PRIVACY POLICY

PRIVACY POLICY

The protection of your personal data is a priority for us. This Policy explains how IRIDA S.A. collects, uses, stores and protects personal data of natural persons in the context of its business activity, its cooperation with customers, suppliers and partners, as well as the operation of the website www.irida.com.

This Policy applies to the company under the corporate name IRIDA S.A. – ANIMAL PRODUCTION PRODUCTS – SERVICES and the distinctive title IRIDA S.A., having its registered seat at 60 Riga Feraiou Street, Nea Artaki, Euboea, Postal Code 34600, Greece, Tax Registration Number 998328051, Tax Office of Chalkida and General Commercial Registry (G.E.MI.) No. 046551122000.

Definitions
“Personal data” means information relating to an identified or identifiable natural person. Such information may include, indicatively, name, contact details, identity number, tax identification number, location data, online identifiers or other information that may lead, directly or indirectly, to the identification of a natural person.
“Processing” means any operation or set of operations which is performed on personal data, such as collection, recording, organisation, storage, adaptation, use, retrieval, transmission, dissemination, correlation, restriction, erasure or destruction.
“Controller” means the company that determines the purposes and means of the processing of personal data.
“Processor” means any natural or legal person that processes personal data on behalf of the Controller.

Principles governing the processing of personal data
IRIDA S.A. complies with the applicable national and European data protection framework, including Regulation (EU) 2016/679 (the “GDPR”).
In this context, we ensure that personal data:
a) are processed lawfully, fairly and in a transparent manner
b) are collected for specified, explicit and legitimate purposes
c) are adequate, relevant and limited to what is necessary in relation to the purposes of processing
d) are accurate and, where necessary, kept up to date
e) are retained only for as long as necessary for the purposes of processing
f) are processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing, accidental loss, destruction or damage
g) are not transferred outside the European Economic Area unless an adequate level of protection is ensured or appropriate lawful safeguards are in place.

Rights of data subjects
IRIDA S.A. respects and facilitates the exercise of the rights of data subjects. In accordance with the applicable legislation, you have the following rights:

Right to be informed
You have the right to be informed about the collection and use of your personal data in a clear, intelligible and easily accessible manner.

Right of access
You have the right to request confirmation as to whether we process personal data concerning you and, where that is the case, to obtain access to such data and information relating to their processing.

Right to rectification
You have the right to request the rectification of inaccurate or incomplete personal data concerning you.

Right to erasure
You have the right to request the erasure of personal data concerning you, subject to the conditions provided for by the applicable legislation.

Right to restriction of processing
You have the right to request the restriction of the processing of your personal data in specific cases.

Right to object
You have the right to object to the processing of your personal data where such processing is based on the Company’s legitimate interest or is carried out for direct marketing purposes.

Right to data portability
You have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format, as well as to request their transmission to another controller, provided that the legal conditions are met.

Right not to be subject to a solely automated decision
You have the right not to be subject to a decision based solely on automated processing, including profiling, where such decision produces legal effects concerning you or similarly significantly affects you.

Accountability and governance
In accordance with the principle of accountability, IRIDA S.A. adopts policies, procedures and technical and organisational measures for the purpose of complying with personal data protection requirements and being able to demonstrate such compliance.
For this purpose, the Company:

  • implements appropriate technical and organisational security measures;
  • maintains, where required, records of processing activities;
  • applies the principle of data protection by design and by default;
  • ensures data minimisation and the implementation of appropriate measures, such as access restrictions, pseudonymisation or encryption, where appropriate;
  • assesses, where required, the impact of processing activities on personal data.

Contracts with third parties
Any third party that processes personal data on behalf of IRIDA S.A. must be bound by a written agreement and provide sufficient assurances that it implements appropriate technical and organisational measures in accordance with the applicable legislation.
IRIDA S.A. cooperates only with processors that can ensure the confidentiality, integrity, availability and security of personal data, as well as the protection of the rights of data subjects.

Data protection by design and by default
Any activity of IRIDA S.A. involving the processing of personal data is designed and implemented with due regard to data protection and privacy. This includes, inter alia, internal procedures, information systems, cooperation with third parties, production and commercial processes, customer services and communication procedures.

CUSTOMER DATA PROTECTION NOTICE

1. What data we process
In the context of assessing a potential cooperation, entering into or performing a commercial agreement, orders for fish feed, the provision of technical or advisory support and the general servicing of customers, IRIDA S.A. may collect and retain the following data:

  • company name
  • contact details, such as address, telephone number, mobile phone, fax and e-mail
  • details of contact persons
  • tax identification number, competent tax office, profession or business activity
  • bank details, such as IBAN and account holder
  • company financial data, credit or commercial information, where required for the assessment or management of the cooperation
  • information relating to orders, deliveries, invoicing, returns, complaints or requests
  • information relating to technical support, advisory services, feeding protocols, production data or information provided by the customer in the context of the cooperation, to the extent that such information includes personal data.

2. Why we process your data
We process your data for the following purposes:

2.1 Contractual obligations
We use your data for the creation and maintenance of a customer account, the assessment of a potential cooperation, the registration and execution of orders, the management of shipments and deliveries, the issuance of supporting documents, the handling of returns, the management of complaints or requests and the management or collection of receivables.

2.2 Product quality and customer service
We use your contact details and information relating to our cooperation for the management of requests, complaints or technical issues, for the assessment of the quality of our products and services and for the improvement of customer service.
In this context, we may send you satisfaction questionnaires or collect feedback regarding the products, services or technical support that we provide.

2.3 Internal reporting and business organisation
We use data in the context of internal reporting procedures, commercial monitoring, sales management, production planning, logistics, credit control and the development of our network.

2.4 Legal obligations and claims
We process and, where required, disclose data to competent authorities where a relevant legal obligation exists. We also retain and process data to the extent necessary for the establishment, exercise or defence of legal claims.

SUPPLIER AND PARTNER DATA PROTECTION NOTICE

1. What data we process
In the context of assessing a potential cooperation or performing an existing commercial agreement with suppliers, service providers, partners, contractors or other third parties, IRIDA S.A. may collect and retain the following data:

  • company name
  • contact details, such as address, telephone number, mobile phone, fax and e-mail
  • details of contact persons
  • tax identification number, competent tax office, profession or business activity
  • bank details, such as IBAN and account holder
  • information relating to offers, contracts, orders, deliveries, invoices and payments
  • supplier evaluation data, certifications, quality controls, traceability or compliance information, where required by the nature of the cooperation and the applicable legislation.

2. Why we process your data
We process your data for the following purposes:

2.1 Contractual obligations
We use your data for the assessment of a potential cooperation, the creation of a supplier or partner account, the submission and evaluation of offers, the conclusion and performance of contracts, the management of orders, deliveries, invoices and payments, as well as the monitoring of balances.

2.2 Quality assessment and regulatory compliance
Due to our activity in the production of fish feed and the need to maintain high standards of quality, safety, traceability and sustainability, we may process data relating to supplier evaluation, certifications, quality controls, technical specifications, origin of raw materials and compliance with applicable requirements.

2.3 Internal organisation
We use data for internal procurement procedures, financial monitoring, production planning, quality control, supply chain, accounting and administrative support.

2.4 Legal obligations and claims
Where a legal obligation exists, we may disclose data to competent authorities. We also retain and process data to the extent necessary for the establishment, exercise or defence of legal claims.

NOTICE FOR WEBSITE USERS AND CONTACT FORMS
When you visit the website www.irida.com, technical data necessary for the operation, security and improvement of the website may be collected, such as IP address, browser type, operating system, date and time of visit and pages visited.
If you contact us by e-mail or by phone, we process the information you provide to us, such as full name, company, e-mail, telephone number, subject and message content, solely in order to respond to your request or manage our communication.
If you submit a curriculum vitae or an expression of interest for employment, we process the information you provide for the purposes of assessing a potential cooperation or employment.
The website may use cookies or similar technologies. Cookies are used for the operation of the website, the improvement of the browsing experience and, where applicable, for statistical traffic analysis. You may configure your browser to reject or delete cookies, taking into account that certain website functions may be affected.

Who receives and processes your data
Only duly authorised employees of IRIDA S.A. and, where required, external partners or service providers acting on our behalf have access to personal data.
Recipients may include, indicatively:

  • IT service providers and technical support providers;
  • accountants, auditors, legal counsel and other professional advisers;
  • transport companies or logistics partners, where required for the execution of deliveries;
  • banks or payment service providers;
  • competent public, tax, judicial, supervisory or audit authorities, where there is a legal obligation.

How long we retain your data
We retain personal data only for as long as required for the purposes for which they were collected and in accordance with our legal, tax, accounting and regulatory obligations.
As a rule:

  • data relating to commercial agreements, orders, invoices, payments and cooperations are retained for up to ten (10) years from the termination of the relevant cooperation or for as long as required by the applicable legislation or by any audit requirements of authorities
  • website communication data are retained for as long as required to manage the request and for a reasonable period after its completion
  • job applicant data are retained for the period required for the assessment of the application and in accordance with the Company’s policy in force from time to time.

Upon expiry of the relevant retention period, the data are securely deleted.

How you can exercise your rights
If you wish to exercise any of your rights or have any request regarding the processing of your personal data, you may contact us at the following details:

IRIDA S.A.
60 Riga Feraiou Street, Postal Code 34600, Nea Artaki, Euboea, Greece
E-mail: info@irida.com

If you consider that your rights are being infringed, you have the right to lodge a complaint with the Hellenic Data Protection Authority through its website Hellenic Data Protection Authority.

Changes to this Policy
IRIDA S.A. may amend this Policy whenever required due to changes in the legislation, the Company’s activities or the operation of the website. The version in force from time to time will be available on the website www.irida.com.