Website privacy policy

This policy applies to the company “Grecian Magnesite Mining Industrial Shipping and Commercial S.A.” hereinafter referred to as “Grecian Magnesite”.
The company “Grecian Magnesite” is committed to protecting the personal information collected when you use our website and other services. This Website Privacy Policy pertains to Grecian Magnesite website and sets out Grecian Magnesite commitment in protecting Personal Data and how that commitment is implemented regarding the collection, use, transfer and retention of Personal Data. This policy applies when defining the purposes and the mechanisms of processing, acting as a data manager.

1.Transfer of Personal Data

The company “Grecian Magnesite” has designed a standard website contact form for submission of CVs by prospective collaborators. In certain circumstances, our website may be used by prospective job applicants, in which case you should refer the data subject to the Privacy Notice. Additionally, we provide Grecian Magnesite phone numbers for more direct contact if required.
In order to handle and respond to your inquiries and requests, we might collect and store your full name, email, address, contact details, and any other information you might provide to us. This information is strictly used to respond to your inquiries or requests adequately and will not be disclosed to third parties’ others than those mentioned in this policy or where disclosure is required or permitted by law.
For processing to be lawful under the from Regulation (EU) 2016/679, we identify a lawful basis before we can process your personal data. In this case, the legal basis for the data processing effected by us is the granting of your explicit consent to the processing, by submitting the consent form only in case you agree with this policy.
The company “Grecian Magnesite” is committed not to retain personal data for a more extended period than is necessary. We will ensure that we delete it safely. Specifically, the retention period of the CVs is set at one (1) year, after which it is deleted from the company’s records. For additional information’s for the retention and deletion period, please refer in Section 6 Contact Information.

2.Transfer of Personal Data

Grecian Magnesite may disclose personal data collected to our suppliers or subcontractors insofar as reasonably necessary for dealing with your inquiries or requests. Appropriate protection safeguards will protect against such transfers. (e.g., intra-group disclosures of personal data, the disclosure of personal data to subcontractors, disclosure Personal Data to third-party vendors, the disclosure of personal data is expressly stipulated by law, etc.). In addition, we may disclose Personal Data where such disclosure is necessary for compliance with a legal obligation to which we are subject.

3. Rights of Data subjects

In this section “Grecian Magnesite” addresses the rights deriving from Regulation (EU) 2016/679 and how these rights can access from Data Subject. For any further clarifications, please refer to Section 6 Contact Information.

3.1 Individual’s Right of Access

Grecian Magnesite assumes that Personal Data collected directly from the individual will be accurate and complete. Individuals can access and update their own Personal Data using the Data Subject Request Form. To supply this application, please contact us using the email provided in Section 6 Contact Information.

3.2 Individual’s Right to Rectification and Erasure

The data subject may request that any information held on them is deleted or removed, and any third parties who process or use that data must also comply with the request. An erasure request can only be refused if an exemption applies. The Right to Erasure can be requested using the Data Subject Request Form. To supply this application, please contact us at the email provided in Section 6 Contact Information.
The company “Grecian Magnesite” is obligated to erase personal data where one of the following applies:

personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed;
the data subject withdraws consent, and no other legal basis for processing exists;
the data subject objects to the processing carried out on the grounds of the Data Controller’s legitimate interests and there are no other overriding legitimate grounds for the processing;
the personal data has been unlawfully processed.

If the request to erase Personal Data has been received, identity has been confirmed, the request meets one of the above requirements, and there is no legal contrary reason for processing, Grecian Magnesite must delete the relevant data in its entirety. The request shall be recorded in the Data Subject Request Log.
If the company “Grecian Magnesite” cannot delete personal data, Grecian Magnesite will ensure that:

is not able, or will not attempt, to use the personal data to inform any decision in respect of any individual or in a manner that affects the individual in any way;
does not give any other organization access to the personal data;
protects the personal data with appropriate technical and organizational security; and commits to permanent deletion of the information if, or when, this becomes possible.

3.3 Individual’s Right to Restrict Processing

The data subject has the right to obtain from the controller restriction of processing using the Data Subject Request Form. To supply this application, please contact us by the email provided in Section 6 Contact Information.

3.4 Individual’s Right to Object

Individuals have the right to object at any time to the processing of their personal data using the email provided in Section 6 Contact Information.

3.5 Individual’s Right to Data Portability

Upon request, a data subject should have the right to receive a copy of their Personal Data in a structured format using the Data Subject Request Form.
These requests should be processed within one month, provided there is no undue burden, and it does not compromise the privacy of other individuals. A data subject may also request that their data is transferred directly to another system. This process must be done for free.
If Grecian Magnesite cannot respond fully to the request within 30 days, the DPO shall nevertheless provide the following information to the Data Subject, or their authorized legal representative within the specified time:

An acknowledgement of receipt of the request.
Any information located to date.
Details of any requested information or modifications which will not be provided to the Data Subject, the reason(s) for the refusal, and any procedures available for appealing the decision.
An estimated date by which any remaining responses will be provided.
An estimate of any costs to be paid by the Data Subject (e.g. where the request is excessive in nature).
The name and contact information of the contact person.

4. Amendments

Should Grecian Magnesite elect to change this Privacy Policy, we will post the changes here. Where the changes are significant, we may also choose to concerned email users with the new details. Where required by law, will we obtain your consent to make these changes.

5. Contact Information

If you have any concerns or complaints about this policy, then please contact us at the email: privacy@grecianmagnesite.com.
If you believe that processing of your data by us violates applicable law, you may file a complaint with the supervising authority. You can find contact details for all EU supervisors here.