Verification needed before publication: confirmation of current registered legal details, dedicated privacy contact, hosting and mail service providers, international transfers, enforcement of agreed retention periods, email/log/backup deletion practices, and active WordPress plugins.
1. Who is responsible
This website is operated for the corporate activities of SPEK. The intended data controller is SPEK METALPLASTIC S.A. (registered details to be confirmed with the company), at Thesi Achladia Tolia, Vathy, Avlida, Evia, 32009 Schimatari, P.O. Box 159, Greece. VAT: EL084016352; GEMI registration: 8056001000 (as currently listed on the company details page; final company confirmation required). Contact: spek@spek.gr and +30 22620 75000. [Confirm the correct privacy contact and any appointed data protection officer.]
2. Personal data we handle
General and commercial enquiries: first and last name, email address, telephone number, enquiry category, subject, message and, when relevant, product details. Enquiries are saved in the WordPress administration area and email notifications are sent to the relevant SPEK team.
Job applications: identification and contact details, city, employment preferences, desired position and department, experience, availability, professional-profile links where provided, declared scientific or professional interests, an optional preference to be considered for other roles, message, CV and optional references/attachments. Applications are held in access-restricted areas and the recruitment team is notified by email.
Newsletter interest: when you separately opt in through the contact form, your email, first name and last name are stored in a separate SPEK WordPress list, together with the date, source and notice version documenting your choice. An automatic email asks you to confirm that you control the address; until confirmed, you are not an active subscriber. No external newsletter provider has yet been selected and no promotional newsletters are currently sent. Subscription records remain separate from your original enquiry.
Technical data: server and security logs may contain your IP address, access time, browser/device details and diagnostic data. Exact logging practices depend in part on the hosting setup. Some third-party website services may receive connection information.
3. Purposes and legal bases
- Replying to enquiries, supporting business relationships and taking steps requested before entering into a contract: Article 6(1)(b) or 6(1)(f) GDPR, as applicable.
- Evaluating an application for a selected or open position: Article 6(1)(b) or another properly assessed lawful basis. Optional evaluation for related or other suitable roles based on the applicant's declared interests during the nine-month period is addressed by a separate voluntary choice, with consent under Article 6(1)(a) where legally appropriate. [Confirm basis with legal counsel.]
- Sending a newsletter only after specific, documented opt-in: Article 6(1)(a) GDPR and applicable electronic-marketing rules. Consent may be withdrawn at any time.
- Maintaining website reliability and security: Article 6(1)(f) GDPR, where applicable.
- Optional tracking technologies requiring consent: Article 6(1)(a) GDPR and the applicable electronic-communications rules.
Acknowledging the Privacy Policy does not itself authorise newsletter marketing or optional consideration for other vacancies. These preferences are separate and do not condition submission of an enquiry or job application.
4. Recipients and international transfers
Access may be granted to authorised SPEK staff and, where necessary, infrastructure, website-support, security and email providers. Interactive maps may involve independent providers such as Google or TomTom. [Confirm actual processors, contracts, locations and any GDPR transfer safeguards before publication.]
5. Data retention
Contact enquiries: retained for up to 12 months from submission, unless an additional lawful reason requires longer storage, and then deleted or anonymised.
Newsletter subscriptions: unconfirmed subscription requests are scheduled to be deleted after 14 days without confirmation. Confirmed subscribers' email and minimal necessary details are kept while membership remains active and justified. A personal withdrawal link in the confirmation email can delete the local subscriber record. Subscribing does not extend retention of the underlying contact enquiry beyond 12 months. [Production deletion and withdrawal handling must be tested; procedures must be reviewed once a provider is selected.]
Recruitment applications, CVs and attachments: retained for up to 9 months from submission. They may be assessed for the selected position and, where the applicant separately opts in, for related or other suitable roles matching declared scientific/professional interests within the same period. Declining does not affect the original application, and consent may be withdrawn for other roles.
Implementation verification pending: purging stored WordPress entries and CV files, email copies, logs, backups and any justified legal-retention exceptions. These are the approved retention objectives, not a claim that automatic deletion is operational.
6. Your rights
Subject to the conditions of the GDPR, you may request access, rectification, erasure, restriction and portability, and object to certain processing. Where consent is the legal basis, you can withdraw it at any time without affecting earlier lawful processing. Contact SPEK using its verified privacy contact. You may also complain to the Hellenic Data Protection Authority.
7. Forms, children and other policies
Fields marked as required on our forms are needed to assess or respond to the relevant request; without them, we may not be able to process it. Please do not provide unnecessary sensitive information in messages or attachments. This is primarily a business-oriented site, not a service intended for children. Please see our Cookie Policy for information about third-party website technologies.
8. Updates
We review this policy when our systems or processing practices change. [Publication and last-updated date to be confirmed.]