Notice on Article 13 of Regulation (EU) 2016/679 for the processing of personal data

DIANIK BROSS SHIPPING CORP. S.A. with business address at 46 Filonos Str., Piraeus 185 35, phone no. + 30 210 411 0357, email: This email address is being protected from spambots. You need JavaScript enabled to view it.. (hereinafter referred to as "the Company"), addresses with respect and as primary concern issues of personal data and privacy. In this context, we are addressing you this Notice in accordance with Article 13 of Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95 / 46 / EC (General Data Protection Regulation) (hereinafter referred to as "GDPR") to inform you about how we collect and process your personal data when visiting our website (www.dianikbross.gr)

It shall be noted that personal data is any information relating to an identified or identifiable natural person.

 

1. DEFINITIONS

1.1. For the purposes of this Addendum, the following definitions apply:

“GDPR” shall mean Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

“Applicable Data Protection Law” means all applicable laws, regulations, legislative and regulatory requirements, and codes of practice applicable to the processing of personal data, including all the provisions of the GDPR, and any other relevant laws, regulations or instruments, as amended or superseded from time to time and together with any regulations or instruments made thereunder, that are applicable to a controller or processor.

“Personal Data” means any information relating to an identified or identifiable natural person (hereinafter “Data Subject”); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of such a natural person.

“Controller” is the natural or legal person, authority, organization or other agency that makes decisions individually or together with other parties regarding the purposes and means for processing Personal Data.

“Processor” is a natural or legal person, authority, organization or other agency that processes Personal Data on behalf of the Controller.

“Sub-processor” is the contractual partner of the Processor, engaged to carry out specific processing activities on behalf of the Controller.

“Third Party” means a natural or legal person, public authority, agency, or body other than the Data Subject, Controller, Processor, Sub-processor, and persons who, under the direct authority of the Controller, Processor or Sub-processor, are authorized to process Personal Data.

The terms used in this Addendum such as “processing” (and “process”), “transfer of data”, “categories of data”, “personal data breach” and “technical and organizational measures” shall have the meaning ascribed to them in the Applicable Data Protection Laws.

 

2. Controller

The Controller is the Company as defined above. This means that the Company determines he purposes and manner of processing your personal data in accordance with the GDPR and the general applicable legislation.

 

3. Sources of personal data collection

The Company collects your personal data directly from you via your pc device, tablet or smartphone and not from third parties.

 

4. Processing of personal data and legal bases

The following table lists the purposes of processing personal data collected by the Company for the purposes indicated below when you use our website, the categories of such data, as well as the legal basis for their processing.

 

Purpose of Processing	Personal Data	Legal Basis of Processing (GDPR provisions)
Communicating with us	Name, Surname, e-mail address, Phone	Art.6 § f) processing is necessary for the purposes of the legitimate interests pursued by the Company and in particular for the promotion of its aims and actions.
Provide, troubleshoot, and improve Our Services. We use your personal information to provide functionality, analyse performance, fix errors, and improve usability and effectiveness of the our website.	·                the Internet protocol (IP) address used to connect your computer to the Internet; ·                the location of your device or computer; device metrics such as when a device is in use, application usage, connectivity data, and any errors or event failures;	Art.6 § f) processing is necessary for the purposes of the legitimate interests pursued by the Company and in particular for the promotion of its aims and actions.

 

5. Disclosure to third parties and recipients

Access to your data shall also be available to IT professionals in the context of providing relevant services to the Company if this is necessary in the context of their services.

 

6. Security

The Company shall process your personal data in a manner that ensures its protection by taking all appropriate organizational and technical measures for data security and its protection against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access and any other form of illicit processing.

 

7. Subjects' rights

This section presents your rights with respect to your personal data. These rights are subject to certain exceptions, reservations or limitations. Please submit your requests responsibly. The Company will respond as soon as possible and in any case within one (1) month of receipt of the request. If the review of your request is going to take longer, you will receive relevant information. To exercise your rights, you can contact the email: This email address is being protected from spambots. You need JavaScript enabled to view it.

 

The Company ensures the exercise of your rights:

7.1 The right to information 

You have the right to request and receive clear, transparent and easily understandable information about how we process your personal data in accordance with the Company's policies and procedures.

 

7.2 The right to access

You have the right to access your personal data free of charge in accordance with the relevant policies and procedures of the Company, except in the following cases where there may be a reasonable charge to cover the administrative expenses of the Company:

manifestly unreasonable or excessive / repeated requests, or

additional copies of the same information.

 

7.3 The Right to rectification

You have the right to ask for your personal data to be corrected if it is inaccurate or incomplete, in accordance with the relevant policies and procedures of the Company.

 

7.4 The right to erase («to be forgotten»)

You have the right to request the deletion or removal of your personal data when it is no longer necessary for the purposes collected or there is no legitimate reason to continue processing it in accordance with the Company's policies and procedures. The right of deletion is not absolute, to the extent that there is a particular legal obligation or other legitimate reason for the retention of your personal data by the Company.

 

7.5 The right to restriction of processing

In some cases, you have the right, in accordance with the relevant policies and procedures of the Company, to restrict or remove further processing of your personal data. In cases where processing has been restricted, your personal data remains stored, without further processing.

 

7.6 The right to data portability

You have the right to request your personal data, which you have provided to us in a structured, commonly used and machine readable format, and to transfer that data to another controller in accordance with the relevant policies and procedures of the Company.

 

7.7 The right to object

You have the right to oppose, at any time and for reasons related to your particular situation, to the processing of your personal data based on Article 6 (1) (f) of the GDPR  (processing for reasons of lawful interest of the Company), on the basis of that provision. In such a case, the Company as controller will no longer submit the personal data unless it demonstrates imperative and legitimate reasons for processing that override the interests, rights and freedoms of the subject, or the filing, exercise or support legal claims.

 

7.8 Rights on automated decision-making mechanisms

The Company does not make automated individual decision-making, including profiling.

 

7.9 How to exercise the right

The exercise of the aforementioned rights takes place with the submission of a written application to the Company in accordance with its policies and procedures. The Company reserves the right to reply no later than one month after receiving the request, in accordance with the terms of the GDPR.

 

8. Time of retention of personal data

For each category of personal data, the Company determines the retention time in accordance with the provisions of the law and its policies and procedures.

 

9. Communication Officer for personal data issues

For any matter relating to the processing of personal data and the present, please contact us at This email address is being protected from spambots. You need JavaScript enabled to view it.  /tel: +30 210 411 0357

 

10. Contact of the Data Protection Authority

For further information and advice on your rights or to submit a complaint, you can contact the Greek Data Protection Authority (www.dpa.gr ):

Postal Address:Data Protection Authority Offices: Kifissias 1-3, 115 23 Athens, Greece

Call Center: +30-210 6475600

Fax: +30-210 6475628

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

 

11. Amendments of the present Notice

We aim to review and keep up-to-date the present Notice in order to comply with privacy laws and new developments. Any updates to this Notice will be communicated to you immediately.

 

Publication date: 06/03/2019