CANDIDATE NOTIFICATION ON THE PROCESSING OF PERSONAL DATA

The Company under the name "Tsakos Shipping and Trading" (hereinafter referred to as the "Company") collects and further processes personal data for recruiting purposes.

The Company collects CVs, which job applicants send electronically or submit in paper form either by replying to a relevant job post or by sending them on their own initiative. In such cases, personal data are processed as described here below:

Data Controller

The Company [address: Megaro Makedonia, 367, Syngrou Avenue, 175 64, Athens, Greece] acts as a Data Controller for any processing carried out:

• during the collection of CVs;
• when conducting interviews;
• during the final evaluation of job applications.

Communication on personal data issues

To exercise your rights (below under 7), ask questions or for any other reason regarding the processing of personal data described in this Notice, you may contact the Company’s DPO Team at: dpo@tsthellas.gr.

Which personal data are processed

During the selection procedure, personal data are processed as follows:

Collection and evaluation of CVs

At the CV collection and initial evaluation stage, we process the following information:

• Identity data (Name, Father’s name, Mother’s name, Identity Card No.);
• Contact Details (Land Line, Mobile Telephone Number, E-Mail Address);
• Information about your education (School attended - Diplomas, Language Certificates, Certifications, Seminars-Education);
• Information about your professional experience (Professional Capacity, work experience, working position);
• Any other personal data included in your CV.

Interviews

During interviews, the following personal data are processed:

• Detailed information about your education, professional experience and other skills;
• Data that you will voluntarily disclose in the context of the interview,
• Where appropriate, completed data- derived from competence evaluation (as referred in the relevant Company’s candidates' information notice).

Final Evaluation

During the final evaluation of job applications, we process all the information contained in your CV, collected in the context of the interview, as well as the following data:

• Data that may be included in letters of recommendation,
• Data included in the documents you provide as proof of the qualifications - skills described in your CV. Personal data will be collected and processed by the Company in order to run a background check to confirm the validity of the education and employment history of the applicant employee.

Legal basis of the processing of personal data

The legal basis of the processing of personal data is to take measures at the request of the Subjects prior to entering into a contract (Art. 6 par. 1(b) GDPR) and to exercise the managerial right in accordance with Article 6, par. 1(f) of the GDPR (processing is necessary for the purposes of the employer's legitimate interests - verifying information and consisting in the selection of the most suitable employee for the position.).

Special categories of personal data are processed only for the purpose of assessing suitability for work (art. 9 par. 2. approx. or GDPR), otherwise when voluntarily disclosed by the prospective employees themselves (art. 9 par. 2. approx. e ́ GDPR).

Retention period of personal data

Your personal data will be retained for six months from the date you provide them to us and will be deleted - destroyed after this period, unless a legal dispute arises, in which case the data will be retained until a final court decision is issued.

Disclosure – Sharing of personal data

Your personal data are processed by the Company's authorized personnel.

Your personal data are not disclosed/made available to third parties, with the exception of the providers of website development, support and hosting services. These providers (Processors) have contractually provided guarantees for the protection of your personal data.

The data is stored s in Greece. No transfers outside the European Economic Area (EEA) take place.

Rights of data subjects

The Company, as a Data Controller, complying with the provisions of the legislation on personal data protection, facilitates the exercise of and satisfies the following rights:

• Right of access: Data Subjects are entitled to learn whether the Company processes their data and, if so, to receive a copy of them provided that the data have not been deleted.
• Right of rectification: Data Subjects are entitled to request the rectification of inaccurate or incomplete personal data.
• Right of erasure: Data Subjects may request that the Company deletes their data subject to the conditions laid down in the applicable data protection legislation.
• Right to restrict processing: Data Subjects are entitled to request that processing be limited, such as not deleting data they consider necessary to establish, exercise or support legal claims.
• Right to object: Data Subjects are entitled to object to processing subject to the conditions laid down in the applicable data protection legislation.
• Right to portability of personal data: Data Subjects can request that the Company transfer their data to another entity or provide it to them.

To exercise their rights, Data Subjects may contact the Company’s DPO Team (under 2 mentioned).

In the event that you consider that the processing of your personal data violates the applicable regulatory framework for the protection of personal data, you have the right to file a complaint with the Hellenic Data Protection Authority (postal address Kifissias 1-3, P.C. 115 23, Athens, tel. 210. 6475600, e-mail address contact@dpa.gr).

Terms of Use

PLEASE READ THESE TERMS AND CONDITIONS OF USE CAREFULLY BEFORE USING THIS WEBSITE

Please read the following information carefully. The information contained on this website is communicated and issued by Tsakos Shipping & Trading S.A. (and, unless otherwise indicated, its affiliates and associates, together with "Tsakos") in accordance with the following terms and conditions. By accessing any part of this website, visitors will be deemed to have accepted these terms and conditions in full. If you do not accept these terms and conditions, please do not continue to access this website. Tsakos may modify this website and the rules and regulations governing its use, at any time. By continuing use of the website after such changes are made you will be accepting such changes. Tsakos reserves the right to disable or restrict any visitor's access if in its opinion such visitor has failed to comply with any of these terms and conditions.

Accuracy of Information

Although Tsakos has taken reasonable care that the information contained on this website, is accurate at the time of publication, such information is provided "as is" for informational purposes only as of the date of publication, and no representation or warranty (including liability towards third parties), expressed or implied, is made (or accepted) as to its accuracy or completeness or fitness for any purpose by Tsakos Group. Under no circumstances will Tsakos be liable for any direct, indirect, incidental, special or consequential loss or damage caused by reliance on this information. Tsakos makes no representations or warranties that use of the website will be uninterrupted or error-free. Visitors are responsible for taking all necessary precautions to ensure that any content they may obtain from the website is free of viruses. 

Limitations of Liability

To the maximum extent permitted by applicable law and regulatory requirements, Tsakos specifically disclaims any liability for errors, inaccuracies or omissions on this website and for any loss (whether direct or indirect) or damage resulting from its use, whether caused by negligence or otherwise. Visitors who choose to access this website do so on their own initiative and agree to assume responsibility for determining whether any legal or regulatory considerations limit their access to or use of information contained on this website. Visitors are responsible for compliance with all local laws and regulations. Visitors agree to defend, indemnify and hold harmless Tsakos, its officers, directors, employees and agents from and against any and all claims, liabilities, damages, losses or expenses, including reasonable attorneys' fees and costs, arising out of or in any way connected with their access to or use of this website. 

Ownership

Unless otherwise expressly noted, all content included on this website, including, without limitation, images, logos, articles and other materials, are the property of their respective owners, who may or may not be affiliated with Tsakos. Visitors are responsible for complying with all applicable copyright, trademark and other intellectual property applicable laws and regulations. Tsakos and its affiliates allow visitors to make copies of this website as necessary incidental acts during their viewing of the website. Visitors can print, for their personal use, as much of the website as is reasonable for private purposes. All other use is strictly prohibited. 

Cookies on www.tsakoshellas.gr

This site, like many others, uses small files called cookies to help us customize your experience. Find out more about cookies and how you can control them.

What are 'cookies'? '

Cookies' are small text files that are stored by the browser (for example, Internet Explorer or Safari) on your computer or mobile phone. They allow websites to store things like user preferences. You can think of cookies as providing a 'memory' for the website, so that it can recognize you when you come back and respond appropriately.

How does the www.tsakoshellas.gr  use cookies?

A visit to a page on the www.tsakoshellas.gr  may generate the following types of cookie:

Site performance cookies

This type of cookie remembers your preferences for tools found on the www.tsakoshellas.gr, so you don't have to re-set them each time you visit. Examples include: -volume settings for our video player - whether you see the latest or the oldest article comments first - video streaming speeds that are compatible with your browser

Anonymous analytics cookies:

Every time someone visits our website, software provided by another organization generates an 'anonymous analytics cookie'. These cookies can tell us whether or not you have visited the site before. Your browser will tell us if you have these cookies and, if you don't, we generate new ones. This allows us to track how many individual users we have, and how often they visit the site.

Geotargetting cookies

These cookies are used by software which tries to work out what country you are in from the information supplied by your browser when you click on a web page. This cookie is completely anonymous, and we only use it to help target our content and advertising.

Advertising cookies

These cookies allow us to know whether or not you've seen an advert or a type of advert, and how long it is since you've seen it. We also use cookies to help us use targeted advertising. We may use cookies set by another organization so we can more accurately target advertising to you. These cookies are anonymous – they store information about what you are looking at on our site, but not about who you are. We also set anonymous cookies on certain other sites that we advertise on. If you receive one of those cookies, we may then use it to identify you as having visited that site if you later visit the www.tsakoshellas.gr. We can then target our advertising based on this information.

Third party advertising cookies

A lot of the advertisements you see on the www.tsakoshellas.gr are provided by other organizations. Some of these organizations use their own anonymous cookies to track how many people have seen a particular ad, or to track how many people have seen it more than once. The companies that generate these cookies have their own privacy policies, and we have no access to read or write these cookies. These organizations may use their cookies to anonymously target advertising to you on other websites, based on your visit to www.tsakoshellas.gr

Other third party cookies

On some pages of our website, other organizations may also set their own anonymous cookies. They do this to track the success of their application, or to customize the application for you. Because of how cookies work, our website cannot access these cookies, nor can the other organization access the data in cookies we use on our website. For example, when you share an article using a social-media sharing button (for example, Facebook) on the www.tsakoshellas.gr, the social network that has created the button will record that you have done this.

How do I turn cookies off?

It is usually possible to stop your browser accepting cookies, or to stop it accepting cookies from a particular website. However, we cannot tell if you are signed in without using cookies, so you would not be able to post comments. All modern browsers allow you to change your cookie settings. You can usually find these settings in the 'options' or 'preferences' menu of your browser.

Data Protection Policy

1.1 PRIVACY NOTICE

PREAMBLE
This website is owned and operated by Tsakos Group (“The Group”, “we”), which is committed to complying with any applicable Data Protection Legislation.

This Privacy Notice provides information on the collection of personal data during the use of this Website (“The Website”). It also explains how this personal data is used, shared and protected, as well as how the Website users (“the users”, “you”, “data subjects”) can exercise their rights in this respect.

DATA PROTECTION PRINCIPLES
The following principles lie at the heart of the Group’s approach to processing personal data:

1. Lawfulness, fairness and transparency;
2. Purpose limitation;
3. Data minimization;
4. Accuracy;
5. Storage limitation;
6. Integrity and confidentiality (security);
7. Accountability.

THE CATEGORIES OF PERSONAL DATA WE COLLECT
Personal data is information that relates to an identified or identifiable individual. It could be as simple as a name or a number or could include other identifiers such as an IP address or a cookie identifier.

We process different types/categories of personal data that could be grouped together as follows:

1. Identification Data: first and last name filled in the contact form;
2. Contact Details: email address, address, post code, country filled in the contact form;
3. Εmployment Data: Company name filled in the contact form;
4. Technical Data: details about the type of device (which can include unique device identifying numbers),  operating system, browser and applications connected to the services provided through the device, the user’s Internet service provider or mobile network, the user’s IP address, an approximate location (usually no more precise than city level) which can be determined from users’ IP (Internet Protocol) address, Cookies.
5. Usage Data: the time users access the Website and the duration of each usage, the sit users come to the Website from or go to after leaving a webpage/feature of the Website, selections, choices and preferences made and set when using the Website;
6. Other Categories that may be included in a message sent through the contact form.

PURPOSE AND LEGAL BASIS OF DATA PROCESSING
We collect and process your personal data for the following purposes based on the corresponding legal basis:

1. Handling your queries / requests sent through the contact form, on the legal basis of the legitimate interests pursued by the Group, for compliance with a legal obligation to which the Group is subject or in order to take steps at your request prior to entering into a contract -depending on the nature of your message;
2. To ensure that each function of the Website operates properly, on the legal basis on the performance of a contract;
3. To analyze the use of the Website and, consequently, improve its content, on the legal basis of the legitimate interests pursued by the Group.

WHO WE MIGHT SHARE YOUR PERSONAL DATA WITH
We only share your personal data when this is necessary to handle your requests or to fulfill an obligation imposed by law, in particular with:

1. our third-party partners, service (web development, maintenance and hosting) providers for the purposes of the proper functioning of the Website. All these partners provide sufficient guarantees to implement appropriate technical and organizational measures in such a manner that processing will meet the requirements of the applicable Data Protection Legislation and ensure the protection of the rights of the data subjects;
2. professional advisors and auditors for the purpose of seeking professional advice or to meet our audit responsibilities when deemed necessary, based on the nature and content of a message submitted through the contact form;
3. lawyers, insurance companies/brokers when deemed necessary, based on the nature and content of a message submitted through the contact form;
4. any third party in order to meet our legal and regulatory obligations, including statutory or regulatory reporting or the detection or prevention of unlawful acts, tax, regulatory or other public authorities.

Such sharing or transfers of personal data are protected by appropriate safeguards (e.g. appropriate contractual clauses, data processing agreements, policies / rules for intra-group disclosures of personal data, etc.) and if recipients operates outside the EEA, appropriate protections are in place to ensure that your personal data remains adequately protected including adequacy decisions adopted by or standard contractual clauses approved by the European Commission.

LINKS TO OTHER WEBSITES
The Website may contain hyperlinks to other websites/services owned and operated by third parties. The operators of other websites/services may process your personal data in accordance with their own Privacy Policy. Therefore, you should exercise caution and review the Privacy Policies applicable to any external websites you may be redirected to

SECURITY SAFEGUARDS
We recognize the importance of information security and we implement appropriate technical and organizational measures as well as physical and logical security rules and procedures. These measures, rules and procedures are constantly reviewed and enhanced.

DATA RETENTION
We are committed not to retain personal data for a period longer than necessary for the purposes for which the personal data were obtained and/or to meet legal and regulatory requirements.
Further information on our Retention Policy will be provided to you upon request to the Data Protection Officer (DPO).

DATA SUBJECTS’ RIGHTS
In accordance with the General Data Protection Regulation (“GDPR”) and the Greek Data Protection Legislation, Data Subjects have the following rights:

• The right to be informed regarding your personal data being processed;
• If the processing of personal data is based on your consent, the right to withdraw consent for future processing of that data;
• The right to request access to and rectification of your personal data;
• Subject to limitations as provided for in the GDPR or the Greek Data Protection Legislation, the right to request restriction of the processing of your personal data.
• Subject to limitations as provided for in the GDPR or the Greek Data Protection Legislation, the right to request erasure of your personal data.
• Subject to limitations as provided for in the GDPR or the Greek Data Protection Legislation, the right to personal data portability.

You have the right to lodge a complaint with the competent data protection authority, the Hellenic Data Protection Authority, located in Athens, 1 – 3 Kifisias Avenue, P.C. 115 23 (tel. +30 210 64 75 628 – email: complaints@dpa.gr).

Cookies policy

WEBSITE COOKIES
A cookie is a small text file that is downloaded onto ‘terminal equipment’ (i.e. a computer or smartphone) when a user accesses a website. It allows the website to recognise that user’s device and store some information about the user’s preferences or past actions (country, items seen, etc).

The Group uses technologies like cookies to provide, improve and protect the Website. It should be noted that cookies do not harm the computer nor the files into which they are kept and they do not allow acquisition of personal identification data.

The use of session cookies (which are not stored permanently on the user’s computer and disappear when the browser is closed) is strictly limited to transmitting session identifiers (consisting of random numbers generated by the server) necessary to allow the safe and efficient exploration of the site. Persistent Cookies remain on the user’s computer or other electronic device for a longer time until their deletion from the user.

Apart from their expiration, cookies are also categorized depending on their functionality as per below:

1. Cookies necessary for the functionality of a Website (e.g. for the navigation to the Website or the filling out of online forms, such as contact forms). In case a user rejects these Cookies, some sections of the Website may not function properly.
2. Functional Cookies ensure personalized user experience during navigation, by saving favorite preferences and settings.
3. Performance Cookies are used for the amelioration of the services provided and the facilitation of their usage.
4. Third party Cookies are installed by Google and other third companies – partners, when users enter different websites. These Cookies are governed by the relevant Cookie Policy of each provider.

In the table above, users can find the Cookies used by the Group, as well as their duration, purpose, legal basis and source:

Cookie Name	Source	Purpose	Legal Basis	Duration
__utm.gif	google-analytics.com	Google Analytics Tracking Code that logs details about the visitor's browser and computer.	Consent	Session
__utma	tsakoshellas.gr	Collects data on the number of times a user has visited the website as well as dates for the first and most recent visit. Used by Google Analytics.	Consent	2 years
__utmb	tsakoshellas.gr	Registers a timestamp with the exact time of when the user accessed the website. Used by Google Analytics to calculate the duration of a website visit.	Consent	1 day
__utmc	tsakoshellas.gr	Registers a timestamp with the exact time of when the user leaves the website. Used by Google Analytics to calculate the duration of a website visit.	Consent	Session
__utmt	tsakoshellas.gr	Used to throttle the speed of requests to the server.	Consent	1 day
__utmz	tsakoshellas.gr	Collects data on where the user came from, what search engine was used, what link was clicked and what search term was used. Used by Google Analytics.	Consent	6 months
_ga	tsakoshellas.gr	Registers a unique ID that is used to generate statistical data on how the visitor uses the website.	Consent	2 years
_gat	tsakoshellas.gr	Used by Google Analytics to throttle request rate.	Consent	1 day
_gid	tsakoshellas.gr	Registers a unique ID that is used to generate statistical data on how the visitor uses the website.	Consent	1 day
r/collect	doubleclick.net	This cookie is used to send data to Google Analytics about the visitor's device and behavior. It tracks the visitor across devices and marketing channels.	Consent	Session

   
For the safe navigation to www.tsakoshellas.gr, the Group conforms with the European Directive 2009/136/EC regarding the protection of personal data and private life in the field of electronic communications. This Directive was integrated to the Greek Law by L. 4070/2012 (Α’82/10.04.2012) “Settings of Electronic Communications, Transportation, Public Constructions and other provisions”.

It should be noted that the installation of cookies is not allowed before obtaining prior consent. Exception to this rule are only cookies which serve functional needs of the Website and are necessary for its appearance and effective functioning.

CONTACT US
To exercise any of the Data Subjects’ rights or make a complaint to us relating to your privacy or for any other questions about the use of your personal data, you can submit a written request or send an email to the DPO, 367 Syngrou Ave., Megaron “Makedonia” , 175 64 P. Faliro, P.O Box 79 141, Athens, Greece, email:  dpo@tsthellas.gr

CHANGES
We may change these Privacy Notice and Cookies Policy. Any changes will become effective when we post the revised documents on the Website. We encourage you to periodically review these Privacy Notice and Cookies Policy to stay informed about how we collect, use, and share your personal data.