Get in touch with us

CONTROLLER OF THE TREATMENT

• Amara Net Zero Greece, S.A. / AFM 802309246
• Add: 19 Pentelis Avenue, 15233 Chalandri (Athens)
• Data Protection Officer DPO: dpo@amaranzero.com

PURPOSES OF PROCESSING THE PERSONAL DATA OF THE INTERESTED PARTIES

• Management and control of the contact of web users
• Sending AMARA's own commercial communications
• Sending commercial communications from third parties
• Profiling originated with internal information
• Profiling originated with external information
• Provision of Customer Service
• Management and control of the satisfaction of the interested party
• Attention to compliance with legal obligations
• Management and control of visits to the facilities
• Provision of jobs offered
• Provision of potential future jobs

RIGHTS OF THE INTERESTED PARTIES

We inform you that to the extent that it is applicable you may exercise your right of access, rectification, opposition, deletion, portability and limitation of treatment. Likewise, you can revoke your consent if you have granted it for a specific purpose.

They will be exercised by email : dpo@amaranzero.com or at the registered office of AMARA.

You can file complaints with Hellenic Data Protection Authority (https://www.dpa.gr/en/individuals/complaint-to-the-hellenic-dpa). 

ADDITIONAL DATA PROTECTION INFORMATION

You can access more information at: https://amaranzero.gr

1. Who is the controller of the processing of your personal data?

In compliance with current legislation on the protection of personal data, with particular attention to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter,  "RGPD" ) and the greece national legislation Law 4624/2019, Law 2472/1997 as well as Law 3471/2006 in the field of electronic communications, the interested party is informed that personal data will be treated as responsible for the treatment by Amara Net Zero Greece, S.A. (hereinafter, "Amara"), AFM 802309246, Add: Dimitriou Gounari 96 15125 (Athens).

For any question related to the processing of your personal data, you can go to our Data Protection Officer (DPO), with whom you can contact through the email address dpo@amaranzero.com , attaching a copy of your ID or any other document admitted by law that allows us to identify you with the subject "Data Protection".

2. What data is processed, for what purpose and on what basis of legitimacy?

The personal data provided by the interested party may be processed by AMARA for any of the following purposes, taking into account the type of data provided and the basis of legitimacy:

• PURPOSE 1 – Management and control of the contact of the users of the web
  • Description of the purpose: Manage the personal data of users who contact AMARA through the contact form that is made available to the user. Your data will be processed in order to manage this contact, answer the queries, doubts or comments that you send us through the channels enabled for this purpose on our website.
  • Basis of legitimation: art. 6.1.b) RGPD - Treatment necessary for the execution of a contract in which the interested party is a party or for the application at the request of the latter of pre-contractual measures.
  • Data processed for this purpose: identification data (name, surname, identity documentation, postal and/or electronic address, telephone number, image, voice, etc.), personal characteristics data (marital status, date of birth, nationality, sex, etc.).
• PURPOSE 2 – Sending commercial communications of AMARA
  • Description of the purpose: Personal data collected (e-mail contact) in the context of a sale of a product or service may be used to send commercial communications about products or services similar to those contracted by the data subject to maintain a relationship for advertising and promotional purposes related to the products and / or services marketed by AMARA made by conventional and / or electronic means.
  • Basis of legitimation: art. 6.1.f) RGPD - Treatment is necessary for the satisfaction of legitimate interests pursued by the data controller. 
    AMARA has carried out a detailed assessment on the priority of the rights and freedoms of the data subjects by carrying out a thorough assessment on the legitimate interest exceeding the minimum interference that occurs in the fundamental right to data protection of the natural persons affected by the data processing. For more information you can consult with the DPO through the following email: dpo@amaranzero.com
  • Data processed for this purpose: identification and contact data (name, surname, identity documentation, electronic address) 
• PURPOSE 3– Sending commercial communications from third parties.
  • Description  of the purpose: Sending commercial communications about products and / or services other than those that were contracted by the interested party to  maintain a relationship for advertising and promotional purposes on benefits or advantages of third companies, always communicated through AMARA, which will be based on collaboration agreements related to the following sectors:  Leisure, travel, culture, cards and means of payment, automotive, transport, insurance, distribution and financing, gifts, fashion, home and technology.
  • Basis of legitimation: art. 6.1.a) RGPD – The interested party gives express and explicit consent for the processing of their personal data for one or more specific purposes.
  • Data processed for this purpose: identification and contact data (name, surname, identity documentation, postal and/or electronic address, telephone number, image, voice, etc.)
• PURPOSE 4 – Generation of profiles originated with internal information.
  • Description of the purpose:  to elaborate a commercial profile of the interested party with the information with exclusively internal character obtained by the development of the contractual relationship of products and services that the interested party has contracted, being able to make automated decisions based on the information generated to make specific offers, send commercial communications adapted to your profile, as well as allow or deny the contracting of products and / or services. The elaboration of profiles with data from internal sources may include the execution of operations that allow the optimization of the provision of the services offered by AMARA and the improvement of the quality of these and, as a consequence, users receive commercial communications of one type or another based on said analysis.
    However, the foregoing, with regard to decision-making, the interested party has the right to obtain human intervention from AMARA, to allege what he deems pertinent to express his point of view, to defend his right or interest in accordance with current legislation and to oppose the decisions adopted. The data processed in this regard will always respond to the current situation of the interested party.
  • Basis of legitimation: art. 6.1.f) RGPD - Treatment is necessary for the satisfaction of legitimate interests pursued by the data controller.
    AMARA has carried out a detailed assessment on the priority of the rights and freedoms of the data subjects by carrying out a thorough assessment on the legitimate interest exceeding the minimum interference that occurs in the fundamental right to data protection of the natural persons affected by the data processing. For more information you can consult with the DPO through the following email: dpo@amaranzero.com
  • Data processed for this purpose: identification and contact data (name, surname, identity documentation, postal and / or electronic address, telephone number, image, voice, etc.) personal characteristics (marital status, date of birth, nationality, sex, etc.), social circumstances; transactions of goods and services, other categories of data and data derived from the use of the service.
• PURPOSE 5 – Generation of profiles originated with external information.
  • Description  of the purpose: to elaborate a commercial profile of the interested party with the information exclusively external to send commercial communications from third parties to the interested parties in order to promote products and / or services of third parties related to the following sectors of activity: Leisure, travel, culture, cards and means of payment, automotive, transport,  insurance, distribution and financing, gifts, fashion, home and technology.
  • Basis of legitimation: art. 6.1.a) RGPD – The interested party gives express and explicit consent for the processing of their personal data for one or more specific purposes.
  • Data processed for this purpose: identification and contact data (name, surname, identity documentation, postal and / or electronic address, telephone number, image, voice, etc.).
• PURPOSE 6 – Provision of Customer Service.
  • Description of the purpose: respond to requests, requests, queries, complaints or claims of the interested party arising from the development of the use of the products and / or services offered by AMARA.
  • Basis of legitimation: art. 6.1.b) RGPD - Treatment necessary for the execution of a contract in which the interested party is a party or for the application at the request of the latter of pre-contractual measures.
  • Data processed for this purpose: identification and contact data (name, surname, identity documentation, postal and / or electronic address, telephone number, image, voice, etc.) and data derived from the use of the service.
• PURPOSE 7 – Management and control of the satisfaction of the interested party.
  • Description of the purpose: to carry out the monitoring and control of the satisfaction of the interested party by conducting quality and satisfaction surveys on the products and / or services marketed by AMARA.
  • Basis of legitimation: art. 6.1.f) RGPD - Treatment is necessary for the satisfaction of legitimate interests pursued by the data controller.
    AMARA has carried out a detailed assessment on the priority of the rights and freedoms of the data subjects by carrying out a thorough assessment on the legitimate interest exceeding the minimum interference that occurs in the fundamental right to data protection of the natural persons affected by the data processing. For more information you can consult with the DPO through the following email: dpo@amaranzero.com
  • Data processed for this purpose: identification and contact data (name, surname, identity documentation, postal and / or electronic address, telephone number, image, voice, etc.).
• PURPOSE 8 – Attention to compliance with legal obligations.
  • Description of the purpose: compliance with those legal obligations imposed on AMARA in any order, such as financial, fraud, health or security. The foregoing may involve, depending on the case and in a manner closely related to the previous purpose, responding to judicial and administrative orders related to specific interested parties.
  • Basis of legitimation: art. 6.1.c) RGPD – Treatment necessary for compliance with a legal obligation applicable to the data controller. 
    AMARA has carried out a detailed assessment on the priority of the rights and freedoms of the data subjects by carrying out a thorough assessment on the legitimate interest exceeding the minimum interference that occurs in the fundamental right to data protection of the natural persons affected by the data processing. For more information you can consult with the DPO through the following email: dpo@amaranzero.com
  • Data processed for this purpose: identification and contact data (name, surname, identity documentation, postal and / or electronic address, telephone number, image, voice, etc.), social circumstances, transactions of goods and services, other categories of data or data derived from the use of the service.
• PURPOSE 9 – Management and control of visits to the facilities.
  • Description of the purpose: The personal data of users who are interested in visiting our facilities will be processed in order to process the request made by the user and, where appropriate, to carry out the actions that are necessary in relation to the organization and management of the visit to our facilities that was requested.
  • Basis of legitimation: art. 6.1.b) RGPD - Treatment necessary for the execution of a contract in which the interested party is a party or for the application at the request of the latter of pre-contractual measures and art. 6.1.c) RGPD - Treatment necessary for compliance with a legal obligation applicable to the data controller.
  • Data processed for this purpose: identification and contact data (name, surname, identity documentation, postal and / or electronic address, telephone number, image, voice, etc.).
• PURPOSE 10 – Provision of jobs offered.
  • Description of the purpose: Reception and analysis of all personal data (CVs, NIF, qualifications, etc.) provided during the process to attend a job offer or internship offered by AMARA whose data will be incorporated into a record of treatment of its ownership.
  • Basis of legitimation: art. 6.1.b) RGPD - Treatment necessary for the execution of a contract in which the interested party is a party or for the application at the request of the latter of pre-contractual measures.
  • Data processed for this purpose: Identification data (name and surname, ID), contact data (email address, telephone number, postal address, etc.), personal characteristics (date of birth, nationality, etc.), academic and professional data (degrees, training and professional experience), employment data (profession, job position, etc.).
• PURPOSE 11 – Provision of potential future jobs.
  • Description of the purpose: Reception and analysis of all personal data (CVs, NIF, qualifications, etc.) provided by the interested party for the coverage of future jobs or internship offers that AMARA or the Companies of the AMARA Group could offer.
  • Basis of legitimation: art. 6.1.a) RGPD – The interested party gives express and explicit consent for the processing of their personal data for one or more specific purposes.
  • Data processed for this purpose: Identification data (name and surname, ID), contact data (email address, telephone number, postal address, etc.), personal characteristics (date of birth, nationality, etc.), academic and professional data (qualifications, training and professional experience), employment data (profession, job position, etc.).
    In relation to those purposes whose basis of legitimacy has been identified as the legitimate  interest of AMARA, the  interested party may contact dpo@amaranzero.com in order to obtain more information on the weighting carried out (between the aforementioned interest and the right to the protection of personal data of those affected).
    The data subject also has the right to object to processing activities based on legitimate interest.
    The types of data processed by AMARA may be, by way of example:
  • Identification data: such as name, surname, identity documentation, postal and electronic address, telephone number, image, voice, etc.
  • Personal characteristics data: such as your marital status, data relating to your family, date of birth, nationality, sex, etc.
  • Economic, financial and insurance data: such as your participation in pension plans, economic data related to the payment of your payroll, bank details, data on insurance, taxes and tax deductions, etc.
  • Data on social circumstances: such as your membership in clubs or associations, licenses, permits, etc.
  • Academic and professional data: such as data on their training and qualifications, their work history, their identification as interested parties, etc.
  • Transaction data for goods and services: for example, compensation and indemnity.
  • Commercial information data, such as activities and businesses independent of the provision of their services that could generate conflicts of interest.
  • Data relating to the commission of criminal or administrative offenses in those cases that are necessary taking into account the characteristics of the job to be performed.

3. What data is processed by AMARA and from what sources?

The data that AMARA processes as a result of the interactions made by the user through our website come from the following sources:

• Data provided by the user by completing the forms made available by AMARA, by sending emails or by any other means by which the user establishes communication with AMARA.
• Data generated as a result of browsing and use by the user of the AMARA websites.
• Data generated as a result of the development, processing and maintenance of the relationship established between the user and AMARA.
• Third-party data provided by the user.
• Data obtained from external sources (e.g. social networks, etc.).

4. To whom is the Personal Data communicated? Are they transferred internationally?  

The interested party is informed that personal data may be communicated to the entities listed below, for the purpose indicated in each case:

• RECIPIENT 1: if necessary, to companies of the AMARA Group that can be consulted in the website for administrative purposes and customer relationship management, based on AMARA's legitimate interest for this purpose. The legitimate interest for the stated purpose of the communication would be to guarantee a better organization and optimization, as well as a unified management of the resources of the business group in those cases in which, internally, it is necessary for the effective execution of the activity developed.
• RECIPIENT 2: Public Administrations and the Administration of Justice.
• RECIPIENT 3: companies and entities collaborating with AMARA, for the organization, management, and / or promotion of applications, contests, events, promotions or raffles, in case the Participant has decided to register and / or be part of these.
• RECIPIENT 4: AMARA suppliers who, where appropriate, are hired to measure web traffic, and user behavior through cookies and similar systems, in accordance with the Cookies Policy and who will act as data processors.

5. How long do we keep your data?

AMARA will keep your personal data for the time necessary for the provision of the requested service and / or to achieve the purpose of treatment pursued.

Subsequently, provided that the user has not exercised their right of deletion, their data will be kept during the legal periods that in each case are applicable, taking into account the type of data as well as the purpose of the treatment.

In any case, the user can request detailed information about the data retention periods applied in AMARA by contacting our Data Protection Officer, who can be contacted at the address dpo@amaranzero.com.

6. What personal data should you provide us in each case?

AMARA informs users that, when personal data is collected through a form made available through our website, it will be necessary for the user to provide, at least, those data marked with an asterisk (*). In case of not providing at least such data, considered as necessary, AMARA will not be able to manage the provision of the service or attend to the query or claim made by the user.

7. What should you guarantee when providing your personal data?

The user guarantees that the data provided is true, accurate, complete and updated, being responsible for any damage, direct or indirect, that may be caused as a result of breach of such obligation.

In the event that the user provides data belonging to a third party, he guarantees that he has informed said third party of all aspects contained in this Privacy Policy and obtained his consent to provide us with his data for the purpose of treatment in question. All this, prior to the provision of data from a third party through any of our web pages.

AMARA informs you that to provide your personal data, in any way, through our website, you must be of legal age. The user who provides data to AMARA through this website declares and guarantees to be of legal age, being entirely responsible for such declaration. 

8. What measures do we take to protect your personal data?

In response  to AMARA's concern to guarantee the security and confidentiality of your data, the security levels required for the protection of personal data have been adopted and the technical means at your disposal have been installed to prevent the loss, misuse, alteration, unauthorized access and theft of personal data provided through the Website. In any case, you must take into consideration that Internet security measures are not impregnable.

9. What are your rights over your personal data?

AMARA informs you that you have the right to obtain confirmation as to whether we are processing personal data concerning you or not.

In the same way, AMARA informs you that you have the following rights over your personal data:

• Access your data: You have the right to access your data to know what personal data we are processing that concerns you.
• Request the rectification or deletion of your data: In certain circumstances, you have the right to rectify those personal data that you consider inaccurate and that concern you, and that are subject to processing by AMARA, as well as the right to request the deletion of your data when, among other reasons, the data is no longer necessary for the purposes that were collected.
• Request the limitation of the processing of your data: In certain circumstances, you will have the right to request the limitation of the processing of your data, in which case we inform you that we will only keep the data on which you have requested limitation in the treatment for the exercise or defense of claims.
• To the portability of your data: In certain circumstances, you will have the right to receive the personal data that concern you, and that you have provided us, in a structured format of common use and mechanical reading, as well as to be transmitted by AMARA to another data controller.
• Oppose the processing of your data: In certain circumstances and for reasons related to your particular situation, you will have the right to object to the processing of your data in which case, we would stop processing them unless we must continue to do so for compelling legitimate reasons or for the exercise or defense of possible claims.

In addition, you may withdraw any of the consents you have given for the processing of your data, without affecting the legality of the treatment based on the consent prior to its withdrawal.

AMARA informs you that you may exercise your rights over your personal data through any of the following ways:

• Letter addressed to: Amara Net Zero Greece, S.A. (hereinafter, "Amara"), AFM 802309246, Add: 19 Pentelis Avenue, 15233 Chalandri (Athens)
• By writing to AMARA to the email address dpo@amaranzero.com 

AMARA shall provide the requested information within a maximum period of one month from receipt of the request.

AMARA informs you that you may file a claim with the Hellenic Data Protection Authority (https://www.dpa.gr/en/individuals/complaint-to-the-hellenic-dpa). However, in the first instance, you may file a claim with the Data Protection Delegate, Person or Department responsible, who will resolve the claim within a maximum period of two months.