01Data Controller
The data controller is DPS Facilities Group, based at 20 Alexandroupoleos St., Athens 11527.
For any matter regarding your personal data or to exercise your rights, contact us at dpsfacilitiesgroup@gmail.com or on 211 7255335 and 697 5928280.
02Scope
This Policy applies to all visitors of the website, corporate clients of our cleaning and facilities management services, and job applicants who submit a CV.
DPS Facilities Group fully complies with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.
03Categories of Data We Collect
Website visitors:
- Technical data (IP address, browser type, operating system)
- Navigation data and cookies
- Information submitted via contact forms
Corporate clients (cleaning & facilities management):
- Company name, VAT number, tax office, registered address
- Contact details of the responsible person
- Information about facilities and service requirements
- Contractual and billing data
Job applicants:
- Full name, date of birth, contact details
- Education, professional experience, skills
- References and other information included in the CV
- Photo (only if you voluntarily include one)
04Purposes of Processing
We process your data exclusively for the following purposes:
- Providing quotes and cleaning/facilities management services
- Concluding and performing contracts with corporate clients
- Evaluating applications for current or future job openings
- Communication regarding requests, meetings and quotes
- Invoicing and meeting tax obligations
- Improving services and the website experience
05Legal Basis for Processing
Processing is based on one or more of the following legal bases (Article 6 GDPR):
- Consent — for CV submissions and informational communications.
- Performance of a contract — for providing services to corporate clients.
- Legal obligation — for tax, insurance and accounting records.
- Legitimate interest — for website security and service improvement.
06CV Submissions
CVs are retained for up to twelve (12) months from receipt.
You may request deletion at any time by emailing dpsfacilitiesgroup@gmail.com. Submitting a CV constitutes explicit consent to process the data it contains.
We recommend not including sensitive data unless strictly necessary for the role.
07Recipients & Data Transfers
Personal data is not transferred to third parties, except for:
- The company's accounting office
- Hosting and technical support providers
- Public authorities, where required by law
No transfers take place outside the EEA.
08Retention Period
- Client data: duration of the contract + 5 years
- Applicant CVs: up to 12 months
- Contact form data: up to 24 months
- Analytics data: up to 14 months
09Your Rights
Under the GDPR you have the following rights:
- Access to your data
- Rectification of inaccurate data
- Erasure ("right to be forgotten")
- Restriction of processing
- Data portability
- Objection to processing
- Withdrawal of consent at any time
- Complaint to the Hellenic Data Protection Authority
10Data Security
We take appropriate technical and organisational measures (encryption, restricted access, secure servers within the EU) to protect your personal data.
12Changes
This Policy may be updated. Changes are published on this page.