CERTIFICATIONS

CONSTRAT specializes in the marketing of plumbing and other electromechanical equipment, as well as in the development of automation projects, considers the Environmental Protection as the biggest challenge.

Therefore we all respect the Environmental Aspects of our activities and we have all the necessary funds, so that we can practice an Environmental Management System according to the international standard ISO 1400:2015

The commitment for the Environmental Protection and limitation of the impact our activities, is realized through the following individual steps:

• Continuous evaluation of the Environmental Aspects of our activities in order to reduce the Environmental Impact of the company
• Continuous Improvement of the Environmental Performance, which is monitored through annual reviews as well as the adoption of Environmental targets
• Commitment to meet the company’s conformation obligations
• Undertakes precautionary measures to avoid emergency situations
• Environmental education, training and motivation for the employees
• Encourage of the internal and external communication relevant to the environmental issues

Constrat LTD, regarding trading of hydraulic and electromechanical equipment as well as the development of automation projects, has the policy to act in a way that respects health and safety executive, preventing and reducing the effects of its activities and minimizing the health and safety risks of employees, associates and visitors.

Specifically, is committed to:

• Comply with all legal and other requirements relating to its activities regarding health and safety and evaluate at regular intervals the level of its compliance.
• Provide safe and healthy working conditions for the prevention of labor injuries and illnesses.
• Takes all necessary measures to prevent accidents and diseases in its workplace.
• Set aims and goals as well as programs which are systematically reviewed, by ensuring the continuous improvement of the company’s prospects, in the field of health and safety.
• Cooperate with national and local bodies which are responsible for the protection of health and safety at work.
• Ensure that the staff is aware of its responsibilities according to the recorded system of health and safety management as well as being sensitive on issues of health and safety at work.
• Communicate its policy to employees and all interested parties.

The company’s policy is achieved by the implementation of Health & Safety Management System at work which meets the demands of the standard ISO 45001.

The framework and mechanism for setting and reviewing objective aims and goals is being set in the Management’s regular reviews of the system.

On behalf of the Administration

Konstantinos Stratis

Publication of policy: 02.01.2019

Constrat’s LTD management is committed, for the implementation and continuous improvement of the information security management system’s effectiveness, as well as for the disposal of all financial, technical and human resources that are required for its operation through the annually management review.

Measure of the success of the central information security policy but also of the individual insurance policies, is the achievement of specific goals and giving a feeling of confidence to every business partner for integrity, and information security.

The general security objectives set by Constrat LTD are:

• Continuous awareness raising, training and motivating Constrat’s LTD staff, about the importance of developing and implementing the ISMS, as well as the importance of staff’s active participation and compliance with security requirements and customer expectations.
• The absence of cracks and security incidents in general.
• The effective use of resources.
• Complete compliance with the requirements of the legislation related to information security.

For these reasons Constrat LTD:

• Develops and applies policies and procedures, that specialize the central policy and ensure the integrity of information from internal and external risks.
• Inspires confidence in every business partner that complies with validated. international standards, laws and regulations, as well as contractual requirements for information system security.
• Protects its assets and information from threats (internal and external) and risks.
• Ensures keeping confidential information safe and safeguards unauthorized access.
• It is committed to continuously improving the information security management system by setting up and regularly reviewing measurable safety goals.
• Applies detection procedures and risk assessment and their impact on protected information
• It takes all necessary actions, to communicate the central but also the individual security policies at any interested part.

Constrat LTD ensures that all its staff and interested parts (customers, suppliers etc.) are aware of the central information security policy and the implementation of the information security management system and that the applicable individual policies are easily accessible.

We inform you that the personal data that you provided to our company, through your resume that you sent us directly or through the partner recruitment company, as well as the evaluation data are kept by the company for the duration of the selection process for the purpose of evaluating you for the existing job, but also for six (6) months after the completion of the above process, in order to be re-evaluated in case a job that fits the candidate’s profile arises directly. At the end of the aforementioned period, the data will be deleted as part of the Company’s compliance with the applicable national and European legislation on Personal Data Protection. 

Only the Company and its contracted affiliated recruitment agencies have access to the above data in the context of the actions taken, at your request, to evaluate your application with a view to establishing a cooperation between us.

Finally, please note that if you provide us with letters of recommendation as part of the evaluation process, we will contact the persons signing the letters at the contact details you provide.

Should you wish to access the information you have provided to us, correct any of it, request its deletion or limit the processing we do by keeping and substantially re-evaluating the information for a potential new job, you can contact us at gdpr@constrat.gr  

We remind you that you have the right to appeal to the Hellenic DPA on issues concerning the processing of your personal data.  For the Authority’s competence and how to lodge a complaint, you can visit its website (https://www.dpa.gr/en/individuals/rights-of-individuals.), where detailed information is available.

By sending your resume you declare that you have taken note of the above

We wish you every success in the evaluation of your application,

Personal Data Management Policy

The Company recognizes the critical importance of the protection of personal data of individuals and their lawful and correct processing. In this context, the Company complies with the basic principles of personal data processing, respects the rights of individuals and ensures that the personal data in its possession:

• collected for specified, explicit and legitimate purposes, as reflected in the File of Processing Activities it maintains and collected with the consent of the individual where required,

• are processed only for the purposes for which they have been collected and/or for legal and regulatory purposes and/or for the defence of the Company’s legitimate interests.

• are not further processed beyond the intended purpose,

• are appropriate, relevant and limited to the minimum necessary for the purposes of the processing,

• are lawfully processed in accordance with the rights of natural persons, are accurate and updated when necessary and especially before critical decisions are taken concerning individuals,

• are not kept for a period longer than that required for the purpose of processing and/or for the Company’s compliance with legal and regulatory obligations,

• kept safe from unauthorised access, loss or destruction,

• transmitted to third parties only on condition that an adequate level of protection is ensured.

The above are kept by all the Company’s employees, as well as by third parties who perform personal data processing operations on behalf of the Company.

To ensure the above:

• implement a Personal Data Management System covering all its activities to monitor and control the implementation of this policy, as well as to assess its effectiveness in complying with the regulatory framework and best practices for the protection of personal data,

• apply procedures for the full satisfaction of the rights of individuals, whose requests shall be answered within one month of the submission of the request or within 3 months in case of justified reasons for delay, which have been notified to the Data Subject within the initial month of the submission of his/her request.

• clearly inform individuals about the processing of their data,

• integrates personal data management requirements into all business functions and processes related to the processing of personal data,

• has identified all internal and external stakeholders and their requirements for the protection of personal data,

• has defined roles and responsibilities related to data management,

• provides clear instructions to its staff and third parties performing work on its behalf on the safe use and transmission of data in accordance with the Management System,

• ensure that the transfer of data to and processing by third parties on its behalf is carried out in compliance with the data protection regulatory framework and this policy,

• design, adopt and monitor the implementation of a system of indicators and targets for the secure and lawful management of data,

• invests in the continuous training, awareness and education of its employees on personal data protection issues as well as in the continuous improvement of its know-how and its dissemination to all staff,

• has all the necessary resources for the effective implementation of the Personal Data Management System,

• has appointed a Data Protection Coordinator (DPC),

• communicate this policy to all staff and ensure that it is continuously updated to achieve full compliance with the applicable regulatory framework.

CONSTRAT Ltd is committed to the continuous monitoring and compliance with the regulatory and legislative framework and to the continuous implementation and improvement of the effectiveness of the Personal Data Management System.

Company Manager / Administrator of CONSTRAT Ltd.

Privacy Policy of www.constrat.gr

The protection of your personal data is important to us. This Privacy Policy (“Policy”) covers the conditions of collection, storage and use of your personal information when you visit, register or use the www.constrat.gr website, provided that you are a natural person. If you have any questions, please do not hesitate to contact us.

The Company under the name “CONSTRAT Ltd” is the Data Controller of the Data it processes. Our address is: 99G Lavrion Avenue, No. 99C, P.C. 19002, contact phone: 210 6028696, email address: info@constrat.gr

If you wish to contact the Data Protection Coordinator (DPC) on any issue related to the processing of your Data and the exercise of your rights, you can contact him/her at 210 6028696 or at 99G Lavrion Avenue, 99C, P.O. Box 19002, or at the email address gdpr@constrat.gr

1. A few words about the website www.constrat.gr

The website www.constrat.gr is the website of the company “CONSTRAT Ltd” (hereinafter: “Company”).

The personal data you provide us when you navigate our website or register as a user of our services (creation of a user account) are processed and will be kept in a file under the responsibility of Company .

2. What is personal data?

The term “personal data”, as used in this Policy, refers to information of natural persons, either individuals or professionals, such as name, postal address, e-mail address, contact telephone number, credit card details, etc., which can be used to identify the identity of a visitor to the website, hereinafter “Personal Data or Data”.

3. What is Personal Data Processing ?

Processing of Personal Data is the collection, recording, organization, storage, adaptation, modification, alteration, retrieval, search for information, use, transmission to third parties, dissemination, association, combination, restriction, deletion and destruction of Personal Data of natural persons.

4. What Data do we collect from you?

When you visit and navigate our website:

We collect your personal data that you choose to provide to us during your browsing (e.g. by filling out the contact form on our website).

In addition, any data collected from cookies that you have consented to be used may also be processed, which are detailed in the Cookies Policy.

5. Do we process data of minors?

We do not process data concerning children under 16 years of age as our website services are not intended for them. If we find that we have collected Data of a child under 16 years of age, without a legal basis to do so, we will proceed to the immediate deletion of the data. In all other respects, the provisions set out in chapters 6 and 7 of this information document shall also apply to minors.

6. For what purpose do we process your data?

We collect your Data exclusively for the purposes of the services provided by our company, as well as for the generally smooth operation of the electronic website www.constrat.gr and in particular for a) monitoring the traffic of the website b) our communication with you on the information you provide through the contact form (https://constrat.gr/epikoinonia ) c) compliance with the obligations imposed by the applicable legislation , and d) ensuring the security of information on the website.

7. What is the legal basis for the processing of your Data by the Company?

In order to monitor traffic (purpose “a”), to communicate with you about issues for which you have used the contact form (purpose “b”), and to ensure the security of the website information (purpose “d”), the legal basis of the processing is the pursuit of our Company’s legitimate interests. More specifically, processing “a” seeks to increase the impact of our website, processing “b” seeks to maintain effective lines of communication with our customers and partners and increase their level of satisfaction, and processing “d” seeks to secure the data and intellectual property of both the Company and our website visitors.

In order to comply with the obligations imposed by the applicable legislation (purpose “c”), the legal basis of the processing is the compliance of our Company with any legal obligations.

8. Who are the recipients of your Data?

The recipients of your data are generally the necessary, in each case, the Company’s personnel, who have received the appropriate information for the secure processing of your personal data.

In addition, recipients of your data are:

     1) Natural and legal persons to whom the Company entrusts the performance of specific tasks on its behalf, such as email service providers or website technical support. The associated persons, who act as performers of the processing of personal data, have been informed and committed in advance to respect the confidentiality of your data, are aware of and follow our instructions regarding the processing of personal data and take all appropriate measures to protect them.

    2) Supervisory, supervisory, auditing, independent, judicial, public and/or other authorities and bodies within the scope of their statutory powers, duties and authorities, where disclosure to them is required by law or provided for therein.

9. How do we ensure that Processors respect your Personal Data?

The Performers have agreed and contractually committed to the Company:

• process your personal data solely in accordance with our instructions and instructions,

• maintain confidentiality,

• not to send Data to third parties without the Company’s permission to take appropriate security measures,

• comply with the legal framework for the protection of personal data and in particular the European GDPR Regulation.

10. Do we send your Data outside the European Union?

Your data is held and processed in Greece, and is not transferred outside the borders of the European Union.

11. When do we delete your Data?

We delete the Data you have entered in our contact form within 5 years from the registration or the last communication and/or transaction between us.

Any personal data held in the security logs of our server for information security purposes (e.g. IP) are deleted within 1 year.

We delete the Data collected by Cookies in accordance with our Cookies Policy

12. Is your Data safe?

We are committed to safeguarding your Personal Data. We have taken appropriate organizational and technical measures to ensure the security and protection of your Data from any form of accidental or unlawful processing.

We use an Electronic Security Certificate (SSL – Secure Socket Layer) to ensure the secure exchange of data between the website and your browser.

These measures shall be reviewed and amended when necessary.

13. What are your rights?

You have the right to access your personal data.

This means that you have the right to be informed by us if we process your Data. If we process your Data, you can request to be informed about the purpose of the processing, the type of your Data we hold, who we give it to, how long we store it, whether automated decision-making is carried out, and your other rights, such as rectification, erasure, restriction of processing and lodging a complaint with the Data Protection Authority.

You have the right to correct inaccurate personal data.

If you find that there is an error in your Data, you can submit a request to us to correct it (e.g. correction of your name or update of a change of telephone number).

You have the right to erasure/right to be forgotten.

You can ask us to delete your data if it is no longer necessary for the above mentioned processing purposes or you wish to withdraw your consent in case it is used as a legal basis for the processing.

You have the right to portability of your Data.

You may ask us to receive in a readable form the Data you have provided or ask us to transfer it to another controller where the processing is based on your consent or is necessary for the performance of a contract between us.

You have the right to restrict processing.

You can ask us to restrict the processing of your Data for as long as your objections to the processing are pending or if part of the processing is no longer necessary for the purposes for which your Data was collected.

You have the right to object to the processing of your Data.

You may object to the processing of your Data when it is carried out in the pursuit of our legitimate interests, and we will stop processing your Data unless there are other compelling and legitimate reasons that override your right.

Right to withdraw your consent

In cases where the processing of your data for a specific purpose is based on your prior consent to the processing, you have the right to withdraw your consent so that the processing does not continue in the future.

14. How can you enforce your rights?

To enforce your rights you can send us a request either to the Company’s postal address (99C Lavrion Avenue, 99C, P.O. 19002, Peania, Attica, Attica) to the attention of the Data Protection Coordinator (DPC), or to the e-mail address ( gdpr@constrat.gr ) with the title “Exercising the right of access/ rectification/ erasure/ portability/ restriction/ objection”, or to the online contact form (https://constrat.gr/epikoinonia ) with a description of your request and we will take care to examine it and reply to you as soon as possible.

15. When do we respond to your requests?

We will respond to your requests free of charge without delay, and in any case within (1) one month of receiving your request. However, if your request is complex or there are a large number of Requests, we will let you know within the month if we need to obtain an extension of another (2) two months within which we will respond to you.

If your Requests are manifestly unfounded or excessive, in particular due to their repetitive nature, the Company may impose a reasonable fee, taking into account the administrative costs of providing the information or performing the requested action, or refuse to follow up on the Request.

16. Right to complain

If you believe that: a) your request has not been adequately and lawfully met or b) your right to the protection of your personal data has been infringed by any processing carried out by us, you have the right to lodge a complaint with the Personal Data Protection Authority (postal address 1-3 Kifissia Street, P.K. 115 23, Athens, https://www.dpa.gr/, tel. 210 6475600, e-mail: contact@dpa.gr).

17. How will you be notified of any changes to this Policy?

We will update this Policy whenever necessary. If there are significant changes to the Policy or the way we use your Personal Data, we will notify you either by posting a notice in a prominent place before the changes take effect or by any other appropriate means. We encourage you to periodically read this Policy to know how your Data is protected.

Constrat’s LTD administration recognizes the risks which may threaten the smooth operation of its activities and has all the required resources for the implementation of a business continuity management system according to the international standard ISO 22301:2019 to:

• Ensure business’s continuity on critical activities in case of an incident leading to unavailability or inability to access the company’s facilities
• Be able to return to acceptable operating levels as soon as possible
• Minimize the impacts which may cause disruption to the credibility and reputation of the company in its clients

The company’s emergency strategies protect the staff’s safety and the company’s reputation, in combination with the continuous and reliable provision of services to all interested parts, while maintaining the contractual and legal compliance to regulations. The implementation of business’s continuity management system, by obeying politics, procedures and related business continuity plans, has the following purposes:

• Safeguarding staff’s health and safety
• Preserving company’s image and reputation
• Protecting those activities that produce value
• Ensuring the company’s capacity to provide continuously its services and products
• Establishing systematic methods for planning and evaluating the company’s continuity requirements
• Establishing specific recovery strategies and redacting applicable plans dealing with business’s continuity incidents

The BCS includes the company’s critical facilities, the equipment, the systems, the processes and the employees that are needed to continue the business during work break. Every important aspect of Constrat LTD has been defined in plans about the recovery of critical processes, with the minimum possible interruption and as soon as possible, depending on the nature of the activity’s disorder.

As a minimum requirement, the BCS of Constrat LTD will be subjected to regular review and updating. An official test program is carried out and evaluated by executives, while through management reviews, goals of improvement will be established and reviewed.

The management has been committed for compliance with the applicable requirements and for continuous improvement of competence and the effectiveness of the business continuity management system.

Bribery and corruption are major threats to the administration, sustainable development, of business ethics and legal acts between business partners and undermine the efforts for economic and social development.

Constrat LTD acts in terms of ethics and the integrity. Manages with zero-tolerance bribery and corruption incidents and is committed to act professionally and legally in all its business transactions and relationships. Its administration is committed to contribute any way it can the prevention and the combating of bribery and corruption incidents. For this reason:

• Has developed and implements an anti-bribery management system (ABMS) according to the requirements of ISO 37001: 2016
• Prohibits any kind of bribery and corruption activity during carrying out tasks of Constrat LTD or when someone acts on her behalf.
• Commits to meet the demands of ABMS.
• Commits to comply with all relevant Greek anti-bribery and corruption laws.
• Commits for the continuous improvement of Α
• Has established within Constrat LTD an independent anti-bribery compliance section, which has the primary responsibility for overseeing the implementation of the ABMS, informing staff about bribery issues, ensuring that ABMS complies with the requirements of ISO 37001: 2016 and reporting ABMS performance management

Practices of hospitality and/or entertainment which are aimed at creating and/or strengthening relationships and promoting the goals of Constrat LTD are carried out transparently so as not to create any expectation for their recipient to reciprocate, either by committing or omitting acts, or by any other action in return. These practices are proportionate, fully recorded and legal.

Each member of Constrat LTD, employee and partner have to fight against bribery and corruption incidents and inform the independent anti-bribery compliance department or/and the management for suspected occurrences about this kind of situations, sincerely and without having adverse consequences on them. The purpose of Constrat LTD is to enhance transparency and for this reason the administration will investigate all reports about suspicious facts, even if these suspicions prove to be wrong in the end.

Constrat LTD has zero-tolerance in these kinds of behaviors that does not comply with the anti-bribery policy. Any violation of the principles of the policy is considered as an important fact which is a disciplinary offense that carries penalties. Disciplinary penalties are decided on a case-by-case basis, depending on the severity of the demonstrated behavior and the offense that has been committed and are imposed without prejudice of the provisions of the applicable law.

Constrat, which specializes in the marketing of hydraulic and other electromechanical equipment as well as in the development of automation projects, operates with respect for the environment and the expectations of the social recognizing that business growth and social prosperity can only be achieved through Sustainable Development. Saving and optimal energy management are of paramount importance concern in the design of our operations.

For this reason, all of us at the organization recognize the Environmental Aspects of our activities and we have all the necessary resources to implement an Energy Management System in accordance with the international standard ISO 50001: 2018.

The commitment to the rational management of energy related to our activities is implemented through the following individual steps:

• Continuous monitoring of energy use.
• Establishment of Energy Goals and Objectives through annual Management meetings.
• Training, coaching and motivation of staff.
• Support the supply of energy efficient products and services that affect energy performance.
• Support for a design of functions that takes into account the improvement of energy efficiency.
• Encouraging internal and external communication on energy issues.

The management of Constrat is committed to:

• the satisfaction of the applicable requirements
• the availability of information and resources to achieve energy targets
• the continuous improvement of the effectiveness of the Energy Management System and the Energy performance.
• communicating the objectives and goals to employees.