Privacy Policy

Introduction

With this “Privacy Policy” (the “Policy”), Y/KNOT Invest S.A. (“Y/KNOT” or the “Company” or “we” or other references in the first person plural) informs the users/visitors of the Company’s website or, in general, the natural persons who are data subjects (the “users/visitors” or “you” or other references in the second person plural) that, in the context of its activities, the Company may collect and process personal data concerning them, provided that the users/visitors provide such data to the Company.

1. Company contact details

Y/KNOT Invest S.A. is a société anonyme listed on the Athens Stock Exchange, registered with the General Commercial Registry (G.E.MI.) under G.E.MI. No. 123800107000, and has telephone number (+30) 2109886187 and website: www.yknot.gr. The Company processes personal data as a data controller.

2. Legal framework for processing

This processing is carried out in accordance with the terms of this Policy and in accordance with Greek and EU law on the protection of personal data, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“General Data Protection Regulation” or “GDPR”) (OJ L 119, 04.05.2016, pp. 1–88), and Law 4624/2019 (Government Gazette A’ 137) regarding measures implementing the GDPR. Users/visitors are requested to read this Policy carefully before proceeding with any further use/browsing of the Y/KNOT website and to proceed with further use/browsing of it only if they have fully and unreservedly accepted its content. By continuing to use/browse the Y/KNOT website, users/visitors are deemed to have become aware of and to fully and unreservedly accept the content of this Policy. It is noted that the headings used in this Policy are indicative and intended only to assist users/visitors.

3. Purposes of processing and legal basis for processing

This processing shall be carried out exclusively for the purposes set out below and in accordance with the provisions of the GDPR, in particular Article 6(1) thereof, namely for communication purposes, or in the context of the submission of offers following a relevant invitation by the Company for the assignment of services/projects and the evaluation of the relevant offers, or in the context of the submission of CVs for filling a specific position and the evaluation thereof, or as otherwise may be specified on the Y/KNOT website, or in the context of satisfying other legitimate interests of Y/KNOT or third parties (such as, indicatively, the safeguarding of lawful rights and interests of Y/KNOT or third parties, fraud prevention, etc.), or for purposes of Y/KNOT’s compliance with its legal obligations, or in the context of other lawful purposes listed in Article 6(1) of the GDPR (such as, indicatively, where processing is necessary for the performance of a specific contract to which you are a party and/or in order to take steps at your request prior to entering into such contract, etc.).

4. Type of data

Y/KNOT will collect and process only personal data that are appropriate, relevant and necessary for the respective aforementioned processing purpose, which, depending on the case, may include in particular identification or legalization details (such as full name, date and place of birth, identity card or passport details, etc.), contact details (such as address, landline or mobile telephone number, email address), education/professional experience details and any other information you may voluntarily provide to us. Y/KNOT will not process such data for any purpose other than that for which they were collected. Users/visitors are requested to disclose to Y/KNOT only the information/data requested by the latter. If such information/data are not provided to Y/KNOT, it may not be possible to carry out and/or complete the act for which such data/information are requested. As a rule, Y/KNOT does not ask users/visitors to provide personal data concerning another person. However, if such data are required to be provided, users/visitors must first ensure the following before providing such data to Y/KNOT: (a) that they have informed the relevant person about the content of this Policy, and (b) that they have obtained that person’s explicit consent to share them with Y/KNOT in accordance with this Policy, where required or as otherwise may be required by applicable law. The Y/KNOT website is intended for an adult audience.

5. Data retention period

We take every care to retain the personal data we collect and process in accordance with this Policy for the period that is strictly necessary for the purposes for which we collected them, as well as for our compliance with any legal obligations or internal procedures, and for as long as required for the safeguarding of our lawful rights and interests, also taking into account the applicable legislative and regulatory provisions on limitation periods.

6. Disclosure/Transmission of data to other people

Access to personal data collected and processed in accordance with this Policy will in principle be granted only to competent/authorized members of Y/KNOT’s staff and/or members of its corporate bodies, and only to the extent required in the context of the above processing purposes. Furthermore, Y/KNOT may, depending on the case, transmit such data to third parties, provided and to the extent required for the fulfilment of the respective aforementioned processing purpose, such as, indicatively, to companies of its group, its shareholder, advisers and/or partners in general, as well as to any kind of authorities, bodies, services, agencies and/or organizations, etc., in all cases complying with the applicable provisions of the national and EU legislative and regulatory framework. If Y/KNOT is interested in entering into cooperation with other persons, which cooperation will involve the processing of personal data by those persons—as processors—on behalf of Y/KNOT, such persons must comply with the national and EU legal framework for the protection of personal data and sign an agreement with Y/KNOT governing the terms and conditions of the data processing carried out in that context and containing the content provided for by the applicable provisions from time to time.

7. Potential transfer of data to third countries

Where required in the context of the above processing purposes, Y/KNOT may transfer your personal data to recipients in third countries outside the EU. In such a case, Y/KNOT will ensure that all relevant requirements of the applicable legislation are met.

8. Your rights

In accordance with the applicable provisions of the GDPR (Articles 13–22) and Law 4624/2019, you have the following rights in relation to the personal data concerning you that we collect and process in accordance with this Policy:

(a) the right to obtain confirmation as to whether or not your personal data are being processed and, where processing is taking place, to access such data and certain information relating to their processing as referred to in the applicable provisions, in accordance with and subject to the conditions provided for by such applicable provisions.

(b) the right to request the rectification of inaccurate data or the completion of incomplete data.

(c) the right to request that we erase the data we collect and process, for certain reasons and subject to the conditions provided for by the applicable provisions. Please note that, in certain cases referred to in the applicable provisions, including cases where processing is necessary for compliance with a legal obligation to which we are subject under EU or national law and/or for the performance of a task carried out in the public interest and/or for the establishment, exercise or defense of legal claims, we may not satisfy any request by you for data erasure.

(d) the right to request restriction of data processing in the cases provided for by the applicable provisions. Please note that we may continue to process the data whose processing has been restricted in the context of exercising this right for certain reasons referred to in the applicable provisions, including the establishment, exercise or defense of legal claims or reasons of EU or national public interest.

(e) the right to object, at any time and on grounds relating to your situation, to the processing of data by us, in accordance with the applicable provisions. In such a case, we shall cease processing the data thereafter, unless there are compelling and legitimate grounds for the processing which overrides your interests or freedoms, or for the establishment, exercise or defense of our legal claims.

(f) the right, subject to conditions and to the extent applicable, to receive the data in a structured, commonly used and machine-readable format or to transmit them to another controller, in accordance with and subject to the applicable provisions.

(g) the right, depending on the case and to the extent applicable, to withdraw the consent you may have given us for our collection and processing of the data, where the processing is based on your consent. Please note that in the event of such withdrawal, the lawfulness of the prior processing of your data shall not be affected.

9. Contact with Y/KNOT – Data Protection Officer details

To exercise any of your above rights, as well as for any matter arising from or in connection with this Policy, you may contact us at email: privacy@yknot.gr. Please also take the following into account in this context:

(a) If we have reasonable doubts about your identity, we may request further information to confirm your identity.

(b) We will make every effort to respond to your requests without delay and in any event within one (1) month of receipt of the request. Where required, this period may be extended by two (2) further months, considering the complexity of the request and the number of requests. In any event, we will ensure that you are informed of any extension and of the reasons for the delay within one (1) month of receipt of your request.

(c) Responses to your requests are in principle provided free of charge. However, where your requests are manifestly unfounded or excessive, in particular because of their repetitive character, Y/KNOT may either charge a reasonable fee or refuse to respond to your request.

10. Possibility to contact and lodge a complaint with the Authority

In any case, you may contact the Hellenic Data Protection Authority (www.dpa.gr), where, depending on the circumstances, you have the right to lodge a complaint.

11. Reference to other websites

The Y/KNOT website may include links to other websites that are under the responsibility of third-party natural or legal persons. Y/KNOT bears no responsibility for the personal data protection and management terms applied by such websites.

12. Amendment

Y/KNOT regularly reviews the content of its website, as well as this Policy. Y/KNOT reserves the right to amend the content of its website, as well as this Policy, whenever it deems necessary, without prior notification or warning, solely by announcing the new content through this website. For this reason, we recommend/you are invited to regularly review this Policy for any changes.

13. Applicable law / Jurisdiction

This Policy, as well as the use of this website in general, is governed by Greek law. Any dispute that may arise shall be subject to the jurisdiction of the courts of Athens.