THE FUND OF MECHANICAL WORKERS OF PUBLIC WORKS, TEMEMA NIPI (also referred to as the “Fund”), as Process Manager, recognizes and gives priority to the obligation to comply with the current regulatory and legislative framework as regards the confidentiality and general protection of the individual from the processing of personal data.

The purpose of this Statement is to inform you as potential candidates and / or existing borrowers and as a general trader in any capacity with the Fund with regard to the processing in which your personal data may be submitted in the context of the performance of the Fund’s work and the general your business relationship with it in accordance with the provisions of the General Data Protection Regulation 2016/679 (GDPR) and its more specific regulatory framework.

In particular, through this, you will learn about:

• Who we are and the Fund details
• What are the general principles followed by the Fund when processing personal data?
• Which items can be processed
• For what purpose does it work?
• To which recipients your information may be disclosed
• What is foreseen if your data is transferred to third countries (Cross-border Transmission)
• What is the length of time your data is retained
• What happens when your data has passed
• What are your rights with respect to your personal data
• What are the Fund’s obligations when processing your data
• Protection from phishing attempts
• Installation of closed circuit television for security purposes
• Recording of telephone conversations
• Electronic Services
• Update – Modify this Privacy Statement

I. WHO WE ARE (FUND DATA)
THE FUND OF MECHANICAL PUBLIC WORKSHOPS (TEME) is a Legal Entity of Private Law, governed by the provisions of articles 86-89 of Law 4387/2016 and the Ministerial Order No. 80000 / pet.58192 / 2153 of the Minister of Labor, Social Security and Social Solidarity (Government Gazette B 4214 / 27-12-2016) and headquarters in Athens, 3-5 Palaion Patron Germanou str. 105 61. Its main activity is the guarantee and the credit of the insured persons in the sectors of Engineering and Contractors of Public Works of NTNTA.

II. WHAT ARE THE GENERAL PRINCIPLES FOLLOWING THE FUND AT THE PROCESSING OF PERSONAL DATA
In carrying out its work, the Fund ensures that your data is processed in accordance with the following general principles:

the collection is done in a fair and legitimate manner, where required by your consent / consent for a defined, explicit and legitimate purpose with legitimate and lawful processing within the scope,
your data / data collected is relevant to the purpose of the processing, appropriate and not more than required for the purpose of the processing,
the data / data are checked for accuracy and are regularly updated and updated in accordance with established procedures for this purpose,
the data / data are kept in a format that allows you to identify yourself for the time required to achieve the purpose of the processing,
adequate security measures are in place to protect your data and prevent risks such as loss, unauthorized access, destruction, misuse or disclosure,
prior to processing your personal data, you are properly informed and provide your consent, if necessary, voluntarily and actively. Your consent may be revoked at any time, without of course prejudicing the legitimacy of consent-based processing prior to its revocation.
Your consent is not required in the following cases:

for the performance of a contract you have entered into with the Fund,
in order to take action on your request prior to the conclusion of the contract,
for the compliance of the Fund with the legal obligations to process personal data,
to protect your vital interests,
for the performance of a task carried out in the public interest or for the exercise of official authority,
processing is necessary for the purposes of the legitimate interests pursued by the Fund, unless your interest or fundamental rights and freedoms predominate over the interests in question.
The Fund collects, maintains and processes the personal data that you disclose or have disclosed to you as candidates and / or existing parties and as a general trader in any capacity with that at all stages of your dealings in the context of providing services from the Cashier or through it. It is noted that the Fund only processes the personal data necessary for the purpose of the processing. In particular, the Fund may process the following personal data you provide to us, such as:

identification and legitimation (eg name, date and place of birth, identity card or passport, ASM),
(eg gender, nationality, marital status), contact details (eg postal address, fixed or mobile phone number, e-mail address),
financial information (eg information on your wage and wealth situation, tax residence),
(for example, when you log in to our website) and electronic identification (eg electronic signatures).
in special cases, health-related and living-related data (for example, in compliance with any liability for responsible lending-credit).
Please note that it is your duty to promptly inform the Fund of any changes to your information collected by the Fund for you, such as:

in the context of due diligence, control of sanctions and the fight against it
money laundering,

in the context of controlling and evaluating your creditworthiness, risk management of the Fund and generally serving your contractual or transactional relationship with the Fund,
in compliance with the current legislative and regulatory framework for the submission of supervisory data and information,
in your correspondence and in general communication with the Fund,
financial elements of valuation of your investment and financial status and behavior,
cookies and related technologies that provide access to and use of specific services and / or pages of the website and for statistical purposes,
information transmitted by supervisory, judicial and other Public and Independent Authorities concerning criminal convictions, offenses, the imposition of measures to safeguard the interests of the State, seizures, confiscations, pledges,
which are relevant to you and which are publicly accessible either electronically or otherwise.
The personal data processed by the Fund are kept in written form and / or by electronic and magnetic means.

Particularly on the protection of minors
The Fund recognizes the need to protect minors’ data as defined by the current institutional framework. Any data of minors shall be retained by the Fund only if they have been provided by those exercising parental responsibility and only for the purpose of fulfilling a relevant business relationship for the benefit of minors. It is noted that in no case does the Fund deal directly with minors, nor do the products and services provided by it be directed for immediate use by minors, and deal only with their parental carers.

IV. FOR WHAT PURPOSE IT IS PROCESSED
The Fund may process your personal data above for the following purposes:

(A) In the context of the performance of the contract or before its conclusion, in particular:

To identify and verify your information,
For communication either at a pre-contractual stage, at a conventional stage, or generally on issues relating to your dealings with the Fund,
In order to service, manage, monitor, process your transactions and generally provide the requested product and / or service to the Fund,
To serve all forms of transactions through electronic services,
To gather the necessary information to evaluate the availability of a product or service.
B) As part of the Fund’s compliance with the obligations laid down by the current legislative and regulatory framework, in particular with regard to:

the prevention and repression of money laundering and the financing of terrorism,
the application of existing State aid legislation and tax legislation, including provisions on the automatic exchange of information in the tax area,
your credit rating, where appropriate to serve your deal,
the assessment of the compatibility and any other assessment or categorization of the trader, as the case may be, for the creation or disposal of an instrument or service of the Fund,
record and archive all orders given by traders to prepare transactions with the Fund, including the obligation to record orders given by telephone.
notification and transmission to the competent Supervisory, Independent, Police, Judicial and Entity Public Authorities, as well as third legally licensed legal entities, where required by applicable law.
C) In the context of the legitimate operation of the Fund, the defense of its interests and the overall orderly functioning and protection of your transactions, in particular with regard to the collection and / or analysis of data relating inter alia to:

interests, preferences and your overall trading activity in the context of the development and / or improvement of the Fund’s products and services,
resolving any of your requests / complaints,
risk assessment and management in the context of the operation of the Fund,
preventing and dealing with cases of fraud and other illegal activities for the purpose of protecting the public and the safety of personnel, including the video surveillance system,
D) As part of your information from the Fund for new services (i) the Fund and (ii) third parties of legal entities in which the Fund participates, and match your interests and preferences, subject to your explicit consent this. In this case, we inform you that you have the right to withdraw your consent at any time, without of course prejudicing the legitimacy of the processing based on consent prior to its revocation.

Especially on decision-making, including profiling
In specific cases such as when it is necessary to conclude or execute your contract with the Fund or upon your consent, your data may be processed also through procedures that give rise to decisions based on statistical analyzes of the parameters those that make it possible to objectively assess your requests and your overall dealings with the Fund.

The recipients of the data which the Fund is or is entitled to notify by law, regulation or court order or in the lawful operation of your transaction and contractual relationship with it may be third parties in relation to the Fund, natural or legal persons, public authorities, services or other bodies, such as:

In any form, persons (natural or legal) working with the Fund, acting in the name and on behalf of the Fund, to achieve the purpose of processing the contract (eg Members of its Administration, Employees, Consultants or Associates)
third persons to the Fund, natural or legal persons acting on or on behalf of the Fund, including the following categories:
Record keeping and destruction companies
Customer service telephone companies,
Supply and support of information systems,
Analytical and market research and product marketing companies,
Guard and security companies,
Custody,
Advisory firms including financial advisors and auditors of the Fund,
Data reporting providers,
Insurance companies and insurance intermediaries in the provision of insurance products,
Property valuers.
National or European Agencies in partnership with the Fund to provide loans / credits to traders to the Fund.
(“DIAS SA”) for the servicing of interbank transactions, “TIRESIAS SA” for the protection of credit and financial transactions, the Hellenic Banking Association, Hellenic Exchanges A , Banks and Financial Institutions of Greece and Abroad,
Insurance Agencies, Public Organizations, Chambers and Public Enterprises,
Credit Institutions, Payment Institutions, Electronic Money Institutions, Investment Firms (AEPEY), Mutual Funds Management Companies (AEDAK), Transaction Logs ,
Supervisory, Judicial, Independent and Other Authorities at national and European level for the fulfillment of a Fund’s obligation by law or regulation or judicial decision, such as, for example, the Bank of Greece, the European Central Bank, the European Commission for Competition, the Hellenic Competition Commission, ECHR, Economic Police, Public Authorities of Greece and abroad, Courts, Prosecutions, Investigators, Notaries, Court Bailiffs, Land Registry, Cadastre, Lawyers Conditions,
Certified Accountants and Auditing Firms.
Please note that the Fund will also provide you with more specific information about the possible transfer of your data to the above recipients, as provided by applicable law.

The Fund may disclose your personal data to the competent Supervisory, Independent, Police, Judiciary and General Public Authorities where it is required by the applicable legal and regulatory framework, on a regular or extraordinary basis, upon request or if it owes to submit a reference to these data without prior specific information.

It should be noted that if the Fund entrusts the processing of personal data to third parties acting on its behalf and on its behalf they have to comply fully with the Fund’s instructions, such compliance is ensured through more specific provisions in the relevant conventional texts outsourcing and the observance of similar procedures.

VI. WHAT IS PROVIDED FOR ANY TRANSMISSION OF YOUR DATA TO THIRD COUNTRIES (CROSS-BORDER TRANSMISSION)
The Fund, in the course of its work and compliance with the provisions of the current regulatory framework, may transfer / accept personal data to and / or from the Companies in which it participates, as well as interconnection of certain files, if required.

The above described transmission or interconnection takes place in accordance with European legislation for companies located in countries within the European Economic Area (EEA) or the local legal framework for other companies outside the European Economic Area (EEA).

The transfer of personal data to countries outside the European Economic Area (EEA) only takes place if these countries provide an adequate level of protection of personal data. If the third country outside the European Economic Area (EEA) does not provide an adequate level of protection of personal data, personal data may be transmitted to that country only if the data protection is provided by a data transmission agreement which ensures an adequate level of protection or the conditions explicitly provided by European and national law (eg you as the data subject to whom the data are referred have expressly consented to the transmission) are met.

The Fund shall ensure, through appropriate procedures, that the necessary procedures are carried out by the local authorities, as each involved Company ensures the safe processing of the personal data transmitted or interconnected.

VII. WHAT IS THE TIME SPACE FOR YOUR DATA
The Fund processes your personal data throughout the lifetime of the contract and after its termination or termination in any way for as long as it is prescribed by the applicable legal and regulatory framework.

In particular, your personal data processed by the Fund are compulsorily respected throughout the duration of the processing for which they are processed and / or the applicable legal and regulatory framework.

Upon expiry of that period, the data shall be held in accordance with the applicable institutional framework for the time required for the termination of the business relationship or for as long as is necessary to safeguard the rights of the Fund before a Court or other competent Authority.

VIII. WHAT IT DOES YOUR DURATION PERIOD
In the event that your data is spent, the Fund pays special attention to how they have been dealt with. For this purpose, it has in place and implements a procedure that applies after it is considered that it is not necessary to keep archival material for compliance with legal and regulatory requirements or to protect the interests of the Fund and is based on the instructions of the Data Protection Authority Personal Character. The Fund shall ensure that the above process of destruction of files containing personal data also binds third parties that provide services in the name and on behalf of and to any other persons with whom it cooperates in the context of outsourcing or other agreements.

IX. WHAT ARE YOUR RIGHTS RELATING TO YOUR PERSONAL DATA
Once you have verified your identity, you have the following rights as Data Subjects:

Right to update The Fund should inform you of the processing to which it submits your data, including as to what data it processes, for what purpose, for how long it keeps it in a transparent, comprehensible and easily accessible format using clear and simple wording.
Right of access You have the right to receive from the Fund a confirmation as to whether or not your personal data is processed and, if so, you have the right to access that data.
Right of rectification You have the right to claim from the Fund the correction of any inaccurate personal data and the completion of any incomplete data.
Right of Deletion You have the right to request from the Fund the deletion of personal data, which may be satisfied if there are specific deposits.
Right to limit the processing You have the right to secure from the Fund the limitation of processing if certain conditions are met.
Right of objection You have the right to oppose at any time the processing of your personal data. In this case, the Fund will have to stop processing unless it demonstrates imperative and legitimate reasons which outweigh your interests, rights and freedoms as a data subject or for the foundation, exercise or support of legal claims.
Right to human intervention in a decision by automated procedure You have the right to request from the Fund not to submit, where appropriate, to a decision-making process solely on the basis of automated processing, including profiling, which produces legal effects that concern you or you affects significantly in a similar way.
Mobile Rights You have the right to request from the Fund to receive your personal data, which you have provided in a structured, commonly used and machine readable format, or to transfer the Fund to another provider.
To further facilitate your exercise of your rights, the Fund ensures the development of internal procedures to respond in a timely and effective manner to your requests.

In order to exercise your above mentioned rights, please submit your request accordingly.

If you believe that your privacy is affected in any way, you may also, if you wish, have recourse to the Personal Data Protection Authority using the following contact details:

Website: www.dpa.gr /

Postal Address: 1-3 Kifissias Avenue, PC 115 23, Athens

Call Center: +30 210 6475600 Fax: +30 210 6475628

E-mail: contact@dpa.gr

X. WHAT ARE THE COMMITMENTS ‘COMMITMENTS TO DETERMINATE YOUR DATA
A. Safeguarding Privacy and Safety of Processing
The processing of personal data is confidential and is carried out exclusively by persons under the control of the Fund. These persons are selected on the basis of strict criteria established by the Fund, which are designed to provide sufficient guarantees in terms of knowledge and personal confidentiality commitments.

In addition, appropriate applications based on high-level security standards for the protection of personal data have been integrated into the network, and the necessary controls are carried out on a regular basis in order to strictly apply the criteria and procedures established by the Fund for this purpose.

The Fund shall take appropriate organizational and technical measures to safeguard data security and protect it against incidents such as accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access and any other form of unfair treatment. The measures taken are intended to ensure a level of safety commensurate with the risks involved in the processing and the nature of the data being processed.

B. Information Systems Security
The Fund to ensure the confidentiality of all information entered into its IT systems has established Security Systems and Systems Security Handbooks, under which:

the protection of data moving through the data and voice networks used by the Fund is achieved,
effectively controls user access to the information systems of the Fund and safeguards the information that they manage,
are detected in a timely manner and as far as possible, security breaches of the IT systems of the Fund are prevented.
XI. PROTECTION BY PHILIPPINES PERSONAL PROTECTION
The Fund, in order to protect you as a client from malicious third party actions and specifically attempts to electronically erase your information, informs you through the press and provides you with instructions suggesting precautions and drawing your attention to the methods that are commonly used and the risks stem from phishing.

XIII. INSTALLING CLOSED CIRCUITS OF TELEVISION FOR SAFETY REASONS
In order to prevent theft of goods, the prevention of criminal acts, the protection of the business community and the safety of personnel, closed-circuit television circuits shall be placed in the premises of the premises where this is deemed necessary.

The installation and operation of these systems is in line with the requirements of the current regulatory framework, ie technical specifications of systems, data storage time, etc.

The collection and maintenance of personal data from closed circuit television (CCTV), as well as the Security Deposit Entry System of the Fund, takes place in accordance with the applicable regulatory framework.

XIII. RECORDING OF TELEPHONE CONNECTIONS
The Fund may use technical means of recording telephone conversations with traders in order to service the transactions performed by the latter with its respective Competent Units in the framework of execution and servicing of the relevant trading relations in accordance with the provisions of the applicable institutional framework. In these cases, special information is provided to both traders and partners before any recording of a telephone conference.

XIV. ELECTRONIC SERVICES
If you make use of the Fund’s website, you should be aware that the Fund collects personal data of the visitors / users of its website only when they voluntarily provide it for the purpose of providing electronically available services (eg e- services, visitor / user request for the Fund’s information on services, comments / suggestions made by visitors / users). The personal data collected on the web site depend on the requested person at any time from the visitor / user service and may be e.g. surname, surname, surname, surname, surname, surname, surname, surname, surname, surname, surname, surname, surname, Where appropriate and depending on the service requested, it is optional for some of the above information to be filled in by the visitor / user. The Fund may process part or all of the data sent by the visitors / users for the purpose of providing services that are available electronically as well as for statistical purposes and for improving the information services provided.

The website may include links to other sites under the responsibility of third parties (natural or legal persons). Under no circumstances is the Fund responsible for the conditions of protection and management of the personal data that these websites follow.

Cookies
The Fund may collect visitor / user identification data from its website using corresponding technologies such as cookies and / or Internet Protocol (IP) address tracking. Cookies are small text files that are stored on the hard drive of each visitor / user and do not know any document or file from their computer. They are used to facilitate visitor / user access to the use of specific services and / or site pages for statistical purposes and in order to determine the areas that are useful or popular, as well as to assess the effectiveness of the site and to improve the performance of the site. These data may also include the type of browser used by the visitor / user, the type of computer, its operating system, the Internet service providers and other information of this kind. In addition, the site’s information system automatically collects information about visitor / user visited sites and links to third-party websites he may choose through the use of the Fund’s website.

The visitor / user of the website may set its web browser in such a way as to either warn him or her about the use of cookies in certain services or not allow the acceptance of cookies in any way. To do so, please refer to your network browser or help screen instructions to learn more about these features. For example, in Internet Explorer, it can go to Tools / Internet Options / Security and Privacy to customize the browser to its requirements.

In the event that the visitor / user of the website does not allow the use of cookies for its recognition, this may have an impact on the ability to provide the Fund with certain services or information that may be useful to him / her.

Lastly, the Fund can leverage the capabilities provided by Google Analytics, including Display Advertising, utilizing the remarketing features to promote its products and / or services online. In particular, third-party vendors, including Google, display advertising messages from the Fund pwith various websites on the internet. The Fund and third-party vendors, including Google, use cookies (such as the Google Analytics cookie) or third party cookies (such as the DoubleClick cookie) together to update, optimize, and serve promotional messages based on previous visits of someone on their site Fund. Visitors / users of our site may declare that they do not wish to receive relevant messages and are excluded from future actions.

XV. UPDATING – MODIFICATION OF THIS STATEMENT OF PERSONAL DATA PROTECTION
The Fund may update, supplement and / or amend this Privacy Statement in accordance with the applicable regulatory and legislative framework. In this case, the updated Statement will be posted on the Fund’s website and will also be available at the Fund’s store.