When you contact us, we may process your first and last name, email address, telephone number, the company you represent, the service in which you are interested and the content of your message. We use this information to manage and respond to your request and to take steps prior to entering into a potential business relationship.

Depending on the nature of your request, the lawful basis for processing is taking steps at your request prior to entering into a contract, performing a contract or our legitimate interest in managing communications and business relationships.

When you submit a curriculum vitae, we process your contact details, education, skills, professional experience and any other information you choose to include. We use this information to assess your application and communicate with you as part of a recruitment process. The lawful basis is taking steps at your request prior to entering into an employment contract and, where required, your consent.

In the context of our business relationships, we may process identification and contact details, professional information, billing details and financial or tax information. This processing is necessary for the performance of contracts, compliance with legal obligations and the pursuit of our legitimate interests.

When you visit our website, technical information may be recorded, including your IP address, device and browser type, date and time of access, pages visited and technical log data. Strictly necessary information is used to ensure the secure and proper operation of the website. Analytics data is collected only where you have provided the relevant consent through the cookie preference mechanism.

The contact form is protected by a mechanism designed to prevent automated submissions. Further information about cookies, related technologies and your choices is provided in the website’s Cookie Policy.

Access to personal data is limited to authorised Omniworks personnel to the extent necessary for the performance of their duties. Where necessary, personal data may also be disclosed to:

• providers of website hosting, information technology, email, security and technical support services;
• accountants, legal advisers and other professional advisers who are subject to confidentiality obligations;
• customers or business partners, where disclosure is necessary for the performance of a contract and appropriate information has been provided in advance; and
• public, supervisory, tax, judicial or other competent authorities, where required by law.

Service providers that process personal data on our behalf are contractually required to act only on our instructions and to implement appropriate safeguards.

Certain technology service providers may process personal data outside the European Economic Area. Where this occurs, we use the safeguards provided for by applicable law, such as a European Commission adequacy decision or approved Standard Contractual Clauses, as appropriate.

We retain personal data only for as long as necessary for the purposes for which it was collected and for any period required by law. In particular:

• general correspondence is retained until the request has been resolved and for a reasonable period of up to twelve months thereafter, unless a business relationship follows or a longer retention period is lawfully required;
• applicant data is retained for the duration of the recruitment process and, with consent for consideration for future vacancies, for up to twelve months;
• contractual, tax and accounting records are retained for the periods prescribed by applicable legislation; and
• technical logs are retained for a limited period, based on security and incident investigation requirements.

Depending on the circumstances, we process personal data because:

• processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract;
• we are required to comply with a legal obligation;
• we have a legitimate interest that is not overridden by the rights and freedoms of the data subject; or
• you have provided consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before its withdrawal.

Subject to the conditions set out in the GDPR, you have the right to:

• access your personal data and obtain information about its processing;
• rectify inaccurate data or complete incomplete data;
• request erasure of your personal data;
• restrict the processing of your personal data;
• object to processing based on legitimate interests;
• data portability, where applicable; and
• withdraw your consent at any time.

To exercise any of these rights, please contact us at This email address is being protected from spambots. You need JavaScript enabled to view it.. We may request additional information solely to verify your identity. We will respond without undue delay and, as a rule, within one month, in accordance with applicable law.

If you believe that the processing of your personal data infringes applicable law, you may lodge a complaint with the Hellenic Data Protection Authority, 1-3 Kifissias Avenue, 115 23 Athens, Greece, telephone +30 210 647 5600, email This email address is being protected from spambots. You need JavaScript enabled to view it., website www.dpa.gr.

We implement appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration, disclosure or destruction. These measures are reviewed in light of the relevant risks, technological developments and business needs.

We do not make decisions that produce legal effects or similarly significantly affect you based solely on automated processing, including profiling.