SMARTEC, tax registration no: EL 099368434 of
the Tax Authority for Societe Anonymes in Athens,
registered seat and address: 7 Feidippidou Str.,
Chaidari, Attica, is a controller and in certain cases
the processor of personal data and processes your
personal data lawfully, in good faith and in a
transparent fashion.
In case you wish to communicate for a matter
referring to your personal data, you may contact us
by sending an email to gdpr@smartec.gr, making a
phone call to +30 210 5820000 or by sending a
letter to the postal address: 7 Feidippidou Str.,
Chaidari, 12461 Athens, Greece.
SMARTEC is a trade and service company that
provides services to consumers and users of
technology products, buys& sells products and
provides information to any interesting individual
and thus it processes personal data in order to
provide its services and perform its activities in
compliance with the law.
Consent
SMARTEC processes your personal data pursuant
to art. 6, letter “a’’ of Regulation (EU) 2016/679 in
the cases when your explicit, free, specific and
informed consent to have your personal data
processed is required. When such consent is
necessary for the processing of your personal data
and you make an informed decision not to give it,
SMARTEC may be unable to provide you with the
respective product/service for which your consent
was required. When the processing of your
personal data for a specific purpose is contingent
upon giving your consent, you can withdraw your
consent at any time, without affecting the
lawfulness of the processing before the consent was
withdrawn.
Contract
SMARTEC processes your personal data pursuant
to art. 6, letter “b” of Regulation (EU) 2016/679
when “processing is necessary for the performance
of a contract to which the data subject is party or in
order to take steps at the request of the data subject
prior to entering into a contract”. In the cases when
you take steps to enter into an agreement with
SMARTEC it is necessary to give information
which constitutes personal data so that SMARTEC
can provide you with the product or service that
you would like to receive as part of the agreement.
If you do not provide your personal data, it would
be impossible for SMARTEC to provide you with
the requested services or products.
Legal obligation
SMARTEC processes your personal data pursuant
to art. 6, letter “b” of Regulation (EU) 2016/679 in
order to comply with legal obligations provided for
by the legislation in force.
SMARTEC transfers and discloses personal data of
consumers/users of mobile phones or technology
devices to the companies and undertakings which
have assigned to SMARTEC to provide, in the in
the name and account of the manufacturers or
resellers of the above phones and devices, services
to the consumers/users of such devices so that
SMARTEC to be in position to provide such
services.
SMARTEC does not transfer personal data to
recipients having their seat outside European Union
or European Economic Area.
SMARTEC will keep your personal data, in both
electronic and documentary format, throughout the
duration of your contractual relationship. In case
your contractual relationship with SMARTEC is
expired or terminated, your personal data will be
kept by SMARTEC until the claim limitation
period is completed. However in case the
processing is required by the law the retention
period will be equal at least of the time provided
for by the law.
Introductory
In addition to your right to withdraw the consents
you have given to us, you have also the following
rights, provided that the relevant legal
circumstances also apply:
The right to demand access from the controller
to your personal data pursuant to art.15 of the Regulation.
The right to request from the controller
rectification of your personal data pursuant to
art.16 of the Regulation.
The right to request erasure of your personal
data pursuant to art.17 of the Regulation.
The right to obtain restriction of processing
pursuant to art. 18 of the Regulation.
The right to portability of personal data
pursuant to art. 20 of the Regulation.
The right to object to the processing of
personal data
Right of access (article 15 GDPR)
You have the right to obtain, upon request and free
of charge, access to your personal data processed
by SMARTEC pursuant to art.15 of the Regulation.
This includes particularly:
-
the purposes of the processing of your personal data,
-
the categories of personal data that we are processing,
-
the recipients or the categories of the recipients to whom your personal data have been or will be disclosed,
-
where possible, the envisaged period for which
the personal data will be stored, or if not
possible, the criteria used to determine the
period,
-
the existence of the right to request from the
controller rectification or erasure of personal
data or restriction of processing of personal
data concerning the data subject or to object to
such processing,
-
the right to lodge a complaint with a supervisory authority,
-
any available information as to their source,
where the personal data are not collected from
the data subject,
-
the existence of automated decision – making,
including profiling, referred to in article 22 (1)
and (4) of the Regulation and, at least in those
cases, meaningful information about the logic
involved, as well as the significance and the
envisaged consequences of such processing for
the data subject.
Where personal data are transferred to a third
country or to an international organization, the data
subject shall have the right to be informed of the
appropriate safeguards pursuant to article 46 of the
Regulation relating to the transfer.
Right to rectification (article 16 GDPR)
You have the right to obtain from SMARTEC
without undue delay the rectification of inaccurate
personal data concerning you. Taking into account
the purposes of the processing, you have the right
to have incomplete personal data completed,
including by means of providing a supplementary
statement.
Right to erasure (article 17 GDPR)
You have the right to obtain from SMARTEC the
erasure of your personal data without undue delay,
where one of the following grounds applies:
the personal data are no longer necessary in
relation to the purposes for which they were
collected or otherwise processed,
you withdraw your consent on which the
processing is based according to the article 6
(1) point (a) or article 9 (2) point (a) of the
Regulation, and where is no other legal ground
for the processing,
you object to the processing pursuant to article
21 (1) or (2) of the Regulation and there are no
overriding legitimate grounds for the
processing pursuant to article 21 (2) of the
Regulation.
personal data have been unlawfully processed,
the personal data have to be erased for
compliance with a legal obligation,
The personal data have been collected in
relation to the offer of information society
services referred to in article 8 (1) of the
Regulation.
Where SMARTEC has made the personal data
public and is obliged to erase, taking account all
available technology and the cost of
implementation, shall take reasonable steps, to
inform the third parties which are processing your
personal data that you have requested the erasure
by them of any links to, or copy or replication of,
those personal data.
Right to restriction of processing (article 18 GDPR)
You have the right to obtain from SMARTEC
restriction of processing where one of the following
applies:
-
the accuracy of the personal data is contested by you,
the processing is unlawful and you oppose the
erasure of the personal data and request the
restriction of their use instead,
the controller no longer needs the personal
data for the purposes of the processing, but
they are required by the data subject for the
establishment, exercise or defence of legal
claims
you have objected to processing pursuant to
article 21 (1) of the Regulation, pending the
verification whether the legitimate grounds of
the controller override those of the data
subject.
Right to data portability (article 20 GDPR)
You have the right to obtain the personal data
concerning you, which you have provided to
SMARTEC, in a structured, commonly used and
machine – readable format, and have the right to
transmit those data to another controller without
hindrance from SMARTEC, where:
the processing is based on consent according
to article 6 (1) point (a) or to article 9 (2) point
(a) or on a contract pursuant to article 6 (1)
point (b) of the Regulation
the processing is carried out by automated means
In exercising the right to data portability you have
the right to have the personal data transmitted
directly from SMARTEC to another controller,
where technically feasible.
Right to object (article 21 GDPR)
Under the provisions of article 21 (1) of the
Regulation, you have the right to object to the
processing of personal data on grounds relating
to your particular situation.
The above-
mentioned general right to object applies to all the
purposes of data processing referred herein, where
the data are processed pursuant to article 6 (1) point
(f) of the Regulation. To the contrary, as regards
the specific right to object relating to the
processing of the data for marketing purposes,
SMARTEC is obliged according to the Regulation
to apply this general right to object only if you
specify superior grounds, e.g. a possible danger of
life or health. Additionally, you can address to the
Hellenic Data Protection Authority, which can
accept the filing of complaints either in writing to
her protocol services (1-3 Kifisias Str., P.C. 11523
Athens) or electronically (www.dpa.gr).