The Central Union of Chambers of Greece (hereinafter: KEE), a legal entity under public law, established by Article 5 of Law 2081/1992 (AD 154), based in Athens (Akadimias, no. 6) and has as members of all the Chambers of the country, informs hereby in accordance with the provisions of Regulation (EU) 2016/679 (General Regulation on Data Protection, hereinafter GCC) and the provisions of national legislation on personal data protection (Law 4624 / 2019), in the capacity of Responsible Processing (according to article 87, par. 1 n of law 4635/2019), that it processes personal data within the framework of its responsibilities in order to fulfill its mission. This data protection policy concerns the processing of personal data within the YMS - One Stop Service (eyms.businessportal.gr), ie the digital platform on which the interested party sets up his company himself, without the need to visit any public service (instituted by article 8 of law 4441/2016)

1. What personal data does KEE collect and process?
   In the context of the operation of the YMS - One Stop Service (hereinafter: e-YMS) the KEE processes personal data either for your entry into the e-YMS, or personal data that will be subject to processing and publicity based on current legislation , in particular based on the provisions of Law 3419/2005 and Articles 85 to 116 of Law 4635/2019 on GEMI, of the General Regulation on Data Protection (Regulation [EU] 2016/679), of Law 4624/2019, of law 4548/2018 on the reform of the law of public limited companies, law 3190/1955 on limited liability companies, articles 43-120 & 130 of law 4072/2012 on IKE and articles 249-294 of law 4072/2012 on private companies, as the above legislation has been amended and is in force.
   Specifically, this personal data is below :
   1. Basic information: name, surname, father's name, mother's name, mother's surname, spouse's name, spouse's surname, date of birth, place of birth, citizenship, profession, full address (municipality, street, number, city, region, PC) , telephone, mobile, fax, e-mail, country, signing of articles of association (obtaining members' consent for the correctness and accuracy of the data according to article 8, par. 2.d of Law 4441/2016), signature (electronic or by entering taxisnet)
   2. Unique IDs: VAT number, ID number, issuing authority, date of issue, passport number, issuing passport authority, passport issue date, expiration date, residence permit number, issuing authority, license issuance date, license expiration date, license number residence permit for independent economic activity, licensing authority, license issuance date, license expiration date, AMKA, insurance company, first year of insurance
   3. Financial data: type of shares, number of shares, nominal value of shares in euros
   4. Financial data: Tax Office, total contributions, payment amount, method of payment
   5. Data related to the participation of the natural person in the company: participation in the share capital, membership, type of membership, representation and commitment, term of office in the Board of Directors, category and type of relationship.
2. Purposes of processing and legal basis for processing personal data
   The purposes of processing personal data through e-YMS are the following:
   - Login to the eyms.businessportal.gr platform,
   - Actions for the establishment of a new company (legal forms: Ο.Ε., Ε.Ε., Ε.Π.Ε., Α.Ε., Ι.Κ.Ε.),
   - Pre-registration and commitment of a Name in GEMI - Register,
   - Payment of company incorporation fees,
   - Registration in GEMI - Register (obtaining GEMI number and company formation),
   - Registration of the company in the Tax Register of AADE and return of TIN,
   - Registration of the company in the competent Chamber.
   All the above processing purposes are based on the legal basis of the public interest or the exercise of public authority (article 6.1 e GKPD) which has been assigned to the KEE as a Chamber Authority.
3. How and why personal data is extracted
   KEE collects data from you directly through electronic data entry on the e-YMS platform, from GEMI through the connection of the e-YMS platform with the platform www.businessregistry.gr and from AADE through the connection of the e-YMS platform with the Taxisnet platform.
4. Transfer of personal data
   KEE transmits the above data to third parties only when this is provided by the existing legislation as its obligation, ie to MOD SA. for the keeping of a backup copy and in accordance with the guarantees provided in the existing legislation and the highest possible level of security, ie in the company Knowledge Broadband Services SA, which is responsible for the technical implementation of the e-YMS.
   Recipients of your personal data may be the respective Chambers, AADE, Piraeus Bank and the GEMI Register. In addition, it is emphasized that your personal data is not transmitted to bodies located within the European Economic Area.
5. Data Security
   The security of your personal data is a high priority for KEE. Therefore, KEE protects your data through technical and organizational measures to secure it and protect it from any form of accidental or improper processing. It is emphasized that the employees of KEE, who process personal data, are committed to maintaining confidentiality. The measures taken shall be reviewed and amended as necessary.
6. Data storage duration
   Your personal data is kept only for the period required to fulfill the purpose for which it has been processed, unless a different retention period is provided or permitted by applicable law.
7. Your rights
   KEE protects and secures your rights regarding the use of your personal data and in particular you have the following rights:
   1. right of access to your personal data,
   2. right to correct your personal data,
   3. right to restrict the processing of your personal data (a) when you dispute the accuracy of your personal data and until it is verified (b) when you object to the deletion of personal data but do not wish to delete it, (c) when your personal data are necessary for the purposes of the processing, however they are necessary for the establishment, exercise, support of legal claims, and (d) when you object to the processing and until it is verified that there are legitimate reasons that concern us and prevail over the reasons why you oppose the processing .
   4. right of portability of your personal data to another Processor,
   5. right to object to the processing of your personal data,
   6. right to delete your personal data (note when if it is impossible to delete them to meet regulatory obligations, the JSB will inform you accordingly)
      You can exercise your rights by request at the following address: gemi@uhc.gr
      KEE's response to your request will take place within the statutory deadline of one (1) month from its receipt. If you need an extension of two (2) months to respond to your request, due to its complexity or due to the large number of requests, KEE will inform you with reasons as soon as possible.
      If you do not have an answer to your request you have the right to file a complaint to the Personal Data Protection Authority (postal address 1-3 Kifissias, PC 115 23, Athens, tel. 210. 6475600, e-mail address (e-mail: contact@dpa.gr).
8. Automated decision making and profiling
   The JSB does not make decisions solely on the basis of automated processing of personal data, nor in the compilation of profiles, as defined in Article 22 of the GCC.
9. Modifications to this Privacy Policy
   KEE may modify this Privacy Policy, when deemed necessary for reasons of compliance with legislative / regulatory changes, for chamber purposes or in order to meet the needs of its members.
   
   Publication Date: 10/10/2021