Privacy update for Resumes

With this update, we inform you, in accordance with EU Regulation 2016/679 ("GDPR"), about the collection and processing of your personal data, when you send us your CV through our website http://www.tapepa .gr/ as well as when you submit your CV for possible recruitment by the National Tax Agency under the name "Piraeus - Athens Customs Brokers Care Fund" (TAPEPA) (hereinafter "the Fund"), based in Piraeus, on Karaiskou Street, No. 82.

This update may change. Therefore, we recommend that you regularly check this update.

CONTROLLER OF YOUR PERSONAL DATA

The controller of your personal data is the "Piraeus-Athens Customs Brokers Treatment Fund" (TAPEPA). For any issue regarding your personal data, you can contact the controller by sending an email to tapepa@otenet.gr

PERSONAL DATA COLLECTED AND PROCESSED

We collect and process the personal data you provide to the Fund when you send us your CV and other relevant documents of your choice. The personal data collected and processed by the Fund include names, addresses, contact details, details of education and professional experience, interests, aspirations and expectations and other relevant details, which are usually included in a CV and supporting documents. During the evaluation of your application, you may be asked to provide certain medical information depending on the nature of the job you have applied for.

SOURCES FROM WHICH YOUR PERSONAL DATA IS COLLECTED

We collect your personal data directly from you. We may collect your personal data from third parties of your choice (eg previous employers, teachers, colleagues) only with your consent.

PURPOSES FOR WHICH YOUR PERSONAL DATA IS PROCESSED

Your personal data will be processed exclusively for the purpose of evaluating your employability by the Fund. In particular, we will assess your skills, qualifications, education and work experience and any other relevant information you provide to us. We will use your contact details to ask you for clarifications and additional information, to arrange an interview with you, to inform you of the progress of your application for employment and to inform you of employment opportunities at the Fund. In addition, your personal data will be processed when the Fund has to comply with legal or regulatory obligations (e.g. reporting to the authorities) or to pursue its legitimate interests (eg to establish, exercise or defend its legal rights). Also, your personal data will be processed through the IT systems hosted within the Fund.

LEGAL BASIS FOR THE PROCESSING OF YOUR DATA

The legal basis for processing your personal data is your consent. The provision of personal data is optional but necessary for the purposes mentioned above. Failure to provide personal data and the relevant consent to its processing will not allow the consideration of your application for employment to continue.You have the right to withdraw your consent regarding the further processing of your personal data at any time by sending an email to tapepa@otenet.gr. The withdrawal of your consent does not affect the legality of the processing that preceded the withdrawal and does not exclude the Fund from processing your personal data on another legal basis such as compliance with its legal obligations and/or the pursuit of its legal rights, such as described above.

RECIPIENTS OF YOUR PERSONAL DATA

Your personal data will be processed by the Fund's authorized staff who are involved in the selection of candidates and its Administration. Also, only if it is necessary or useful to achieve the above purposes, your personal data may be processed by providers of staffing services and technical support, management and maintenance of IT systems, who will act as processors on behalf of the Fund subject to strict contractual confidentiality and personal data protection clauses.

PROTECTION OF YOUR PERSONAL DATA

The Fund implements appropriate technical and organizational measures for the security of your personal data. More specifically, as provided by article 25 of the GDPR, taking into account the latest developments, the cost of implementation and the nature, context and purposes of the processing, as well as the risks of different probability of occurrence and severity to the rights and freedoms of natural persons from the processing, the Fund applies effectively both at the time of determining the means of processing and at the time of the processing,appropriate technical and organizational measures, designed to implement data protection principles, such as data minimization, and to incorporate the necessary safeguards in the processing in such a way as to meet GDPR requirements and protect the rights of data subjects. Also, the Fund implements appropriate technical and organizational measures to ensure that only the personal data necessary for the purpose of the processing are processed. This obligation applies to the scope of personal data collected, the extent of their processing, their storage period and their accessibility. In particular, the said measures ensure that, by definition, personal data is not made accessible without the intervention of the natural person to an indefinite number of natural persons.

RETENTION PERIOD OF YOUR PERSONAL DATA

Your personal data will be retained for as long as is necessary to evaluate your job application and in any event no longer than twelve 12 months from the receipt of your CV, unless required by law to retain it for a different period. Then your personal data will be deleted from the physical and electronic files of the Fund. In the event of a dispute with you, we will retain your personal data for as long as necessary to defend our rights.

RIGHTS AND HOW TO EXERCISE THEM

The rights granted to you by law are the following: a. Right of access: You have the right to receive from the controller confirmation as to whether or not your personal data is being processed and, if so, the right to access the personal data and the following information: a) the purposes of the processing, b) the relevant categories of personal data, c) the recipients or categories of recipients to whom your personal data has been disclosed or will be disclosed, in particular recipients in third countries or international organizations, d) if possible , the time period for which it will the personal data are stored or, when this is impossible, the criteria that determine the period in question, e) the existence of the right to submit a request to the data controller for the correction or deletion of personal data or to limit the processing of the personal data concerning the subject of the data or the right to object to said processing, f) the right to submit a complaint to a supervisory authority, g) when the personal data is not collected from the data subject, any available information about its origin, h) the existence of automated download decisions, including profiling and, at least in these cases, important information about the logic followed, as well as the significance and intended consequences of said processing for the data subject. b. Right to rectification: You have the right to request from the controller without undue delay the correction of inaccurate personal data concerning you. Bearing in mind the purposes of the processing, you have the right to request the completion of incomplete personal data, inter alia, by means of a supplementary written statement. c. Right to erasure ("right to be forgotten"): You have the right to ask the Fund to delete personal data concerning you without undue delay and the Fund is obliged to delete your personal data without undue delay if one of the following applies reasons: a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, b) the data subject revokes the consent on which the processing is based and there is no other legal basis for processing, c) the data subject objects to the processing and there are no compelling and legitimate reasons for the processing or the data subject objects to the processing, d) the personal data were processed illegally, e) the personal data must be deleted in order to comply with legal obligation based on Union law or the law of a Member State, to which the controller is subject, f) the personal data have been collected in connection with the offer of information society services. d. Right to limitation: You have the right to obtain from the controller the limitation of the processing, when one of the following applies: a) the accuracy of the personal data is disputed by the data subject, for a period of time that allows the controller to verify the accuracy of the personal data, b) the processing is illegal and the data subject objects to the deletion of personal data and requests, instead, the limitation of their use, c) the controller no longer needs the personal data for the purposes of the processing, but these data are required by the data subject to establish, exercise or support legal claims, d) the data subject has objections to the processing, in pending verification of whether the legitimate reasons of the controller prevail over those of the data subject. When the processing has been restricted in accordance with the above, the said personal data, apart from storage, are processed only with the consent of the data subject or for the establishment, exercise or support of legal claims or for the protection of the rights of another natural or legal entity or for important public reasons interest of the Union or a Member State. The data subject who has ensured the restriction of processing, in accordance with the above, is informed by the controller before the lifting of the restriction of processing. e. Right to portability: You have the right to receive the personal data concerning you, and which you have provided to the Fund, in a structured, commonly used and machine-readable format, as well as the right to transmit said data to another controller processing without objection from the controller to whom the personal data was provided, when: a) the processing is based on consent b) the processing is carried out by automated means. When exercising the right to data portability in accordance with the above, the data subject has the right to request the direct transmission of personal data from one data controller to another, in case this is technically possible. g. Right to Object: You have the right to object, at any time and for reasons that relate to your particular situation, in the processing of personal data concerning you, as long as the processing is necessary for the fulfillment of a task performed in the public interest or in the exercise of public authority delegated to the controller, or the processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party. The controller no longer processes the personal data, unless it demonstrates compelling and legitimate reasons for processing, which override the interests, rights and freedoms of the data subject or for the establishment, exercise or support of legal claims. h. Right against automated decision-making: You have the right not to be subject to a decision made solely on the basis of automated processing, including profiling, which produces legal effects concerning you or significantly affects you with similar way. However, this does not apply when the decision: a) is necessary for the conclusion or performance of a contract between the data subject and the data controller, b) is permitted by Union law or the law of a Member State to which the controller and which also provides for appropriate measures to protect the rights, freedoms and legal interests of the subject of the data or c) is based on the express consent of the data subject. i. Consent: In the event that you have given consent to the use of your personal data by the Fund, you have the right to withdraw your consent at any time without this affecting the legality of our processing of said data prior to the withdrawal of your consent. Before giving consent, the data subject, is informed about it. Withdrawing consent is as easy as giving it. You can exercise your above rights by sending a free request to tapepa@otenet.gr and we will respond within one (1) month of receiving the request. In the event that your request requires more information, the total response time may be extended by another two (2) months. The Fund is not obliged to respond to requests that are sent abusively, repeatedly and for which it has already provided a written response. When you exercise your rights, we may ask you for some information to help us confirm your identity. If we do not satisfy any of your requests, you have the right to file a complaint with the Personal Data Protection Authority.