Privacy policy

With the following information we would like to inform you about the processing of your personal
data by us and your rights resulting from the data protection laws and especially from the general
data protection regulation (regulation (EU) 2016/679 - "GDPR").

Table of contents

1 Controller and data protection officer .......................................................................... 2
Controller in accordance with Art. 4 VII GDPR is: ....................................................................... 2
If you have any questions concerning data protection, you are welcome to contact our company
data protection officer: ................................................................................................ 2
2 What are my rights as a data subject? .......................................................................... 3
3 General information regarding the topic „purposes“..................................................... 5
4 General information regarding the topic „legal bases“ .................................................. 5
4.1 Legal bases for the processing of personal data........................................................... 5
4.2 Legal bases for the processing of special categories of personal data .......................... 6
5 General information regarding the topic „obligation to preserve records and time
limits of erasure“ .......................................................................................................... 8
6 General information regarding the topic „disclosure of personal data“ ......................... 8
7 In the context of which processing activities are my personal data processed? ............ 9
7.1 Processing activity – … ................................................................................................. 9
Konica Minolta Business Solutions Europe GmbH, Europaallee 17, 30855 Langenhagen, Germany
www.konicaminolta.eu

1 Controller and data protection officer

Controller in accordance with Art. 4 VII GDPR is:
Konica Minolta Business Solutions Greece Singlemember SA
Mesologgiou 3, 14451, Metamorfosi, Attiki, Greece
Tel.: +30 210 2896 600
Email: info@konicaminolta.com.gr
(See our Imprint)
If you have any questions concerning data protection, you are welcome to contact our
company data protection officer:
Dr. Frederike Rehker
Konica Minolta Business Solutions Europe GmbH
Europaallee 17, 30855 Langenhagen
Tel.: +49 (0)511 7404-0
Email: dataprotection@konicaminolta.com.gr
Konica Minolta Business Solutions Europe GmbH, Europaallee 17, 30855 Langenhagen, Germany
www.konicaminolta.eu
2 What are my rights as a data subject?
As a data subject, you have the following rights:
2.1 Right of access (Art. 15 GDPR): You have the right to be informed at any time of the
categories of personal data processed, the purposes of processing, any recipients or
categories of recipients of your personal data and the planned storage period.
2.2 Right of rectification (Art. 16 GDPR): You have the right to request the rectification or
completion of personal data concerning you that is incorrect or incomplete.
2.3 Right to erasure („right to be forgotten“) (Art. 17 GDPR): You have the right to request the
immediate erasure of your personal data. In particular, we are obliged as the controller to
delete your data in the following cases:
 Your personal data is no longer needed for the purposes for which it was collected.
 A processing of your personal data took place solely on the basis of your consent,
which you have now withdrawn, and there is no other legal basis that legitimises a
processing of your personal data.
 You have objected to a processing which is based on the legitimate or public interest
and we cannot prove that there are legitimate grounds for processing.
 Your personal data has been processed unlawfully.
 The erasure of your personal data is necessary in order to comply with a legal
obligation to which we are subject.
 Your personal data has been collected in connection with information society services
offered in accordance with Art. 8 I GDPR.
Please be aware that the right to erasure is subject to a limitation in the following cases, so
that a deletion is excluded:
 Your personal data is used to exercise the right to freedom of expression and
information.
 Your personal data serves to fulfil a legal obligation to which we are subject.
 Your personal data is used to carry out a task that is in the public interest or in the
exercise of official authority that has been assigned to us.
 Your personal data serves the public interest in the field of public health.
 Your personal data are necessary for archiving purposes in the public interest, for
scientific or historical research or for statistical purposes.
 Your personal data serve for us to establish, exercise or defend legal claims.
Konica Minolta Business Solutions Europe GmbH, Europaallee 17, 30855 Langenhagen, Germany
www.konicaminolta.eu
2.4 Right of restriction of processing (Art. 18 GDPR): You also have the right to request that
the processing of your personal data be restricted; in such a case, your personal data will be
excluded from any processing. This right applies if:
 You contest the accuracy of your personal data and we have to verify the accuracy of
your personal data.
 The processing of your personal data is unlawful and instead of erasing your personal
data, you request a restriction of processing.
 We no longer need your personal data for the fulfilment of the specific purposes, but
you still need this personal data to establish, exercise or defend legal claims.
 You object to the processing of your personal data and it has not yet been determined
whether your or our legitimate reasons override this.
2.5 Right of data portability (Art. 20 GDPR): You have the right to receive the personal data
concerning you that you have provided to us as a controller in a structured, common and
machine-readable format and to transfer it to another controller. Furthermore, you also have
the right to request that your personal data be transferred from us to another controller,
insofar as this is technically feasible.
The requirements for the applicability of data portability are:
 Your personal data is automatically processed based on your consent or a contract.
 Your personal data does not serve to fulfil a legal obligation to which we are subject.
 Your personal data will not be used to perform a task that is in the public interest.
 Your personal data do not serve for the performance of a task which is performed in
the exercise of a official authority delegated to us.
 The exercise of your right shall not interfere with the rights and freedoms of others.
2.6 Right to object (Art. 21 GDPR): You have the right at any time to object to the processing
of your personal data on grounds arising from your particular situation. This also applies to
profiling. The requirement for this is that the processing is based on a legitimate interest on
our part (Art. 6 I 1 lit. f GDPR) or the public interest (Art. 6 I 1 lit. e GDPR).
Furthermore, you may also at any time object to the processing of your personal data for the
purposes of direct marketing or profiling linked to such direct marketing.
Should you object to the processing of your personal data based on a legitimate interest, we
will check in each individual case whether we can show grounds worthy of protection that
override your interests and rights and freedoms. In the event that there are no reasons worthy
of protection on our part or your interests as well as rights and freedoms override our own,
your personal data will no longer be processed. An exception is made if your personal data is
still used for the establishment, exercise or defence of legal claims.
Konica Minolta Business Solutions Europe GmbH, Europaallee 17, 30855 Langenhagen, Germany
www.konicaminolta.eu
If you object to the processing of your personal data for the purposes of direct marketing or
profiling, insofar as this is linked to such direct marketing, your personal data will no longer
be processed for these purposes.
2.7 Right to lodge a complaint with the supervisory authority (Art. 77 GDPR): You also have
the right to lodge a complaint with a supervisory authority at any time, in particular with a
supervisory authority in the Member State of your residence, place of work or place of
suspected infringement, if you consider that the processing of personal data concerning you
is in breach of the data protection regulations.
The address of the supervisory authority responsible for our company is:
Hellenic Data Protection Authority
Kifissias 1-3, PC 11523, Athens, Greece
Telephone: +30 210 64 75 600
Email: contact@dpa.gr
2.8 Right of withdrawal (Art. 7 GDPR): If you have given us consent to process your personal
data, you can withdraw this consent at any time without giving reasons and in an informal
manner. Withdrawal of consent does not affect the lawfulness of the processing that has
taken place on the basis of the consent up to the point of withdrawal.
3 General information regarding the topic „purposes“
As a matter of principle, the processing of your personal data by us is always linked to a
specified, explicit and legitimate purpose, which has already been defined before the
processing activity is commenced, in accordance with the principle of purpose limitation under
Art. 5 I lit. b GDPR. In the further course of this privacy policy, when a processing activity is
cited, a description of the specific purpose is also included.
4 General information regarding the topic „legal bases“
We process your personal data in accordance with the GDPR. Accordingly, the processing of
your personal data is always founded on a legal basis. Article 6 of the GDPR defines legal bases
for the processing of personal data.
4.1 Legal bases for the processing of personal data
Consent
Konica Mi nolta Business Solutions Europe GmbH, Europaallee 17, 30855 Langenhagen, Germany
www.konicaminolta.eu
If we obtain your consent for the processing of your personal data, the processing will be
carried out on the legal basis of Art. 6 I 1 lit. a GDPR. The following example serves to clarify
this legal basis: You receive advertising from us by electronic mail and/or telephone and have
given your prior consent.
Contract or pre-contractual measure
If the processing of your personal data is necessary for the fulfilment of a contract with you
or for the implementation of pre-contractual measures taken in response to your request, the
legal basis on which the processing of your personal data is based is Art. 6 I 1 lit. b GDPR.
Legal obligation
In cases where the processing of your personal data is necessary to comply with a legal
obligation to which we are subject, this processing is based on Art. 6 I 1 lit. c GDPR.
Vital interest
Should the processing of your personal data be necessary to protect your vital interests or
those of another person, this processing is carried out in accordance with Art. 6 I 1 lit. d GDPR.
Public interest
In cases where we process your personal data in order to perform a task which is in the public
interest or in the exercise of official authority delegated to us, Art. 6 I 1 lit. e GDPR constitutes
the legal basis.
Legitimate interest
If the processing of personal data is necessary to safeguard a legitimate interest of our
company or a third party and at the same time the interests, basic rights and fundamental
freedoms of the data subject, which require the protection of personal data, do not override
our legitimate interest, Art. 6 I 1 lit. f GDPR serves as the legal basis for the processing.
4.2 Legal bases for the processing of special categories of personal data
If, in extraordinary cases, we need to process special categories of personal data, such as
 data on racial or ethnic origin (e.g. skin color or special languages),
 data on political opinions (e.g. party memberships),
 data on religious or philosophical beliefs (e.g. membership of a sect),
 data on trade union membership,
 genetic data,
 biometric data (e.g. fingerprints or photographs),
Konica Mi nolta Business Solutions Europe GmbH, Europaallee 17, 30855 Langenhagen, Germany
www.konicaminolta.eu
 health data (e.g. identification numbers for disabilities),
 or data concerning the sex life or sexual orientation
by you, this processing is based on one of the following legal bases, which are de-fined in
Article 9 GDPR:
Explicit consent
If you have given us your explicit consent for the processing of the above categories of
personal data, this constitutes the legal basis for the processing in accordance with Art. 9 II
lit. a GDPR.
Performing duties under social security/protection and employment law
If the processing of special categories of personal data relating to you is necessary in order to
comply with a legal obligation arising from social security/protection or employment law, the
legal basis for this processing is Art. 9 II lit. b GDPR.
Protection of vital interests
If the processing of special categories of personal data relating to you should be necessary to
protect your vital interests or those of another person, such processing is carried out pursuant
to Art. 9 II lit. c GDPR.
Manifestly public data
Insofar as special categories of personal data of yours are processed, which have previously
been made public by yourself, the processing of these data is based on Art. 9 II lit. e GDPR.
Establishment / Exercise / Defence of legal claims
Insofar as the processing of the special categories of personal data relating to you serves us
to establish, exercise or defend legal claims, Art. 9 II lit. f GDPR constitutes the legal basis for
the processing.
Substantial public interest
In the case of the processing of special categories of personal data concerning you in order to
safeguard a substantial public interest arising from EU or national law, the processing is based
on Art. 9 II lit. g GDPR.
Assessment of the person's work capacity or other medical purposes such as health care
If the processing of special categories of personal data relating to you arises from a law of the
EU or a Member State or a contract concluded with a member of a health profession and is
carried out for the purposes of preventive health care, occupational medicine, assessment of
an employee's work capacity, medical diagnosis, care or treatment in the health or social field
Konica Mi nolta Business Solutions Europe GmbH, Europaallee 17, 30855 Langenhagen, Germany
www.konicaminolta.eu
or the management of systems and services in the health or social field, this processing is
based on Art. 9 II lit. h GDPR.
Public interest in the area of public health
If the processing of special categories of personal data of yours should be necessary for public
health reasons, including protection against cross-border health threats such as pandemics,
this processing is carried out on the legal basis of Art. 9 II lit. i GDPR.
Archival purposes, scientific / historical research purposes, statistical purposes
Should the processing of special categories of personal data relating to you arise from a right
of the EU or a member state, which stipulates processing for archiving, scientific or historical
research or statistical purposes in the public interest, this processing is based on Art. 9 II lit.
j GDPR.
5 General information regarding the topic „obligation to preserve
records and time limits of erasure“
Unless otherwise stated, we delete personal data in accordance with Art. 17 GDPR or restrict
its processing in accordance with Art. 18 GDPR. Apart from the retention periods stated in this
privacy policy, we process and store your personal data only as long as the data are necessary
for the fulfilment of our contractual and legal obligations. Personal data that are no longer
required after the purpose has been fulfilled will be regularly deleted, unless further
processing is required for a limited period of time, which may result from other legally
permissible purposes. In order to fulfil documentation obligations as well as to fulfill the
record keeping obligations, the documents are kept for a minimum of five years in accordance
with the provisions of Law 4308/2014, (par. 7) and the tax code.
6 General information regarding the topic „disclosure of personal
data“
Recipient of your data
We do not sell or rent user data in principle. A transfer to third parties beyond the scope
described in this privacy policy will only take place if this is necessary for the processing of
the respective requested service. For this purpose, we work together with service providers in
the areas of marketing, sales, IT, logistics and human resources, among others. We select
these service providers extremely carefully. In other cases we transfer data to requesting
Konica Mi nolta Business Solutions Europe GmbH, Europaallee 17, 30855 Langenhagen, Germany
www.konicaminolta.eu
governmental authorities. However, this only takes place if there is a legal obligation to do so,
for example if a court order exists.
Locations of the processing of your personal data
In principle, we process your data in Greece and in other European countries (EU/EEA). If your
data is processed in countries outside the European Union or the European Economic Area (i.e.
in so-called third countries), this will only take place if you have expressly consented to it, if
it is stipulated by law or if it is necessary for our service provision to you. If, in these
exceptional cases, we process data in third countries, this will be done by ensuring that certain
measures are taken (i.e. on the basis of an adequacy decision by the EU Commission or by
presenting suitable guarantees in accordance with Art. 44ff. GDPR).
7 In the context of which processing activities are my personal
data processed?
7.1 Processing activity – View / request to change the customer's contact person for a
machine
Data subject: customer contact person
Purpose of processing: view the details of the customer's contact person for a machine
or request to change the contact person
Place of data processing: European Union
Legal basis of the processing: Article 6, paragraph 1, subparagraph B of the GDPR.
7.2 Processing Activity – Create Order
Data subject: customer contact person
Purpose of processing: order creation through the system
Place of data processing: European Union
Legal basis of the processing: Article 6, paragraph 1, subparagraph B of the GDPR.
7.3 Processing Activity - Request / call for technical support
Data subject: customer contact person
Purpose of processing: technical support through the system
Konica Minolta Business Solutions Europe GmbH, Europaallee 17, 30855 Langenhagen, Germany
www.konicaminolta.eu
Place of data processing: European Union
Legal basis of the processing: Article 6, paragraph 1, subparagraph B of the GDPR.
7.4 Processing Activity – View pending orders
Data subject: customer contact person
Purpose of processing: view pending orders for a client
Place of data processing: European Union
Legal basis of the processing: Article 6, paragraph 1, subparagraph B of the GDPR.
8 Konica Minolta Global Policy
To the Global Personal Data Protection | KONICA MINOLTA