This Policy explains how EXXLOR S.A. collects and processes personal data through the website www.exxlor.eu and its platform.
1. Data Controller
EXXLOR S.A., Ag. Konstantinou 40, 151 25 Marousi, Attica, Greece, G.E.MI. No. 191734001000, VAT No. 803192640, email: edelis@exxlor.eu, tel. +30 694 8820353.
2. What data we collect
| Category | Examples |
|---|---|
| Account data | Email, password (encrypted), user role, name. |
| Company data | Company name, VAT/tax office, G.E.MI., registered office, contact and legal representative details. |
| Request data | Occupations, positions, employment terms, countries of origin, notes. |
| Technical data | Session data (token) stored locally in the browser to keep you signed in. |
3. Purposes & legal bases for processing
- Provision of the service (account creation, request management) - performance of a contract (Article 6(1)(b) GDPR).
- Transmission of requests to licensed partners for carrying out the invitation - performance of a contract / legitimate interest (Article 6(1)(b)/(f)).
- Compliance with legal obligations (tax, commercial) - Article 6(1)(c).
- Security & improvement of the platform - legitimate interest (Article 6(1)(f)).
4. Recipients of data
- Licensed partners (in Greece or in the country of origin), to whom a request is assigned or with whom it is coordinated, to the extent required for its implementation.
- Cloud infrastructure provider (Supabase) as a processor, for hosting the database and the authentication service.
- Public authorities, where required by law.
5. Place of processing & international transfers
Data is hosted on infrastructure within the European Union. In the event of a transfer outside the EU/EEA (e.g. to licensed partners in the country of origin or technical sub-processors), it is carried out with the appropriate GDPR safeguards (e.g. Standard Contractual Clauses).
6. Retention period
Data is retained for as long as the account is active and insofar as required for the above purposes, as well as for compliance with legal obligations (e.g. tax records). After the required period has elapsed, it is deleted or anonymised.
7. Your rights
As a data subject you have the right to: access, rectification, erasure, restriction, portability, objection, as well as withdrawal of consent where applicable. To exercise your rights, contact us at edelis@exxlor.eu.
8. Right to lodge a complaint
You have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) - 1-3 Kifisias Ave., 115 23 Athens, www.dpa.gr.
9. Cookies & local storage
The website does not use advertising cookies. The platform stores a technically necessary session token locally in your browser so that you remain signed in. The website loads fonts from Google Fonts; the related technical connection may record your IP address by Google.
10. Security
We apply appropriate technical and organisational measures (password encryption, role-based access control, database security policies) to protect the data.
Data protection enquiries: edelis@exxlor.eu. See also the Terms of Use.