Website Privacy Policy

XENOS Packaging A.E. (hereinafter referred to as “XENOS Packaging A.E.” or “we”) strives to offer an experience that meets the needs of visitors to our Website by responsibly using the information collected through it. We are committed to respecting your privacy and complying with applicable data protection and privacy laws.

The processing of your personal data is governed by these terms, by the relevant provisions
of Greek and European legal frameworks for data protection, including the General Data Protection Regulation (GDPR, 2016/679),
and by the relevant decisions, guidelines, and regulations issued by the Hellenic Data Protection Authority.

This Website Privacy Policy (hereinafter referred to as “the Policy”) may be subject to modifications. We advise you to regularly check the Policy to stay informed of any changes. By visiting and navigating our Website, you accept the Policy as it stands. In the event of significant modifications, we will ensure that a relevant notice is published for the visitors of our Website.

This Policy explains how we collect, process, and/or use the data we receive through our Website, as it applies from time to time. It also describes how we collect, process, use, and share your personal data, which you provide to us. Additionally, it outlines your choices regarding the use, access, transfer, correction, and deletion of your personal data.

For the purposes of this policy, the following terms must be clarified:

Personal Data refers to information related to a living natural person who can be identified, directly or indirectly, especially by reference to an identifier such as a name, an identification number, location data, online identifiers, or one or more factors specific to the physical, physiological, economic, cultural, or social identity of that natural person.

Special categories of personal data are personal data that include information concerning (a) the racial or ethnic origin of the data subject, (b) their political opinions, (c) their religious beliefs or other similar beliefs, (d) their membership in a trade union, (e) their physical or mental health or condition, (f) their sexual life, (g) any criminal offense or alleged offense committed by them, or (h) any proceedings for any offense committed or alleged to have been committed by them, the disposal of such proceedings, or the sentence of any court.

Data Processing, with respect to information or data, refers to the collection, recording, or possession of the information or data, or the conduct of any operation or set of operations on the information or data, including: (a) the organization, adaptation, or alteration of the information or data; (b) the retrieval, consultation, or use of the information or data; (c) the disclosure of the information or data by transmission, dissemination, or any other form of availability; or (d) the association, combination, blocking, deletion, or destruction of the information or data.

Data Subject is the natural person to whom the personal data relates.

Data Controller means a legal person who (either alone or jointly or in common with other Data Controllers) determines the purposes for which and the manner in which any personal data are, or are to be, processed.

Data Processor means, in relation to personal data, any natural or legal person other than the data controller who processes the data on behalf of the Data Controller.

Third party, with respect to personal data, means any person other than: (a) the Data Subject, (b) the Data Controller, or (c) any processor or other person authorized to process data for the Data Controller or the processor.

Principles governing the processing of personal data
We ensure full compliance with the applicable Data Protection Legal Framework, including the GDPR, and we process personal data according to the fundamental principles in force. In this context, we ensure that personal data:

a) are processed lawfully and fairly with transparency regarding the data subjects.
The legal bases for processing are described below. We ensure that one of these applies when processing personal data:

• Consent: The individual has provided clear and unequivocal consent, allowing us to process their personal data for a specific purpose.
• Contract: Processing is necessary for the execution of a contract between us and the individual, or to take measures at the request of the data subject prior to entering into a contract.
• Legal Obligation: Processing is necessary for us to comply with the law (excluding contractual obligations).
• Vital Interests: Processing is necessary to protect someone’s life or other vital interests.
• Public Interest: Processing is necessary to carry out a task performed in the public interest.
• Legitimate Interests: Processing is necessary for the legitimate interests pursued by us or a third party, except where such interests are overridden by the interests or fundamental rights of the data subject.

b) Personal data are collected for specific, explicit, and legitimate purposes and are not further processed in a manner incompatible with those purposes.Further processing for purposes of archiving in the public interest, scientific or historical research, or statistical purposes is not considered incompatible with the initial purposes.

c) Data must be adequate, relevant, and limited to what is necessary for the purposes for which they are processed. Personal data should be sufficient, relevant, and not excessive in relation to the purpose or purposes for which they are processed.

d) Data must be accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that data which are inaccurate, in light of the purposes for which they are processed, are erased or corrected without delay.

e) Data should be retained in a form that permits identification of data subjects only for as long as necessary for the purposes for which personal data are processed. Personal data may be stored for longer periods if processed solely for archiving in the public interest, scientific or historical research, or statistical purposes, provided that appropriate technical and organizational measures required by the applicable data protection regulatory framework are implemented to safeguard the rights and freedoms of individuals.

f) Data must be processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage, using appropriate technical and organizational measures. Appropriate technical and organizational measures will be taken to prevent unauthorized or unlawful processing of personal data and accidental loss or destruction of data.

g) Data are not transferred to a country or territory outside the European Economic Area, unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.

We collect information about you to provide our services. In order to deliver our services in the best possible way and to communicate with you and respond to your requests, it is necessary for us to collect and use data as described in this Policy.

2.1 Data We Collect Through the Contact Form
When you provide your personal data by entering it into specific fields on the website of XENOS Packaging S.A., we collect and retain your data exclusively for the purposes mentioned below. In this context, we collect the data you voluntarily provide, such as your first name, last name, phone number, email address, and physical address.

2.2 Data We Collect Automatically
When you use our website, your device automatically provides us with data so that we can serve you and tailor our responses to you. The type of information we collect automatically generally includes technical information about your computer, such as your IP address or other device identifier, the type of device you are using, and the version of your operating system. The data we collect may also include usage information and statistical data related to your interactions with the website. This may include information about the URLs of the web pages you visited on our site, referring/exit pages, page views, the time spent on a page, the number of clicks, the platform type, location data (if you have enabled location access), and other details about how you used the platform.
This information is collected using Cookies. We recommend checking our Cookie Policy (find it here) to learn more about Cookies, how we use them, and how you can control their usage.

We process your data exclusively for the following purposes:

Access to your data is only granted to our appropriately authorized employees or external partners acting on our behalf, for the aforementioned processing purposes. This includes IT services for recording and storing your data, as well as the operation of our website.

The retention period may vary significantly depending on the type of data and how it is used. The determination of the data retention period is based on criteria such as legal retention periods, ongoing or potential disputes, intellectual property or ownership rights, contractual requirements, business directives or needs, and historical archiving.

Appropriate physical, electronic, and organizational measures have been taken to prevent unauthorized access to your personal data, maintain data integrity, and ensure data availability.

XENOS Packaging S.A. ensures your rights regarding the processing of personal data and the exercise of these rights.

To exercise any of the above rights, you may send us an email at [email protected] or send a written request using our contact details below.
In any case, if you believe that your data protection rights have been violated, you have the right to file a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

CONTACT DETAILS
XENOS Packaging S.A.
Thessaloniki, VIPE Sindos, Sindos 57022
Phone: +30 2310 569180
Email: [email protected]

Last updated: December 2023