PRIVACY POLICY

Effective date: 2 July 2026

1. Introduction

This Privacy Policy explains how we collect, use and protect personal data when you visit our website and when you interact with us in the context of our HR development, recruitment and related services.
Please read it carefully to understand our practices regarding your personal data and how we will treat it.

By using our website or otherwise providing personal data to us, you acknowledge that you have read this Privacy Policy.

2. Who we are and how to contact us

HRCM MON IKE, with registered address at Mavragani 5, Papagou, Greece, is the data controller responsible for the processing of personal data described in this Privacy Policy.

If you have any questions about this Privacy Policy or about how we handle your personal data, you can contact us at:

Email: info@hrcm.gr
Telephone: +30 6974012207
Postal address: HRCM MON IKE, Mavragani 5, Papagou, Greece

If we appoint a Data Protection Officer (DPO) or other dedicated privacy contact, their details will be published here.

3. Scope of this Privacy Policy

This Privacy Policy applies to:

Visitors to our website www.hrcm.gr (and any sub‑domains);
Individuals who contact us via online forms, email, telephone or social media;
Candidates who submit CVs or other application information to us;
Representatives and employees of our clients, suppliers and business partners.

It does not apply to websites, applications or services that are operated by third parties, even if we link to them or they link to us.

4. Personal data we collect

The personal data we collect depends on the relationship we have with you and the context in which we obtain the data.

4.1 Website visitors

When you visit our website, we may collect:

Technical information such as IP address, browser type and version, device identifiers, operating system, time zone setting and language;
Information about your visit, including pages viewed, clickstream data, access times and referring website addresses;
Cookie and similar tracking information (see “Cookies and similar technologies” below).

4.2 Candidates

When you apply for a role, submit your CV or otherwise express interest in opportunities with us or with our clients, we may collect:

Identification and contact details (e.g. name, email address, telephone number, address);
CV and application data (e.g. education, professional qualifications, employment history, skills, languages, references, salary expectations);
Information provided during interviews, assessments or tests;
Any other information you choose to share with us as part of your application (e.g. LinkedIn profile, portfolio, cover letter).

In some cases we may process special categories of personal data where this is relevant and lawful (for example, information about disabilities for the purposes of making reasonable adjustments). Where required by law, we will ask for your explicit consent before processing such information.

4.3 Clients, suppliers and partners

If you are a representative, employee or contact person of a client, supplier or other business partner, we may process:

Identification and contact details (name, position, business email, telephone number);
Information about your organisation and our relationship with it (e.g. contracts, communications, invoices, project details);
Any correspondence and interactions between us.

5. How we collect personal data

We collect personal data in various ways, including:

Directly from you, when you fill in forms on our website, send us emails, contact us by phone, meet us at events or send us your CV or other documents;
From third parties, such as recruitment platforms, job boards, social networks (e.g. LinkedIn) or references, where this is lawful and appropriate;
Automatically, when you use our website, through cookies, server logs and similar technologies.

6. Purposes and legal bases for processing

We process personal data only when we have a lawful basis to do so. Depending on the specific situation, we may process personal data for the following purposes and based on the following legal grounds:

6.1 Recruitment and staffing

To receive, review and manage job applications;
To assess your suitability for current and future roles;
To communicate with you about the recruitment process;
To maintain a pool of candidates for future opportunities, where appropriate.

Legal bases:

Taking steps at your request prior to entering into a contract;
Our legitimate interests in recruiting and selecting suitable candidates;
Your consent, where required by law (for example, for keeping your CV for a longer period or processing certain special categories of data).

6.2 HR consulting and client services

To provide HR development, consulting, staffing and related services to our clients;
To manage our relationships with clients and partners, including communication and project administration;
To comply with contractual obligations.

Legal bases:

Performance of a contract or taking steps prior to entering into a contract;
Our legitimate interests in running and developing our business;
Compliance with legal obligations (e.g. tax and accounting rules).

6.3 Website operation and improvement

To operate, maintain and improve our website and services;
To monitor usage and performance, and to generate aggregated statistics;
To ensure the security of our systems and detect, prevent or investigate fraud or other misuse.

Legal bases:

Our legitimate interests in operating secure, efficient services and understanding how our website is used;
Compliance with legal obligations related to information security.

6.4 Marketing and communications

To send you information about our services, events and updates that may be of interest to you;
To manage your subscriptions and marketing preferences.

Legal bases:

Your consent, where required (for example, for electronic direct marketing in certain cases);
Our legitimate interests in promoting and developing our business, where consent is not required and subject to your right to opt out at any time.

7. Who we share personal data with

We may share personal data with:

Client companies for whom we are recruiting, when it is necessary to present candidate profiles or CVs;
Service providers who support our operations (for example, IT hosting and maintenance, email and communication tools, recruitment and HR software, professional advisers such as lawyers or accountants);
Public authorities, regulators, law enforcement or courts, where we are legally obliged to do so or where this is necessary to protect our rights or the rights of others;
Successors in the event of a merger, acquisition, reorganisation or similar corporate transaction, to the extent permitted by law.

All service providers that process personal data on our behalf are bound by contractual obligations to keep personal data confidential, to use it only for the specified purposes and to implement appropriate technical and organisational security measures.

8. International data transfers

Some of our service providers or client companies may be located outside the European Economic Area (EEA). In such cases, when personal data is transferred to a country that does not provide an equivalent level of data protection, we will ensure that appropriate safeguards are in place, such as:

An adequacy decision by the European Commission in respect of the destination country; and/or
Standard contractual clauses approved by the European Commission or other applicable safeguards.

You can contact us for more information about international transfers and the safeguards we use.

9. Data retention

We keep personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable laws and regulations.

In particular:

Candidate data: we usually retain candidate data for up to 2 years after the end of the recruitment process, in order to consider you for future opportunities, unless you request earlier deletion or object to such processing.
Client and partner data: we keep business contact data for the duration of the relationship and for a period thereafter as necessary for contract management, accounting, tax and legal purposes.
Website data: technical logs and analytics data are retained for periods that are appropriate to the purposes for which they are used, usually not exceeding 14 months, unless a longer retention is required by law or necessary to resolve disputes or enforce our agreements.

When personal data is no longer required, we will delete or anonymise it in a secure manner.

10. Cookies and similar technologies

Our website uses cookies and similar technologies to make the site work properly, to improve performance and to understand how visitors use the site.
Where required by law, we will ask for your consent before setting non‑essential cookies (such as analytics or marketing cookies). You can manage your cookie preferences at any time through the cookie banner or your browser settings.

For more detailed information about the cookies we use, the purposes for which we use them and how long they are stored, please refer to our separate Cookie Policy, which is available on our website.

11. Your data protection rights

Under applicable data protection law, including the General Data Protection Regulation (GDPR), you may have the following rights in relation to your personal data:

Right of access – to obtain confirmation as to whether we process personal data about you and, if so, to receive a copy and certain information about the processing;
Right to rectification – to have incomplete or inaccurate personal data corrected;
Right to erasure – to request deletion of your personal data in certain circumstances;
Right to restriction of processing – to request that we restrict the processing of your personal data in certain situations;
Right to data portability – to receive personal data you have provided to us in a structured, commonly used and machine‑readable format and to transmit it to another controller where technically feasible;
Right to object – to object, on grounds relating to your particular situation, to our processing of your personal data that is based on our legitimate interests, including profiling, and to object at any time to the processing of your personal data for direct marketing purposes;
Right to withdraw consent – where we rely on your consent, you may withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us using the contact details provided above. We may need to verify your identity before we can act on your request.

You also have the right to lodge a complaint with the competent data protection authority. In Greece, this is the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), located at Kifisias 1–3, 115 23 Athens, Greece, telephone +30 210 6475600, email complaints@dpa.gr, website https://www.dpa.gr.

12. Security of personal data

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include, for example, access controls, secure networks and servers, encryption in transit where appropriate, regular updates and staff confidentiality obligations.

While we do our best to protect personal data, no system can be completely secure. If you believe that your personal data has been compromised, please contact us immediately using the contact details above.

13. Third‑party websites and social media

Our website may contain links to third‑party websites, plug‑ins or applications (for example LinkedIn, Instagram or other platforms). Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third‑party websites and are not responsible for their privacy practices.

We encourage you to read the privacy policies of every website and platform you visit or use.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements or other factors.
When we make changes, we will post the updated version on our website and revise the “Effective date” at the top. We encourage you to review this page periodically to stay informed about how we process your personal data.

15. How to contact us

If you have any questions, comments or requests regarding this Privacy Policy or our processing of personal data, please contact us at:

HRCM MON IKE
Mavragani 5, Papagou,

Athens, Greece, TK. 15669
Email: info@hrcm.gr
Telephone: +30 6974012207

VAT: EL 802711932