INFORMATION ON THE PROCESSING OF PERSONAL DATA

v.1.1 – 9/5/2021

Introduction

PERFORMANCE TECHNOLOGIES S.A. assures that the protection of the personal data of its customers is of primary importance. For this reason, appropriate measures are taken to protect the personal data processed and to ensure that the processing of personal data is always carried out in accordance with the obligations imposed by the legal framework, both by the company itself and by third parties that process personal data on behalf of the company.

Data Controller – Data Protection Contact Person

PERFORMANCE TECHNOLOGIES A.E., with registered office in Athens, 4, Evrymedontos street, email: info@performance.gr, tel: +30 2109947100, fax: +30 2109947111, website: https://www.performance.gr informs that, for the purposes of carrying out its business activities, it processes personal data of its customers in accordance with the applicable national legislation and the European Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter “Regulation”) as applicable.

For any matter relating to the processing of personal data, interested parties may contact us by email at gdpr@performance.gr or by phone at 210 9947100.

Categories of personal data processed

Your personal data collected and processed by PERFORMANCE TECHNOLOGIES S.A. are the absolutely necessary and appropriate for the achievement of its intended purposes. The personal data collected to achieve these purposes are divided into two categories :

A) Personal data provided by you, such as:

• Identification data (full name, date of birth, identity card or passport details, VAT number, tax office),
• Contact data (postal address, fixed or mobile telephone number, e-mail address),
• Other data such as professional qualification, job description

Data relating to your identification and/or legalization, as well as contact details are absolutely necessary for any transactional or contractual relationship with the company. As for the other data processed, these depend in each case on the contractual relationship that already exists with the company or is to be concluded and/or the service offered.

We inform you that it is your obligation to inform PERFORMANCE TECHNOLOGIES S.A. in a timely manner of any change in the above data that you have submitted to us on your own initiative, as well as to respond to any request for updating them.

B) Personal data that PERFORMANCE TECHNOLOGIES S.A. collects about you from other sources, such as:

• Data from the use of the Company’s electronic and/or digital products and services, such as cookie identifiers, web protocol addresses or other identity identifiers, in accordance with the specific terms of use of the Company’s applications,
• Data that relates to you and that is publicly accessible either electronically or otherwise.

PERFORMANCE TECHNOLOGIES does not collect and does not process personal data of special categories such as data concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic and biometric data, health, sexual life or sexual orientation of natural persons.

The personal data processed by PERFORMANCE TECHNOLOGIES S.A. are kept in written form and/or by electronic and magnetic means.

Purpose of processing and method of use of personal data

The data collected is necessary for:

• The provision of products and services, the performance and in general the fulfilment of our obligations towards you.

We collect your personal data in order to provide you with our products and services. For the purpose of drawing up the contract between you and us and to be able to provide you with our products and services, identifying and contact information is required. We process your data for the purposes of managing your customer record, confirming the status of your order or your participation in a corporate event or training.

• For our communication with you and to manage our relationship with you.

We may need to contact you by email or telephone for administrative purposes, for example to manage your requests and complaints and for your convenience in general. We may also use your contact information to participate in a customer preference survey, or satisfaction survey, or to inform you of the progress of your participation in a corporate event.

• To improve our services and protect our business interests.

We may use your data in order to improve the services we provide to you by meeting your expectations more effectively.

• To keep you informed about our news.

If you have consented to this, we will send you information about our products and services and corporate events by email, telephone or post.

• To comply with legal obligations.

We process your personal data in the context of our compliance with legal obligations and in particular with the provisions of employment, insurance and tax laws, court orders, obligations to government authorities and in the context of investigating complaints, preventing and detecting fraud, checking the accuracy of invoicing and situations involving potential threats to the safety of any person or violations of our corporate policies.

• To safeguard our legitimate interests and protect persons and property.

We process personal data in the context of using closed circuit television (CCTV) cameras in order to be able to protect the security of individuals, property and premises.

Lawful grounds for processing personal data

Personal data provided to PERFORMANCE TECHNOLOGIES S.A. is processed only if there is a legitimate reason to do so.

Lawful reasons for processing your personal data include:

(a) the necessity of processing your data in the context of the performance of our contractual obligation or at your request during the pre-contractual stage for the provision to you of our products and services, including the management of your customer register, confirmation of your order status and the execution of your order.

(b) the safeguarding and protection of our legitimate interests, which may consist of the security of persons and premises, the security of the network and the operation of the company’s information systems and their protection against malware, the support, exercise and substantiation of our legal claims, the general organisation and development of our business activity, and the promotion of our products and services

(c) compliance with a legal obligation, which may consist in particular of obligations arising from the provisions of labour, tax and insurance law

(d) obtaining consent under the conditions set out in the legal framework, for example in order to receive information about products, services and corporate events.

Where your data is shared

PERFORMANCE TECHNOLOGIES S.A. discloses your personal data to the following categories of recipients :

• Affiliated subsidiaries of the Group

The company may transmit data to PERFORMANCE TECHNOLOGIES group companies for the purposes of management and service to customers, suppliers and partners or for the purpose of complying with legal obligations.

The Company has lawfully ensured that the processors on its behalf meet the requirements and provide adequate assurances that they have implemented appropriate technical and organisational measures to ensure that the processing of your personal data ensures the protection of your rights.

• Employees of the Company

The Company’s employees, who are responsible for the evaluation and processing of your requests, the administration and operation of the existing contract, for the fulfilment of the obligations arising from it, as well as the relevant obligations imposed by law. Your personal data is treated with the strictest confidentiality and discretion, as those of our employees who process your personal data have an adequate and significant level of knowledge to protect it and are bound by a confidentiality clause or are under a duly regulatory obligation to comply with the confidentiality clause.

• Government authorities, law enforcement bodies in the exercise of their functions

We may share your information with relevant agencies, law enforcement bodies, and other third parties, to the extent permitted by law, to prevent or detect criminal acts, illegal activities and situations involving potential threats to the security of any person or violations of our policies.

• When assigning work to legal advisors, accountants, auditors, insurers, etc.

The Company, when managing litigation and for the purposes of establishing, exercising and supporting its legal claims against third parties, may transfer your data to external associate lawyers, in case their assistance is deemed necessary for the management of the case and the support of the Company’s rights. PERFORMANCE TECHNOLOGIES S.A. also cooperates with accountants, auditors, insurers and other third parties to whom it entrusts the processing of personal data on its behalf.

In these cases, PERFORMANCE TECHNOLOGIES S.A. remains responsible for the processing of your personal data and defines the individual elements of the processing, and signs a specific contract with the third parties to whom it entrusts the performance of processing activities, in order to ensure that the processing is carried out in accordance with the applicable legal framework and that each natural person can freely and unhindered exercise the rights conferred by the legal framework.

Transfer of your personal data to third countries

Your personal data may be transferred and stored in locations outside the European Union (EU) or the European Economic Area (EEA), including countries that may not have the same level of protection for personal information. Reasons for transferring personal data may be the applicable recipient-specific safeguards, such as adequacy decisions of the European Commission or standard contractual clauses, as approved by the European Commission and in force from time to time. In the absence of these, the transfer is based on a specific derogation in accordance with the requirements of the Regulation, such as the necessity of the transfer for the performance of the contract between the Company and the data subject or the consent of the latter. In addition, the transfer may, where appropriate, be carried out in order to establish, exercise or support legal claims or where the transfer is required on the basis of a decision of a court, an administrative authority or an international agreement or the legal interests of the Company by way of exception. In all cases, it shall be ensured that an appropriate level of protection is always in place and that the transfer is lawful.

Period of data storage

The storage period of the data shall be determined on the basis of the following specific criteria on a case-by-case basis:

Where processing is imposed as an obligation by provisions of the applicable legal framework, your personal data will be stored for as long as the relevant provisions require.

Where the processing is carried out on the basis of a contract, your personal data will be stored for as long as necessary for the performance of the contract and for the establishment, exercise, and/or support of legal claims based on the contract.

For the purposes of promoting products and services, your personal data is kept until your consent is withdrawn. This can be carried out by you at any time. Withdrawal of consent does not affect the lawfulness of the processing based on consent in the period prior to its withdrawal.

To withdraw your consent, please contact us by email gdpr@perftech.elementor.cloud or by phone 210 9947100. You can also use the unsubscribe options by following the corresponding link in our electronic communications.

What are your rights in relation to your personal data?

Every natural person whose data is processed by PERFORMANCE TECHNOLOGIES S.A. enjoys the following rights:

Right of access

You have the right to know and verify the lawfulness of processing. Therefore, you have the right to have access to the data and to receive additional information about the processing.

Right to rectification

You have the right to review, correct, update or modify your personal data by contacting the Data Protection Contact Officer at the contact details above.

Right to erasure

You have the right to request the erasure of your personal data when we process it on the basis of your consent or in order to protect our legitimate interests. In all other cases, such as, but not limited to, where there is a contract, a legal obligation to process personal data imposed by law, public interest, this right is subject to specific limitations or does not exist as the case may be.

Right to restrict processing

You have the right to request restriction of the processing of your personal data in the following cases: (a) when you question the accuracy of the personal data collected by the Company and until verification is carried out; (b) when you oppose the deletion of personal data and request the restriction of their use instead of deletion; (c) when the personal data are not necessary for the purposes of processing, but are nevertheless necessary for the establishment, exercise, support of legal claims; and (d) when you object to the processing and until

Right to object to processing

You have the right to object at any time to the processing of your personal data where, as described above, it is necessary for legitimate interests pursued by us as data controllers, as well as to processing for direct marketing and consumer profiling purposes.

Right to portability

You have the right to receive your personal data free of charge in a format that allows you to access, use and process it by commonly used processing methods. You also have the right to ask us, where technically feasible, to also transfer the data directly to another controller. This right exists for data that you have provided to us and is processed by automated means on the basis of your consent or in performance of a relevant contract.

Right to withdraw consent

Where processing is based on your consent, you have the right to freely withdraw it, without prejudice to the lawfulness of the processing based on your consent until you withdraw it.

Right to complain to the DPA

You have the right to lodge a complaint with the Data Protection Authority (www.dpa.gr): telephone: +30 210 6475600, fax: +30 210 6475628, e-mail: contact@dpa.gr

To exercise any of the above rights, please contact us at gdpr@perftech.elementor.cloud or by phone at 210 9947100.

Personal Data Security

PERFORMANCE TECHNOLOGIES implements appropriate technical and organizational measures aimed at the secure processing of personal data and the prevention of accidental loss or destruction and unauthorized and/or unlawful access, use, modification or disclosure of personal data. However, the way the Internet works and the fact that it is free to anyone does not allow for guarantees that unauthorised third parties will never be able to breach the technical and organisational measures in place, gaining access and possibly making use of personal data for unauthorised and/or illegitimate purposes.

Links to other websites

The Company’s website may be linked to other websites that are beyond its control, and other websites that are beyond its control may be linked to this website. While we strive to ensure that our website is only linked to websites that share the same privacy and security standards, the Company is not responsible for the privacy practices or content of other websites.

Changes to the Privacy Policy

The information on the privacy policy of PERFORMANCE TECHNOLOGIES S.A. posted on its website reflects the current state of data processing. In the event of changes in data processing, this information will be updated accordingly, so that the Company’s website will always post the latest version of this data protection information in order to keep you informed of the scope of data processing. It is recommended that you are always aware of how we process and protect your personal information. Any future changes regarding this Privacy Statement will be made known in a timely manner before such changes take effect.

The above information is provided pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council and the provisions of the Greek legislation on the protection of personal data adopted and implemented in this context.