Privacy Policy

This Privacy Policy describes how Empedus processes personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR).


1. Activities, purposes and legal bases of personal data processing

1.1 Data controller and processor

The for-profit, commercial entity, with the name "EMPEDUS Ypiresies Ekpaidefsis Technologion Epikoinonion Pliroforikis SINGLE MEMBER SOCIETE ANONYME" and the distinguishing title "EMPEDUS S.A." based in Athens (Fidiou 10, Athens 106 78, Greece, telephone), telephones (+30) 2103809113 – Hours of Operation: Monday-Friday: 09:00-17:00 Email: contact@empedus.eu and dpo@empedus.eu. For any information regarding issues concerning personal data, as well as for any related request, you can contact the above postal or electronic address or the above telephone number.

1.2 Data we collect and sources

1.2.1 Main activity

Empedus main business activity is to provide, high-quality ServiceNow services, aimed at elevating operational efficiency and control for clients. These services are meticulously designed to offer a superior customer experience, thereby contributing to overall business success. On the ServiceNow platform, robust business applications are developed, each tailored to meet specific organizational needs. Completing our business mission entails the processing of personal data that may concern, depending on the purpose for which it is collected, identification data, contact data, demographic data, location data, and financial data. Please note we may from time to time store your payment information.

When you visit our corporate website www.empedus.eu, some information is automatically collected. For example, we may receive information about your location, operating system, Internet Protocol (IP) address, access times, browser type and language, and the referring website you visited before our online platform. We also collect information about your usage and activity on our services using certain technologies, such as cookies.

1.2.2 How we use information

We use personal Information collected for the purposes outlined below in this policy.

  • to provision, maintain and deprovision customers on the ServiceNow platform.
  • to respond to comments and questions, and to provide customer support.
  • to send information, including confirmations, invoices, platform updates, alerts, technical, support and administrative messages.
  • to operate, maintain, and improve our corporate website, and services.
  • to comply with legal requirements and to protect our legal rights and business interests, and the legal rights and interests of you and third parties.

Other activities

Empedus processes personal data required in the context of the implementation of funded European programs or programs of other organizations. When the programs concern the financing of the above business venture, the processing is based on the performance of a contract, since in essence it serves the above purpose, otherwise, if deemed necessary, the legal basis is sought in the express consent of the data subjects or another legal reason provided by the regulation.

Empedus processes specific personal data (name, e-mail address, professional resume details) for the purpose of informing each interested party in the form of an electronic information material, after a relevant declaration of interest, in relation to Empedus's business activities, events and actions that it organizes in the context of its purposes etc. For this purpose, the consent of the data subject is requested, which constitutes the legal basis of the processing.

Empedus processes the necessary data in accordance with applicable legislation for the recruitment and execution of employment contracts of its staff and/or partners, or contracts of internship or training of interested parties or contracts for the provision of voluntary work, for the necessary communication in the context of these contracts, for the formation, observance and execution of payroll or the payment of remuneration, for its compliance with its legal obligations (employer, insurance and tax), for the management, planning and organization of paid or voluntary work or training - internship as well as for the purposes of managing the staff etc. of partners within the framework of the above contracts.

Recipients of personal data

Empedus does not share or grant to third parties, nor forward your personal data to third countries or international organizations for any purpose, except in the following cases:

  • To ServiceNow for customer instances troubleshooting, support and provision of services.
  • If obliged to do so by virtue of an audit or investigation by a competent public authority in accordance with applicable law.
  • For the fulfillment of obligations provided for by law to ensure the legal operation of our enterprise and only for the necessary data at a time for the purpose of responding to tax, insurance, or employer obligations.
  • During the execution of a funded European program, only the necessary personal data may be communicated to the appropriate authority of the program or to the body that has undertaken the supervision and control of its execution.
  • If you are an intern or trainee based on our contract with your school or another education body. In such an event your data regarding the course of your training, your attendance and your performance in general may be shared with the institute.
  • Upon your request or upon your information and written consent, your data may be transmitted to a third party.

Those data that are necessary for the respective purpose of the processing are processed by authorized staff and/or contracted associates of Empedus, who, in addition to any obligation to maintain data privacy, are also bound by an express declaration of confidentiality.

Any data processors processing your personal data on our behalf are contractually bound to Empedus and process your data based on our instructions provided to them, following the required technical and organizational security measures in accordance with the applicable legislation and commitment to protect the confidentiality of information.

Your data may be stored in a special computing cloud provided by a company established in a country of the European Union or outside the European Union, which is bound by the General Data Protection Regulation, or in a third country that will have a decision of adequacy or the appropriate guarantees for the protection of your personal data.

Retention of personal data

Customer personal data for the duration of the support contract, and for a limited post-termination period as required for legal claims, audit, or regulatory compliance. Thereafter, data is securely deleted and/or returned to the Controller in accordance with contractual terms. Support tickets and logs are retained for the duration of the support contract unless otherwise instructed by the Controller.

Your personal data is stored by Empedus only for as long as is necessary to fulfill the purpose for which they have been collected and in compliance with legislative provisions, such as e.g., those regarding the maintenance of tax records. The data of our staff and partners is kept for ten years from the termination of our relationship with them.

If your data is collected after expressing an interest in hiring you or working with us, it will be deleted immediately as soon as it becomes clear that you have not been selected to fulfil a job opening at our company or you have rejected our offer, unless you tell us that you consent to its retention for a specific purpose.

For trainees or volunteers, your data is kept for six months from the end of our cooperation, unless it is required to be kept by law or agreement.

In the case of a funded program, your personal data is kept for as long as the terms of the program require, otherwise your personal data are retained for five years from the completion of the program.

If you have participated in any of our scientific events, your data is kept for one year after its completion and financial settlement, unless you have requested that your data be kept for the purpose of sending additional information material.

If you provide your consent, the data is kept until you expressly withdraw it using any of the means suggested in this policy.

Please note that some of your personal data may be kept anonymously for research and statistical purposes.

1.5 Data security

Empedus is ensuring the appropriate level of protection (confidentiality, integrity, and availability) of personal data against unauthorized access, disclosure, alteration, deletion, or loss. For this purpose, it adopts a series of technical and organizational measures which it continuously improves. Additional security measures include access control, use of strong passwords, encrypted sending of files that contain personal data, backups, use of anti-malware software, and ongoing information security monitoring.

1.6 Automated decision making - profiling

Empedus does not perform automated decision-making or any form of automated personal data processing that consists in using them to evaluate a person's personal characteristics and preferences (profiling).

1.7 Use of contact form

Personal data such as name, e-mail and telephone will only be needed if, as a visitor of our corporate website you wish to contact us using the relevant contact form. In this case, completing and sending to us the contact form, which will contain your personal data, expressly declares your consent to send this data to us for processing. Completing the form is optional and based on your own will. The personal data you choose to send us via the contact form is used only for the purposes of communication and are completely deleted after six (6) months from its collection.

1.8 Cookies

Our corporate website uses cookies to improve your experience as a user during your browsing and to improve the overall quality of the services we provide. Cookies are small text files that are sent to a user's computer when they visit a website. Cookies are stored in your browser as an internet user. They are used only to facilitate your access as a user to our services, for statistical purposes to determine the areas in which such services are useful or popular. As a visitor to our corporate website, you can set your browser to prohibit the reception of all cookies or to notify you when a cookie is sent. However, you should be generally aware that certain features or services of the website/application may not function properly without accepting the use of cookies.


2. Rights in relation to your personal data

According to the General Data Protection Regulation you have the following rights:

  • a) Right of access.
  • b) Right to rectification.
  • c) Right to erasure (right to be forgotten).
  • d) Right to restriction of processing.
  • e) Right to data portability.
  • f) Right to object.

2.1 How you can exercise your rights

To exercise your rights, you can write to Empedus using its postal address, or at the e-mail address dpo@empedus.eu with the indication EXERCISE OF RIGHTS. Empedus makes every effort to respond to your request within thirty (30) days of its submission without any charge to you, excluding manifestly unfounded, excessive, or repeated requests.

2.2 Filing a complaint

You can file a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., Athens 11523, email: complaints@dpa.gr, fax 210-6475628, and the complaint form: COMPLAINT_GENERAL.pdf .

Policy updates

Empedus will from time to time amend and/or update this policy, depending on any amendment and/or update to the legislation or its official interpretation by competent authorities, or the instructions and opinions of the supervisory authority in relation to the implementation of the General Data Protection Regulation.

This IMS Policy is available in electronic form and will be communicated within the company and to all relevant stakeholders and interested third parties.

No Code Website Builder