This Personal Data Protection Policy of Dalsia Hellas S.A. (the “Privacy Policy”) is based on the requirements of Regulation (EC) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (“Regulation (EC) 2016/679”).
This Privacy Policy applies to your personal data processed by Dalsia Hellas S.A. in order to provide you with services in line with the organisation’s purpose. It is also relevant to personal data processed on the website dalsia.gr.
This Privacy Policy aims to explain why and how we process and protect your personal data in a clear and understandable way.
Who we are and how to contact us
Greece
Dalsia Hellas S.A.
86 Mikras Asias St., Stavroupoli
56431 Thessaloniki
Tel. 2310 60 50 41
Email: nikolaos.sakkos@dalsia.com
To contact the Data Protection Officer, you can send an e-mail to nikolaos.sakkos@dalsia.com, or contact us by post at: Dalsia Hellas S.A., 86 Mikras Asias St., Stavroupoli, 56431 Thessaloniki — and write the following text: For the attention of the Data Protection Officer of Dalsia Hellas S.A.
What kinds of personal data do we collect and process?
We process your personal data in accordance with applicable law — in a lawful, conscientious and transparent manner. We collect the minimum amount of personal data, limited to the purposes for which it is needed.
As a controller, and in some cases also as a processor of personal data, Dalsia Hellas S.A. strives to provide an adequate level of data protection for its customers and to process the data in accordance with applicable law.
Depending on the specific purposes, Dalsia Hellas S.A. collects and processes the following data, individually or in combination:
- Personal data provided by you to identify and fulfil contractual obligations: full name, address, landline and mobile phone number, e-mail, subscriber number with the heating company.
- Personal data provided through our online platform during registration and the completion of various forms: names, address, phone, e-mail, IP addresses, logs, cookies.
- Personal data provided through job applications, letters, complaints and other feedback we receive from you.
Dalsia Hellas S.A. processes personal data in different ways. As a data controller, Dalsia Hellas S.A. uses the data only to fulfil our contractual obligations, customer service, feedback and marketing. Advertising use of data is possible only for the purposes of our own market research and advertising. We do not provide this data to third parties without your explicit consent, unless it is for the fulfilment of a legal obligation or to protect the legitimate interests of the Company.
As a processor of personal data, your personal data will be provided to Dalsia Hellas S.A. by district-heating companies, water and sewerage companies, metrology laboratories, natural and legal persons and/or their proxies/representatives authorised by the buildings (condominiums), as well as through requests received from state authorities for information.
What are the purposes and the legal basis for processing your personal data?
Dalsia Hellas S.A. processes your data for the following purposes:
- Performance of contractual obligations and services, as well as the management of relationships with the customers of our services.
- In order to carry out the heat cost-allocation services and the accompanying customer service relating to compliance with the relevant legal obligations of Dalsia Hellas S.A. arising from current provisions and the general terms of the district-heating companies, and to fulfil our contractual obligations to which the data subject is a party. Processing of personal data is also necessary to fulfil our obligations in the field of tax and accounting legislation.
- Creation and management of profiles on our corporate website and Dalsia online services.
- Personal data may, in accordance with the Regulation, be processed for the purposes of the legitimate interests of Dalsia, including legal protection / legal claims against the company.
We process your personal data lawfully, fairly and transparently. We limit the collection of personal data and collect only the minimum necessary and relevant to the processing objectives. We ensure the data is accurate and up to date. We ensure the confidentiality of the processing and an adequate level of personal-data security.
How long do we keep your personal data?
Dalsia Hellas S.A. is obliged to store the necessary personal data for the period of the contractual relationships with us, as well as with the district-heating and/or water-supply companies and/or the heat consumers and recipients of the shared heat-distribution service, taking into account the limitation periods provided by law. In pending lawsuits, claim procedures and/or other cases, personal data may be stored for a longer period and for as long as required.
Personal data is deleted in an appropriate, secure and confidential manner upon expiry of the legal or contractual grounds for its processing. You may withdraw your consent to the processing of your personal data when the processing is based solely on your consent.
Categories of third-party recipients of personal data
In accordance with the requirements of EU Regulation 2016/679, Dalsia Hellas S.A. has the right to disclose personal data information to third parties only if it is necessary for carrying out the assigned activities and subject to a written agreement guaranteeing that the processors comply with all legal obligations for the protection of personal data.
Personal data may be provided to controllers and processors of personal data — district-heating companies, government bodies. Personal data may also be provided to subcontractors performing services on our behalf (courier services, metrological inspections, IT services, lawyers, accountants, etc.).
Security measures for data protection
We are committed to ensuring the security of your personal data by applying the following measures:
- Appropriate organisational measures
- Technical measures for physical protection
- Protection of automated information systems and networks
- Individual protection measures
- Regulatory and administrative measures
Regular reviews are carried out of all procedures and rules for data processing, including the system’s security measures.
What are your rights regarding the processing of personal data by Dalsia Hellas S.A.?
As a customer, you have the following rights in relation to your personal data:
- Information about and access to your personal data.
- Correction (if the data is inaccurate).
- Restriction of the processing of personal data.
- The right to data portability.
- Erasure of personal data if there is a legal basis for it.
- Objections to the processing of your personal data.
To exercise your rights, Dalsia Hellas S.A. may ask you to verify your identity by requesting the necessary identification.
The conditions under which these rights may be exercised are governed by Chapter III (Articles 12 to 23) of the Regulation.
You also always have the right to a judicial or administrative remedy in the event of a breach of your rights. To do so, you must lodge a complaint with the local supervisory authority regarding the processing of your personal data. In Greece, this is the Hellenic Data Protection Authority. The Authority’s web portal is www.dpa.gr, through which you can submit your complaint form in one of the following ways:
- Electronically, by sending an email to: complaints@dpa.gr
- Through the Authority’s web portal: www.dpa.gr. In this case, you must register as a “Citizen” and select the “Submit a complaint” option. Leave all fields blank and simply attach the complaint form.
- By post to the Authority’s offices: Hellenic Data Protection Authority, 1-3 Kifisias Ave., 115 23 Athens.
- By in-person submission at the Authority’s offices (1st floor). Public hours at the registry office: 09:00 – 13:00.
- By fax to +30 210 6475628.