Mandatory privacy policy under the GDPR (Regulation (EU) 2016/679) and its Greek implementing statute Ν.4624/2019 — covers purposes, legal bases, recipients, retention, data-subject rights and the contact point for exercising them, plus cookies.
⚠️ This is a blank template, not legal advice: check the wording with a lawyer and adapt it to your jurisdiction and your case.
This template has no optional clauses: the text is the same for everyone. Field placeholders are shown as labels — on the site the template is read-only, values are entered inside the system.
PRIVACY POLICY (ΠΟΛΙΤΙΚΗ ΑΠΟΡΡΗΤΟΥ) (GDPR — Regulation (EU) 2016/679, as implemented by Ν.4624/2019)
Data controller name (ΑΦΜ Controller ΑΦΜ (Tax ID)), Controller address Effective date: Effective date
1. DATA CONTROLLER 1.1. Data controller name is the data controller for the personal data described below. 1.2. Data-protection contact / DPO, if appointed: Data-protection contact / DPO, if appointed
2. PURPOSES AND LEGAL BASES 2.1. Purposes and legal bases of processing
3. RECIPIENTS AND PROCESSORS 3.1. Recipients and processors
4. RETENTION 4.1. Retention periods
5. RIGHTS OF THE DATA SUBJECT 5.1. Data subject rights and contact 5.2. Includes the right to lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα — ΑΠΔΠΧ).
6. COOKIES 6.1. Cookies policy
— — — ⚠️ This is a boilerplate template, not legal advice. Greek employment, data-protection and consumer-protection law (Π.Δ. 156/1994 and Ν.5053/2023 on written employment terms; Π.Δ. 81/2003 on fixed-term contract chains; Ν.4093/2012 and Ν.4808/2021 on severance; Ν.3850/2010 on occupational risk assessment; the GDPR/Regulation (EU) 2016/679 and Ν.4624/2019; Regulation (EU) 1169/2011 on allergens; Regulation (EC) 852/2004 on HACCP; Ν.2251/1994 on consumer protection; and Ν.1652/1986 on hotel-guest relations) is highly procedural, tied to fixed statutory deadlines administered through the ΕΡΓΑΝΗ II platform (Ε3 hiring BEFORE the first day, Ε5/Ε6 within 4 working days, Ε8 overtime BEFORE it happens, Ε9 within 8 days, Ε11 in the January-March window) and to the ψηφιακή κάρτα εργασίας (digital work-time card, mandatory for HoReCa since 01.03.2025, fined up to €10,500 per employee per inactive shift) — and it changes frequently, including the 2026 minimum wage increase to €920 gross/month (01.04.2026) and further digital-work-card rollout waves planned for 2026. Have this document reviewed and adapted by a Greek employment/legal advisor (δικηγόρος) or accountant (λογιστής) and verified against current ΣΕΠΕ (Labour Inspectorate), ΕΦΕΤ, ΑΠΔΠΧ and ΑΑΔΕ thresholds and guidance before use.
Fields that belong to a switched-off clause are dimmed — they are not asked for.
1 of 10 fields are taken from the company, employee or counterparty record, the questionnaire can be dictated to the AI, and the finished document comes with a number, a PDF and an acknowledgement record.