How we protect your data

The data controller for personal data collected through this website is GSM PAPERMILL, based in Greece (see contact details in the website footer).

For any question regarding the processing of your data, please contact us using the details listed in the "Contact" section below.

Through the website's contact form, we collect the information you voluntarily provide: full name, email address and the content of your message.

We do not collect sensitive personal data and do not request information beyond what is necessary to respond to your inquiry.

Data submitted through the contact form is used solely to respond to your inquiry, send you technical information or a quote, or proceed with any collaboration you have requested.

The legal basis for this processing is the performance of pre-contractual steps taken at your request (Article 6(1)(b) GDPR) or, where this does not apply, your consent given when submitting the form.

Contact details are kept for as long as necessary to handle your request and, where a business relationship follows, for as long as that relationship and our legal obligations require.

After this period, the data is securely deleted or anonymized.

When you apply for a position at GSM PAPERMILL by sending your CV via email, we collect the information contained in your CV: full name, contact details, work experience, education, skills and any other information you voluntarily include.

This information is used solely to assess your candidacy for the current opening or, unless you object, for future job openings. The legal basis is the performance of pre-contractual steps taken at your request (Article 6(1)(b) GDPR).

If your application is not successful, your CV is retained for up to 12 months so that we may consider you for future openings, after which it is securely deleted. You may request earlier deletion of your CV at any time.

Access to CVs is limited to HR staff and hiring managers directly involved in the relevant recruitment process.

As an applicant, you have the same rights described in the "Your Rights" section below, including the right to access, rectify and erase your CV.

Your data is not sold or shared with third parties for marketing purposes.

It may be accessible to service providers we work with (e.g. website hosting, email services), who act as data processors on our behalf and are contractually bound to maintain the confidentiality and security of the data.

Under the General Data Protection Regulation (GDPR), you have the right to access, rectify, erase and restrict the processing of your data, as well as the right to object and to data portability, where applicable.

To exercise any of these rights, please contact us using the details below.

We take reasonable technical and organizational measures to protect your data against unauthorized access, loss or misuse.

If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

This policy may be revised periodically. Any changes will be posted on this page with an updated effective date.

For any question regarding this Privacy Policy, please contact us using the details listed in the website footer and on the "Contact" page.