Privacy Policy
This Policy describes and explains how the personal data of visitors to the website https://www.workforall.gr/ (hereinafter the “Website”) are used.
Please take a moment to read this Privacy Policy carefully in order to understand how we collect, use, protect and process your personal data when you visit, register with or use the Website.
In addition, this Policy explains how you may contact our company to obtain any information regarding the processing of your personal data and how you may exercise your legal rights in relation to such processing.
1.
Data Controller
The company under the corporate name “ERGASIA GIA OLOUS E.E.” and the distinctive title “WORK FOR ALL”, with General Commercial Registry (G.E.MI.) No. 182102803000, Tax Identification Number 802751481, having its registered office in Athens, at 48, 28th October Street (Patission Avenue), P.C. 106 82, tel. +30 210 32 82 369, email: info@workforall.gr (hereinafter the “Company”), is the Data Controller of your personal data when you use the Website and determines the purposes and means of the processing of such data.
The processing of your personal data is carried out in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
2. Definitions
The definitions set out below are intended to facilitate the reading and understanding of this Privacy Policy.
“General Data Protection Regulation” or “GDPR” or “Regulation”: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
“personal data”: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“processing”: any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
“processor”: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.
“recipient”: a natural or legal person, public authority, agency or other body to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the context of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of such data by those public authorities shall comply with the applicable data protection rules according to the purposes of the processing.
“third party”: any natural or legal person, public authority, agency or body other than the data subject, the data controller, the processor and the persons who, under the direct authority of the data controller or processor, are authorised to process personal data.
“visitor/user”: any person who visits and browses the Website.
“consent”: any freely given, specific, explicit and informed indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
“personal data breach”: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
3. How do we collect your data?
We collect personal data directly from you when:
· you visit and browse our Website,
· you contact us by completing the contact form available on our Website, by sending an email to the Company at info@workforall.gr, or when you contact us via the WhatsApp messaging application, you apply for employment by sending your CV to career@work4all.gr or express your interest in job vacancies posted on the Website, you register on our Website by creating an account, or you subscribe to the Company’s newsletter.
4. What data do we collect from you (types of personal data), and what are the corresponding purposes and legal bases for processing your personal data?
The personal data we collect and process vary depending on how you use our Website. Accordingly, the purposes and legal bases for processing also vary by category of personal data.
More specifically:
A. Data collected and processed when you use and browse the Website
The following personal data may be collected:
your device’s Internet Protocol address (IP address),
device type and unique device identifiers,
browser version,
approximate geographical location based on your IP address,
preferred display language,
date and time of access to the Website.
Special categories of personal data:
Please note that we do not collect or process special categories of personal data.
We process the above personal data for the following purposes:
to ensure the proper and secure operation of our Website, and
for the technical administration and support of our systems, such as diagnosing technical issues and analysing traffic on our Website.
The legal basis for processing the above data is:
The pursuit of the Company’s legitimate interests in ensuring the secure, proper and efficient operation of the Website, in accordance with Article 6(1)(f) of the GDPR.
In this case, the processing is limited strictly to the personal data necessary for the pursuit of the Company’s legitimate interest described above.
For more information about the use of cookies and similar technologies, please refer to the Website’s Cookie Policy.
B. Data collected and processed when you contact us through the contact form on our Website, when you send us an email at info@workforall.gr, or when you contact us via the WhatsApp messaging application:- name,
- email address,
- contact telephone number (when using WhatsApp), and
- any other information you voluntarily provide based on the content of your communication.
More specifically, where you express an interest in finding employment or in employment placement services, you may send us, via the WhatsApp messaging application—and, consequently, we may collect and process—documents and information required to assess your eligibility for lawful employment and to connect you with interested employers. Such documents and information may include, indicatively, an asylum card, residence permit or residence card, social security details (AMKA, AMA), tax identification details (AFM), a copy of your criminal record, bank account details (IBAN), and other related supporting documents.
The transmission of personal data via WhatsApp takes place following the data subject’s own choice to use this application as a means of communication.
The Company recommends that you do not send more personal data than is strictly necessary for the relevant communication or assessment process, particularly special categories of personal data or documents containing sensitive information.
The WhatsApp application is provided by a third-party service provider, and its use is subject to that provider’s own terms of use and privacy policy.
The Company does not control the operation of the WhatsApp application or any data processing that may be carried out by the service provider outside the scope of the processing performed by us.
For this reason, we recommend that you carefully review WhatsApp’s privacy policy before using the application.
Special categories of personal data:
Please note that we do not require the collection of special categories of personal data. However, we may process special categories of your personal data, or data relating to criminal convictions and offences, only where you provide such data to us as part of your communication or in the context of an employment placement process.
We process the above personal data for the following purposes:
- To manage and respond to our communications with you, including responding to any requests or enquiries you submit through the contact form.
- To maintain records of communications for the purpose of supporting, monitoring and handling your enquiries.
- To improve the services we provide and the functionality of the Website.
- To assess candidates’ eligibility for employment, verify their lawful residence status, evaluate their suitability for selection as employees, and facilitate the connection of candidates with interested employers.
- To collect, verify and forward the necessary supporting documents and information to interested employers and/or cooperating organisations, solely to the extent required for the assessment and potential recruitment of candidate employees.
- To ensure the Company’s compliance with obligations arising under applicable legislation.
- If you are an employer, we process the personal data of natural persons with whom you collaborate, such as your employees, for the purpose of managing our business relationship, where such cooperation arises through communications initiated via the contact form on our Website.
- The legal bases for processing the above personal data are as follows:
- Your consent, provided by sending the email, in accordance with Article 6(1)(a) of the GDPR.
- The performance of a contract between us or the taking of steps at your request prior to entering into a contract (where you are an employer), in accordance with Article 6(1)(b) of the GDPR.
- Compliance with the Company’s legal obligations under tax law or any other applicable legislation, in accordance with Article 6(1)(c) of the GDPR.
- The pursuit of the Company’s legitimate interests in properly managing and responding to your communication requests, maintaining records of communications, assessing candidates, evaluating their suitability solely in relation to a specific job position, and facilitating the potential establishment of an employment relationship with employers in the course of the Company’s business activities, in accordance with Article 6(1)(f) of the GDPR.
In this case, the processing is limited exclusively to the personal data necessary for the pursuit of the Company’s legitimate interests described above.
- Η παροχή της ρητής συγκατάθεσής σας, στην περίπτωση που το περιεχόμενο της επικοινωνίας περιλαμβάνει οποιαδήποτε προσωπικά σας δεδομένα ειδικών κατηγοριών, κατά τα προβλεπόμενα στο άρθρο 9 παρ. 2, περ. α’ του ΓΚΠΔ.
- The establishment, exercise or defence of the Company’s legal claims, and only where necessary, in cases where the content of communications made through the contact form on our Website includes any of your special categories of personal data, in accordance with Article 9(2)(f) of the GDPR.
C. Data collected when you apply for employment by sending an email or submitting your CV to career@workforall.gr and/or when you express interest in job vacancies published by us:
- full name,
- email address,
- contact telephone number,
- curriculum vitae (CV), and
any other information you choose to provide, whether included in your CV or otherwise (such as, indicatively, a photograph, residence permit details, language skills, education and professional experience, etc.).
Special categories of personal data: Please note that we do not actively collect special categories of personal data. However, we may process special categories of your personal data only where you provide such data to us as part of your communication by email and/or where such data are included in your curriculum vitae (CV).
We process the above personal data for the following purposes:
- To manage job applications and match candidates’ profiles with available job opportunities.
- To communicate with the candidate regarding their application or other employment-related services.
- To store CVs and related information for future employment opportunities.
- To ensure the Company’s compliance with legal obligations, such as maintaining records of job applications for audit, tax or employment-related purposes, as required under social security legislation or any other applicable law.
- To protect the Company’s corporate assets and to support the Company in connection with any administrative or judicial proceedings.
The legal bases for processing the above personal data are as follows:
Your consent, provided by sending an email and/or your curriculum vitae (CV) to career@workforall.gr, in accordance with Article 6(1)(a) of the GDPR.
- Compliance with the Company’s legal obligations under any applicable legislation, in accordance with Article 6(1)(c) of the GDPR.
-
The pursuit of the Company’s legitimate interests in providing its services as effectively as possible, including the management of your curriculum vitae (CV) and matching it with available job opportunities, facilitating our communication with you, and protecting the Company, whether for the protection of its corporate assets or for supporting the Company before any administrative, judicial or other authority, in accordance with Article 6(1)(f) of the GDPR. In such cases, the processing is limited strictly to the personal data necessary for the pursuit of the Company’s legitimate interests described above.
Your explicit consent, where the content of your communication and/or the curriculum vitae (CV) sent to career@workforall.gr includes any special categories of personal data, in accordance with Article 9(2)(a) of the GDPR.
The establishment, exercise or defence of the Company’s legal claims, and only where necessary, where the content of your communication and/or the curriculum vitae (CV) sent to career@workforall.gr includes any special categories of personal data, in accordance with Article 9(2)(f) of the GDPR.
D. Data collected when you register on the Website by creating an account (either as a candidate or as a business):
Where registration through the creation of an account on the Website concerns employees/natural persons, we collect the following personal data:
- full name,
- date of birth,
- gender,
- nationality,
- area of residence,
- contact details (telephone number and email address),
- employment status,
- language skills, and
- employment-related preferences.
Special categories of personal data:
Please note that we process personal data relating to your nationality, as well as any other data that you may provide to us when registering and creating an account on the Website.
Where registration through the creation of an account on the Website concerns employers/legal entities, we collect the following personal data from the persons designated by you through the relevant form:
full name, and
contact details (telephone number and email address), but only where these constitute the personal contact details of the relevant natural persons and not corporate contact details (e.g. a corporate email address).
By registering on the Website and creating an account as an employer, you represent and warrant that the disclosure of your employees’ personal data to us is lawful, that you have duly and appropriately informed your employees of such disclosure, and that you assume full responsibility for that disclosure.
The Company bears no responsibility in relation to the lawfulness of such disclosure and is responsible only for the manner in which it processes the relevant personal data once received.
We process the above personal data for the following purposes:
- To provide and manage account-related functions on the Website, manage applications, facilitate and support the purpose of finding employment through your registration, and communicate with you.
- To facilitate the identification of suitable candidates where you register as an employer.
- To manage job applications, match candidates with available job opportunities, and support the employment search process.
- To communicate with you regarding applications or services provided through the Website.
- To provide a personalised user experience and analyse the use of the Website.
- To send newsletters and informational communications, where consent has been provided.
- To comply with legal obligations, including, indicatively, tax and employment-related obligations.
- To manage our business relationship, where such cooperation arises through the maintenance of your account and you are registered as an employer.
- To protect the Company’s legitimate business interests and assets and to support the Company before administrative or judicial authorities.
The legal bases for processing the above personal data are as follows:
Your consent, provided through the creation of an account, in accordance with Article 6(1)(a) of the GDPR.
The performance of a contract to which we may become parties (as employer), or the taking of steps prior to entering into a contract, as provided for in Article 6(1)(b) of the GDPR.
Compliance with our Company’s legal obligations under tax law and/or any other applicable legislation, as provided for in Article 6(1)(c) of the GDPR.
Serving our Company’s legitimate interests—specifically, ensuring the best possible provision of our services, facilitating communication with you, and protecting the Company (whether regarding corporate assets or representing the Company before any administrative, judicial, or other authority)—as provided for in Article 6(1)(f) of the GDPR. In such cases, processing is strictly limited to the personal data necessary to serve the aforementioned legitimate interests of the Company.
The provision of your explicit consent, in the event that the content of the communication and/or the CV you submit via the account you have created includes any of your special categories of personal data, as provided for in Article 9(2)(a) of the GDPR.
- The establishment, exercise, or defense of our Company’s legal claims—and only when necessary—in the event that the content of the communication and/or the CV you submit via the account you have created includes any special categories of personal data, as provided for in Article 9(2)(f) of the GDPR.
Data collected through registration for the Company’s newsletter: email address. We process the aforementioned personal data for the following purposes:
Sending a newsletter.
Promoting our Company’s services by sending a newsletter.
The legal bases for processing the aforementioned data are as follows:
Your provision of consent upon subscribing to the Website’s newsletter, in accordance with Article 6(1)(a) of the GDPR.
Serving our Company’s legitimate interests regarding the optimal provision and promotion of its services—including through the sending of a newsletter—and the pursuit of the Company’s business objectives, in accordance with Article 6(1)(f) of the GDPR.
Please note that, in the aforementioned cases where the legal basis for processing personal data is either the performance of the contract between us or our compliance with legal obligations of any kind, the collection and processing of the data are necessary; conversely, should we fail to carry out such collection and processing, it would not be possible to perform the contract between us or, accordingly, to comply with our legal obligations.
5.
Who has access to your data (data recipients)?
Regarding the data necessary to fulfill each of the above processing purposes and within the scope of each recipient's responsibilities, the recipients of your data may include:
- The Company’s authorized employees and executives, who process your personal data under strict confidentiality terms, solely within the scope of the aforementioned legitimate purposes.
- Prospective employers for whose job openings we match your CV details and qualifications—in order to fulfill the purpose of providing our services, carrying out our Company’s business activities, and facilitating your job search.
- To the extent necessary for the fulfillment of our contractual obligations, your optimal service, and the satisfaction of your requests, the Company may transmit certain necessary data of yours to partner companies—such as providers of legal, consulting, and auditing services, IT companies, and providers of internet, email, or other services essential for the operation of the Website and the execution of the Company’s services (including marketing and advertising activities). Statistical information (which does not identify data subjects) may also be transmitted to third parties that provide us with website traffic analysis services. The Company requires its third-party partners to implement all necessary technical and organizational measures—including appropriate policies and procedures for the lawful management and processing of personal data to prevent the disclosure of the personal data of visitors that they process.
- Upon a lawful request, we may transmit your data to public authorities—such as, by way of example, judicial, independent, or police authorities—provided that this is strictly necessary for the defense of legal rights, the fulfillment of the Company’s obligations, or compliance with legal obligations or requirements imposed by the aforementioned authorities.
6. Where we store your data and where we transfer it;
Your data is stored securely on servers and computing systems within the EU. To fulfill the Company’s purposes, the personal data we collect is processed within the European Economic Area (EEA). Should it become necessary—within the scope of the processing described in this Policy—to obtain services from providers located outside the EEA or in a jurisdiction lacking an adequacy decision under the GDPR, such data transfer will take place only if appropriate measures (safeguards) pursuant to Articles 44 et seq. of the GDPR have been implemented.
7. For how long do we retain your personal data?
We will retain your data only for as long as is strictly necessary for the purposes for which we collected it, for compliance with any legal obligations or internal procedures, and for the time required to defend our legal rights and interests taking into account applicable statutes of limitation after which we will permanently delete your personal data.
Specifically:
A. Data collected and processed when you use and browse the Website: The aforementioned data are retained for a period not exceeding what is strictly necessary to serve the purposes of the Website’s secure and smooth operation; this period generally does not exceed six (6) months.
For more information regarding the retention period of data collected via cookies and similar technologies, you may refer to our Website’s Cookie Policy.
B. Data collected and processed when you contact us via the contact form on our Website or when you send us an email at info@workforall.gr:
The personal data of prospective employees are stored for up to one (1) year following the conclusion of the relevant communication with the prospective employee, unless longer storage is required for the Company’s compliance with applicable legislation or for the establishment, exercise, or support of legal claims by our Company; in such cases, the personal data will be stored for the duration required for these purposes. In the event that no collaboration between us and the employer results from the relevant communication, the personal data of the employer’s employees are stored for up to one (1) year following the conclusion of the respective communication with you.
In the event that a collaboration is established between us and an employer following the relevant communication, the personal data of the latter’s employees are retained for the duration required to execute our relationship and to ensure compliance with applicable legislation. Furthermore, such data may be retained for a period of up to five (5) years following the termination of our collaboration, provided this is necessary for the establishment, exercise, or support of legal claims by our Company.
Finally, where we process personal data of prospective employees in the context of such communication, said data are retained only for the period strictly necessary to process the communication request and, in any event, for no longer than twelve (12) months following the conclusion of the communication, unless the process requires their retention for the period necessary to ensure compliance with applicable legislation or for the period required to establish, exercise, or defend legal claims.
C. Data we collect and process via job search requests sent by email to the address career@workforall.gr:
Data collected in the context of a job application and the submission of a CV are retained for a period of up to twenty-four (24) months from the date of the last communication or application submission, in order to assess the suitability of the candidate’s profile for available or future job openings. Should the process give rise to a need for the Company to comply with legal obligations, or to establish, exercise, or support legal claims, the personal data shall be retained for as long as is required for such purposes.
Finally, where we process special categories of data in the context of a job application or the submission of a CV, such data are retained only for the period strictly necessary to evaluate the relevant application and, in any event, are not retained beyond twelve (12) months from the last relevant communication or submission of an application, unless their retention is required for compliance with applicable legislation or for the establishment, exercise, or defense of legal claims.
D. Data collected when you register on the Website by creating an account< 1 > (either as a job seeker or as a business): Data collected during account creation on the Website is retained for a period of up to twenty-four (24) months from the last communication or use of the account, in order to support account management, matching with available job positions, and communication with users.
In the event that a collaboration is established between us and an employer, the personal data of the latter’s employees are retained for the duration required to perform the contractual relationship and to comply with the Company’s legal obligations, and—where necessary—for up to five (5) years following the termination of the collaboration for the establishment, exercise, or defense of legal claims.
Where, in the context of account creation, we process special categories of personal data (e.g., nationality) of prospective employees, such data are retained only for as long as is strictly necessary to fulfill the purposes of the processing and, in any event, for no longer than twelve (12) months from the last relevant communication or use of the account, unless a need arises for the Company to comply with applicable legislation or for the duration required to establish, exercise, or defend legal claims.
E. Data collected via subscription to the Company’s newsletter: Data collected when you subscribe to the Company’s newsletter, retained until you decide to unsubscribe from the relevant list or withdraw your consent. Should you request to unsubscribe, we will ensure the immediate deletion of your information from the relevant list.
8. How do we protect your data?
The Company processes your personal data in a manner that ensures their protection. Specifically, the processing of your personal data is carried out exclusively by personnel authorized for this purpose or by partners who are contractually bound to the Company to uphold the same obligations regarding the protection and security of your personal data. The Company implements all appropriate organizational and technical measures to ensure data security and to protect data against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access, and any other form of unlawful processing.
9. What are your rights as a data subject?
As a data subject, you have the right to exercise your rights at any time, as provided for in the GDPR—and specifically Articles 12 to 23 thereof—and in national legislation. In particular, you have the following rights, which are subject to certain exceptions, reservations, or limitations based on the applicable legal framework—namely, the right to request:
- Access to the personal data concerning you that we hold. You may request a copy of your data, and we will provide it to you free of charge.
- To correct any inaccurate data concerning you and, taking into account the purposes of the processing, to complete any incomplete data concerning you. In any event, when you provide us with your data, you declare and warrant that it is true and accurate, and you bear the responsibility of informing us of any changes or modifications thereto—which we will promptly implement; failure to correct such data in the absence of a relevant request from you does not constitute a violation of the GDPR or applicable legal provisions by our Company.
- To delete your data, to the extent that they are no longer necessary for the purpose for which they were collected and are being processed by us, as detailed above, or when they are no longer required for us to comply with legal obligations or when we are generally no longer permitted by law to process them.
- To restrict the processing of your data, which means that, in certain cases, you may ask us to temporarily suspend data processing or to retain the data for longer than necessary.
- To object to the processing of your data
- Data portability. This right applies only to information you have provided to us yourself, provided we are processing the information based on your consent or in the context of contract negotiations, and the processing is automated.- To lodge a complaint with the Hellenic Data Protection Authority [postal address: 1-3 Kifisias Ave., 115 23 Athens; tel.: +30 210 6475600; e-mail: contact@dpa.gr] if you consider that the processing of your personal data violates the applicable national and regulatory framework for personal data protection.
- To withdraw your consent at any time, insofar as it constitutes the legal basis for the processing, without, however, affecting the lawfulness of the processing carried out prior to such withdrawal. Please note that, in this case, we may continue to process your personal data if there is another legal basis for processing.
In the event that you exercise any of the aforementioned rights, the Company will take every possible measure to fulfill the request within one (1) month of its submission. Please note that, for the exercise of the above rights to be considered valid, your identification may be required to ensure that the personal data subject to the requested action indeed belong to you. If the processing of your request is expected to take longer, you will be notified accordingly within the aforementioned timeframe. To exercise your rights, you may contact the Company at the following email address: info@workforall.gr. Please note that the Company may refuse, in whole or in part, to comply with your request to restrict the processing or delete your data if the processing or retention of your personal data is necessary for the establishment, exercise, or defense of its legal rights or for the fulfillment of its legal obligations. However, if your request is complex or if there is a large volume of requests, we will inform you within one month if we need to extend the timeframe for compliance by an additional two (2) months.
If your request is unfounded or excessive, particularly due to its repetitive nature, the Company may charge a reasonable fee, taking into account the administrative costs of providing the information or carrying out the requested action, or refuse to act on the request.
10. Third-party links
The Website may include links to third-party websites and applications. Clicking on or activating these links may allow third parties to collect or share data regarding the user. The Company does not control third-party websites and bears no responsibility for their privacy statements or the processing of personal data carried out by them; furthermore, the Company is in no way liable for any breach that may arise in connection with processing performed based on browsing the aforementioned third-party websites. Should the visitor leave the Website, the Company recommends reading the privacy statement of any website they visit. The appearance of such third-party websites and applications on the Website is based on the Company’s legitimate interest in improving its services and developing its business activities, as well as enhancing the Website’s interaction with relevant online platforms and services.
11. Minors
We do not direct our services to, transact with, or knowingly collect information from users under the age of eighteen (18). If you are under the age of eighteen (18), you are not permitted to use our Website at any time or in any manner. As it is not technically feasible to effectively verify a user's age at all times, should we become aware that personal data has been collected via the Website from children under the age of eighteen (18) without verifiable parental consent, we will immediately delete all relevant information. This deletion does not affect the need to respect data in the event of the establishment, exercise, or defense of our legal claims, or the provision of consent by a guardian.
12. Contact us
For any further information regarding this Policy and the way we process your personal data, or if you wish to exercise any of your rights as a data subject, you may contact us:
- by mail, at the address: 48 28is Oktovriou (Patision Avenue), Postal Code: 106 82, Athens,
- by phone at: +30 210 32 82 369,
- via e-mail at the following address: info@workforall.gr, and
- by using the contact form on our Website.
13. Amendments to this Policy We will update this Privacy Policy whenever necessary.
If there are significant changes to the Privacy Policy or the way we use your personal data, we will publish the amendment to this Policy on our website before the changes take effect and notify you by any appropriate means.
