Procedure for Exercising GDPR Rights

Policy regarding rights arising from EU Regulation 679/2016 as a Processor

Data Controller of your Personal Data is your respective employer. We conduct processing of Personal Data as processors on behalf of the respective Data Controller.

As the subject of Personal Data, you retain all the rights provided in EU Regulation 679/2016, and other Regulations and Laws which apply at any given time for the protection of individuals from the processing of personal data.

In particular, you have the following rights:

-        to request access to your Personal Data. Such right includes, inter alia, the origin of the data, the processing purpose(s), the relevant categories of Personal Data, the recipients or the categories of recipients to which your Personal Data were disclosed or will be disclosed, the envisaged period for which your Personal Data will be stored and the development of the processing since the latest briefing;

-        subject to par. 3 of Art. 17 of the above Regulation, to erase your Personal Data (right to be forgotten), should one of the reasons mentioned in par. 1 of such article be applicable;

-        to rectify your inaccurate Personal Data;

-        to restrict the processing of Personal Data should one of the instances mentioned in par. 1 of Art. 18 of the above Regulation be applicable;

-        subject to par. 1 Art. 21 of the above Regulation, to object to the processing of your Personal Data;

-        subject to par. 3 and 4 of Art. 20 of the above Regulation, to transmit your Personal Data, namely to receive your Personal Data in a structured, commonly used and machine-readable format, as well as the right to transmit such data to another data controller, should one of the instances mentioned in par. 1 of the above article be applicable;

-        to request a copy of your Personal Data which are subject to processing;

-        to be informed of the rectification or erasure or restriction in the processing of your data;

-        to withdraw your consent to the processing of your Personal Data by our company; and

-        in the event you claim that the protection of your Personal Data has been breached, file a complaint at the Personal Data Protection Authority, using the following contact details:

Website: www.dpa.gr/

Mailing address: 1-3 Kifissias Ave., PC 11523, Athens

Telphone: +30 210 6475600

Fax: +30 210 6475628

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

You may exercise above rights, following the submission of a relevant specific request, addressed via email either directly to the respective Data Controller or to this email address of our company This email address is being protected from spambots. You need JavaScript enabled to view it. or via mailing a letter to the offices of the respective Data Controller or our offices as below:

Romilos J. Davelopoulos Maritime & Commercial Co

2, Iasonos & Akti Miaouli

18537 Piraeus

Greece

Should you address your request regarding rectification, erasure, restriction, access or transmission of your Personal Data to our company, we shall immediately, within 24 hours if possible, forward your request to the respective Data Controller. You should know that all such requests are accepted only following the specific written instruction as received from the respective Data Controller and subject to all legal requirements being met.

All other requests may be accepted by us without the specific written instruction from the respective Data Controller subject to all legal requirements being met. In any case, we shall notify you of our decision to accept or deny your request within fifteen (15) working days from the date of receipt.

In the event you address any of the aforementioned requests to us, the person in charge of complaints shall notify you in writing that your request has been received and, if relevant, forward it to the respective Data Controller within one (1) working day, mentioning to you the contact details of our representative coordinating your request. If deemed necessary, without delaying to forward your request to the respective Data Controller, the person in charge of complaints will contact you in order to clarify details.

If you are not satisfied with the handling of one of your above requests, you are not only entitled to but we also encourage you to notify us. We may thus investigate and solve your complaint and at the same time improve the quality of our services.

If you wish to express a complaint regarding your Personal Data, you may use one of the following ways:

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Mail: Romilos J. Davelopoulos Maritime & Commercial Co

2, Iasonos & Akti Miaouli

18537 Piraeus

Greece

We deal with all complaints effectively and promptly, without any prejudice. At all times we strive to be honest and fair in our dealings with our customers. In case of complaint:

• You will be treated with courtesy and fairness at all times.
• The complaint will be treated in confidence.
• You will not be victimized or harassed as a result of any complaint made.
• You will not be discriminated against because of any disability, color, race, religion, age, sex or sexual orientation etc.
• Upon receiving your complaint, the person in charge of complaints will acknowledge receipt informing you in writing within one (1) working day, providing the contact information of the complaints’ coordinator.
• If necessary, you will be contacted again by the complaints’ coordinator to clarify the details of the complaint.
• Our aim is to solve our customers' complaints within fifteen (15) working days from the day of receipt and up to fifty (50) calendar days, as dictated by the Bank of Greece.
• If you are not satisfied by our response, you are entitled to contact consumer protection authorities, such as the Hellenic Consumers' Ombudsman, for the extrajudicial solution of the matter.
• If you wish to file a complaint, there are some simple steps you can take so that we can help you as effectively and as quickly as possible:

- Act quickly: file your complaint as soon as possible. The longer you wait the less clear the facts can become and the harder it can be to find a solution.

- Provide identification details: clearly indicate your full name and any other relevant information.

- Make it clear: try to summarize exactly what your complaint is. Don’t go into too much detail. If details are necessary, set out the order that things happened, preferably with dates, and descriptions of incidents, phone calls, letters or meetings.

- Tell us your request: Indicate what you think should be done to make things right.

- The person in charge of complaints will ensure that your complaint is reviewed and dealt with fairly and quickly, and that your rights as a customer are upheld.