Website Privacy Policy
Τhe Company “ORCO S.A.” (hereinafter referred to as the “Company”) pays special attention to the protection of your personal data.
This Website Privacy Policy describes how we process your personal data when you visit our website.
The Company is the Controller for the personal data being processed in this website (www.orco.gr) and is always at your disposal for any further information or clarification.
Our Company is based in 6, Vas. Sofias Avenue, P.C. 106 74, Athens, Greece, telephone number: +30 210 7236001 and email address This email address is being protected from spambots. You need JavaScript enabled to view it..
Please take a few moments to carefully read the terms of the current Website Privacy Policy.
By visiting www.orco.com and/or submitting any personal information to us, you are consenting to the practices described in this Website Privacy Policy, including the data collection and information processing practices, and to our Cookies Policy.
For any question do not hesitate to contact us at This email address is being protected from spambots. You need JavaScript enabled to view it..
For information on how we protect the personal data of our employees, customers or suppliers, please refer to our General Privacy Policy.
The website
The domain www.orco.gr is the website of our Company and provides a wide range of information about our products and services. You can also use the electronic forms of our website and our e-mail (This email address is being protected from spambots. You need JavaScript enabled to view it.) to get in touch with us.
What kind of personal data we process?
When you visit www.orco.gr, we process the following personal information:
Α) When filling in the online job application form, we process your name, e-mail address, street address, phone number and the information included in the CV you may attach.
B) When filling in the online supplier registration form or our internship form, we process data related to your identity (form of address, name, surname, photo (if applicable) etc.), contact data (email address, telephone number, postal address, Skype contact etc.) and data related to your professional skills and status (language competences, fields of expertise, academic background, localization tools and services you provide), and the information contained in your resume.
C) When filling in the “Get in touch form”, we process data on your identity (name, surname), contact data (email address, phone number), information on your company and your request (name of your company, job title) and any other data you may provide.
D) During your visit on our website we process data through the strictly necessary technical cookies that are installed on our website as well as the cookies for which you have provided us with your explicit consent. Learn more about our website's Cookies Policy here.
Ε) Furthermore, the following information can be collected automatically, such as:
-
the user's IP address; The IP address is determined by the connection provider through which visitors/users access the Internet and, subsequently, the website. The IP address is retained solely for legal reasons.
-
type of browser and operating system;
-
websites and links clicked on within the webpage;
-
basic server connection information;
Purpose of processing your personal data
The Company and/or those acting under its instructions and on its behalf (data processors), process your personal data solely for the following purposes:
-
to evaluate your application for an available job opening,
-
to evaluate your registration as a supplier for a possible collaboration,
-
to manage and answer requests submitted through the “get in touch form”, including to manage requests for quotations,
-
to improve the operation of our website and your browsing experience, by using cookies.
Your data are being processed solely for the abovementioned purposes or in certain cases for the purpose of the legal/regulatory compliance of our Company or for supporting our legal claims.
Legal basis for the processing
Regarding the personal data we process after you submit an online job application, the legal basis for the processing is that it is necessary in order to take steps at your request, prior to entering into a contract with you.
Regarding the personal data we process after you register online as a supplier, the legal basis for the processing is that it is necessary in order to pursue the legitimate interest of ORCO to analyze candidate applications and grow its Suppliers Network.
Regarding the personal data we process after you submit a request for information, or a request for quotation, using the “Get in touch” form, the legal basis for the processing is that it is necessary in order to pursue the legitimate interest of ORCO to provide information on its business, products and services and/or to develop its business relationships.
Regarding the personal data we collect via cookies installed on our website, processing is based on your explicit consent, except for the use of cookies that are strictly necessary for the operation of the website. You can find out more about the Cookies Policy of our website here.
Do we use automated individual decision-making, including profiling?
We do not make decisions, including profiling, based on automated processing of your data.
Do we process minors’ data?
Our website and services are not intended for minors. In case a minor gets in contact with us, through the contact form, his personal data will be deleted immediately.
Who has access to your personal data?
Only the strictly necessary personnel of the Company have access to your personal data. These employees are committed to confidentiality and have received the required training regarding the safe processing of your personal data.
Moreover, the companies and the individuals that cooperate with us (data processors) may have access to your personal data, when a specific processing has been assigned to them by the Company, such as by our accounting office. The processing of the personal data by the data processors is made under the explicit instructions of the Company and after it is guaranteed that all the necessary technical and organizational measures have been taken.
Furthermore, third parties, who may have access to your data, are official government and supervising bodies (e.g., law enforcement and prosecuting authorities, supervising authorities, etc.), when we are under a legal obligation to share/send them relevant data, or for the establishment, exercise, or defense of legal claims.
Do we transfer your Data to third countries?
We do not transfer your data outside the European Economic Area (EEA).
Which is the retention period for your personal data
Your personal data is kept only for the reasonable period of time required by the nature of the processing and only for as long as it is required to achieve the purpose of processing, unless a longer retention period is required by law.
Personal data, that are being processed under the legal basis of your explicit consent are kept only for as long as the consent has not been withdrawn.
Connection with other websites
The potential interconnection of our website with other third parties’ websites through links, hyperlinks, banners, etc. does not entail any liability on behalf of the Company for the content of those websites, the quality of the products and services they might promote, or the policy that they might use concerning the protection and the processing of personal data. You should pay the necessary attention and stay informed concerning the protection and processing of your personal data from the above websites by reading their respective data protection policies.
Is your data safe and secure?
We commit to safeguard your personal data by taking all the appropriate organizational and technical measures to secure and protect them from any form of accidental or fraudulent processing. Please note that our authorized staff, who process your personal data, has also received appropriate guidance and information regarding the safety and security of your data.
These measures are reviewed and amended when deemed necessary.
What are your rights?
- You have the right to access your personal data.
This means you have the right to be informed about whether we process your data. If we process your data you can request to be informed about the purpose of processing, the type of information we keep, the recipients, the retention periods, whether we do automated decision making, as well as about your other rights, such as rectification, erasure, restriction of processing and to lodge a complaint with the Hellenic Data Protection Authority.
- You have the right to rectify your inaccurate personal data.
You can request the rectification of your inaccurate personal data (correct a wrong or outdated phone number/address etc.). Taking into account the purposes of the processing, you have the right to ask for incomplete personal data to be completed, including by means of providing a supplementary statement.
- You have the right to erase your Information / right to be forgotten.
You can request from us to delete your personal data if it is not necessary for the above-mentioned purposes or if you wish to withdraw your consent in case this is the only legal basis for the processing.
- You have the right to data portability.
You can request from us to receive in a readable format your personal data that you have provided us or request from us to transfer your Information to another data controller.
- You have the right to restrict the processing of your personal data.
You can request from us to restrict the processing of your personal data for as long as the examination of your objections is pending.
- You have the right to object to the processing of your personal data.
You can object to the processing of your personal data in case we process them upon the legal basis of our legitimate interest. In that case, we shall no longer process your personal data, unless we have compelling legitimate grounds for the processing which override your rights.
- You have the right to withdraw your consent.
You have the right to withdraw your consent at any time, in those cases that the processing is based on the specific legal basis. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
How can you exercise your rights?
If you wish to receive further information or exercise your rights concerning the processing of your personal data, you can send us a letter to the abovementioned postal address (6, Vas. Sofias Avenue, P.C. 106 74, Athens, Greece) or an email to This email address is being protected from spambots. You need JavaScript enabled to view it., stating "Exercise of the right of access / rectification / erasure /portability/ restriction / objection / withdrawal of consent" in the subject line, with a description of your request and we will make sure to examine it and respond to it as soon as possible.
We will reply to your request without delay, within (1) one month after receiving it and without any cost for you. The above time-period might be extended by two (2) further months where necessary, taking into account the complexity and/or the number of requests. In such a case, you will be informed of any such extension and the reasons for the delay as soon as possible, and in any case within (1) one month of the receipt of your request. In case your request is considered as obviously unfounded or excessive, the Company may charge a reasonable fee, taking into account the administrative costs for providing information or performing the requested action, or refuse to respond to the request and provide you with the justification of its refusal.
We hope that we can resolve any query or concern you raise about our use of your information. In case you believe the processing of your personal data violates the applicable law for the protection of personal data or that your request has not been sufficiently addressed, you have the right to lodge a complaint with the Hellenic Data Protection Authority (address: Kifissias 1-3, Athens, Greece, Postal Code: 115 23, phone number: 210 6475600, email address: This email address is being protected from spambots. You need JavaScript enabled to view it.).
Changes to this Website Privacy Policy
We may change this Website Privacy Policy from time to time. Any changes we make to this Website Privacy Policy in the future will be posted on this page. We encourage you to visit this page regularly to read the latest information on our privacy practices. This page will always reflect the most updated version of our Website Privacy Policy.
General Privacy Policy
ORCO S.A. (hereinafter also referred to as the “Company”) is committed to respecting your privacy and protecting your personal information by complying with the applicable laws and regulations. For this reason, we have developed a policy which describes all measures taken for compliance with the EU General Data Protection Regulation (GDPR).
This policy covers all types of personal data collected and/or being processed by ORCO, including the personal data of personnel and business contacts, the personal data of our suppliers and subcontractors, as well as the personal data contained in materials provided to us by our customers for the purposes of providing the requested services.
The Company is the Controller for the personal data of all the above-mentioned categories with the exception of the personal data contained in materials provided to us by our customers, for which the Company is the Data Processor.
Our Company is based in 6, Vas. Sofias Avenue, P.C. 106 74, Athens, Greece, telephone number: +30 210 7236001 and email address This email address is being protected from spambots. You need JavaScript enabled to view it..
This General Privacy Policy (hereinafter also referred to as “Privacy Policy”) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. This Privacy Policy supplements any information you have already been given on this subject. Furthermore, the Company may provide you with additional information to address specific circumstances (not covered by this Privacy Policy) in which your Personal data may be collected and processed.
For information on the personal data being processed in our website (www.orco.gr), please refer to our Website Privacy Policy.
For any question do not hesitate to contact us at This email address is being protected from spambots. You need JavaScript enabled to view it..
Our principles
Our Privacy Policy is based on the following principles:
-
We are transparent about the information we collect and what we do with it.
-
We use the information only for predetermined purposes and with your best interests in mind.
-
We avoid unnecessary collection, processing and storage of personal data.
-
All personal data is confidential.
-
We have put in place measures to protect the information and keep it secure such as IT and organizational policies.
-
We respect your data protection rights and you have control over your own information.
-
We process personal information within the scope permitted by GDPR.
What type of data we collect and from which sources?
We collect information about you when you contact us for products or services, when you use our products or services or when we use your products or services. We may also collect personal data from public sources and registers (such as professional associations), social media channels and networking services (such as Twitter, LinkedIn, Proz.com etc.). In general, we only process personal data related to our customers or potential customers, subcontractors or suppliers, employees and job applicants. Types of personal data may include basic information about you, including name, address, contact details, job function, information necessary for payments, information necessary to fulfil rights and obligations related to our business relationship.
In addition, we may process documents which contain personal data as part of the service requested by our customers. In such cases, we have in place data processing agreements with both customers and subcontractors which dictate the policies, responsibilities and obligations of all parties, concerning the processing of documents which contain personal data.
Key purposes and legal basis of processing personal data
Our operations and services require the collection and processing of personal data. We use the information you give us to carry out our obligations arising from any contracts between you and us and to provide you with the information on products and services that you request from us.
We process your information based on the applicable laws, concluded agreements and consents for the following purposes:
-
Provision of services and customer relationship management (service/product delivery, invoicing, support, customer satisfaction, etc.)
-
Communication and marketing for products or services (based on your agreement)
-
Management of human resources, namely employees, job applicants, external subcontractors, trainees (contracts, payments, evaluations, etc.)
-
Legal obligations (such as for accounting purposes, for tax or social security authorities)
Based on the above, the legal bases of processing your personal data are:
-
To fulfill a contract between us (customer, subcontractor, employee)
-
To comply with a legal obligation
-
In relation to sending marketing communications to you where you have agreed to receive it
-
Where it is necessary for our legitimate interests including evaluating and improving our services
-
To contact you about potential work or a job offering or with a business collaboration proposal, where you have agreed
Who has access to your personal data?
Your personal data is processed by ORCO’s employees as part of their work.
We may share your personal information with third parties such as:
-
Tax authorities, social security services, courts, to comply with any legal obligation
-
Entities providing financial, accounting and tax services, payment services (such as banks, PayPal), audit and control services, legal services
-
Business partners, suppliers, and subcontractors for the performance of any contract we enter into with them
Transfer of data to non-EU countries
As a rule, your personal data will not be transferred outside the EEA. If under special circumstances your data is transferred outside the EEA, we ensure that it will have an adequate level of data protection.
How long do we keep your personal data?
Unless otherwise required by law, we will store your personal data as long as it is necessary in relation to the purpose for which it is collected. We will erase your data if you withdraw your consent and there is no other legal ground for processing or if you object to the processing and there are no overriding legitimate grounds for the processing.
How do we protect your data?
Your personal data is mainly stored in electronic format and we have taken reasonable precautions to protect them based on general practices. The personal data we collect is kept confidential and access is restricted to the people or subcontractors that have a business need for such access. Access to personal data is protected by means of various IT security and administration policies, such as passwords and access rights.
Do you need to provide personal data?
Providing us with your personal data is voluntary but necessary to meet the purpose of our operations or to conclude a contract with you.
What are your rights regarding your personal data?
- You have the right to access your personal data.
This means you have the right to be informed about whether we process your data. If we process your data you can request to be informed about the purpose of processing, the type of information we keep, the recipients, the retention periods, whether we do automated decision making, as well as about your other rights, such as rectification, erasure, restriction of processing and to lodge a complaint with the Hellenic Data Protection Authority.
- You have the right to rectify your inaccurate personal data.
You can request the rectification of your inaccurate personal data (correct a wrong or outdated phone number/address etc.). Taking into account the purposes of the processing, you have the right to ask for incomplete personal data to be completed, including by means of providing a supplementary statement.
- You have the right to erase your Information / right to be forgotten.
You can request from us to delete your personal data if it is not necessary for the above-mentioned purposes or if you wish to withdraw your consent in case this is the only legal basis for the processing.
- You have the right to data portability.
You can request from us to receive in a readable format your personal data that you have provided us or request from us to transfer your Information to another data controller.
- You have the right to restrict the processing of your personal data.
You can request from us to restrict the processing of your personal data for as long as the examination of your objections is pending.
- You have the right to object to the processing of your personal data.
You can object to the processing of your personal data in case we process them upon the legal basis of our legitimate interest. In that case, we shall no longer process your personal data, unless we have compelling legitimate grounds for the processing which override your rights.
- You have the right to withdraw your consent.
You have the right to withdraw your consent at any time, in those cases that the processing is based on the specific legal basis. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
How can you exercise your rights?
If you wish to receive further information or exercise your rights concerning the processing of your personal data, you can send us a letter to the abovementioned postal address (6, Vas. Sofias Avenue, P.C. 106 74, Athens, Greece) or an email to This email address is being protected from spambots. You need JavaScript enabled to view it., stating "Exercise of the right of access / rectification / erasure /portability/ restriction / objection / withdrawal of consent" in the subject line, with a description of your request and we will make sure to examine it and respond to it as soon as possible.
We will reply to your request without delay, within (1) one month after receiving it and without any cost for you. The above time-period might be extended by two (2) further months where necessary, taking into account the complexity and/or the number of requests. In such a case, you will be informed of any such extension and the reasons for the delay as soon as possible, and in any case within (1) one month of the receipt of your request. In case your request is considered as obviously unfounded or excessive, the Company may charge a reasonable fee, taking into account the administrative costs for providing information or performing the requested action, or refuse to respond to the request and provide you with the justification of its refusal.
We hope that we can resolve any query or concern you raise about our use of your information. In case you believe the processing of your personal data violates the applicable law for the protection of personal data or that your request has not been sufficiently addressed, you have the right to lodge a complaint with the Hellenic Data Protection Authority (address: Kifissias 1-3, Athens, Greece, Postal Code: 115 23, phone number: 210 6475600, email address: This email address is being protected from spambots. You need JavaScript enabled to view it.).
Updating our Privacy Policy
We may change this Privacy Policy from time to time. Any changes we make to this Privacy Policy in the future will be posted on this page. We encourage you to visit this page regularly to read the latest information on our privacy practices. This page will always reflect the most updated version of our Privacy Policy. This Privacy Policy was last updated on 24 February 2023.