G&G Innovations, which specialises in the marketing of hydraulic and other electromechanical equipment and automation projects, considers environmental protection to be one of the greatest. The company considers environmental protection to be one of the greatest challenges it faces today.

For this reason, all of us in the Organization recognize the Environmental Aspects of our activities and we have all the resources necessary to implement an Environmental Management System Management System in accordance with the international standard ISO 14001:2015.

Our commitment to protect the environment and to reduce the impact of our activities is implemented through the following individual steps:

• Continuous evaluation of the Environmental Aspects of our activities in order to reduce Environmental Imprint of the company.
• Continuous improvement of the Environmental Performance that will be monitored through the annual reviews as well as the establishment of Environmental Aims and Objectives.
• Take precautionary measures to avoid dealing with emergencies.
• Environmental education, training and motivation of staff.
• Encourage internal and external communication on environmental issues.

The management of G&G Innovations is committed to:

• the satisfaction of the applicable requirements
• the continuous improvement of the efficiency of the Environmental Management System
• The protection of the environment, including the prevention of pollution and
• communicating the objectives and goals to employees.

The management of G&G Innovations is committed to the implementation and continuous improvement of efficiency of the Information Security Management System, as well as for the disposal of all financial, technical and human resources required for its operation through the Management Review on an annual basis base.

Measure of the success of the Central Information Security Policy but also of the individual Security Policies, is to achieve specific goals and instill confidence in each trader for integrity,and information security. The general security objectives set by G&G Innovations are:

• To continually raise awareness, train and motivate G&G Innovations personnel, regarding the importance of the development and implementation of the ISMS, as well as the importance of active participation and compliance of staff with safety requirements and customer expectations.
• The absence of cracks and general safety incidents
• The efficient use of resources
• Full compliance with the requirements of the legislation related to Information Security

For these reasons G&G Innovations:

• Develops and implements Policies and Procedures, specializing in Central Policy and ensure the integrity of information from internal and external risks.
• Instills confidence in every trader that they are acting in accordance with validated international standards, laws and regulations, as well as contractual requirements for information system security.
• Protects its assets and information from threats (internal and external) and risks.
• Ensures the confidentiality of confidential information and safeguards unauthorized access.
• Commits to continuously improve the Information Security Management System by creating and the regular review of measurable safety objectives.
• Implement procedures for identifying and assessing risks and their impact on
protected information.
• Performs all the necessary actions, in order to communicate the Central and the individual Security Policies to any interested party.

G&G Innovations ensures that all of its staff, as well as stakeholders (customers, suppliers, etc.), are aware of the Central Information Security Policy and its implementation Information Security Management System and how applicable individual Policies are easy accessible.

G&G Innovations management recognizes the risks that may threaten the seamless
operation of its activities and has all the necessary resources for the implementation of the System Business Continuity Management according to the international standard ISO 22301: 2012 in order to:

• Ensure Business Continuity of critical activities in the event of an event
Business continuity of business activities in the event of an incident leading to unavailability or inaccessibility of the company’s facilities.
• To be able to return to acceptable levels of operation in the shortest possible time if there is no availability of equipment or services, or if there is an unavailability of the facility, or if the facility is unable to operate in the event of an unavailability or unavailability of its services, or if the facility is unable to operate at all.
• To minimize the impact that disruptive incidents may have on reliability
and reputation of the company in the eyes of its customers.

The company’s emergency strategies protect the safety of its staff and its reputation
company, in combination with the continuous and reliable provision of services to stakeholders, maintaining at the same time contractual and legal compliance with the regulations. The implementation of the Management System Business Continuity, through compliance with the policy, procedures and related Business Plans Continuity, has as its goal:

• Safeguarding the health and safety of staff
• The preservation of the corporate image and reputation
• The protection of those activities that produce value
• Ensuring the company’s ability to continuously provide its Services and Products.
• The establishment of systematic methods for the design and evaluation of requirements Business Continuity of the company
• Establishing specific recovery strategies and drafting viable response plans
Business Continuity incidents

The ΣΕΣ includes the critical facilities of the company, the equipment, the systems, the processes and their employees who are necessary to continue the business during a work stoppage. Each important aspect of G&G Innovations is set out in the plans to recover its critical processes through the shortest possible interruption and as soon as possible, depending on the nature of the activity disorder.

As a minimum requirement, G&G Innovations ΣΕΣ will be subject to regular review and updating.

Top management is committed to complying with applicable requirements and to continuously improving adequacy, suitability and effectiveness of the Business Continuity Management System.

Bribery / corruption and corruption are major threats to good governance, sustainable development, business ethics and good faith among traders and undermine efforts to achieving economic and social development.

G&G Innovations operates on the basis of ethics and integrity. Manages incidents with zero tolerancebribery and corruption and is committed to acting with professionalism and legitimacy in all her business transactions and relationships wherever she conducts them. Its management is committed to contribute in any way possible to prevent and combat corruption / bribery and corruption. For this reason:

• Has developed and implemented an anti-corruption management system (ABMS) as required of ISO 37001: 2017
• Prohibits any kind of bribery / extortion & corruption activity during execution G&G Innovations or when acting on its behalf
• Commits to meet the requirements of ABMS
• Commits to comply with all relevant Greek laws against bribery / extortion & corruption
• Commit to the continuous improvement of ABMS
• Has established an independent Anti-Bribery Compliance Division within G&G Innovations, which has as main responsibilities the supervision of the implementation of ABMS, the information of the staff for on bribery issues, ensuring that ABMS complies with ISO requirements 37001: 2017 and the report to the Performance Management for ABMS.

Hospitality and / or entertainment practices that aim to build and / or strengthen relationships and promoting the goals of G&G Innovations are done in a transparent manner so that they do not create any expectation of the recipient to reciprocate, either by performing or by omitting acts, any other action in return. These practices are analogous, fully documented and legal.

Every member of G&G Innovations, employee and associate must oppose phenomena
bribery and corruption and to inform the independent Compliance Department against
Bribery and / or the Administration for suspicious incidents related to such phenomena, honestly and in good faith and without this having adverse consequences for them. The purpose of G&G Innovations is to strengthen it transparency and for this reason the administration will investigate all reports of suspicious incidents, even if in the end these suspicions turn out to be wrong.

G&G Innovations shows zero tolerance for any behavior that does not comply with policy against Bribery. Any violation of the principles of the Policy is considered a very important event which is a disciplinary offense that carries penalties. Disciplinary penalties are decided individually where appropriate, depending on the nature and severity of the behavior shown and observed and imposed without prejudice to the provisions of applicable law.

G&G Innovations, which specializes in the marketing of hydraulic and other electromechanical equipment as well as in the development of automation projects, operates with respect for the environment and the expectations of the social recognizing that business growth and social prosperity can only be achieved through Sustainable Development. Saving and optimal energy management are of paramount importance concern in the design of our operations.

For this reason, all of us at the organization recognize the Environmental Aspects of our activities and we have all the necessary resources to implement an Energy Management System in accordance with the international standard ISO 50001: 2018.

The commitment to the rational management of energy related to our activities is implemented through the following individual steps:

• Continuous monitoring of energy use.
• Establishment of Energy Goals and Objectives through annual Management meetings.
• Training, coaching and motivation of staff.
• Support the supply of energy efficient products and services that affect energy Performance.
• Support for a design of functions that takes into account the improvement of energy efficiency.
• Encouraging internal and external communication on energy issues.

The management of G&G Innovations is committed to:

• the satisfaction of the applicable requirements
• the availability of information and resources to achieve energy targets
• the continuous improvement of the effictiveness of the Energy Management System and the Energy performance.
• communicating the objectives and goals to employees.

ISO 27701:2019 Personal Data Management System sets out the guidelines and provides guidance for establishing, implementing, maintaining and continuously improving privacy information management systems (PIMS).
It is based on the provisions of ISO/IEC 27001, the information security management system (ISMS) standard and the code of practice for security controls in ISO/IEC 27002. In addition, it sets out the guidelines and provides guidance for establishing, implementing, maintaining and the continuous improvement of a privacy information management system (PIMS).

By applying the standard, it is ensured:

• The collection of data for specified, explicit and legal purposes, as reflected in the File of Processing Activities maintained by (the company) and collected after the consent of the natural person where required
• The processing of the data only for the purposes for which they have been collected and/or for legal and regulatory reasons and/or for the promotion of the legitimate interest of the Company.
• Not submitting to further processing beyond the specified purpose,
• Legal processing in accordance with the rights of natural persons, is accurate and updated, when and especially before making critical decisions for natural persons,
• Compliance for the period of time required for the purpose of the processing and/or for the Company’s compliance with legal and regulatory regulations,
• Keeping personal data safe from unauthorized access, loss or destruction;
• Transmission to third parties only under the condition that an adequate level of protection is ensured for them

We inform you that the personal data that you provided to our company, through your resume that you sent us directly or through the partner recruitment company, as well as the evaluation data are kept by the company for the duration of the selection process for the purpose of evaluating you for the existing job, but also for six (6) months after the completion of the above process, in order to be re-evaluated in case a job that fits the candidate’s profile arises directly. At the end of the aforementioned period, the data will be deleted as part of the Company’s compliance with the applicable national and European legislation on Personal Data Protection. 

Only the Company and its contracted affiliated recruitment agencies have access to the above data in the context of the actions taken, at your request, to evaluate your application with a view to establishing a cooperation between us.

Finally, please note that if you provide us with letters of recommendation as part of the evaluation process, we will contact the persons signing the letters at the contact details you provide.

Should you wish to access the information you have provided to us, correct any of it, request its deletion or limit the processing we do by keeping and substantially re-evaluating the information for a potential new job, you can contact us at gdpr@ggi.gr  

We remind you that you have the right to appeal to the Hellenic DPA on issues concerning the processing of your personal data.  For the Authority’s competence and how to lodge a complaint, you can visit its website (https://www.dpa.gr/en/individuals/rights-of-individuals.), where detailed information is available.

By sending your resume you declare that you have taken note of the above

We wish you every success in the evaluation of your application,

Personal Data Management Policy

The Company recognizes the critical importance of the protection of personal data of individuals and their lawful and correct processing. In this context, the Company complies with the basic principles of personal data processing, respects the rights of individuals and ensures that the personal data in its possession:

• • collected for specified, explicit and legitimate purposes, as reflected in the File of Processing Activities it maintains and collected with the consent of the individual where required,
• • are processed only for the purposes for which they have been collected and/or for legal and regulatory purposes and/or for the defence of the Company’s legitimate interests.
• • are not further processed beyond the intended purpose,
• • are appropriate, relevant and limited to the minimum necessary for the purposes of the processing,
• • are lawfully processed in accordance with the rights of natural persons, are accurate and updated when necessary and especially before critical decisions are taken concerning individuals,
• • are not kept for a period longer than that required for the purpose of processing and/or for the Company’s compliance with legal and regulatory obligations,
• • kept safe from unauthorised access, loss or destruction,
• • transmitted to third parties only on condition that an adequate level of protection is ensured.

The above are kept by all the Company’s employees, as well as by third parties who perform personal data processing operations on behalf of the Company.

To ensure the above:

• • implement a Personal Data Management System covering all its activities to monitor and control the implementation of this policy, as well as to assess its effectiveness in complying with the regulatory framework and best practices for the protection of personal data,
• • apply procedures for the full satisfaction of the rights of individuals, whose requests shall be answered within one month of the submission of the request or within 3 months in case of justified reasons for delay, which have been notified to the Data Subject within the initial month of the submission of his/her request.
• • clearly inform individuals about the processing of their data,
• • integrates personal data management requirements into all business functions and processes related to the processing of personal data,
• • has identified all internal and external stakeholders and their requirements for the protection of personal data,
• • has defined roles and responsibilities related to data management,
• • provides clear instructions to its staff and third parties performing work on its behalf on the safe use and transmission of data in accordance with the Management System,
• • ensure that the transfer of data to and processing by third parties on its behalf is carried out in compliance with the data protection regulatory framework and this policy,
• • design, adopt and monitor the implementation of a system of indicators and targets for the secure and lawful management of data,
• • invests in the continuous training, awareness and education of its employees on personal data protection issues as well as in the continuous improvement of its know-how and its dissemination to all staff,
• • has all the necessary resources for the effective implementation of the Personal Data Management System,
• • has appointed a Data Protection Coordinator (DPC),
• • communicate this policy to all staff and ensure that it is continuously updated to achieve full compliance with the applicable regulatory framework.

G&G INNOVATIONS PC is committed to the continuous monitoring and compliance with the regulatory and legislative framework and to the continuous implementation and improvement of the effectiveness of the Personal Data Management System.

Company Manager / Administrator of G&G INNOVATIONS PC

Privacy Policy of www.ggi.gr

The protection of your personal data is important to us. This Privacy Policy (“Policy”) covers the conditions of collection, storage and use of your personal information when you visit, register or use the www.ggi.gr website, provided that you are a natural person. If you have any questions, please do not hesitate to contact us.

The Company under the name “ G&G INNOVATION PC” is the Data Controller of the Data it processes. Our address is: 99G Lavrion Avenue, No. 99C, P.C. 19002, contact phone: 210 6028696, email address: info@ggi.gr

If you wish to contact the Data Protection Coordinator (DPC) on any issue related to the processing of your Data and the exercise of your rights, you can contact him/her at 210 6028696 or at 99G Lavrion Avenue, 99C, P.O. Box 19002, or at the email address gdpr@ggi.gr

1. A few words about the website www.ggi.gr

The website www.ggi.gr is the website of the company “ G&G INNOVATION PC ” (hereinafter: “Company”).

The personal data you provide us when you navigate our website or register as a user of our services (creation of a user account) are processed and will be kept in a file under the responsibility of Company .

2. What is personal data?

The term “personal data”, as used in this Policy, refers to information of natural persons, either individuals or professionals, such as name, postal address, e-mail address, contact telephone number, credit card details, etc., which can be used to identify the identity of a visitor to the website, hereinafter “Personal Data or Data”.

3. What is Personal Data Processing ?

Processing of Personal Data is the collection, recording, organization, storage, adaptation, modification, alteration, retrieval, search for information, use, transmission to third parties, dissemination, association, combination, restriction, deletion and destruction of Personal Data of natural persons.

4. What Data do we collect from you?

When you visit and navigate our website:

We collect your personal data that you choose to provide to us during your browsing (e.g. by filling out the contact form on our website).

In addition, any data collected from cookies that you have consented to be used may also be processed, which are detailed in the Cookies Policy.

5. Do we process data of minors?

We do not process data concerning children under 16 years of age as our website services are not intended for them. If we find that we have collected Data of a child under 16 years of age, without a legal basis to do so, we will proceed to the immediate deletion of the data. In all other respects, the provisions set out in chapters 6 and 7 of this information document shall also apply to minors.

6. For what purpose do we process your data?

We collect your Data exclusively for the purposes of the services provided by our company, as well as for the generally smooth operation of the electronic website www.ggi.gr and in particular for a) monitoring the traffic of the website b) our communication with you on the information you provide through the contact form (https://ggi.gr/epikoinonia ) c) compliance with the obligations imposed by the applicable legislation , and d) ensuring the security of information on the website.

7. What is the legal basis for the processing of your Data by the Company?

In order to monitor traffic (purpose “a”), to communicate with you about issues for which you have used the contact form (purpose “b”), and to ensure the security of the website information (purpose “d”), the legal basis of the processing is the pursuit of our Company’s legitimate interests. More specifically, processing “a” seeks to increase the impact of our website, processing “b” seeks to maintain effective lines of communication with our customers and partners and increase their level of satisfaction, and processing “d” seeks to secure the data and intellectual property of both the Company and our website visitors.

In order to comply with the obligations imposed by the applicable legislation (purpose “c”), the legal basis of the processing is the compliance of our Company with any legal obligations.

8. Who are the recipients of your Data?

The recipients of your data are generally the necessary, in each case, the Company’s personnel, who have received the appropriate information for the secure processing of your personal data.

In addition, recipients of your data are:

• • Natural and legal persons to whom the Company entrusts the performance of specific tasks on its behalf, such as email service providers or website technical support. The associated persons, who act as performers of the processing of personal data, have been informed and committed in advance to respect the confidentiality of your data, are aware of and follow our instructions regarding the processing of personal data and take all appropriate measures to protect them.
• • Supervisory, supervisory, auditing, independent, judicial, public and/or other authorities and bodies within the scope of their statutory powers, duties and authorities, where disclosure to them is required by law or provided for therein.

9. How do we ensure that Processors respect your Personal Data?

The Performers have agreed and contractually committed to the Company:

• • process your personal data solely in accordance with our instructions and instructions,

• • maintain confidentiality,

• • not to send Data to third parties without the Company’s permission to take appropriate security measures,

• • comply with the legal framework for the protection of personal data and in particular the European GDPR Regulation.

10. Do we send your Data outside the European Union?

Your data is held and processed in Greece, and is not transferred outside the borders of the European Union.

11. When do we delete your Data?

We delete the Data you have entered in our contact form within 5 years from the registration or the last communication and/or transaction between us.

Any personal data held in the security logs of our server for information security purposes (e.g. IP) are deleted within 1 year.

We delete the Data collected by Cookies in accordance with our Cookies Policy

12. Is your Data safe?

We are committed to safeguarding your Personal Data. We have taken appropriate organizational and technical measures to ensure the security and protection of your Data from any form of accidental or unlawful processing.

We use an Electronic Security Certificate (SSL – Secure Socket Layer) to ensure the secure exchange of data between the website and your browser.

These measures shall be reviewed and amended when necessary.

13. What are your rights?

You have the right to access your personal data.

This means that you have the right to be informed by us if we process your Data. If we process your Data, you can request to be informed about the purpose of the processing, the type of your Data we hold, who we give it to, how long we store it, whether automated decision-making is carried out, and your other rights, such as rectification, erasure, restriction of processing and lodging a complaint with the Data Protection Authority.

You have the right to correct inaccurate personal data.

If you find that there is an error in your Data, you can submit a request to us to correct it (e.g. correction of your name or update of a change of telephone number).

You have the right to erasure/right to be forgotten.

You can ask us to delete your data if it is no longer necessary for the above mentioned processing purposes or you wish to withdraw your consent in case it is used as a legal basis for the processing.

You have the right to portability of your Data.

You may ask us to receive in a readable form the Data you have provided or ask us to transfer it to another controller where the processing is based on your consent or is necessary for the performance of a contract between us.

You have the right to restrict processing.

You can ask us to restrict the processing of your Data for as long as your objections to the processing are pending or if part of the processing is no longer necessary for the purposes for which your Data was collected.

You have the right to object to the processing of your Data.

You may object to the processing of your Data when it is carried out in the pursuit of our legitimate interests, and we will stop processing your Data unless there are other compelling and legitimate reasons that override your right.

Right to withdraw your consent

In cases where the processing of your data for a specific purpose is based on your prior consent to the processing, you have the right to withdraw your consent so that the processing does not continue in the future.

14. How can you enforce your rights?

To enforce your rights you can send us a request either to the Company’s postal address (99C Lavrion Avenue, 99C, P.O. 19002, Peania, Attica, Attica) to the attention of the Data Protection Coordinator (DPC), or to the e-mail address ( gdpr@ggi.gr ) with the title “Exercising the right of access/ rectification/ erasure/ portability/ restriction/ objection”, or to the online contact form (https://ggi.gr/epikoinonia ) with a description of your request and we will take care to examine it and reply to you as soon as possible.

15. When do we respond to your requests?

We will respond to your requests free of charge without delay, and in any case within (1) one month of receiving your request. However, if your request is complex or there are a large number of Requests, we will let you know within the month if we need to obtain an extension of another (2) two months within which we will respond to you.

If your Requests are manifestly unfounded or excessive, in particular due to their repetitive nature, the Company may impose a reasonable fee, taking into account the administrative costs of providing the information or performing the requested action, or refuse to follow up on the Request.

16. Right to complain

If you believe that: a) your request has not been adequately and lawfully met or b) your right to the protection of your personal data has been infringed by any processing carried out by us, you have the right to lodge a complaint with the Personal Data Protection Authority (postal address 1-3 Kifissia Street, P.K. 115 23, Athens, https://www.dpa.gr/, tel. 210 6475600, e-mail: contact@dpa.gr).

17. How will you be notified of any changes to this Policy?

We will update this Policy whenever necessary. If there are significant changes to the Policy or the way we use your Personal Data, we will notify you either by posting a notice in a prominent place before the changes take effect or by any other appropriate means. We encourage you to periodically read this Policy to know how your Data is protected.

ISO 45001:2018 aims at implementing a strict and effective level of occupational health and safety management. Health and safety in the working environment is one of the most important issues of modern work and is therefore covered by a wide range of legislative requirements.

The purpose of applying the standard is to:

• Identify, evaluate and manage all potential risks by implementing risk reduction programs (at acceptable levels) and minimizing the risks of the working environment
• Improve business performance
• Establish a responsible image in the market

G&G Innovations, regarding trading of hydraulic and electromechanical equipment as well as the development of automation projects, has the policy to act in a way that respects health and safety executive, preventing and reducing the effects of its activities and minimizing the health and safety risks of employees, associates and visitors.

Specifically, is committed to:

• Comply with all legal and other requirements relating to its activities regarding health and safety and evaluate at regular intervals the level of its compliance.
• Provide safe and healthy working conditions for the prevention of labor injuries and illnesses.
• Takes all necessary measures to prevent accidents and diseases in its workplace.
• Set aims and goals as well as programs which are systematically reviewed, by ensuring the continuous improvement of the company’s prospects, in the field of health and safety.
• Cooperate with national and local bodies which are responsible for the protection of health and safety at work.
• Ensure that the staff is aware of its responsibilities according to the recorded system of health and safety management as well as being sensitive on issues of health and safety at work.
• Communicate its policy to employees and all interested parties.

The company’s policy is achieved by the implementation of Health & Safety Management System at work which meets the demands of the standard ISO 45001.

The framework and mechanism for setting and reviewing objective aims and goals is being set in the Management’s regular reviews of the system.