This Privacy Policy describes how Empedus processes personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR).
The for-profit, commercial entity, with the name "EMPEDUS Ypiresies Ekpaidefsis Technologion Epikoinonion Pliroforikis SINGLE MEMBER SOCIETE ANONYME" and the distinguishing title "EMPEDUS S.A." based in Athens (Fidiou 10, Athens 106 78, Greece, telephone), telephones (+30) 2103809113 – Hours of Operation: Monday-Friday: 09:00-17:00 Email: contact@empedus.eu and dpo@empedus.eu. For any information regarding issues concerning personal data, as well as for any related request, you can contact the above postal or electronic address or the above telephone number.
Empedus main business activity is to provide, high-quality ServiceNow services, aimed at elevating operational efficiency and control for clients. These services are meticulously designed to offer a superior customer experience, thereby contributing to overall business success. On the ServiceNow platform, robust business applications are developed, each tailored to meet specific organizational needs. Completing our business mission entails the processing of personal data that may concern, depending on the purpose for which it is collected, identification data, contact data, demographic data, location data, and financial data. Please note we may from time to time store your payment information.
When you visit our corporate website www.empedus.eu, some information is automatically collected. For example, we may receive information about your location, operating system, Internet Protocol (IP) address, access times, browser type and language, and the referring website you visited before our online platform. We also collect information about your usage and activity on our services using certain technologies, such as cookies.
We use personal Information collected for the purposes outlined below in this policy.
Other activities
Empedus processes personal data required in the context of the implementation of funded European programs or programs of other organizations. When the programs concern the financing of the above business venture, the processing is based on the performance of a contract, since in essence it serves the above purpose, otherwise, if deemed necessary, the legal basis is sought in the express consent of the data subjects or another legal reason provided by the regulation.
Empedus processes specific personal data (name, e-mail address, professional resume details) for the purpose of informing each interested party in the form of an electronic information material, after a relevant declaration of interest, in relation to Empedus's business activities, events and actions that it organizes in the context of its purposes etc. For this purpose, the consent of the data subject is requested, which constitutes the legal basis of the processing.
Empedus processes the necessary data in accordance with applicable legislation for the recruitment and execution of employment contracts of its staff and/or partners, or contracts of internship or training of interested parties or contracts for the provision of voluntary work, for the necessary communication in the context of these contracts, for the formation, observance and execution of payroll or the payment of remuneration, for its compliance with its legal obligations (employer, insurance and tax), for the management, planning and organization of paid or voluntary work or training - internship as well as for the purposes of managing the staff etc. of partners within the framework of the above contracts.
Empedus does not share or grant to third parties, nor forward your personal data to third countries or international organizations for any purpose, except in the following cases:
Those data that are necessary for the respective purpose of the processing are processed by authorized staff and/or contracted associates of Empedus, who, in addition to any obligation to maintain data privacy, are also bound by an express declaration of confidentiality.
Any data processors processing your personal data on our behalf are contractually bound to Empedus and process your data based on our instructions provided to them, following the required technical and organizational security measures in accordance with the applicable legislation and commitment to protect the confidentiality of information.
Your data may be stored in a special computing cloud provided by a company established in a country of the European Union or outside the European Union, which is bound by the General Data Protection Regulation, or in a third country that will have a decision of adequacy or the appropriate guarantees for the protection of your personal data.
Customer personal data for the duration of the support contract, and for a limited post-termination period as required for legal claims, audit, or regulatory compliance. Thereafter, data is securely deleted and/or returned to the Controller in accordance with contractual terms. Support tickets and logs are retained for the duration of the support contract unless otherwise instructed by the Controller.
Your personal data is stored by Empedus only for as long as is necessary to fulfill the purpose for which they have been collected and in compliance with legislative provisions, such as e.g., those regarding the maintenance of tax records. The data of our staff and partners is kept for ten years from the termination of our relationship with them.
If your data is collected after expressing an interest in hiring you or working with us, it will be deleted immediately as soon as it becomes clear that you have not been selected to fulfil a job opening at our company or you have rejected our offer, unless you tell us that you consent to its retention for a specific purpose.
For trainees or volunteers, your data is kept for six months from the end of our cooperation, unless it is required to be kept by law or agreement.
In the case of a funded program, your personal data is kept for as long as the terms of the program require, otherwise your personal data are retained for five years from the completion of the program.
If you have participated in any of our scientific events, your data is kept for one year after its completion and financial settlement, unless you have requested that your data be kept for the purpose of sending additional information material.
If you provide your consent, the data is kept until you expressly withdraw it using any of the means suggested in this policy.
Please note that some of your personal data may be kept anonymously for research and statistical purposes.
Empedus is ensuring the appropriate level of protection (confidentiality, integrity, and availability) of personal data against unauthorized access, disclosure, alteration, deletion, or loss. For this purpose, it adopts a series of technical and organizational measures which it continuously improves. Additional security measures include access control, use of strong passwords, encrypted sending of files that contain personal data, backups, use of anti-malware software, and ongoing information security monitoring.
Empedus does not perform automated decision-making or any form of automated personal data processing that consists in using them to evaluate a person's personal characteristics and preferences (profiling).
Personal data such as name, e-mail and telephone will only be needed if, as a visitor of our corporate website you wish to contact us using the relevant contact form. In this case, completing and sending to us the contact form, which will contain your personal data, expressly declares your consent to send this data to us for processing. Completing the form is optional and based on your own will. The personal data you choose to send us via the contact form is used only for the purposes of communication and are completely deleted after six (6) months from its collection.
Our corporate website uses cookies to improve your experience as a user during your browsing and to improve the overall quality of the services we provide. Cookies are small text files that are sent to a user's computer when they visit a website. Cookies are stored in your browser as an internet user. They are used only to facilitate your access as a user to our services, for statistical purposes to determine the areas in which such services are useful or popular. As a visitor to our corporate website, you can set your browser to prohibit the reception of all cookies or to notify you when a cookie is sent. However, you should be generally aware that certain features or services of the website/application may not function properly without accepting the use of cookies.
According to the General Data Protection Regulation you have the following rights:
To exercise your rights, you can write to Empedus using its postal address, or at the e-mail address dpo@empedus.eu with the indication EXERCISE OF RIGHTS. Empedus makes every effort to respond to your request within thirty (30) days of its submission without any charge to you, excluding manifestly unfounded, excessive, or repeated requests.
You can file a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., Athens 11523, email: complaints@dpa.gr, fax 210-6475628, and the complaint form: COMPLAINT_GENERAL.pdf .
Empedus will from time to time amend and/or update this policy, depending on any amendment and/or update to the legislation or its official interpretation by competent authorities, or the instructions and opinions of the supervisory authority in relation to the implementation of the General Data Protection Regulation.
This IMS Policy is available in electronic form and will be communicated within the company and to all relevant stakeholders and interested third parties.
No Code Website Builder