Man leaning out of car window looking at sunset over a desert road with the text 'Visto Smarter Investments. Powered by AI.'Person with blonde hair sitting on a rocky cliff overlooking a dense forest covered in fog.Long straight road with a tree on the left and dark storm clouds in the background, overlaid with website navigation and text 'Smarter by AI'.
Man with glasses and a brown sweater looking thoughtfully to the side in a softly lit room.Smiling woman with long hair looking upward outdoors at dusk with a blurred mountain background.Hand reaching out with a blurred natural landscape and sunset sky in the background, overlaid with the text '01 Data connected'.
Website homepage with black background, navigation menu, and a stacked photo collage including a middle-aged man wearing glasses looking straight ahead.Website header with navigation and slogan 'Smarter by AI' above photos of a man looking out at a desert sunset and a woman smiling with wind-blown hair.Side profile of a smiling woman with long hair blowing in the wind against a twilight sky.

PRIVACY POLICY
PersonalData Protection Policy of the Websitehttps://www.flexidea.gr

The company FLEXIDEAS S.A.attaches great importance to the lawful, fair and secure processing of your personal data. The processing of your personal data is carried out with respectfor the basic principles of personal data protection of internet users, in accordance with the General Regulation for the Protection of Personal Data (EU)2016/679, Law 4624/2019 and Law 3471/2006.

With this personal data protection policy (hereinafter the “Policy”) information is provided regarding the collection, storage, processing and use of your personal data during your visit to this website.

During your visit to this website you are kindly requested to read carefully the terms and conditions for the protection of your personal data referred to in this Policy.

 

Our website

This website is the website ofthe Company FLEXIDEAS S.A. (hereinafter the “Company”), which has itsregistered seat in Voula, Attica, Vouliagmenis Avenue no. 58, P.C. 16673.

Through the website,information is provided regarding the Company’s activity, which specializes in the provision of integrated human resources solutions and in facilitating the transfer/recruitment of employees from third countries to Greece, serving businesses and natural persons.

 

Data controller

The data controller of the personal data is the Company FLEXIDEAS S.A., with registered seat in Voula, Attica, Vouliagmenis Avenue, number 58, P.C. 16673, contact tel.: +302114201581, email: info@flexidea.gr

 

Data Protection Officer

The Company has appointed a Data Protection Officer, who is responsible for monitoring compliance with the General Data Protection Regulation, cooperating with the Hellenic Data Protection Authority and serving as a point of contact with the Authority, as well as with the data subjects. You may contact the Data Protection Officer at the email address: dpo@flexidea.gr.

 

What is the meaning of personal data

The term “personal data”refers to information of natural persons (“data subjects”), such as indicatively the name and surname, the postal address, the email address, the contact telephone number, the IP address, etc., which identify or can identify the identity of the natural person (hereinafter “personal data” or “data”).

 

What is the meaning of processing of personal data

Any operation or set of operations which is performed with or without the use of automated means, on personal data or on sets of personal data, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, searching for information, use, transmission to third parties, dissemination, any form of making available, correlation, combination, restriction, deletion and destruction of personal data.

 

What kinds of personal data we process

During your visit and navigation on this website, the Company collects and processes only your personal data that are absolutely necessary for serving the respective purposes, in accordance with the principle of data minimization and the provisions of the applicable personal data protection legislation.

More specifically, the Company may process the following categories of personal data:

  • Contact data, such as name and surname and email address, exclusively and only in the case you contact us via electronic correspondence (email).
  • Data included in CVs and accompanying  correspondence of candidates, which are sent voluntarily by you via electronic correspondence (email), such as     identification data, contact data, education and professional experience.
  • Image and sound data, which may derive from photographic or audiovisual material of events or actions of the Company, provided that this is published on the website.
  • Traffic data and technical navigation data, such as the Internet Protocol (IP) address, the type and version of the browser, the date and time of access to the     website, as well as general use information, which are collected during your navigation on the website.
  • Cookies, which are distinguished into: strictly necessary cookies, necessary for the     basic operation and security of the website, and third-party cookies, which are activated only provided that you have given your explicit consent.

For more information regarding the use of cookies, you may refer to the Cookie Policy of our website.

The Company does not have an electronic contact form through this website. In case of communication via email, we recommend that you do not send more personal data than those absolutely necessary for serving your request.

Finally, the Company does not use your contact details for direct commercial promotion purposes (such as sending newsletters) without your prior explicit consent.

 

Purpose of processing personal data

The processing of your personal data is carried out with respect for the basic principles of personal data protection, as provided by the General Data Protection Regulation (GDPR), and in particular the principles of lawfulness, fairness and transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality, as well as accountability.

The processing of your personal data during your visit and navigation on this website is carried out exclusively for specific, clear and lawful purposes.

Specifically, personal data may be processed for the following purposes:

  • for providing you with access to the content and information of our website and ensuring its proper operation,
  • for your communication, following a relevant request or query submitted via electronic correspondence,
  • for the evaluation of CVs and candidacies, which are sent voluntarily by you via electronic correspondence (email), in the context of potential cooperation or staffing,
  • for providing you with information regarding the activity, services and actions of the Company,
  • for improving the operation of the website and your browsing experience,
  • for purposes of statistical analysis of website traffic and performance, provided that the required consent has been given by you,
  • for ensuring the security of information systems and preventing technical or malicious actions,
  • for compliance with the applicable legislative and regulatory framework, as well as for the establishment, exercise or support of legal claims of the Company, if this becomes necessary.

 

Legal basis of processing

The processing of your personal data collected through this website is carried out in accordance with the provisions of Article 6 of the General Data Protection Regulation (EU)2016/679 (GDPR) and is based, as applicable, on the following legal bases:

·     On your explicit consent, pursuant to Article 6(1)(a) GDPR, in particular for the use of cookies and similar technologies beyond those strictly necessary for the operation of the website and for the processing of data in the context of third-party service providers’ services, provided that these are activated.

 

·     On the performance of pre-contractual actions following your request, pursuant to Article 6(1)(b)GDPR, to the extent that:

▪ your communication via electronic correspondence (email) concerns the provision of information related to the services or the activity of the Company,

▪ you voluntarily send a CV in the context of potential cooperation or staffing.

 

·     On the legitimate interest ofthe Company, pursuant to Article 6(1)(f) GDPR, which consists in particular of:

▪ the proper and secure operation of the website,

▪ the improvement of functionality and the browsing experience of users,

▪ ensuring the security of its information systems and preventing malicious or unauthorized actions,

▪ the evaluation of candidates’ CVs,

 

·     On compliance with a legal obligation of the Company, pursuant to Article 6(1)(c) GDPR, when the processing of personal data is imposed by the applicable national or EU legislative and regulatory framework.

Who has access to your personal data

Access to your personal data, which may be published or made available through our website, is available to its visitors, as well as to the absolutely necessary personnel of the Company, who are bound by a confidentiality obligation and have received appropriate information and training for the secure processing of your personal data.

Furthermore, access to your personal data may be available to natural or legal persons cooperating with theCompany, who provide support services to the Company and act as processors, following a relevant written assignment by the Company. The processors process personal data exclusively in accordance with the explicit instructions of the Company and under the guarantee of taking all appropriate technical and organizational measures for their protection.

Access to your personal data may also be available to competent public, administrative or supervisory authorities, exclusively and only to the extent required:

·     for the Company’s compliance with legal or regulatory obligations,

·     for important reasons of public interest, or

·     for the establishment, exercise or support of legal claims.

 

Transfer of personal data outside the EEA

For the improvement of functionality and the browsing experience on our website, it may, following your explicit consent where this is required, use services of third-party providers, such as indicatively traffic analysis services, map services, as well as social networking services, including providers such as Google LLC, Meta Platforms Inc. (Facebook) and LinkedIn Corporation.

In the context of the use ofthe above services, a transfer of personal data may take place to countries outside the European Economic Area (EEA), and in particular to the United States of America, in accordance with the privacy policies of the respective providers.

Such transfer is carried out in accordance with the provisions of Chapter V of the General Data Protection Regulation (EU) 2016/679 and is based, as applicable:
▪ on an adequacy decision of the European Commission, to the extent that the respective data recipient participates in the applicable EU–US Data Privacy Framework, and/or
▪ on the use of Standard Contractual Clauses (SCCs), as approved by the European Commission, in combination with the implementation of appropriate technical and organizational measures, for the purpose of ensuring an adequate level of protection of personal data.

The Company does not control the way in which the above third-party providers process personal data and users are recommended to refer to the respective privacy and cookies policies of those providers for more information.

 

Use of automated decision-making / including profiling

Within the operation of this website, the Company does not carry out automated decision-making, within the meaning of Article 22 of the General Data Protection Regulation (EU) 2016/679, nor profiling based on your personal data.

 

The retention period of your personal data

Your personal data are retained by the Company only for the period of time that is absolutely necessary, depending on the nature and purpose of each processing activity, and in accordance with the principle of storage limitation, as provided in the General Data Protection Regulation (EU) 2016/679 (GDPR), unless there is a more specific legal obligation or lawful reason requiring their retention for a longer period.

Specifically:

  • In case the processing of your personal data is based on your explicit consent (e.g. use of cookies beyond those strictly necessary), the data are retained until you withdraw your consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
  • Data collected in the context of communication via electronic correspondence (email) are retained for as long as required for the handling and completion of the relevant request and, if deemed necessary, for a reasonable period after its completion, in accordance with the principles of necessity and proportionality.
  • Data included in CVs and accompanying correspondence of candidates, which are sent voluntarily by you via electronic correspondence (email), are retained for a reasonable period     and at the latest up to twelve (12) months from their receipt, unless the candidate is hired or provides consent again for their retention for future positions.
  • Traffic data and technical navigation data, as well as data collected for security reasons or technical operation of the website (such as log files), are retained for the absolutely necessary period and then deleted or anonymized, once the purpose of their retention ceases.
  • Data that may be required to be retained for the purposes of compliance with legal obligations or for the establishment, exercise or support of legal claims of the Company are retained for as long as provided by the applicable legislation.

 

The security of your data

The Company has taken the appropriate organizational and technical measures for the security and protection of your personal data from accidental or unlawful destruction, loss, alteration, unauthorized access or disclosure, as well as from any other form of unlawful or unfair processing.

Among these measures are included, indicatively, encrypted communication between the user and the server, the application of controlled access mechanisms to information systems (such as firewalls), as well as the establishment of internal security procedures and policies. The specifically authorized personnel of the Company who process personal data have received appropriate training, guidance and information regarding their obligations as to the protection of personal data.

The security measures appliedby the Company are reviewed and, where deemed necessary, updated at regular intervals, taking into account technological developments, the nature and scope of processing, as well as potential risks.

 

Links to other websites

Any linking of this website with other third-party websites, through hyperlinks (links, hyperlinks, banners or other similar means), does not imply the Company’s acceptance or assumption of any responsibility regarding the content of those websites, the accuracy, quality or completeness of the information, products or services provided or displayed through them.

The Company does not exercise control over third-party websites and is not responsible for the practices followed by them, including practices relating to the collection, processing and protection of personal data.

For this reason, we recommend that you inform yourselves about the personal data protection policies and terms of use of the respective third-party websites before providing any personal data or using the relevant services.

 

Your rights as a data subject

As a data subject, you have the following rights, in accordance with Articles 12 to 22 of the General Data Protection Regulation (EU) 2016/679(GDPR):

 

·      Right to information and access (Articles 12 and 15 GDPR)

You have the right to be informed by the Company whether it processes personal data concerning you and, if so, to request access to them. In this context, you may be informed, among other things, about the purposes of processing, the categories of data processed, the recipients or categories of recipients to whom your data are disclosed, the retention period, as well as the existence or not of automated decision-making.

 

·      Right to rectification (Article 16 GDPR)

You have the right to request the correction of inaccurate or the completion of incomplete personal data concerning you.

 

·      Right to erasure – “right to be forgotten” (Article 17 GDPR)

You have the right to request the deletion of your personal data, provided that they are no longer necessary for the purposes for which they were collected or if you withdraw your consent and there is no other lawful basis for processing. This right may be restricted where retention is necessary for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or support of legal claims.

 

·      Right to restriction of processing (Article 18 GDPR)

You have the right to request restriction of the processing of your personal data, especially where you contest their accuracy, where processing is unlawful, or where you have objected to processing and the examination of your request is pending.

 

·      Right to data portability (Article 20 GDPR)

In cases where processing is based on your consent or on the performance of a contract and is carried out by automated means, you have the right to receive the data you have provided in a structured, commonly used and machine-readable format or to request their transfer to another controller, where technically feasible.

 

·      Right to object (Article 21 GDPR)

You have the right to object at any time to the processing of your personal data and the Company ceases processing, unless it demonstrates compelling and lawful grounds overriding your interests, rights and freedoms.

 

·      Right to withdraw consent (Article 7(3) GDPR)

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

 

·      Right to lodge a complaint (Article 77 GDPR)

You have the right to lodge a complaint with the Hellenic Data Protection Authority, if you consider that the processing of your personal data violates the GDPR.

 

How you can exercise your rights

If you wish to receive furthe rinformation regarding the processing of your personal data or to exercise any of the rights referred to in this Policy, you may contact the Company’s Data Protection Officer (DPO) either by email at dpo@flexidea.gr, or in writing, by sending a letter to the Company’s registered seat (Vouliagmenis Avenue no. 58, Voula, Attica, P.C. 16673), with the indication“Attn: Data Protection Officer”, describing your request in detail.

The Company will examine your request and will respond within one (1) month from its receipt, in accordance with Article 12 of the General Data Protection Regulation (EU) 2016/679, without any financial burden to you. The above period may be extended for up to two (2) additional months, taking into account the complexity or number of requests. In any case, you will be informed in due time of such extension andthe reasons justifying it.

In cases where your request is considered manifestly unfounded, excessive or repetitive, the Company may, in accordance with Article 12(5) GDPR, either refuse to act on it or request the payment of a reasonable fee, taking into account the administrative costs of providing the information or carrying out the requested action.

If you consider that your request was not satisfied adequately or lawfully or that your right to the protection of your personal data is violated by any processing carried out by the Company, you have the right to lodge a complaint with the Hellenic DataProtection Authority, at the postal address 1-3 Kifisias, P.C. 115 23, Athens,at telephone 210 6475600 or at the email address contact@dpa.gr.

 

Applicable law and competent courts

Applicable law is Greek law, as formed in accordance with the General Data Protection Regulation2016/679/EU, and in general the applicable national and European legislative and regulatory framework for the protection of personal data.

For any dispute that may arise and is related to the processing of your personal data, the competent courts are exclusively the Courts of the city of Athens.

 

Change of this Policy

This Policy may be amended or updated whenever deemed necessary, especially in case of changes in the applicable legislative framework or in the way your personal data are processed by the Company.

In case of substantial changes to this Policy or to the way we use your personal data, we will inform you in an appropriate manner, either through a relevant announcement in a visible place on our website or by any other appropriate means. We encourage you to refer regularly to this Policy in order to be informed about the way your personal data are protected.

This entered into force on 9/6/2026. The most recent version shall always apply.