PRIVACY POLICY

Last Update: 1^st of November 2024

SAFE BUSINESS CONSULTING SINGLE MEMBER P.C – PRIVATE SECURITY SERVICES COMPANY (referred to as “SBC”, “we”, “us”, “our”), is a private company incorporated in Greece, pursuant to Greek legislation, having its registered office at 29 Michael Mela str., Athens 11521, with TIN 801509500 and company registration number 158209401000.

At SBC, we are committed to protecting the privacy and confidentiality of our clients and visitors to our website. This Privacy Policy explains our practices regarding the collection, use, and protection of personal information and data when you engage our services, use our website, or interact with us in any capacity. It also outlines your rights regarding your personal data under the General Data Protection Regulation 2016/679 (GDPR).

1. Who We Are

SBC provides security and facility management consulting services, including but not limited to security and safety design, project management, threat identification, risk analysis, procurement, contracting and contract management services for security, safety and facility management projects and training exercises.

2. What Information We Collect and Why

By using our website or our services, we collect and process the following types of personal data:

• Identification Data: Name, address, phone number, email address.
• Contact Information: Contact details to facilitate communication, including metadata.
• Usage Data: We automatically collect information on how our website is accessed and used. This may include information like your computer’s IP address, your geographical location, your operating system, browser type, browser version, the pages of our website that you visit, the time and date of your visit, the time spent on those pages, and other diagnostic data.
• Cookies and Tracking Data: We use cookies and similar tracking technologies to track activity on our website and hold certain information. For more information, please see our Cookies Policy.
• Any other personal information you may share with us.

Purposes of Processing:

• To provide security and facility management consulting services, including but not limited to security and safety design, project management, threat identification, risk analysis, procurement, contracting and contract management services for security, safety and facility management projects and training exercises.
• To manage our website and business.
• To maintain the security and integrity of our services.
• To provide and maintain our website and our services.
• To notify you about changes to our website.
• To communicate with you.
• To handle requests and/or complaints submitted by you.
• To gather analysis or valuable information so that we can improve our website.
• To monitor the usage of our website.
• To send you newsletters, provided that you have provided your explicit consent. You can withdraw your consent regarding newsletters anytime.
• To detect, prevent, and address technical issues.

Please keep in mind that before you disclose to us any personal information of a third party, you must make sure this person is fully informed and you must obtain that person’s consent for the disclosure and processing of their personal information in accordance with this policy.

3. Legal Bases for Processing

We process your personal data based on the following legal grounds:

• Performance of a Contract: We process your personal data because it is necessary for us to provide consulting services as agreed in contracts with our clients. This includes activities like security and safety design, project management, threat identification, risk analysis, procurement, contracting and contract management services for security, safety and facility management projects and training exercises, where data about clients and their personnel may be essential for fulfilling these services.
• Explicit Consent (where applicable): We may process your personal data based on your explicit consent. This may apply where consent is specifically required, such as for processing beyond the scope of security and safety consulting services, such as newsletters and communication with you regarding your requests, in which case we will clearly inform you and obtain your explicit consent.
• Compliance with a Legal Obligation: We may process your personal data when it is necessary to comply with our legal obligations under applicable laws, such as data retention for compliance, record-keeping, and regulatory purposes.
• Legitimate Interests: We may process data based on our legitimate interests, especially for activities like security assessments, risk analysis, and readiness exercises. Given the nature of the business, legitimate interests can also extend to ensuring secure communication with clients, fraud prevention, and service improvement, provided this processing does not infringe on the rights and freedoms of individuals.
• Vital interests: In rare cases, particularly in high-risk scenarios (like emergency planning or evacuation exercises), we may process data to protect the vital interests of an individual if there’s an immediate threat to their life or safety.

4. How We Share Your Data

We do not sell or rent your personal data. We may share your information with trusted third parties, including service providers, partners, and contractors, solely for the purpose of supporting service delivery and enhancing data security. All third parties are bound by confidentiality agreements and data protection standards. We may share your personal data with third parties in case we are obliged to do so by law, court order or to protect our legal rights.

All third parties that may process your data on our behalf are contractually obligated to comply with GDPR requirements, including maintaining the confidentiality and security of your data.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including legal, accounting, or reporting requirements.

In case we have an agreement with you, as our client, we retain your personal data for as long as the agreement is in force and for ten years following the agreement’s termination.

In case you have only registered for newsletter or you have communicated with us regarding any matter, we retain your personal data for as long as your consent is valid, as well as for ten years following the withdrawal of your consent and/or your last communication with us.

6. Where we store your personal data

The personal data that we collect shall not be transferred to and stored at a destination outside the European Economic Area (“EEA”). All information you provide to us is stored on our secure servers within the European Union (EU). In case it is required for your personal data to be transferred outside the European Economic Area, all necessary measures will be taken pursuant to the law, meaning the transfer will be based either on an adequacy decision by the European Commission or on standard contractual clauses, in order to ensure an adequate level of Data Protection.

7. Marketing

We would like to send you information about services of ours that we think you might like, as well as those of our partner or affiliate companies. In order to receive marketing information from us, you will have to provide us your explicit consent, by opting-in. You may always opt-out at a later date. You have the right at any time to stop us from contacting you for marketing purposes.

8. Links to other websites and social media

Our website may contain links to and from the websites/applications/platforms of our partners and advertisers. If you follow a link to any of these websites/applications/platforms, please note that they have their own privacy policies and that we do not bare any responsibility or liability for these policies. Please check these policies before you submit any personal data to them.

9. Your Rights as a Data Subject

Under GDPR, you have several rights concerning your personal data:

• Right to Access: You have the right to request access to the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccuracies in your personal data.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances. Please note that we may retain your personal data in order to comply with specific legal obligations under European Union or Greek legislation, or in order to establish, exercise or support our legal claims.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your data in specific situations.
• Right to Data Portability: You have the right to request a copy of your personal data in a commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your data where our legal basis is legitimate interests.
• Right to Withdraw Consent: You have the right to withdraw your consent at any time by contacting us at …………………………

10. Data Security

We implement advanced security measures to protect the personal data entrusted to us. Our technical, physical, and organizational safeguards are designed to prevent unauthorized access, alteration, disclosure, or destruction of information. These measures include secure data transmission, encryption, and access controls. While we strive to ensure the utmost security, you should keep in mind that no method of data transmission or storage is completely secure.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer ……………………………:

• Email: [email protected]
• Postal Address: Omirou & 10 Stadiou str., Athens, Attica, Greece

12. Changes to This Privacy Policy

This Privacy Policy is in effect as of the date noted at the top of this Policy. We may change this Privacy Policy from time to time. When we do, we will post the revised version here and change the “Date” (the date it applies from) at the top of the statement. Please check this page regularly for the most up-to-date version of the statement. Any changes we may make to our Privacy Policy in the future will be posted on this page.