Candidate privacy notice

Below you can find a summary of our Candidate privacy Policy.

This Privacy Notice is addressed to individuals seeking a job at Sioufas & Associates Law Firm and have expressed an interest by applying and / or submitting their CV and any other information or supporting documents.

Sioufas & Associates Law Firm informs you that it processes the personal data contained in your job application and generally any information you provide during your appraisal process. The above includes information provided through online platforms, where you submit your application for employment, by e-mail, in person for interviews and / or in any other way.

Indicatively, Sioufas & Associates Law Firm processes the following categories of your personal data:

  • Your identification data: name, patronymic, date and place of birth, gender, photo, marital status data, etc.
  • Your contact details: postal and e-mail address, landline, and mobile phone, etc.
  • Data related to your education and skills: level and qualifications, educational institution, seminars, professional certifications, participation in educational programs, etc.
  • Data related to your work experience: information about your previous work experience, letters of recommendation, etc.
  • Other data that may be required for your recruitment into Sioufas & Associates Law Firm including any specific categories of personal data (e.g., health data) and / or criminal records and offenses that will be collected by you in the context of assessing your suitability for a specific job and data related to the fulfillment or not of your military obligations.
  • Other information contained in your Sioufas & Associates Law Firm job applications as well as information collected in the context of your placement procedures: data related to any affiliation with Sioufas & Associates Law Firm employees as well as data related to any other professional employment you hold, or you intend to maintain.
  • Information you provide to Sioufas & Associates Law Firm when contacting us by telephone or online.
  • Data resulting from your browsing of the online platform through which you submit your application for employment in Sioufas & Associates Law Firm, including, inter alia, the Sioufas & Associates Law Firm website.

Sioufas & Associates Law Firm collects your data above from the following sources:

  • Directly from you.
  • From persons specifically authorized by you (natural or legal), including third-party employment agencies acting on your behalf.
  • From your previous employers, according to the recommendations you have provided to us.
  • Workable’s technology enables us to link the data you provide to us to other public information about you that you have posted online – including LinkedIn and other social media profiles.
  • Workable’s technology allows us to search various public databases – some are public, and some are not, which may include your personal data (including your CV), to find potential candidates to fill our available jobs. In case we find you in this way, we will receive your personal data from these sources. We may receive your personal data from a third party, who will recommend you as a candidate for a specific job or for our business in general.

Please note that if you disclose personal data of third parties, including former employers, associates, etc. to us, you must have informed those persons of the transfer of their personal data and of their processing by Sioufas & Associates Law Firm by referring them to this Privacy Notice of Sioufas & Associates Law Firm, and you should have obtained any required consent from them.

Sioufas & Associates Law Firm processes your personal data for the purposes of evaluating your application prior to the conclusion of an employment contract, for compliance with its legal obligations, for the purposes of its overriding legal interests or those of a third party, provided that such interests do not affect your interests or fundamental rights and freedoms, as well as in case of your consent. Please note that Sioufas & Associates Law Firm, in principle, does not rely on to your consent for the processing of your personal data, unless specifically required by applicable law or required by the circumstances and nature of a particular processing activity. Specifically, Sioufas & Associates Law Firm processes your personal data for:

  • The assessment of your suitability for the job for which you have applied.
  • To contact you as part of your appraisal evaluation process for employment.
  • Improving the services of finding and evaluating candidates for recruitment in Sioufas & Associates Law Firm.
  • Compliance with any obligations imposed by the applicable legal, regulatory and supervisory framework as well as the decisions of authorities (public, supervisory, prosecutorial, etc.) or courts.
  • Preventing and detecting fraud, or any other illegal act against Sioufas & Associates Law Firm.
  • Considering your application for other positions.
  • The exercise of the legal rights of Sioufas & Associates Law Firm before a court or other authority.
  • Responding to requests from any future employers for recommendations.
  • To help our service providers (such as Workable, data processors) and our partners (such as the job sites you have applied for) improve their services.

Please note that once your consent has been requested and obtained, the processing of your personal data is based on this consent. In such cases you have the right to revoke your consent at any time, without, however, affecting the legality of the processing based on your consent prior to its revocation.

Please note that Sioufas & Associates Law Firm does not make decisions based solely on automated processing of personal data.

As part of the processing of your personal data, Sioufas & Associates Law Firm may forward it to the following recipients:

  • To the Management, the competent departments of the Human Resources Department of Sioufas & Associates Law Firm,
  • for the information that Sioufas & Associates Law Firm is entitled or obliged to disclose under the law, judicial, or regulatory decision as well as for the information the disclosure of which is absolutely necessary to satisfy the legitimate interest of Sioufas & Associates Law Firm to public, supervisory, auditing, independent, judicial, prosecutors, public and / or other authorities or bodies within the framework of their legal competences, duties and powers,
  • to (natural or legal) persons to whom Sioufas & Associates Law Firm entrusts the performance of specific tasks on its behalf and who act as processors of personal data, including the providers of electronic platforms and any of their subcontractors, but also other providers of IT products and / or services and / or support of all kinds of information and electronic systems and networks, including online systems and platforms, storage companies , archiving, management and destruction of files and data, consultancy service providers
  • As mentioned above, we will transfer your information to our third-party service providers, including Workable, who will use it only in accordance with our instructions and as required by law.
  • Where you have applied for a job through another service provider, we may disclose to this service provider data similar to the Disclosure Data set out above. The service provider will be the data controller of such data and will therefore be responsible for complying with all applicable laws regarding the use of this data after their transfer by Us.

Sioufas & Associates Law Firm does not directly transmit your personal data to third countries or international organizations, unless required to do so by applicable regulatory or legal framework. Where applicable, Sioufas & Associates Law Firm may transmit your personal data to third countries, provided that:

  • an adequate level of protection is ensured, in accordance with the European Commission, by the third country, territory or one or more specific sectors in that third country, or
  • appropriate safeguards have been provided for their processing by the recipient, in accordance with the law.

If none of the above conditions apply, the transfer may be made if:

  • you have provided Sioufas & Associates Law Firm your express consent to this end, or
  • the transfer is required for the execution of your contract with Sioufas & Associates Law Firm, such as for the execution of your orders, or
  • the transmission is necessary for the establishment or exercise of legal claims or to defend the rights of Sioufas & Associates Law Firm, or
  • there is a relevant obligation of Sioufas & Associates Law Firm under a provision of law or transnational contract. To fulfill this obligation, Sioufas & Associates Law Firm may transfer your personal data to the competent national authorities in order to be forwarded through them to the respective authorities of third countries.

Sioufas & Associates Law Firm keeps your personal information for as long as it takes to process your application and fill the relevant job. Your data will be kept for a period of up to twelve (12) months from the receipt of the application. In case of your recruitment, your personal data will be kept in accordance with the provisions of the Privacy Policy of Sioufas & Associates Law Firm for the processing of their personal data in accordance with Regulation (EU) 2016/679, Law 4624/2019 and the provisions of the relevant Greek and European legislation” which is permanently posted on the internal network of Sioufas & Associates Law Firm. Especially in the event that a shorter or longer retention period of your data is provided by law or regulations, the above data retention period will be reduced or increased accordingly. However, if, by the end of this period, legal proceedings are pending with Sioufas & Associates Law Firm that directly or indirectly concern you, the above retention period shall be extended until the issuance of an irrevocable court decision. In the event that the said period of time expires, your data will be securely deleted.

According to the provisions of the General Data Protection Regulation, you have the following rights:

  1. Right of access to your personal data, which we hold and process, as well as to information relating to their processing (data source, purposes of processing them, categories of recipients, data retention time).
  2. Right to rectification of your personal data, in case of any inaccurate data or in case of the need to fill in incomplete data.
  3. Right of objection on grounds relating to your particular situation, in case the processing is necessary for the purposes of the legitimate interests pursued by Sioufas & Associates Law Firm or a third party.
  4. Right to restrict the processing of your personal data if you dispute its accuracy, or the processing is illegal, or Sioufas & Associates Law Firm does not need your personal data for processing purposes, or you have exercised a right to object and the assessment of whether Sioufas & Associates Law Firm’s legitimate grounds prevail over your rights is pending.
  5. Right to delete your personal data from the records we keep.
  6. Right to the portability of your personal data to any other controller, provided that the processing is based on your consent or a contract and is carried out by automated means.

Please note the following in relation to your above rights:

  1. i) Your above rights may not be satisfied, in part or in whole, if the processing or maintenance of your data is necessary for the establishment, exercise or support of Sioufas & Associates Law Firm rights or for the fulfillment of Sioufas & Associates Law Firm obligations. ii) The exercise of the right to portability (above under f) does not imply the deletion of data from the files of Sioufas & Associates Law Firm, which (deletion) is subject to the conditions of the immediately preceding paragraph. iii) The exercise of the above rights is valid for the future and does not affect the processing of data that has already been carried out.

For the exercise of your rights, you can contact in writing via e-mail at dpo@sioufaslaw.gr.

Sioufas & Associates Law Firm will make every effort to respond to your request within one month of submission. This deadline may be extended for an additional two (2) months period, if this is deemed necessary at the reasonable discretion of Sioufas & Associates Law Firm. Sioufas & Associates Law Firm will inform you in any case of extension of the deadline within one month from the submission of the request.

The above service is provided by Sioufas & Associates Law Firm free of charge. However, if the requests submitted are manifestly unfounded, excessive, or repetitive, Sioufas & Associates Law Firm may either impose a reasonable fee on the debtor, informing him or her, or refuse to respond to his / her request / requests.

You can contact the Data Protection Officer of Sioufas & Associates Law Firm for issues related to the processing of your personal data at the e-mail address dpo@sioufaslaw.gr.

You have the right to appeal to the Personal Data Protection Authority for issues related to the processing of your personal data. For the authority of the Authority and how to file a complaint, you can visit the website of the Personal Data Protection Authority (My Rights> File a Complaint to the Authority), where detailed information is available.

Sioufas & Associates Law Firm implements appropriate technical and organizational measures for the legal collection and processing, as well as for the effective protection of your personal data from unauthorized or illegal processing, loss, alteration, accidental or unlawful destruction or damage, prohibited dissemination or access of third parties to these and any other form of unfair treatment.

This Policy is established by Sioufas and Associates Law Firm, hereinafter referred to as the “Company’’. The Company commits to protect the personal data gathered in the course of users visiting our website and receiving other services. This Privacy Policy outlines the commitment of the Company to protect personal data and, in particular, the collection, use, transmission and retention thereof.

A standard form is available on the Company’s website for purposes of facilitating communication with everyone concerned. This form may be applied for any queries or requests and is automatically directed to the competent department or agent. To enable processing of such queries and requests, we may source and store your full name, email address, residence address, contact details and other information you may have communicated to us. Such data are applied strictly in order to adequately address your queries or requests and shall not be disclosed to parties other than those mentioned in this Policy or as required or permitted by law. In addition, the telephone numbers of the Company are made available to enable a direct communication, to the extent necessary. Users are offered the option to register to the Company’s newsletter by filling in their name and email address. In any event, should any user wish to withdraw their consent, they may deregister from the Company’s newsletter, the relevant option being available within the message received by the registered users. Deregistration entails deletion of the user’s email address from the Company’s systems. Whenever the website is used for recruitment purposes by the candidates, such subjects must take knowledge of the Privacy Notice for Recruitment. According to Regulation (EU) 2016/679, the lawful processing of personal data is subject to a legal ground being founded. In the cases envisaged above, the legal ground enabling us to process personal data is the granting of your explicit consent for such processing, by means of filing of the relevant form, should you agree with this Policy.

The Company may disclose by transmission personal data collected, only to the extent this is necessary for the management of lawful operations. Such transmissions shall be subject to appropriate protective measures (e.g. clauses of personal data disclosure to sub-contractors, to suppliers, et.c.). Further, we may transmit personal data subject to such processing being required to ensure compliance with a legal obligation imposed on us.

The Company is bound not to retain personal data beyond the period this is necessary, as well as to ensure that it shall securely delete same. More info as to retention and deletion may be found at the “Communication” option of the Menu.

This section sets out the rights arising from the Regulation (EU) 2016/679 and how the subjects of the personal data may exercise such rights. For more clarifications please refer at the “Communication” option of the Menu.

5.1. Right of Access

The Company deems that the personal data collected directly from the subjects are accurate and complete. Every individual may have access to their own personal data by using the Application for the Exercise of Rights by the Subjects.

5.2. Right to Rectification and Erasure

The subjects of personal data are entitled to demand the update, erasure or withdrawal of any information relating to same, which is retained, and any third party processing or using the data must comply with such request. An erasure request may not be rejected, unless it falls into the ambit of an exception. The right to erasure may be exercised by using the Application for the Exercise of Rights by the Subjects. The Company is obliged to erase the personal data if one of the following conditions is fulfilled:

  • The personal data are no more necessary for the purposes they were originally collected or processed for;
  • The lawful basis the Company relies on for holding the data consists in consent and the subject withdraws such consent;
  • The subject objects to processing of their personal data conducted in reliance on Controller legitimate interests and there is no overriding legitimate interest capable of framing processing;
  • The personal data have been unlawfully processed.

Upon receipt of a request for erasure of personal data and subject to authentication of the requestor’s identity and either of the above conditions being met, whereas no legal ground preventing processing exists, the Company must accommodate the request by deleting the relevant data in their entirety. The request must be filed with the Registry of Personal Data Subjects Requests. Should the Company be unable to erase the personal data, it must ensure that it:

  • is not in a position and will not attempt to rely on the personal data for purposes of justifying any decision in any way relating to or affecting the individual concerned;
  • shall not concede access to the personal data to any other party;
  • protectsthe personal data by means of an appropriate technical and organizational mechanism and commits to permanently delete the information upon becoming available.

5.3. Right to Restrict Processing

The data subjects are entitled to require the controller limit the processing of data by filing the Application for the Exercise of Rights by the Subjects.

5.4. Right to Object

The data subjects are vested with the right to object, on grounds relating to their particular situation, at any time, to processing of personal data concerning same, by filing the Application for the Exercise of Rights by the Subjects.

5.5. Right to Data Portability

The data subjects must be entitled to receive upon request a copy of their personal data provided, in a structured format, by filing the Application for the Exercise of Rights by the Subjects. Such applications must be processed within one (1) month, as they do not entail excessive hardship and do not jeopardize privacy. A data subject is further entitled to request that his/her data be immediately transferred to another system. Such request must be accommodated free of charge. In the event that the Company is not in a position to roll out all the necessary steps within one (1) month, the DPO must provide to the data subject within this specified period to the subject or the authorized agent thereof the following:

  • An acknowledgment of receipt of the request;
  • Any information sourced up to that date;
  • Details of any information or amendments requested and not supplied to the subject, the reason for dismissal and information on available remedies against such dismissal;
  • An estimated date for the provision or the remaining responses;
  • An estimation of the cost to be borne by the data subject ( e.g. if the request is excessive)
  • The name and contact details of the DPO.

Any changes to the Privacy Policy shall be published to the Company’s website. In case of essential changes the Company may elect to notify the affected users by email, setting out details. Your consent shall be duly sought whenever so required by law.

In the event you have any concerns or complaints in relation to this Policy, please do not hesitate to contact us: Tel no +30 210 3673000; email address: dpo@sioufaslaw.gr. If you deem that the processing of your data by the Company violates the applicable legal framework, you may address the competent supervising Data Protection Authority (Tel no: +30 2106475600, email: contact@dpa.gr)