Candidate Employees Personal Data Protection

Candidate Employees Personal Data Processing Terms

In its capacity as data controller, Ethniki Insurance informs and assures interested parties, natural persons/data subjects, that their personal data (such as CV, contact details, etc.), which the Company collects in the context of the job announcement, are subject to strictly necessary processing, i.e., only to the extent required for the purposes of assessing the possibility of recruiting the applicant, which includes the following stages of personal data collection and processing:

  • submission of the required information;

  • selection of candidates;

  • conducting interviews.

It is noted that remote interviews will be conducted using the Teams platform. During the interview, candidates must have their camera and sound activated in order to allow for their identification and to conduct the interview, which will not be recorded.

The Company assures the natural persons/data subjects that their data are being processed lawfully, in accordance with the personal data protection laws, which include, inter alia, the General Data Protection Regulation (EU) 2016/679 (GDPR), Law 4624/2019 and Law 3471/2006 in the field of electronic communications, as well as in line with the labour legislation, free from any form of discrimination, direct or indirect, and respecting the constitutional principle of equal treatment.

Any special categories of personal data (‘sensitive data’) collected (e.g. nationality, trade union membership) are processed in accordance with the applicable legal basis in Article 9(2) of the General Data Protection Regulation (EU) 2016/679.

It is expressly clarified that the expression of interest on the part of the subjects does not bind the Company to: a) accept, b) invite to an interview and c) recruit the applicant, and does not constitute grounds for such claims on the part of the subjects/applicants. Finally, the Company pledges to erase the personal data collected during the recruitment process after a period of one (1) year from the date of collection.

Data Type and Method of Collection

The data we collect are those which the user makes available to the Company voluntarily when registering on professional networking websites such as LinkedIn, Indeed, etc. or when sending a CV (e.g. name, surname, phone number, etc.) directly to Ethniki Insurance. In cases where the interview is conducted remotely, we do not collect image and audio data. Image and audio data are not stored.

The data subject (applicant) expressly declares that he/she has taken note of the Company’s Personal Data Protection Policy and that he/she has carefully read the terms of processing of personal data processed by Ethniki Insurance in the context of recruitment, as specified in the text of the corresponding job announcement. The data subject (applicant) declares also that he/she consents to the necessary processing of his/her personal data, as required for the purposes of the job announcement, i.e. the collection, sorting and processing of your CV in order to assess the suitability of the person concerned and the likelihood of recruitment. In case the applicant decides that he/she does not wish that his/her CV or specific personal data contained therein be kept by the Company, the Company informs the data subject that he/she has the right to withdraw his/her consent at any time, without any financial cost, by sending the withdrawal of his/her consent to the e-mail address: jobs@ethnikiasfalistiki.gr.

Applicant Rights

As a data subject, you have rights. In particular, you can:

  • access and receive a copy of your data upon your request;

  • request from Ethniki Insurance to rectify your incorrect or incomplete data;

  • request from Ethniki Insurance to erase or stop processing your data, for example when data are no longer necessary for the purposes of the processing;

  • object to the processing of your data where Ethniki Insurance invokes its legitimate interests as legal basis for the processing;

  • withdraw your consent to the processing of your data at any time, without any financial cost to you (this right applies if the consent is used as legal basis for the processing);

The withdrawal of your consent does not affect the lawfulness of the processing already carried out until the time of withdrawal. Should you exercise any of your rights referred to above, Ethniki Insurance will take all possible measures to satisfy your request within one (1) month of receipt, informing you in writing that the request has been satisfied or stating the reasons which may delay or impede the exercise of any of your rights referred to above, as stipulated in the General Data Protection Regulation (Regulation (EU) 2016/679).

We also inform you that Ethniki Insurance does not process personal data for the purpose of automated decision-making (without human intervention) and does not disclose your personal data to third countries, outside the European Union, or to countries that do not have an appropriate personal data protection regime.

Furthermore, we inform you that, if you wish, you have the right to file a complaint with the competent Personal Data Protection Authority, telephone: +30 210 647 56 00 and e-mail address: contact@dpa.gr.

Data Protection Officer

You can contact the Data Protection Officer of Ethniki Insurance by sending an e-mail to: dpo@ethnikiasfalistiki.gr.

To exercise your rights you can send an e-mail to: parapona@ethnikiasfalistiki.gr.

Data Retention

Your CV is retained in the Ethniki Insurance archives for one (1) year from receipt. However, if you give us your consent, Ethniki Insurance will retain your CV in its archive for one (1) additional year, so that it can be available in case employment opportunities arise during this additional period. At the end of the retention period, or if you withdraw your consent earlier, your personal data will be erased one year after they have been received.