English Greek
Home E-mail Sitemap Print

Privacy Policy

ORCO S.A. is committed to respecting your privacy and protecting your personal information by complying with the applicable laws and regulations. For this reason, we have developed a policy which describes all measures taken for compliance with the EU General Data Protection Regulation (GDPR).

This policy covers all types of personal data, including the personal data of personnel and business contacts, the personal data of our suppliers and subcontractors, as well as the personal data contained in materials provided to us by our customers for the purposes of providing the requested services.

For information on GDPR and EU Data Protection Rules, please visit here.


Our principles

Our policy is based on the following principles:

  • We are transparent about the information we collect and what we do with it.
  • We use the information only for predetermined purposes and with your best interests in mind.
  • We avoid unnecessary collection, processing and storage of personal data.
  • All personal data is confidential.
  • We have put in place measures to protect the information and keep it secure such as IT and organizational policies.
  • We respect your data protection rights and you have control over your own information.
  • We process personal information within the scope permitted by GDPR.


What type of data we collect and from which sources?

We collect information about you when you contact us for products or services, when you use our products or services or when we use your products or services.  We may also collect personal data from public sources and registers (such as professional associations), social media channels and networking services (such as Twitter, LinkedIn, Proz.com etc.).  In general, we only process personal data related to our customers or potential customers, subcontractors or suppliers, employees and job applicants. Types of personal data may include basic information about you, including name, address, contact details, job function, information necessary for payments, information necessary to fulfil rights and obligations related to our business relationship.

In addition, we may process documents which contain personal data as part of the service requested by our customers. In such cases, we have in place data processing agreements with both customers and subcontractors which dictate the policies, responsibilities and obligations of all parties, concerning the processing of documents which contain personal data.


Key purposes and legal basis of processing personal data

Our operations and services require the collection and processing of personal data.  We use the information you give us to carry out our obligations arising from any contracts between you and us and to provide you with the information on products and services that you request from us.

We process your information based on the applicable laws, concluded agreements and consents for the following purposes:

  • Provision of services and customer relationship management (service/product delivery, invoicing, support, customer satisfaction, etc.)
  • Communication and marketing for products or services (based on your agreement)
  • Management of human resources, namely employees, job applicants, external subcontractors, trainees (contracts, payments, evaluations, etc.)
  • Legal obligations (such as for accounting purposes, for tax or social security authorities)

Based on the above, the legal bases of processing your personal data are:

  • To fulfill a contract between us (customer, subcontractor, employee)
  • To comply with a legal obligation
  • In relation to sending marketing communications to you where you have agreed to receive it
  • Where it is necessary for our legitimate interests including evaluating and improving our services
  • To contact you about potential work or a job offering or with a business collaboration proposal, where you have agreed


Who has access to your personal data?

Your personal data is processed by ORCO’s employees as part of their work.

We may share your personal information with third parties such as:

  • Tax authorities, social security services, courts, to comply with any legal obligation
  • Entities providing financial, accounting and tax services, payment services (such as banks, PayPal), audit and control services, legal services
  • Business partners, suppliers, and subcontractors for the performance of any contract we enter into with them


Transfer of data to non-EU countries

As a rule, your personal data will not be transferred outside the EEA.  If under special circumstances your data is transferred outside the EEA, we ensure that it will have an adequate level of data protection.


How long do we keep your personal data?

Unless otherwise required by law, we will store your personal data as long as it is necessary in relation to the purpose for which it is collected.  We will erase your data if you withdraw your consent and there is no other legal ground for processing or if you object to the processing and there are no overriding legitimate grounds for the processing.


How do we protect your data?

Your personal data is mainly stored in electronic format and we have taken reasonable precautions to protect them based on general practices.  The personal data we collect is kept confidential and access is restricted to the people or subcontractors that have a business need for such access.  Access to personal data is protected by means of various IT security and administration policies, such as passwords and access rights.


Do you need to provide personal data?

Providing us with your personal data is voluntary but necessary to meet the purpose of our operations or to conclude a contract with you.


What are your rights regarding your personal data?

You have the right to access the content of your personal data, to correct or update it, to limit its processing, to ask for deletion.  If data processing is based on your consent, you have the right to withdraw consent at any time. 

Any requests related to the above rights can be made by sending an email to gdpr@orco.gr.

If you feel that the processing of your personal data violates the General Data Protection Regulation, you can lodge a complaint with a supervisory authority.


Updating our Privacy Policy

We may update this policy as our operations develop or amendments are made to the laws. Any changes will be posted on our website.  This Privacy Policy was last updated on June 6, 2018. 


Contact information


6, Vasilissis Sofias Avenue

10674 Athens, Greece

Company Registration Number 0002244101000


For any inquiry regarding our privacy policy or the processing of your personal data you may contact us by email at gdpr@orco.gr, by phone at +30 210 7236001, or by writing to us using the above address.



  • Plunet BusinessManager - Business und Translation Management System