data controllers collect, use or otherwise process personal data relating to them.
The rights described below apply depending on the circumstances of each processing activity and the conditions established by applicable data protection law.
CORE DATA PROTECTION PRINCIPLES
Personal data should be processed in accordance with the fundamental principles established by the GDPR.
- Lawfulness, fairness and transparency: personal data should be processed lawfully, fairly and in a transparent manner.
- Purpose limitation: personal data should be collected for specified, explicit and legitimate purposes.
- Data minimisation: only personal data that is adequate, relevant and necessary for the relevant purpose should be collected.
- Accuracy: reasonable steps should be taken to ensure that personal data is accurate and, where necessary, kept up to date.
- Storage limitation: personal data should not be retained for longer than necessary.
- Integrity and confidentiality: appropriate safeguards should be applied to protect personal data.
RIGHT OF ACCESS
Subject to applicable legal requirements, you may request confirmation as to whether personal data relating to you is being processed and obtain access to that data.
Depending on the circumstances, the information provided may include the purposes of processing, categories of personal data, recipients or categories of recipients and the relevant retention period or the criteria used to determine that period.
RIGHT TO RECTIFICATION
If personal data relating to you is inaccurate or incomplete, you may request that it be corrected or, where appropriate, completed.
Accuracy of personal data is important both for the protection of your rights and for the proper management of communications or other relevant processes.
RIGHT TO ERASURE
In certain circumstances, you may request the deletion of personal data relating to you.
The right to erasure is not absolute and may not apply where retention of the data remains necessary, for example:
- For compliance with a legal obligation.
- For the establishment, exercise or defence of legal claims.
- Where another lawful basis permits continued processing.
RIGHT TO RESTRICTION OF PROCESSING
Under certain conditions, you may request restriction of the processing of personal data relating to you.
This may apply, for example, while the accuracy of personal data is being verified or while it is being determined whether overriding legitimate grounds exist for continuing a particular processing activity.
RIGHT TO OBJECT
Where processing is based on legitimate interests or another legal basis in relation to which a right to object applies, you may, depending on the circumstances, object to the processing of personal data relating to you.
Any such request will be assessed in accordance with the GDPR and applicable data protection law.
RIGHT TO DATA PORTABILITY
Where applicable, you may have the right to receive personal data you have provided in a structured, commonly used and machine-readable format.
This right applies in particular circumstances, including where processing is based on consent or a contract and is carried out by automated means.
RIGHT TO WITHDRAW CONSENT
Where the processing of personal data is based on your consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
In relation to cookies and similar technologies, consent preferences may also be managed or changed through the website's cookie consent mechanism.
AUTOMATED DECISION-MAKING
The GDPR provides, under certain conditions, rights in relation to decisions based solely on automated processing where those decisions produce legal effects or similarly significantly affect an individual.
In the context of the standard contact and CV submission forms available on this website, information submitted is intended for communication or human review rather than for decisions based solely on such automated processing.
HOW TO EXERCISE YOUR DATA PROTECTION RIGHTS
To submit a request concerning your personal data, you may contact BLACK ARROW at:
Your request should clearly identify the right you wish to exercise and, where possible, the information or processing activity to which your request relates.
To protect personal data, additional information may be requested where necessary and proportionate in order to verify the identity of the person making the request before it is fulfilled.
Requests are handled in accordance with the time limits and conditions established by the GDPR and applicable data protection law.
RIGHT TO LODGE A COMPLAINT
If you believe that the processing of personal data relating to you infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.
In Greece, the competent supervisory authority is the Hellenic Data Protection Authority.
The right to lodge a complaint does not affect any other administrative or judicial remedies that may be available under applicable law.
CONTACT REGARDING DATA PROTECTION
For questions regarding personal data protection, exercising your rights or the processing of personal data through the website, you may contact BLACK ARROW.
BLACK ARROW Private Security
Michail Petridi 32, Rhodes, 85133
Email: blackarrowpc@gmail.com
Telephone: 2241 114004
For more information regarding how personal data is processed, please see our Privacy Policy .
For information regarding cookies and consent technologies, please see our Cookie Policy .