Privacy Policy

Article 1. Data controller

The controller of personal data collected through www.lazaridisengineering.com is the limited partnership “ΛΑΖΑΡΙΔΗΣ ΣΥΜΒΟΥΛΟΙ ΜΗΧΑΝΙΚΟΙ Ε.Ε.”, trading as “LAZARIDIS ENGINEERING LP” (the “Company”), Tax ID 802276296, G.E.MI. No. 173461906000, with its registered office at 89 Megalou Alexandrou St., Trilofos, Municipality of Thermi, Thessaloniki 57500, Greece.

For any matter concerning personal data protection, the Company can be reached at info@lazaridisengineering.com, by phone on +30 2392 111 449, or by post at its registered office.

Article 2. Legal framework

Personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), Greek Law 4624/2019, Greek Law 3471/2006 on privacy in electronic communications, and any other applicable provision of Greek and EU law.

Article 3. Data collected

The Company collects only the data necessary for the purposes of this policy, namely

• Through the contact form, full name, organisation or authority, email address, phone number, subject and message content.
• Through the CV form, full name, contact details, discipline, the CV and the information it contains about the applicant’s education, work experience and qualifications.
• While browsing, technical data such as IP address, date and time of access, device and browser type, recorded automatically for the operation and security of the website.

Applicants are asked not to include special categories of data in their CV (for example health data, religious or political beliefs, racial or ethnic origin), as these are not needed for their assessment.

Article 4. Purposes and legal basis

• Responding to requests and correspondence with contracting authorities, public bodies and other enquirers, based on steps taken at the data subject’s request prior to entering into a contract and on the Company’s legitimate interest (Article 6(1)(b) and (f) GDPR).
• Assessing applicants for current or future positions, based on the applicant’s consent and on steps taken prior to entering into a contract (Article 6(1)(a) and (b) GDPR).
• Security and proper operation of the website, based on the Company’s legitimate interest (Article 6(1)(f) GDPR).
• Compliance with obligations arising from tax, employment or other legislation, and the establishment, exercise or defence of legal claims (Article 6(1)(c) and (f) GDPR).

Data is not processed for purposes incompatible with the above and is not used to send marketing messages. The Company does not take decisions based solely on automated processing, including profiling.

Article 5. Recipients

Only authorised Company personnel have access to the data, to the extent necessary for their duties and under a duty of confidentiality.

Data may be shared with processors such as website hosting, email and technical support providers, and with legal or accounting advisers, who act solely on the Company’s instructions and are contractually bound to confidentiality and appropriate security measures. Data may also be disclosed to public, judicial or supervisory authorities where required by law.

The Company does not sell, rent or provide personal data to third parties for commercial or marketing purposes.

Article 6. Transfers outside the European Economic Area

The Company aims to process data within the European Economic Area. Where a transfer to a third country is required, it takes place only with the safeguards of Chapter V GDPR, such as a European Commission adequacy decision or standard contractual clauses.

Article 7. Retention

• Contact form data is kept for as long as needed to handle the request and, if a working relationship follows, for its duration and for the period required by law.
• CVs are kept for twelve (12) months from receipt, unless the applicant asks for earlier deletion or an employment contract is concluded.
• Technical logs are kept for the minimum period necessary for security purposes.

Once these periods expire, the data is securely deleted or anonymised.

Article 8. Security

The Company applies appropriate technical and organisational measures to protect data against accidental or unlawful destruction, loss, alteration and unauthorised access or disclosure, such as encrypted connections (HTTPS), access control, backups and regular system updates. In the event of a data breach, the Company acts in accordance with Articles 33 and 34 GDPR.

Article 9. Cookies and third-party services

The website uses only strictly necessary cookies for its operation and security. Optional cookies, such as analytics cookies, are used only with the visitor’s prior consent, which can be withdrawn at any time.

The website may include third-party services or links, such as Google Maps. Processing carried out by those third parties is governed by their own privacy policies, for which the Company is not responsible.

Article 10. Rights of data subjects

Subject to the conditions of the GDPR, every data subject has the following rights

• right of access to their data (Article 15)
• right to rectification of inaccurate or incomplete data (Article 16)
• right to erasure (Article 17)
• right to restriction of processing (Article 18)
• right to data portability (Article 20)
• right to object to processing based on legitimate interest (Article 21)
• right to withdraw consent at any time, without affecting the lawfulness of prior processing

Requests can be sent to info@lazaridisengineering.com or through the contact form. The Company responds without undue delay and in any case within one (1) month of receipt, a period that may be extended by two (2) months given the complexity or number of requests. The Company may ask for additional information to confirm the requester’s identity. Exercising these rights is free of charge unless a request is manifestly unfounded or excessive.

Article 11. Right to lodge a complaint

If a data subject believes that the processing of their data infringes the law, they may lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens, www.dpa.gr), without prejudice to any other administrative or judicial remedy.

Article 12. Minors

The website is intended for adults and professionals. The Company does not knowingly collect data from minors and, if it finds that such data has been submitted, deletes it without delay.

Article 13. Changes to this policy

The Company may amend this Policy where legal, technical or organisational changes require it. The current version is published on this page with its last-updated date.