In ELPEDISON, having as our strategic objective to ensure the optimal protection of our customers’ personal data, we consider that it is our duty to inform you about our practices, choices, as well as your rights concerning personal data collection and processing.
I. Our principles and values
• We fully respect our customers and make the protection of your privacy our company’s priority.
• We handle your personal data in full transparency.
• We collect and process your data for lawful, legitimate, clear and predetermined purposes only.
• We handle all our customers' information as inside information, applying every technical and organizational means necessary for their protection.
• We do not disclose or transmit your personal data to third parties without your consent, unless so permitted by Law or by our agreement.
• We fully respect the legislation applicable in general and comply with all our responsibilities arising from it, as data controllers.
II. What personal data do we collect?
The kind of data we collect depends on the products or services you select to be provided to you. In particular, in the context of fulfilling the following processing purposes, we collect the following personal data:
Performance of the contract (Article 6.1 B of the GDPR Regulation)
Customer Return Management
• Basic Data of Natural Person (e.g. full name)
• Financial data (IBAN, Bank, amount)
• Metering data (e.g. meter number)
Payments Management with standing order via credit card
• Basic Data of Natural Person (full name, father's name, tel., address, marital status data, etc.)
• Unique identifiers (TIN, ID Number, etc.)
• Metering Data (Supply Number)
• Financial Data (IBAN, Bank Account number)
Creation of Lists for Retention
• Basic data (full name, tel., etc.)
• Unique identifiers (e.g. TIN, ID Number)
• Analytics data (Duration of meter retention in the Company, frequency of customer payments, number of meters in the Company, product they currently have and product/package that can be taken)
Provision of Elpedison Protect program
• Basic Data of Natural Person (full name, father's name, tel., address, profession, date of birth, etc.)
• Unique identifiers (TIN, ID Number, etc.)
• Meter Number
Management of acceptance of participation in promotional activities
• Basic Data of Natural Person (full name, mobile phone, e-mail)
Management of applications with an Online application on the website ("e-contract")
• Basic data of Natural person (tel., address, email, full name, father's name, date of birth, etc., occupation)
• Unique identifiers (TIN, ID Number, Tax Authority, ID copy, etc.)
• Consumption data (previous actual bill, etc.)
• Assets (lease agreement, title of acquisition through tax/property declaration)
• Data of preferences (product selected by the user)
Click to call service management (via the website)
• Basic Data of Natural Person (full name., tel.)
Operation of "Live Chat" service (via the website)
• Basic Data of Natural Person (full name, email, telephone)
• In case a customer provides the data, they receive data processing related to their service, such as, e.g., TIN, energy consumption, etc.
Below the Line advertising
• Basic data of the natural person (full name, telephone, email, address, etc.
• Unique identifiers (e.g. TIN, ID Number)
Sales management through employees' offers (for employees of large customers)
• Basic data of Natural person (tel., address, email, full name, father's name, date of birth, etc., occupation, company where the customer works, changes in the professional situation, e.g. cessation of work in the particular company)
• Unique identifiers (TIN, ID Number, Tax Authority, ID copy, etc.)
• Consumption data (previous actual bill, etc.)
• Assets (lease agreement, title of acquisition)
• Data of judicial decisions (divorce decrees, judicial support)
Carrying out promotional activities via phone calls, via dialler; when the call is made at the request of the data subject to submit an offer, it may be considered as a pre-contractual negotiation and, therefore, legal basis for such processing is that the processing is necessary in order to take measures at the request of the data subject (existing customer) prior to the conclusion of a contract.
• Basic data of Natural person (tel., address, email, full name, father's name, date of birth, etc., occupation)
• Unique identifiers (TIN, ID Number, Tax Authority, ID copy, etc.)
• Consumption data (previous actual bill, etc.)
• Assets (lease agreement, title of acquisition)
• Data of judicial decisions (divorce decrees, legal guardianship)
• Call data (recorded calls)
Sales management carried out by external sellers (agents)
• Basic data of Natural person (tel., address, email, full name, father's name, date of birth, etc., occupation)
• Unique identifiers (TIN, ID Number, Tax Authority, ID copy, etc.)
• Metering data (previous actual bill, etc.)
• Assets (lease agreement, title of acquisition)
• Data of judicial decisions (divorce decrees, legal guardianship)
Sales Management via Call Centers
• Basic data of Natural person (tel., address, email, full name, father’s name, date of birth, etc., occupation)
• Unique identifiers (TIN, ID Number, Tax Authority, ID copy, etc.)
• Consumption data (previous actual bill, etc.)
• Assets (lease agreement, title of acquisition)
• Data of judicial decisions (divorce decrees, legal guardianship)
• Call data (recorded calls)
Sales management through stores (RETAIL)
• Basic data of Natural person (tel., address, email, full name, father's name, date of birth, etc., occupation)
• Unique identifiers (TIN, ID Number, Tax Authority, ID copy, etc.)
• Consumption data (previous actual bill, etc.)
• Assets (lease agreement, title of acquisition)
• Data of judicial decisions (divorce decrees, legal guardianship)
Creation of lists for the implementation of promotional activities
• Basic Data of Natural Person (tel., address, email, full name, sex, date of birth, family status, etc.)
• Metering data (e.g. annual consumptions, supply number)
Management of payments by billing and cash in bank stores
• Basic Data of Natural Person (full name, tel., address, etc.)
• Unique identifiers (TIN, etc.)
• Metering data (supply number)
• Financial data (account amount, payment code, justification - if it contains personal data, RF)
Management of payments via POS in stores and cash or APS in the store of Kifisia
• Basic Data of Natural Person (full name, tel., address, etc.)
• Unique identifiers (TIN, etc.)
• Financial data (account amount, payment code)
Management of payments through MyElpedison platform and pay on-line
• Basic Data of Natural Person (full name, father's name, tel., address, etc.)
• Unique identifiers (TIN, ID Number, etc.)
• Financial data (account amount, payment code)
Management of payment requests with standing order via credit card
• Basic Data of Natural Person (full name, father's name, tel., address, data of family status, etc.)
• Unique identifiers (TIN, etc.)
• Metering Data (Supply Number)
• Financial Data (credit card number, token)
Management of payment requests with standing order via bank account
• Basic Data of Natural Person (full name, father's name, tel., data of family status, etc.)
• Unique identifiers (TIN, etc.)
• Metering Data (Supply Number)
• Financial Data - credit card number, payment code (RF)
Sale and Implementation of Drive Green Home service
• Basic Data of Natural Person (full name, father's name, tel., address, etc.)
• Unique identifiers (TIN, ID Number, Tax Authority, etc.)
• Type of residence (detached house, apartment building)
• Consumption data (supply number, etc.)
• Data related to electrical movement (Car chassis No., etc.)
Net metering service sale and implementation
• Basic Data of Natural Person (full name, father's name, tel., address, etc.)
• Unique identifiers (TIN, ID Number, Tax Authority, etc.)
• Type of residence (detached house, apartment building)
• Metering data (consumption, etc.)
• Property Data (e.g. agreed capacity, property contract, regularisations of properties, HEDNO statements, property ownership status, etc.)
Implementation of Energy Efficiency Services Project (including sales, specialized tech designs, specialized contracts with customers)
• Basic Data of Natural Person (full name, father's name, tel., address, etc.)
• Unique identifiers (TIN, ID Number, Number of Passport, Tax Authority, etc.)
• Energy data (e.g. electricity bills, construction plans, etc., household consumption, data registered in an organization, e.g. HEDNO, etc.)
• Property data concerning natural persons (e.g. property titles, building permits, etc.)
• Financial data (invoices, creditworthiness, taxisnet codes communicated by customers to a Company)
• Data related to legalizing documents (e.g. official statements, document validations and/or signatures of professionals in printed material - e.g. lawyers, notaries, engineers, etc.)
Management of the "Video Call" service (via the website)
• Basic Data of Natural Person (full name, email, telephone, address)
• In case the data is provided by the customer its processing concerns also data related to their service provision, such as, e.g., TIN, energy consumption, etc.,
• Image and Sound Data
• Personal data contained in the note message
Chat Service Management
• Basic data of natural person (full name, email, telephone, date of birth, P.C., myElpedison user name)
• Unique identifiers (TIN, ID Number, passport Number, ID/Passport photo, IBAN, IP address, MAC Address, Viber ID and Whatsapp ID, etc.)
• Data connected to a customer (e.g. lease agreement, actual bill from a previous provider, etc.)
• In case the data is provided by the customer, they receive data processing related to their service provision, such as e.g. TIN, energy or natural gas consumption, etc.
Provision of ElectricityHome Fixed program
• Basic Data of Natural Person (full name, father's name, tel., address, profession, date of birth, etc.)
• Unique identifiers (TIN, ID Number, etc.)
• Supply Data (Meter Number, Supply Number)
Legitimate Interests of the Company (Article 6.1 f of the GDPR Regulation)
Preparation of reports on the solvency of potential customers for the determination of the amount of guarantee
• Basic Data of Natural Person (full name, father's name, address, etc.)
• Unique identifiers (TIN, ID Number, etc.)
• Financial data (financial situation of individual enterprises, details of insecurities, guarantees, etc.)
• Metering & Consumption Data (Measures - Consumption)
Management of the Company's legal issues. Indicatively, they refer to: resolution of judicial issues, addressing complaints of clients before Authorities and legal control of contracts
• Basic data of Natural Person (full name, father's name, tel., address, email, sex, etc.).
• Unique identifiers (TIN, ID Number, etc.)
• Financial data (amounts due, financial outstandings, settlements, lawsuit for over-indebted)
• Call data (extracts of recorded calls)
• Data concerning criminal convictions and offences (criminal record)
• Data of judicial decisions (e.g. legal guardianship)
Preparation of internal and external reports of the Marketing department
• Basic Data of Natural Person (full name, father’s name, tel., address, etc.)
• Unique identifiers (TIN, etc.)
• Metering Data (energy consumption, energy behaviour)
• Financial data (profit, cost)
Social Media Management
• Basic Data of Natural Person (full name, tel., profile details)
Reports preparation – Customer Operations (“COPS”)
• Basic Data of Natural Person (full name, father’s name, tel., address, etc.)
• Unique identifiers (TIN, ID Number, etc.)
• Financial data (invoices)
• Metering Data (supply no., energy consumption, energy behaviour)
Carrying out promotional activities via phone calls via Dialler when the call is made without request of the data subject for the investigation of interest to conclude a new contract and/or purchase new products and services and promote the Company’s products
• Basic Data of Natural Person (Mobile/fixed Phone Number)
Retention of a Do not Call list
• Basic Data of Natural Person (Mobile/fixed Phone Number)
Management of a video surveillance system in the Company’s plants and store
• Monitoring data (e.g. image, video, motion detection, etc.)
Keeping the visitor file in the plants
• Basic data of Natural Person (full name)
Assignment of services to a debtor’s notification company in the context of the management of overdue debts / Contact of the Company with Customers for their information regarding their overdue debts and the possibility of deactivation of the supply (via sms).
• Basic Data of Natural Person (full name, father’s name, tel., address, data of family status, etc.)
• Unique identifiers (TIN, ID Number, etc.)
• Metering Data (Supply Number)
• Financial Data (IBAN, Bank Account number)
Customer contact with the Company for the settlement of their overdue debts
• Basic Data of Natural Person (full name, father’s name, tel., address, data of family status, etc.)
• Unique identifiers (TIN, ID Number, etc.)
• Metering Data (Supply Number)
• Financial Data (IBAN, Bank Account number)
Assignment of services to external lawyers for the management of outstanding debts
• Basic Data of Natural Person (full name, father’s name, tel., data of family status, etc.)
• Unique identifiers (TIN, ID Number, etc.)
• Metering Data (Supply Number)
• Financial Data (IBAN, amount of debts, Bank Account number)
Debt management and implementation of cessation of representation
• Basic Data of Natural Person (full name, mobile telephone, address, email, etc.)
• Unique identifiers (TIN, Tax Authority, etc.)
• Metering Data (energy consumption), bills
• Financial Data (amount due, settlements)
• Social Residential Tariff – vulnerable customers
Consent (Article 6.1a of the GDPR Regulation)
MyElpedison Platform Management (Account Creation)
• Basic Data of Natural Person (full name, father’s name, tel., address, date of birth, email, user name, etc.)
• Unique identifiers (TIN)
• Metering Data (energy consumption, energy behaviour, energy and/or gas supply number)
• Billing data (electricity and/or natural gas bills’ record in pdf format)
Carrying out individual Promotional Activities through MyElpedison platform
• Basic Data of Natural Person (full name, father’s name, tel., address, date of birth, email, user name, etc.)
• Unique identifiers (TIN)
• Metering Data (energy consumption, energy behaviour, energy and/or gas supply number)
Carrying out satisfaction surveys
• Basic Data of Natural Person (phone, email, full name, etc.)
Newsletter service management (via the website)
• Basic Data of Natural Person (full name, Email)
Carrying out promotional activities through digital contests
• Basic Data of Natural Person (full name, tel., Email)
• Data related to Social Network accounts (Nickname, Profile, comments on social networks)
Management of the “Video Call” service (via the website)
• Basic Data of Natural Person (full name, email, telephone, address)
• In case the data is provided by the customer its processing concerns also data related to their service provision, such as, e.g., TIN, energy consumption, etc.,
• Image and Sound Data
• Personal data contained in the note message
Legal obligation of the Company (Article 6.1c of the GDPR Regulation)
Transmission of ‘MYDATA’ list (Customers’ aggregate data) / GSIS
• Basic Data of Natural Person (full name, father’s name)
• Unique identifiers (TIN, etc.)
• Financial data (value of billing documents, value of transactions in the year, number of billing documents)
• Metering data (e.g. annual consumptions, supply number) – as to customers
Management of requests, questions and complaints
• Basic data of Natural Person (tel., address, email, full name, father’s name, date of birth, etc., occupation)
• Unique identifiers (TIN, ID Number, Tax Authority, ID copy, Natural Gas Delivery Point Identification Code, etc.)
• Consumption data (previous actual bill, etc.)
• Assets (lease agreement, title of acquisition)
• Data of judicial decisions (divorce decrees, legal guardianship)
• Call data (recorded calls)
Management of register as per article 11 of L. 3471/2006
• Basic Data of Natural Person (telephone)
Management of representation requests (on supply start and interruption, changes of connection data)
• Basic Data of Natural Person (full name, mobile phone, address, e-mail, etc.)
• Unique identifiers (TIN, ID Number, Tax Authority, etc.)
• Metering Data (supply number)
• Financial Data (Ε1 and Ε9 tax forms, lease agreement)
• Accounts of previous providers where it may be indicated that the customer is a beneficiary of a social tariff
With regard to the data of specific categories processed, in the context of the fulfilment of the following processing purposes, we collect the following personal data:
Management of the Company's legal issues (Indicatively, they refer to: Resolution of Judicial Issues, Treatment of Customer Complaints before Authorities and Legal Review of Contracts):
• Health data
Sales management through Employees' offers (for employees of large customers)
• Data of special categories that may be included in the legal guardianship, in case of a judicial procedure.
Sales management carried out by external sellers (agents)
• Data of special categories that may be included in the legal guardianship, in case of a judicial procedure.
Sales Management via Call Centers
• Data of special categories that may be included in the legal guardianship, in case of a judicial procedure.
Sales management through stores (RETAIL)
• Data of special categories that may be included in the legal guardianship, in case of a judicial procedure.
Preparation of reports on the solvency of potential customers for the determination of the amount of guarantee
• Health Data (e.g. data related to mechanical support, disability, etc.), in case of processing of vulnerable customer data.
Debt management and implementation of cessation of representation
• Health Data (e.g. family status, disability, etc.) in the event that data is processed in the context of the Social Residential Tariff and vulnerable customers.
Management of requests, questions and complaints
• Data of special categories that may be included in the legal guardianship, in case of a judicial procedure.
III. How do we collect your personal data?
We collect personal data of our customers in a variety of ways, such as:
• When you fill in our application for an electricity and/or natural gas supply contract.
• When you contact one of our partners – call center.
• In case, for any reason whatsoever, you visit either one of our plants or our store in Kifisia, via a video surveillance system.
• Following cooperation with third parties, such as mobile and fixed telephony companies, in order to manage the telephone numbers register of article 11 of the GDPR.
• When you contact us through an official corporate profile on social media to address a question, a complaint or any other request.
• When you participate, upon your express consent, in a customer satisfaction survey we conduct.
• When you take part, upon your express consent, in any promotional activity through a contest we conduct.
• When you contact us in order to create or manage your residential or professional electricity and/or natural gas account.
• Following collaboration with third parties, such as with TIRESIAS S.A., in order to check your credit rating.
• When you create an account on myElpedison platform.
• Following cooperation with the Public Authorities in order to deal with legal issues of the Company (Indicatively, they refer to: Resolution of Judicial Issues, Treatment of Customer Complaints before Authorities and Legal Review of Contracts)
• Following cooperation with third parties, such as HEDNO, ADMIE, etc., in order to invoice metering data and to resolve pricing issues.
IV. For what purposes do we collect and process your personal data?
In the framework of the conclusion and operation of your contract with our company, or in the context of legitimate interests we pursue, we collect and process your personal data, as well as information pertaining to your electricity and/or natural gas consumption, and/or any other product you may have selected, in order to be able to provide you with the requested services, to issue your bill and to inform you about your consumption, and to manage, provide, customize and improve our customer support, services and business activities. General framework for the processing of personal data:
• To issue and send you the bills for electricity and/or natural gas consumption and/or any other product and/or service you may have selected.
• To provide you with the products and/or services required based on the specific provisions of our agreement.
• To notify you about important modifications or developments as regards already provided services.
• To contact us via e-mail, fax, telephone or other means, for any matter arising out of the performance of our agreement, including response to your questions or complaints concerning our products and services provided.
• To carry out controls in the TSEK system of TEIRESIAS S.A. and assess or reassess the trading risk assumed in the framework of this agreement.
• To assign a search for any arrears in case of an irregular development of our contractual relation to a debtors’ notification company.
• To protect our rights before any Court and any Authority, as well as for purposes of execution of and compliance with court decisions or the provisions of law, directives, regulations, circulars.
• To guarantee an account protection, in case this is provided by the relevant product you have chosen.
• To promote you our products and services via SMS, telephone, e-mail, fax, correspondence, social media and/or any other appropriate communication channels.
• To draft your energy profile in order to meet your needs and provide you with the appropriate products and/or services. Basic information regarding the preparation of the energy profile will be found on our website (https://www.elpedison.gr/gr/exupiretisi-pelaton/faq/).
During your pre-contractual service provision, we collect and process your personal data in order to contact you upon your request. In case you contact us for the purpose of settling your overdue debts, we process your personal data at your request.
• To conduct a research and/or analysis in order to better understand your needs, preferences, interests, experiences and/or habits as a consumer.
• For the operation and management of any loyalty and/or reward schemes, and/or in the case of contests.
• For the management of the MyElpedison platform and the creation of an account, aiming to better monitor your data, as well as the easier payment of the bill through it.
• For the sending of a newsletter, if you wish, as well as the use of the Video Call service, via the ELPEDISON website.
More specifically, the legal bases on which processing of your data is based are detailed below, as per specific purpose of processing:
Performance of the contract (Article 6.1 b of the GDPR Regulation)
• Customer Return Management
• Payments Management with standing order via credit card
• Creation of Lists for Retention
• Provision of Elpedison Protect program
• Management of acceptance of participation in promotional activities
• Management of applications with an Online application on the website ("e-contract")
• Click to call service management (via the website)
• Operation of "Live Chat" service (via the website)
• Below the line advertising
• Sales management through employees' offers (for employees of large customers)
• Carrying out promotional activities via phone calls, via dialler; when the call is made at the request of the data subject to submit an offer, it may be considered as a pre-contractual negotiation and, therefore, legal basis for such processing is that the processing is necessary in order to take measures at the request of the data subject (existing customer) prior to the conclusion of a contract.
• Sales management carried out by external sellers (agents)
• Sales management via Call Centers
• Sales management through stores (RETAIL)
• Creation of lists for the implementation of promotional activities
• Management of payments by billing and cash in bank stores
• Management of payments via POS in stores and cash or APS in the store of Kifisia
• Management of payments through the MyElpedison platform and pay on-line
• Management of payment requests with standing order via credit card
• Management of payment requests with standing order via bank account
• Sale and Implementation of Drive Green Home service
• Net metering service sale and implementation
• Implementation of Energy Efficiency Services Project (including sales, specialized tech designs, specialized contracts with customers)
• Management of the "Video Call" service (via the website)
• Chat Service Management
• Provision of ElectricityHome Fixed program
Legitimate Interests of the Company (Article 6.1 f of the GDPR Regulation)
• Preparation of reports on the solvency of potential customers for the determination of the amount of guarantee
• Management of the Company's legal issues. Indicatively, they refer to: resolution of judicial issues, addressing complaints of clients before Authorities and legal control of contracts
• Preparation of internal and external reports – Marketing
• Social Media Management
• Reports preparation - Customer Operations ("COPS")
• Carrying out promotional activities via phone calls via Dialler when the call is made without request of the data subject for the investigation of interest to conclude a new contract and/or purchase new products and services and promote the Company's products
• Retention of a Do not Call list
• Management of a video surveillance system in the Company's plants and store
• Keeping the visitor file in the plants
• Assignment of services to a debtor's notification company in the context of the management of overdue debts / Contact of the Company with Customers for their information regarding their overdue debts and the possibility of deactivation of the supply (via sms).
• Customer contact with the Company for the settlement of their overdue debts
• Assignment of services to external lawyers for the management of outstanding debts
• Debt management and implementation of cessation of representation
Consent (Article 6.1a of the GDPR Regulation)
• MyElpedison Platform Management (Account Creation)
• Carrying out individual Promotional Activities through MyElpedison Platform
• Carrying out satisfaction surveys
• Newsletter service management (via the website)
• Carrying out promotional activities through digital contests
• Management of the "Video Call" service (via the website)
Legal obligation of the Company (Article 6.1c of the GDPR Regulation)
• Transmission of 'MYDATA' list (Customers' aggregate data) / GSIS
• Management of requests, questions and complaints
• Management of register as per article 11 of L. 3471/2006
• Management of representation requests (on supply start and interruption, changes of connection data)
Finally, with regard to the data of special categories processed, the legal bases on which processing of your data is based per purpose of processing are the following:
• Management of the Company's legal issues (Indicatively, they refer to: Resolution of Judicial Issues, Treatment of Customer Complaints before Authorities and Legal Review of Contracts):
Processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity (Article 9.2 f of the GDPR Regulation)
• Sales management through employees' offers (for employees of large customers)
The data subject's explicit consent (Article 9.2a of the GDPR Regulation) or the processing relates to personal data which are manifestly made public by the data subject (Article 9.2e of the GDPR Regulation)
• Sales management carried out by external sellers (agents)
The data subject's explicit consent (Article 9.2a of the GDPR Regulation) or the processing relates to personal data which are manifestly made public by the data subject (Article 9.2e of the GDPR Regulation)
• Sales management via Call Centers
The data subject's explicit consent (Article 9.2a of the GDPR Regulation) or the processing relates to personal data which are manifestly made public by the data subject (Article 9.2e of the GDPR Regulation)
• Sales management through stores (RETAIL)
The data subject's explicit consent (Article 9.2a of the GDPR Regulation) or the processing relates to personal data which are manifestly made public by the data subject (Article 9.2e of the GDPR Regulation)
• Preparation of reports on the solvency of potential customers for the determination of the amount of guarantee
Processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law in so far as it is authorised by Union or Member State law or a collective agreement pursuant to Member State law providing for appropriate safeguards for the fundamental rights and the interests of the data subject (Article 9.2 b of the GDPR Regulation).
• Debt management and implementation of cessation of representation
Article 9.2.b: "processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law in so far as it is authorised by Union or Member State law or a collective agreement pursuant to Member State law providing for appropriate safeguards for the fundamental rights and the interests of the data subject"
• Management of requests, questions and complaints
Processing relates to personal data which are manifestly made public by the data subject (Article 9.2 e of the GDPR Regulation)
V. Who do we disclose and/or transmit your personal data to?
In order to facilitate the attainment of our purposes, which are referred to in point “IV. For what purposes do we collect and process your personal data?”, we may transmit, disclose, grant access to your personal data or share it with third parties. In this case, third parties may be:
• Any third party providing services of management, marketing and research, distribution, data processing, teleshopping, telecommunications, (electronic) payments, card storage and tokenization services or other services, or supports the operation of our business activities
• Any third party providing customer support services or services for the satisfaction of customer requests
• Other partners providing our company with data centers or servers or software products.
• Products promotion companies and other trading partners
• Market research companies, advertising companies and third parties carrying out contests
• Financial institutions
• Lawyers, law firms and legally operating debtors' information companies, according to the particular provisions of the applicable legislation
• Insurance companies
• TEIRESIAS S.A.
• Public services, legal persons, judicial authorities, regulatory bodies and agencies, regardless of jurisdiction or instance, if this is required by Law, Judicial Decision, Regulation, Directive, order, opinion, circular, etc.
• Auditors, accountants, notaries, lawyers, bailiffs or other financial or professional consultants
• Third suppliers within the framework of the applicable provisions regarding the supply of electricity and/or natural gas
• Video surveillance companies in the context of the protection of persons and goods in the store of Kifisia and in our plants
• Our special or universal successors in case of sale, disposal, merger, liquidation of our business
VI. How do we ensure the protection of your personal data?
In order to ensure the proper use and integrity of the personal data collected, as well as prevent unauthorized or random access, processing, deletion, distortion or other use thereof, our company implements different internal policies and procedures, while adopting all necessary organization, technical, physical, electronic and procedural safety measures, as well as technological standards, in accordance with the applicable Laws and Regulations.
VII. How long do we keep your personal data?
We keep your data for any period of time that the purposes, for which such data were collected, are still effective and, in any case, for a period no longer than five years upon termination or expiry of the contract, with the exception of a case of lis pendens or administrative procedure, in which case the data is kept until the issue of a final judgment or the completion of a procedure before the Administrative Authority competent for each specific case. The data in our files and system are consequently destroyed, in compliance with our corporate policy and under the condition that they are no longer required to be kept for the fulfilment of the purposes detailed to you above, or for meeting our business, tax or accounting requirements, or for defending our rights before all competent Courts or any other Authority.
We maintain your personal data in case you do not enter into a contract with us for a period of thirty (30) days.
VIII. What are your rights (data subject rights)?
As customers and as natural persons whose data are processed by us, according to the GDPR, you have the following rights, which can be exercised on a case-by-case basis and under the reservations of the applicable national legislation in general:
• Right to access your personal data
• Right to rectification and/or completion of your data
• Right of erasure/ right to be forgotten
• Right to restriction of processing
• Right to object to the processing of your data
• Right to data portability
• Right to withdraw your consent for the individual processing purposes where consent is requested (see in detail above).
As regards the exercise of your rights:
If you wish to receive further information regarding the processing of your personal data or to exercise any of your above rights, you may contact the Company through physical correspondence to: ELPEDISON S.A., to the attention of the Data Protection Officer (DPO), 6, Fragkokklisias St., 15125 Marousi, and/or via e-mail to the Data Protection Officer (DPO) at the e-mail address dpo@elpedison.gr.
Our response to your request will take place within (1) one month from its receipt and does not imply any cost for you. The above deadline may be extended for a period of two (2) additional months, due to the complexity or number of requests, in which case you will be informed of the extension and its reasons as soon as possible and at the latest within a month from the receipt of the request.
In case you consider that: a) any of your requests has not been adequately and lawfully met or b) the right to the protection of your personal data is affected by any processing we carry out, you have the right to lodge a complaint with the Personal Data Protection Authority (mailing address: 1-3, Kifisias Ave., P.C. 115 23, Athens, https://www.dpa.gr/, tel. +30 210 6475600, e-mail: contact@dpa.gr).
IX. How can you contact us?
For more information or clarifications concerning our company’s policy on the protection of your personal data, please contact us either by post at the address listed in the contact information below: ELPEDISON S.A., to the attention of the Data Protection Officer (DPO), 6, Fragkokklisias St., 15125 Marousi, tel. +30 2103441000, or via e-mail at the address dpo@elpedison.gr. We would be happy to accommodate you.
Date of Issue: 19/04/2024
