1. Information We Collect

1.1 Personal Data We Collect During Recruitment

We collect personal data in different contexts, including communication, job applications, exercises, and website interactions.

• Communication Data: When you contact us, we collect the information you provide, such as your name, surname, email address, telephone number, and any other details necessary for our services.
• Job Applications (CV Submission): If you submit your CV via our website, career portals, or email, we collect and store data related to your identity (e.g., name, date of birth, father's name), contact details (email, phone, home address), education (qualifications, institutions), skills (languages, IT skills), professional experience (employers, positions, work duration), military obligations (if applicable), and preferred job roles.
• Exercise Submission: If you submit an exercise via email as part of the hiring process, we collect your contact details (email, phone), proposed solutions, comments, and methodological approach. This data is processed strictly for recruitment purposes and will not be used beyond this scope.
• Data We Collect Automatically: When you visit the EWORX website, your device automatically provides information to us so that we can customise our response to you. The type of information we collect by automated means generally includes technical information about your computer, such as your IP address or other device identifier, the type of device you use, and operating system version. The information we collect may also include usage information and statistics about your interaction with the website. That information may include the URLs of our web pages that you visited, URLs of referring and exiting pages, page views, time spent on a page, number of clicks, location data (if you have enabled access to your location on your mobile device), and other information about how you used the website. This information is collected by using cookies and other similar tracking technologies such as Google Analytics. We strongly advise you to review our Cookie Policy in order to learn more about Cookies, how we use them and how you can control the use of Cookies.

1.2 How We Collect Data

We collect personal data through

• Direct Interaction: When you visit our website, request information, submit a request, or apply for a job (including CV submissions).
• Automated Means: When you browse our website, we collect data such as IP address, search history, screen resolution, browser type, operating system, access times, and referring URLs. We also use cookies and tracking technologies.

2. How We Use Your Personal Data

We use your personal data to:

• Provide and manage our services.
• Communicate with you regarding inquiries, customer support, and service updates.
• Enable website access and improve functionality.
• Enhance user experience by optimising website structure, content, and performance.
• Send updates, newsletters, and promotional material (where applicable and with your consent).
• Process job applications, CV submissions, and exercises for recruitment purposes.
• Retain candidate data (with consent) for future employment opportunities.
• Ensure compliance with legal and regulatory obligations.

3. Legal Basis for Processing Personal Data

We process your personal data based on the following legal grounds:

• Performance of the Contract: Processing your data is necessary for a contract you have with us, or because providing such data is necessary to take specific steps before entering that contract (e.g., enter into contract negotiations).
• Legal Obligation: Processing of your data is necessary for compliance with a legal obligation to which we are subject (e.g., when required by law enforcement).
• Legitimate Interests: We may process your data when it is necessary for our legitimate business interests, as outlined in this policy.
• Consent: In certain cases, we will request your explicit consent before processing your personal data for specific purposes.

4. Disclosure of Personal Data

We may share your personal data in the following circumstances:

Legal Compliance and Protection: We may disclose your information to courts, law enforcement, government authorities, or authorised third parties when required by law or necessary to:

• Comply with legal obligations or respond to legal requests.
• Address claims, investigations, or suspected illegal activities.
• Protect our rights, users, or others from legal liability.

Aggregated and Anonymised Data: We may share aggregated or anonymised information for compliance, industry research, demographic analysis, marketing, and other business purposes.

Business Transactions: In the event of a merger, acquisition, reorganisation, asset sale, bankruptcy, or insolvency, we may transfer or share personal data as part of the transaction. We will notify you before your data is transferred under a different privacy policy.

5. Data Retention Period

Retention periods vary based on the type of data and its processing purpose:

• Unsolicited CV Submissions: If you send your CV without applying for a specific job, we will retain it for one (1) year from the submission date unless you request deletion earlier.
• Job Applications: If you apply for a specific job, your CV will be deleted one (1) year after submission unless you request from us to keep it for future opportunities. In that case, it will be stored for up to five (5) years from the last submission, unless renewed. You can request deletion at any time.
• Exercise Submissions: If you submit an exercise as part of the hiring process, we will retain your personal data and responses for one (1) year, after which they will be deleted.
• General Inquiries: If you contact us via the contact form, we will retain your data for one (1) year from submission before deletion.
• Other Cases: Personal data collected for other purposes is retained for a predefined, limited period based on the purpose of processing. After this period, data is deleted unless a longer retention period is required or permitted by law.

6. Data Security

We implement reasonable measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. While we strive to safeguard your information, no internet transmission or electronic storage method is entirely secure. We advise caution when sharing personal data online.

7. Data Controller

The controller of your personal data is:

For any inquiries regarding your personal data or to exercise your rights, please contact us at the above email. All communications and related materials will be handled with strict confidentiality.

8. Data Recipients

Your personal data may be shared with:

• Authorised Company Employees: Only staff members with relevant duties, bound by confidentiality agreements, may process your data as necessary for the purposes communicated to you.
• Regulatory and Public Authorities: Tax authorities or other government agencies, if required for audits or legal compliance.
• External Service Providers: Third-party partners providing accounting, auditing, market research, internet services, technical support, or other essential operational services for the company and its website.

9. Data Subjects

This Privacy Policy applies to:

• Job Applicants: Individuals who submit job applications via the EWORX website, career portals, university internship portals, email, or in writing, whether for specific vacancies or unsolicited applications.
• Exercise Submissions: Candidates who submit an exercise as part of the recruitment process via email or in writing.
• Non-Selected Candidates: Applicants who were not selected but have consented to the retention of their personal data for future job opportunities.
• Website Visitors: Individuals who visit the EWORX website and voluntarily provide personal information.

10. Data Subjects' Rights

EWORX ensures your rights regarding the processing of your personal data and provides the means to exercise them in accordance with applicable data protection laws.

You have the following rights:

• Right to Access: Request information about the personal data we store and how we process it.
• Right to Rectification: Request correction of any inaccurate or incomplete data.
• Right to Erasure: Request the deletion of your personal data at any time.
• Right to Restrict Processing: Request that your data be archived and not processed further, though this may impact the availability of our services.
• Right to Data Portability: Request a copy of your personal data in a machine-readable format for transmission to yourself or another entity.
• Right to Object: Object to data processing based on legitimate interests or withdraw consent at any time by contacting gdpr@eworx.gr. We will assess the request and either stop processing or provide justification for continued processing.
• Right to File a Complaint: If you believe your data rights have been violated, you can file a complaint with the Hellenic Data Protection Authority (1-3 Kifissias Str., P.C. 115 23, Athens, Tel: (+30) 210 6475600) via their website.
• Right to Not Be Subject to Automated Decision-Making: If your personal data is used in automated decision-making, you can request further information or object by contacting gdpr@eworx.gr.
• Right to Information: Receive clear and prompt information about how your data is processed, its origin, and the recipients.
• Right to Know the Identity of Data Controllers and Recipients: Be informed about who controls and processes your data.
• Right to Opt-Out of Marketing Communications: Unsubscribe from promotional messages at any time. To exercise any of these rights, contact gdpr@eworx.gr.

11. International Data Transfers

We store your personal data securely within Greece and the European Union (EU). However, in some cases, we may transfer data to customers, partners, or affiliates located outside the EU, where data protection laws may differ.

To ensure your data remains protected, we apply appropriate safeguards in compliance with GDPR and this policy. When transferring personal data outside the EU, we ensure a similar level of protection by:

• Transferring data only to countries recognized by the European Commission as having an adequate level of data protection.
• Implementing GDPR-compliant safeguards (Article 46), such as Standard Contractual Clauses (SCCs) adopted by the European Commission when working with service providers in non-EU countries.

12. Cookie Policy

When you visit our website, we use "cookies" for web session management and authentication and also for web browser security. Cookies are small text files sent by a website server and stored on your device (such as a computer, tablet or phone). The cookies are also implemented to ensure proper technical functioning of the website, and they help us store user preferences and track usage trends on an aggregated basis. For this reason, we may collect some data on your browsing experience, such as your IP address, browser type, language and screen size, the page you visited, the time and date of the visit and the website page you were redirected from.

This information is used to gather aggregated and anonymous statistics with a view to improving our services and user experience. None of the cookies require your consent. The collection, aggregation and anonymisation of this data are performed under adequate security measures.

Our website also complies with the "Do Not Track" (DNT) option. If you enable the DNT option in your web browser, we will respect your choice and your browsing experience on our website will not be tracked for our anonymised statistics.

13. Updates to This Privacy Policy

We may update this Privacy Statement periodically to reflect changes in our practices or legal requirements. Significant updates will be communicated via our website or other appropriate channels.

14. Contact Us

For inquiries regarding data processing, rights, or confidentiality, contact us at:

• Email: gdpr@eworx.gr
• Tel: (+30) 210 61 48 380

A designated representative within our organisation will respond to your inquiry.

15. Acceptance of Terms

By using our website, services, or products, you acknowledge and accept the terms of this Privacy Statement. If you do not agree with these terms, please refrain from using our services.

EWORX is committed to protecting your privacy and will process your personal data in compliance with Greek Law No. 4624 and EU Regulation (EU) 2016/679 (GDPR).

Definitions

This section defines the terms used in this Policy: