We are an engineering driven construction company delivering complex infrastructure and industrial projects with precision, safety and operational reliability.
Privacy Policy
Last updated: [23/03/2026]
OFC TECHNICAL S.A. (hereinafter the “Company”, “we”, “us” or “our”) is committed to protecting your privacy and safeguarding your personal data. This Privacy Policy (the “Policy”) explains how we collect, use, store and protect personal data when you visit and use our website, www.ofctechnical.gr (the “Website”).
This Policy applies to every natural person who visits, browses or otherwise interacts with our Website and has been prepared in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), as well as the applicable Greek data protection legislation.
We reserve the right to amend or update this Policy at any time, whenever this is deemed necessary. Any such amendment shall become effective upon publication on this Website. We encourage you to review this Policy periodically in order to remain informed about how we process and protect your personal data.
1. Data Controller
The data controller responsible for the processing of your personal data is:
OFC TECHNICAL S.A.
Athens International Airport, Building 46
Spata, 19019, Greece
Telephone: +30 210 010 6726
Email: info@ofctechnical.gr
For any matter relating to the processing of your personal data or for the exercise of your rights under applicable data protection law, you may contact us at the above email address.
2. Personal Data We Collect
We may collect the following categories of personal data, depending on the way you interact with our Website.
2.1 Website Browsing Data
When you browse our Website, certain technical information may be collected automatically for technical and operational purposes, such as:
- IP address
- browser type and version
- device and operating system information
- date and time of access
- website usage and navigation data
- cookies and similar technologies
Such data is collected primarily to ensure the proper functioning, security and performance of the Website. It is not used by us to directly identify you, unless required for security, legal compliance or the establishment, exercise or defence of legal claims.
2.2 Contact Form Data
When you contact us through the contact form available on the Website, we may collect:
- full name
- email address
- telephone number
- the content of your message
- any other information you choose to include in your communication
2.3 Job Application / CV Submission Data
If you apply for a job and submit your curriculum vitae (CV) or other application documents, we may collect the personal data contained therein, including but not limited to:
- full name
- contact details
- educational background
- professional experience
- qualifications, certifications and skills
- any additional information voluntarily included in your application documents
Such data is accessible only to authorised personnel involved in the recruitment process, including the Human Resources department and any other persons strictly required for the evaluation of your application.
We kindly request that you do not include special categories of personal data in your application documents unless this is strictly necessary and lawful.
3. Purposes of Processing and Legal Bases
We process your personal data solely for the following purposes and on the following legal bases under Article 6 GDPR:
3.1 Responding to Contact Requests
We process your contact details and message content in order to respond to your inquiries, requests or communications submitted through the Website.
Legal basis: our legitimate interests under Article 6(1)(f) GDPR, namely the proper handling of communications relating to our business activities.
3.2 Reviewing Job Applications
We process the personal data contained in your CV and application materials in order to assess your suitability for employment opportunities and to manage the recruitment process.
Legal basis: taking steps at your request prior to entering into a contract, pursuant to Article 6(1)(b) GDPR.
Where required by law or where special categories of data are involved, processing shall take place only where an appropriate legal basis applies.
3.3 Ensuring Proper Website Operation and Security
We process technical and browsing-related data in order to ensure the proper functioning, security, administration and performance of the Website, and to detect, prevent or address technical issues or misuse.
Legal basis: our legitimate interests under Article 6(1)(f) GDPR.
3.4 Compliance with Legal Obligations
Where necessary, we may process personal data in order to comply with applicable legal, regulatory or judicial obligations.
Legal basis: compliance with a legal obligation under Article 6(1)(c) GDPR.
We do not process your personal data for purposes incompatible with those for which it was originally collected. We do not engage in automated decision-making, including profiling, within the meaning of Article 22 GDPR.
4. Retention Period
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.
In particular:
- Contact form data: for as long as necessary to handle and respond to your request, and for a reasonable period thereafter where required for record-keeping, follow-up or the establishment, exercise or defence of legal claims.
- Job application / CV data: for 12 months from the date of receipt.
- Technical and browsing data: for the period specified in our Cookie Policy and for as long as necessary for technical, security and operational purposes.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised, unless continued retention is required by law.
5. Data Recipients
Your personal data is not sold, leased or otherwise disclosed to third parties, except where such disclosure is necessary and lawful, including in the following cases:
- to authorised employees or internal departments of the Company, strictly on a need-to-know basis;
- to trusted third-party service providers that support the operation, hosting, maintenance, security or administration of the Website, subject to appropriate contractual and confidentiality obligations;
- to professional advisers, auditors or legal counsel, where necessary;
- to competent public, regulatory, judicial or law enforcement authorities, where required by applicable law, court order or other legally binding request.
All third-party processors acting on our behalf are required to process personal data only in accordance with our instructions and in compliance with applicable data protection law.
6. International Data Transfers
As a rule, we do not transfer your personal data to countries outside the European Union (“EU”) or the European Economic Area (“EEA”).
Should such a transfer become necessary in the future, it will take place only in accordance with the GDPR and subject to appropriate safeguards, such as an adequacy decision of the European Commission or the execution of Standard Contractual Clauses, where applicable.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, misuse or any other unlawful form of processing.
Such measures include, where appropriate:
- SSL/TLS encryption for secure data transmission;
- access controls and authorisation mechanisms;
- confidentiality obligations for authorised personnel;
- security monitoring and technical safeguards designed to protect the Website and related systems.
Although we take all reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage can be guaranteed to be completely secure. Therefore, while we strive to use commercially reasonable means to protect your data, we cannot guarantee absolute security.
8. Cookies
Our Website uses cookies and similar technologies in order to improve user experience, ensure proper functionality and, where applicable, analyse Website usage.
When you first visit our Website, you may be asked to accept, reject or manage the use of non-essential cookies through the relevant cookie banner or settings tool.
For more information regarding the categories of cookies we use, their purpose, duration and the way you may manage your preferences, please refer to our Cookie Policy.
9. Your Rights
Subject to the conditions and limitations set out in applicable law, you have the following rights in relation to your personal data:
- Right of access: to obtain confirmation as to whether we process your personal data and, if so, to receive a copy thereof;
- Right to rectification: to request the correction of inaccurate personal data and the completion of incomplete data;
- Right to erasure: to request the deletion of your personal data where the legal requirements are met;
- Right to restriction of processing: to request the restriction of processing in certain cases;
- Right to data portability: to receive your personal data in a structured, commonly used and machine-readable format and/or request its transmission to another controller, where applicable;
- Right to object: to object, on grounds relating to your particular situation, to processing based on our legitimate interests;
- Right to withdraw consent: where processing is based on your consent, to withdraw such consent at any time, without affecting the lawfulness of processing carried out before such withdrawal.
To exercise any of the above rights, please contact us at info@ofctechnical.gr.
We will review and respond to your request within the timeframe required by applicable law, and in any event within one month from receipt of your request, unless an extension is permitted by law due to complexity or volume of requests.
10. Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.
In Greece, the competent authority is the:
Hellenic Data Protection Authority (HDPA)
Website: www.dpa.gr
We would, however, appreciate the opportunity to address your concerns first, and therefore encourage you to contact us before submitting a complaint to the supervisory authority.
11. Third-Party Websites
Our Website may contain links to third-party websites or services for your convenience or information. We are not responsible for the privacy practices, content or security of such third-party websites. We encourage you to review the privacy policies of any external websites you visit.
12. Applicable Law and Jurisdiction
This Policy shall be governed by and construed in accordance with Greek law, the GDPR and any other applicable data protection legislation.
Any dispute arising out of or in connection with this Policy shall be subject to the jurisdiction of the competent courts of Athens, Greece, without prejudice to any mandatory rights you may have under applicable law.
13. Contact
If you have any questions, comments or requests concerning this Privacy Policy or the way in which we process your personal data, please contact us at:
OFC TECHNICAL S.A.
Athens International Airport, Building 46
Spata, 19019, Greece
Email: info@ofctechnical.gr
Telephone: +30 210 010 6726
