PRIVACY & PERSONAL DATA PROTECTION POLICY (PRIVACY POLICY)

In accordance with the General Data Protection Regulation (GDPR - EU 2016/679)

Website: www.onereachglobal.com

Data Controller: ONE REACH GLOBAL (International Employment Agency)

Headquarters: 37 Anagnostopoulou St., Kolonaki, Athens, P.C. 10673, Greece

Branch Office: 15 Sofouli St., Rhodes, P.C. 85133, Greece

Contact Email (DPO/Data Privacy): This email address is being protected from spambots. You need JavaScript enabled to view it.

1. INTRODUCTION

At ONE REACH GLOBAL, we recognize the importance of protecting the personal data of our website users, job candidates (Candidates), and employers/clients (Employers). This Privacy Policy explains how we collect, process, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR - EU 2016/679) and applicable Greek legislation (Law 4624/2019).

2. CATEGORIES OF DATA WE COLLECT

Due to the nature of our services as an international recruitment and staffing agency, we collect and process:

• For Job Seekers (Candidate / "Find a Job" Category):

  • Identity & Contact Information: Full name, nationality, date of birth, gender, residential address, telephone number, email, copy of passport/ID card.

  • Curriculum Vitae (CV) Data: Professional experience, education, skills, letters of recommendation, foreign language proficiency, current employment.

  • Special Categories of Data (Sensitive Data): In the context of procedures for issuing residence permits and national entry visas (Visa Type-D / Work Permits) for third-country workers (e.g., Asia), we may collect medical health certificates or criminal record checks, exclusively where explicitly required by the immigration law of the host country.

• For Employers / Clients ("Hire a Talent" Category):

  • Corporate Information: Business name, Tax Identification Number (TIN), Tax Office, registered address, business sector/activity, details of legal representatives and contact persons (name, position, phone number, email).

  • Staffing Requirement Details: Job descriptions, required qualifications, employment terms.

• For all Visitors of www.onereachglobal.com:

  • Connection and navigation data (IP addresses, cookies, operating system, browser type) through which we improve user experience on our website.

  • Information submitted via the contact form or the Newsletter subscription form (email).

3. LEGAL BASES AND PURPOSES OF PROCESSING

The processing of your data is carried out based on the following legal grounds (Article 6 and Article 9 of the GDPR):

1. Performance of a Contract or Pre-contractual Measures: To evaluate your CV, match candidates with job vacancies, draft employment contracts, and process procedures for issuing Visas and Work Permits.

2. Consent: For subscribing to our Newsletter or maintaining your CV in our database for future job openings.

3. Compliance with Legal Obligations: To fulfill our obligations under labor, tax, and immigration law.

4. Legitimate Interest: To ensure the security of our website and to establish, exercise, or defend legal claims of our company.

4. DATA TRANSFER TO THIRD PARTIES (RECIPIENTS)

Your data may be transferred strictly to:

• Partner Businesses/Employers: In Greece or Europe, who are seeking personnel, and only upon your approval/application for the specific position.

• State & Public Authorities: Ministry of Migration and Asylum, Decentralized Administrations (DAM), Greek Embassies/Consulates abroad (e.g., in Asian countries), e-EFKA, for issuing necessary work permits and visas.

• Data Processors: Technical Information Technology (IT) service providers, website hosting providers, or legal advisors, who are bound by confidentiality and data security clauses.

5. INTERNATIONAL TRANSFERS (OUTSIDE THE EU)

Due to the international nature of our agency and our specialization in workforce from Asia, any transfer of data to partner organizations or consular authorities outside the European Economic Area (EEA) is always carried out using appropriate GDPR safeguards (e.g., Standard Contractual Clauses - SCCs) and your explicit consent.

6. DATA RETENTION PERIOD

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Candidate resumes (CVs) are retained for a maximum period of two (2) years from submission, unless deletion is requested earlier.

• Data related to contracts, worker recruitments/invitations, and residence permits are retained for the period mandated by tax, labor, and immigration laws (typically up to 10–20 years to cover the statute of limitations for legal claims).

• Information for receiving Newsletters is retained until consent is revoked (Unsubscribe).

7. YOUR RIGHTS UNDER THE GDPR

You have the following rights regarding your personal data:

• Right of Access: To know what data we process about you.

• Right to Rectification: To request the correction of inaccurate data.

• Right to Erasure ("Right to be Forgotten"): To request the deletion of your data (provided there is no legal obligation to retain it).

• Right to Restriction of Processing.

• Right to Data Portability: To receive your data in a structured, commonly used format.

• Right to Object: To object to processing for direct marketing purposes.

• Right to Withdraw Consent at any time.

To exercise your rights, you can contact us at This email address is being protected from spambots. You need JavaScript enabled to view it.. You also reserve the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) (www.dpa.gr).

8. DATA SECURITY

We implement strict technical and organizational security measures (including SSL/HTTPS encryption protocols, access restrictions, and firewall systems) to protect your sensitive data from accidental or unlawful destruction, loss, alteration, or unauthorized access.