Quality Policy

The Company, Alexiadis K. & CO, ALPHA PLAN CONSULTANTS, which is based in 25B, I. Koletti, Str., 54627, Thessaloniki, tel. (0030) 2310 566 767 ensures the confidentiality of your personal data and adopts the General Regulation for the Protection of Personal Data 679/2016 of the European Union and the current Greek legislation in all procedures and stages of communication with you.

Purpose of this Policy

This Policy provides to any individual and visitor/user of the Company website https://www.aplan.gr/ with concise and transparent information regarding the practices followed for the management and protection of personal data.

It concerns any transaction or series of transactions performed with or without the use of automated means, in personal data or in personal data sets, such as the collection, registration, organization, structure, storage, adaptation or modification, retrieval, search for information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction.

The Policy is updated periodically and may be amended whenever necessary, without prior notice, always within the applicable legal framework and in accordance with any changes in the current legislation on personal data protection. We therefore suggest that you check this Policy at regular intervals in order to be informed of any changes that may have been made.

Definition
The term "personal data" hereinafter referred to as "Personal Data or Data", is any information concerning a specific natural person or person whose identity can be verified (e.g., name, identity number, address, etc.). Data related to health (physical or mental condition, receiving medical services, etc.) are included in the general term personal data; however, they constitute a special category of data.

How is your personal data collected?

ALPHA PLAN CONSULTANTS will ask you for the minimum required personal data, for each of the following cases required per processing in accordance with article 5 of the Regulation 2016/679 "Principles relating to processing of personal data (data minimization)”, according to which the data must be adequate, relevant and limited in relation to the purposes for which they are processed (data minimization) to what is necessary in order to receive our services.

Personal Data are obtained with following methods:
(a) When you apply for a job to our company or sending your CV. The provision of your personal data in the context of submitting a CV to find a job in our Company takes place automatically and voluntarily as otherwise, it would not be possible to assess the possibility of your recruitment.
The legal basis for the processing is in accordance with article 6 (1) (b) of the GDPR “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”.
For more information, please check our CV Policy.
(b) You provide them to us when you fill out the form “Customer Privacy Principles” either during our on-site meetings or during our meetings in the context of our Company's participation in exhibitions. The submission of your data is of your choice and their processing with your consent, in order to inform you about the actions and events of the Company as well as the promotion of the Company in the context of promotional activities, in accordance with article 6 (1) (a) of the Regulation 2016/679 “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”.
(c) Automatically, via your browser or the mobile device you use to access our website www.aplan.gr.
(d) You provide them to us when you fill out forms in the context of the application of Management Systems (ISO) in the Company. The data processing is carried out in accordance with article 6 (1) (f) of the Regulation 2016/679.
(e) You provide them to us for the following purposes:

• Fiscal purposes (e.g. contracting – cooperation agreements, pricings).
• Financial information (service pricing, account balances).
• Preparation of studies, such as economic and technical studies, quality systems, franchising studies, business plans.
• Selection of personnel and training, for third parties and for internal use by our Company.
• Submission of proposals and monitoring of investment projects under European and National Funding Programs.

The legal basis for processing the data you provide us for the above purposes is to comply with our legal obligation as Data Controllers in accordance with article 6 (1) (c), as well as for the execution of the contract between us, in accordance with article 6 (1) (b).
(f) You provide them to us when you fill out electronic forms, e.g. “newsletter” or send an e-mail in order to be informed about the available services in our Company website www.aplan.gr. The submission of your basic personal data is at your option and their processing with your consent for the sole purpose of informing you about the services and products provided by our Company in accordance with article 6 (1) (a) of the Regulation.

What kind of personal data is being collected and for what purpose?

Personal data which are collected and further processed include:
-identification data such as your name, address, general contact details (including email address and telephone number, financial, tax and accounting data information), etc. The purpose of the collection and processing is the provision of our services in accordance with article 6 (1) (b) of the Regulation as well as the provision of the services required by our company.

-identification data such as CV, education status, work experience etc. The collection, processing and maintenance of the above data is for the sole purpose of the selection and evaluation of prospective employees by the Company for the possibility of finding a job. Your data are kept for this purpose only and are processed by the relevant staff, Accounting Department, Administration, etc.

-identification data, financial data, tax and contact details, such as VAT, Tax Office, address, etc. The collection, processing and retention of your data belonging to the above mentioned categories, is in accordance with article 6 (1) (c) of the Regulation 2016/679, “processing is necessary for compliance with a legal obligation to which the controller is subject”.

-identification data, financial, tax and contact information such as VAT number, Tax Office, contact details, address etc. The collection, processing and retention of your data belonging to the above mentioned categories, is necessary for the Company’s compliance with our legal obligations, in accordance with article 6 (1) (c) of the Regulation.
The Company will not process your personal data without your consent. However, the Company reserves the right, in exceptional cases, to process your personal data to the extent permitted or required by law, and/ or by court decisions or prosecutorial orders.

Recipients of your data

We may disclose your personal information (in whole or in part, as each time it appears) indicatively to:
a) all authorized persons of our Company, e.g. legal advisers, business consultants, external accountants, etc.,
b) specific persons of our Company, vital for the selection process of candidate employees and for executing the contract between us, e.g., Accounting Department, Management Systems Department, Funding Programs Department, Administration, etc.,
c) authorized providers for these data processing systems,
(d) judicial or supervisory or control authorities, within the scope of their jurisdiction,
(e) third parties who have a legal interest in establishing, exercising or upholding legal claims.

In cases where your consent to the disclosure of your data to third parties is required (where it is not mentioned by law, it will be explicitly requested by you and you have the right to revoke it at any time. In these cases, the Company assures you that it is in constant contact and takes all necessary security measures, so that the transfer of personal data is carried out in the safest possible way.

The Company undertakes the obligation to not trade your personal data by making it available for sale or rental by transferring or disclosing it to third parties or using it in any other way and for other purposes that might jeopardize your privacy and your rights and freedoms, unless required by law, court decision/ order, administrative act or if it is a contractual obligation necessary for the smooth operation of the Company's website and the performance of its functions.

Your personal data may be transferred to partners or third parties, complying with the terms of this policy and committed to maintaining confidentiality and who act on behalf of the Company for further processing in order to provide services (e.g. data management, technical support etc.).

These third parties have contractually agreed with the Company, that the personal data will be used only for the above purposes and will not transmit personal information to third parties, as well as will not disclose any personal data to third parties unless law requires it.

Data Retention
The retention period can vary significantly depending on the type of data and how it is used. Determining the retention time of data is based on criteria such as legal retention periods, pending or potential disputes, intellectual property or rights, contractual requirements, business instructions or archiving needs.

The Company is committed to keep your CV for one (1) year after receival. After one (1) year from the date of receipt of your CV, the relevant file containing all your data will be deleted.

The tax data are kept in accordance with the current tax legislation.

In order to fulfill the purpose of processing that concerns the execution of the contract and to inform you about our services, a reasonable retention time of your data is the time of the operation of the Company.

Data collected through the video surveillance system are kept for up to 15 days, after which they are automatically deleted. In case we detect an incident during this period, we isolate part of the video and keep it for up to one (1) additional month, in order to investigate the incident and initiate legal proceedings to defend our legal interests. If the incident involves a third party, we will keep the video for up to three (3) additional months.

The purpose of the processing is the execution of the contract and informing you about our services and actions. To fulfill this purpose, the time of the relevant commercial operation of the Company, in accordance with the applicable legal framework governing its operation, its tax obligations, as well as the Personal Data Protection Legislation, is considered as a reasonable period for the retention of your data.

CCTV – Data Processing

We use a surveillance system for the purpose of protecting persons and property. The processing is necessary for purposes of legal interests that we pursue, given our capacity as Data Controller, in accordance with article 6 (1) (f) of the Regulation.

Our legal interest consists of the need to protect our premises and the goods located therein, from unlawful acts, such as, but not limited to, theft. The same applies to the protection of life, physical integrity, health and property of our staff and third parties that are lawfully present in the premises, under surveillance. We only collect image data and limit the capture to areas where we have assessed an increased likelihood of committing illegal acts e.g. theft, such as at the entrance, without focusing on areas where the privacy of the persons whose image is taken may be severely restricted, including their right to respect for personal data.

The kept material is only accessible by our competent/authorised staff, who are in charge of the security of the area. This material is not transmitted to third parties, except in the following cases: a) to the competent judicial, prosecutorial and police authorities when it contains data necessary for the investigation of a criminal offence involving persons or property of the controller, b) to the competent judicial, prosecutorial and police authorities when they request data, lawfully, in the performance of their duties, and c) to the victim or perpetrator of a criminal offence, when it concerns data which may constitute evidence of a criminal offence.

What are my right regarding my personal data?

You may, at any given time, exercise the following rights: a) right of access, b) right of rectification if they are inaccurate or incomplete, c) right of erasure, unless their processing is necessary for the exercise of the legitimate rights of the Company or third parties, for the fulfilment of a legal obligation, for reasons of public interest or for the defence of our legitimate rights before judicial or other authorities, d) right of restriction of processing, for specific purposes only, e) right of data portability, in accordance with existing legal requirements, f) right of objection.

In order to exercise any of the above rights, please use the "Request Exercise of Rights Form" and send it either via letter to the Company's headquarters (I. Koletti 25, Thessaloniki, 54627, tel. 2310566767), or via e-mail (to the address: This email address is being protected from spambots. You need JavaScript enabled to view it.), always stating your complete details and the reason for your communication.
In case of exercise of one of the above rights, the Company will take every possible measure to satisfy your request within one (1) month of receiving it, informing you in writing of the satisfaction of your request or the reasons that prevent the satisfaction of one or more of them, as well as for the reasons of any delay beyond the above period of one (1) month and in any case not later than three (3) months. The Company will also inform you of your further rights in case of an inadequate response. This information is in principle provided free of charge by the Company, subject to the request for notification and information not to be exercised repeatedly, in excess, and/or to be manifestly unjustified.

If you consider that the Company in any way violates the current legislation on personal data, you reserve the right to file a complaint to the Personal Data Protection Supervisory Authority: http://www.dpa.gr, 1-3 Kifissias, PC 11523, Athens, tel. 210 6475600, e-mail: This email address is being protected from spambots. You need JavaScript enabled to view it..

In this case, we would highly appreciate your previous communication with the Company either via letter to our headquarters (I. Koletti 25, Thessaloniki, 54627, tel. 2310566767), or via e-mail (This email address is being protected from spambots. You need JavaScript enabled to view it.), always stating your complete details and the reason for your communication.