Data protection
Index:
- Contact details of the Data Protection Officer.
- Data Protection Information regarding CANDIDATES TO WORK AT COPERNICUS
- Data Protection Information regarding DEBTORS (and GUARANTORS)
- Data Protection Information regarding the PREVENTION OF MONEY LAUNDERING AND TERRORIST FINANCING
- Data Protection Information regarding potential ASSET BUYERS, TENANTS, and on facilitating the granting of CREDIT
- Data Protection Information regarding SUPPLIERS
- Data Protection Information regarding COMPLAINTS or WHISTLEBLOWING CHANNEL
- Data Protection Information regarding CUSTOMERS and POTENTIAL CUSTOMERS
1. Copernicus Data Protection Officer
Spain
Juan Pablo Ruiz-Tagle Martínez del Cerro
Rafael Calvo, 5 1º 28010 Madrid SPAIN
protecciondedatos@copernicus.es
Tel: +34 600 97 87 77
Greece
Elisavet Botsi
Panepistimiou Street, 10, 671 Athens, GREECE
gr.dpo@copernicusgroup.gr
Tel: +30 210 710 26 58 / 6944 37 69 42
2. Data Protection Information regarding CANDIDATES TO WORK AT COPERNICUS
Who is responsible for the processing of your data?
Spain
Identity: Copernicus Servicing S.L. – CIF B86641180
Postal address: Rafael Calvo, 5 1º 28010 Madrid SPAIN
Tel: +34 600 97 87 77
Email: protecciondedatos@copernicus.es
Data Protection Officer: See section 1 of the index.
Greece
Identity: Copernicus Hellas Α.Ε.Δ.Α.Δ.Π. – CIF 800848406Ç
Postal address: Panepistimiou Street 10, 10 671 Athens GREECE
Tel: +30 210 710 26 58
Email: gr.dpo@copernicusgroup.gr
Data Protection Officer: See section 1 of the directory.
For what purpose do we process your personal data?
At Copernicus we process the information you have provided us in order to keep you informed of the different job vacancies that occur at Copernicus and to contact you if they fit your profile.
No automated decisions will be made.
How long do we keep your personal data?
The data provided will be kept until a job is awarded or until you exercise your right to erasure. In any case, they will be deleted one year after you have provided them to us, unless you renew your consent.
What is the legitimacy for the processing of your data?
The legal basis for the processing of the data is the consent of the person of the data subject, the holder of the CV.
To which recipients could we disclose your data?
Except for legal, regulatory or judicial obligations, we may only communicate your data to companies that help us manage CVs in our selection processes.
What are your rights when you provide us with your data?
You have the right to know if we are processing your personal data (right of access), as well as to request the rectification of data that is inaccurate or, where appropriate, to request its erasure. Other rights you have are to request the limitation of the processing of your data, to oppose the processing, or to request the portability of your data. You also have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
Spain
To exercise your rights, please send an email to protecciondedatos@copernicus.es
If you consider that we have not satisfied the exercise of your rights, you can lodge a complaint with the Supervisory Authority in www.aepd.es
Greece
To exercise your rights, please send an email to gr.dpo@copernicusgroup.gr.
If you consider that we have not satisfied the exercise of your rights, you can lodge a complaint with the Personal Data Protection Authority [1-3 Kifissias Avenue, PC 115 23, Athens, tel.: +30 2106475600, www.dpa.gr, e-mail: contact@dpa.gr].
3. Data Protection Information regarding DEBTORS (and GUARANTORS)
Who is responsible for the processing of your data?
The financial institution that granted the Loan and/or Credit is responsible, unless it has sold it, in which case it would be the entity that has purchased your credit as we informed you by registered letter shortly after you bought it.
Spain
The data processor, Copernicus Servicing S.L. – CIF B86641180, whose details are indicated below, may provide you with a copy of this letter.
Postal address: Rafael Calvo, 5 1º 28010 Madrid SPAIN
Phone: +34 600 97 87 77
Email: protecciondedatos@copernicus.es
Data Protection Officer: See section 1 of the index.
Greece
The processor, Copernicus Hellas Α.Ε.Δ.Α.Δ.Π. – CIF 800848406, whose details are indicated below, may provide you with a copy of this letter.
Postal address: Panepistimiou 10, 10 671 Athens GREECE
Tel: +30 210 710 26 58
Email: gr.dpo@copernicusgroup.gr
Data Protection Officer: See section 1 of the directory.
For what purpose do we process your personal data?
At Copernicus we process your personal data in order to recover the amounts owed through amicable and judicial procedures. Such amicable efforts could culminate in agreements in which part of the existing debt could be forgiven.
No automated decisions will be made.
How long do we keep your personal data?
Copernicus will use your data until it reaches a contractual agreement with you or a final court decision takes place. Thereafter, Copernicus will keep your data until it complies with all its contractual, regulatory and legal obligations.
What is the legitimacy for the processing of your data?
The legal basis for the processing of your data is the agreement or contract that binds Copernicus with the financial institution that granted the Loan and/or Credit, or if it has been sold, with the entity that has purchased your credit from the financial institution with which you originally contracted it.
When we start the amicable negotiations, we could ask you for more data or update the ones we have. You are not obliged to provide them, but in that case you could lose the opportunity to reach an amicable settlement.
To which recipients could we disclose your data?
To Copernicus suppliers who need to process your data to carry out the amicable and judicial procedures that we will try to initiate with you. In particular, your data may be transmitted:
- to the holders of the credits managed by the company, as well as to its administrators and shareholders.
- employees and managers of Copernicus, who are responsible for the assessment of your applications, the management and operation of the contract/agreement and the fulfilment of the obligations arising therefrom, as well as the relevant obligations imposed by law and regulation;
- other non-performing loan servicing companies;
- information societies with respect to debtors,
- law firms and/or legal advisors;
- Attorneys
- Notaries
- In the case of Greece, Tiresias S.A.
- financial and business advisors,
- Auditors and Audit Firms,
- real estate appraisers,
- archiving, storage and document management companies,
- cloud storage, processing, and support systems;
- insurance companies,
- website creation and support companies,
- other recipients to whom the transfer or disclosure is required by the applicable regulatory, legislative or judicial decision (e.g. supervisory or judicial authorities, tax authorities, supervisory bodies, mediation entities)
- The credit owner
Transfers to third countries outside the EU would only take place if the entity that owns your credit, or its administrators or its shareholders are located in third countries.
What are your rights when you provide us with your data?
You have the right to know if we are processing your personal data (right of access), as well as to request the rectification of data that is inaccurate or, where appropriate, to request its erasure. Other rights you have are to request the limitation of the processing of your data, to oppose the processing, or to request the portability of your data. You also have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
Spain
To exercise your rights, please send an email to protecciondedatos@copernicus.es
If you consider that we have not satisfied the exercise of your rights, you can lodge a complaint with the Supervisory Authority in www.aepd.es
Greece
To exercise your rights, please send an email to gr.dpo@copernicusgroup.gr.
If you believe that we have not complied with the exercise of your rights, you can lodge a complaint with the Personal Data Protection Authority [1-3 Kifissias Avenue, PC 115 23, Athens, tel.: +30 2106475600, www.dpa.gr, e-mail: contact@dpa.gr].
Where did we get your data?
We receive your data from:
– the financial institution that granted the Loan and/or Credit, or the entity that has purchased your credit from the financial institution that granted you a credit that you have not been able to repay.
– directly from you,
– publicly accessible sources, e.g. telephone directories, courts, land registers, land registry offices, etc., the media, the Internet, commercial registers, where such data is necessary for the purposes of the processing,
– lawyers, law firms, bailiffs, notaries,
– third parties (natural or legal persons) acting on your behalf.
The categories of data we process are all those that you (as a debtor or guarantor) provided to the financial institution that granted you the credit, such as your name and surname, your official identification data such as your ID or passport, your email, your postal address, your bank details and, where appropriate, the real estate data of the assets that constitute real guarantees of such credit.
4. Data Protection Information regarding the PREVENTION OF MONEY LAUNDERING and TERRORIST FINANCING
Who is responsible for the processing of your data?
Spain
Identity: Copernicus Servicing S.L. – CIF B86641180
Rafael Calvo, 5 1º 28010 Madrid SPAIN
Tel: +34 600 97 87 77Email: protecciondedatos@copernicus.es
Data Protection Officer: See section 1 of the index.
Greece
Identity: Copernicus Hellas Α.Ε.Δ.Α.Δ.□. – CIF 800848406
Postal address: Panepistimiou 10, 10 671 Athens GREECE
Tel: +30 210 710 26 58
Email: gr.dpo@copernicusgroup.gr
Data Protection Officer: See section 1 of the directory.
For what purpose do we process your personal data?
At Copernicus we process the information you have provided to us in accordance with the Law on the Prevention of Money Laundering and Terrorist Financing.
How long do we keep your personal data?
Spain
The data provided will be kept for a period of ten years from the end of the business relationship.
Greece
The data provided will be kept for a period of at least 5 (five) years from the end of the business relationship, unless we are required by law to keep such data for a longer period of time.
What is the legitimacy for the processing of your data?
Spain
The legal basis for the processing of your data is Law 10/2010, of 28 April, on the Prevention of Money Laundering and the Financing of Terrorism. Refusal to provide the requested data may result in the non-completion of the transaction with you.
Greece
The legal basis for the processing of your data is Law 4557/2018 “PREVENTION AND SUPPRESSION OF MONEY LAUNDERING AND TERRORIST FINANCING (TRANSPOSITION OF DIRECTIVE 2015/849/EU), Law 4734/2020 transposing Directive 2018/843/EU into Greek law and Law 4816/2021 transposing the Directive into Greek law 2018/1673/EU and Law 281/5/17.3.2009, the Decision of the Banking and Credit Committee of the Bank of Greece, the Recommendations of the Financial Action Task Force, as well as all relevant implementing Laws, Decisions and Circulars of any Competent Authority, in force from time to time).
To which recipients could we disclose your data?
Your data may be transmitted to:
- the holders of the loans managed by the company, as well as its directors and shareholders.
- Copernicus employees and managers who are responsible for the assessment of their applications, the management and operation of the contract/agreement and the fulfilment of the obligations arising therefrom, as well as the relevant obligations imposed by law;
- law firms and/or legal advisors;
- audit firms,
- archiving, storage and document management companies,
- cloud storage, processing, and support systems;
- other recipients to whom the transfer or disclosure is required by the applicable general regulatory, legislative and regulatory framework or by a court decision (e.g. judicial or supervisory authorities, tax authorities, supervisory bodies, intermediaries)
- The owner of the loan or real estate property
What are your rights when you provide us with your data?
You have the right to know if we are processing your personal data (right of access), as well as to request the rectification of data that is inaccurate or, where appropriate, to request its erasure. Other rights you have are to request the limitation of the processing of your data, to oppose the processing, or to request the portability of your data. You also have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
Spain
To exercise your rights, please send an email to protecciondedatos@copernicus.es
If you consider that we have not satisfied the exercise of your rights, you can lodge a complaint with the Supervisory Authority in www.aepd.es
Greece
To exercise your rights, please send an email to gr.dpo@copernicusgroup.gr.
If you believe that we have not complied with the exercise of your rights, you can lodge a complaint with the Personal Data Protection Authority [1-3 Kifissias Avenue, PC 115 23, Athens, tel.: +30 2106475600, www.dpa.gr, e-mail: contact@dpa.gr].
5. Data Protection Information regarding potential ASSET BUYERS, TENANTS, as well as facilitating the granting of credit
Who is responsible for the processing of your data?
Spain
Identity: Copernicus Servicing S.L. – CIF B86641180
Rafael Calvo, 5 1º 28010 Madrid SPAIN
Tel: +34 600 97 87 77
Email: protecciondedatos@copernicus.es
Data Protection Officer: See section 1 of the index.
Greece
Identity: Copernicus Hellas Α.Ε.Δ.Α.Δ.□. – CIF 800848406
Postal address: Panepistimiou 10, 10 671 Athens GREECE
Tel: +30 210 710 26 58
Email: gr.dpo@copernicusgroup.gr
Data Protection Officer: See section 1 of the directory.
For what purpose do we process your personal data?
At Copernicus we process the information you have provided us with in order to be able to sell/rent the real estate or credit asset in which you are interested.
Only if you specifically give us your consent, we will process your personal data for the purpose of helping you obtain financing to face the purchase.
In the event of reaching an agreement, we would process your personal data for the purpose of complying with our regulatory and legal obligations relating to the Prevention of Money Laundering and Terrorist Financing regulations in force.
No automated decisions will be made.
How long do we keep your personal data?
The data provided will be retained until Copernicus complies with all its contractual, regulatory and legal obligations, from the moment Copernicus becomes aware with certainty whether the pre-contractual relationship is completed.
What is the legitimacy for the processing of your data?
The legal basis for the processing of your data is your consent to enter into a contractual relationship or the contractual relationship between the parties.
To which recipients could we disclose your data?
In the case of asset buyers, their data may be communicated to the owner of the asset (real estate or credit) and the mortgagee. In the event that the owner or mortgagee is a company, its data could be communicated to its administrators, shareholders and even other suppliers, such as auditors.
In the case of tenants, their data may be communicated to the owner of the asset.
Transfers to third countries would only take place if the owner of the asset, or its directors or shareholders as the case may be, were located in third countries.
On the other hand, we would also communicate your data to those Copernicus suppliers who need to process your data in order to sell/rent the real estate or credit asset in which you are interested, or in the event that we are helping you to obtain financing, to suppliers who need to process your data in order to provide you with such financing.
In addition, your data may be transferred to other recipients to whom the transfer or disclosure is required by the applicable regulatory, legislative or judicial decision (e.g. supervisory or judicial authorities, tax authorities, supervisory bodies).
What are your rights when you provide us with your data?
You have the right to know if we are processing your personal data (right of access), as well as to request the rectification of data that is inaccurate or, where appropriate, to request its erasure. Other rights you have are to request the limitation of the processing of your data, to oppose the processing, or to request the portability of your data. You also have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
Spain
To exercise your rights, please send an email to protecciondedatos@copernicus.es
If you consider that we have not satisfied the exercise of your rights, you can lodge a complaint with the Supervisory Authority in www.aepd.es
Greece
To exercise your rights, please send an email to gr.dpo@copernicusgroup.gr.
If you believe that we have not complied with the exercise of your rights, you can lodge a complaint with the Personal Data Protection Authority [1-3 Kifissias Avenue, PC 115 23, Athens, tel.: +30 2106475600, www.dpa.gr, e-mail: contact@dpa.gr].
6. Data Protection Information regarding SUPPLIERS
Who is responsible for the processing of your data?
Spain
Identity: Copernicus Servicing S.L. – CIF B86641180
Rafael Calvo, 5 1º 28010 Madrid SPAIN
Tel: +34 600 97 87 77
Email: protecciondedatos@copernicus.es
Data Protection Officer: See section 1 of the index.
Greece
Identity: Copernicus Hellas Α.Ε.Δ.Α.Δ.□. – CIF 800848406
Postal address: Panepistimiou 10, 10 671 Athens GREECE
Tel: +30 210 710 26 58
Email: gr.dpo@copernicusgroup.gr
Data Protection Officer: See section 1 of the directory.
For what purpose do we process your personal data?
At Copernicus we process the information provided to us by you or your representative in order to be able to manage the (pre)contractual relationship that may be reached and in order to comply with our legal and regulatory obligations, including those of Prevention of Money Laundering and Terrorist Financing.
No automated decisions will be made.
How long do we keep your personal data?
The data provided will be retained until Copernicus complies with all its contractual, legal and regulatory obligations, from the moment Copernicus becomes aware with certainty whether the contractual relationship is completed.
What is the legitimacy for the processing of your data?
The legal basis for the processing of your data is your consent to enter into a contractual relationship.
To which recipients could we disclose your data?
Your data may be communicated to those Copernicus customers and/or suppliers who need to process your data so that Copernicus can fulfil the contractual relationship.
What are your rights when you provide us with your data?
You have the right to know if we are processing your personal data (right of access), as well as to request the rectification of data that is inaccurate or, where appropriate, to request its erasure. Other rights you have are to request the limitation of the processing of your data, to oppose the processing, or to request the portability of your data. You also have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
Spain
To exercise your rights, please send an email to protecciondedatos@copernicus.es
If you consider that we have not satisfied the exercise of your rights, you can lodge a complaint with the Supervisory Authority in www.aepd.es
Greece
To exercise your rights, please send an email to gr.dpo@copernicusgroup.gr.
If you believe that we have not complied with the exercise of your rights, you can lodge a complaint with the Personal Data Protection Authority [1-3 Kifissias Avenue, PC 115 23, Athens, tel.: +30 2106475600, www.dpa.gr, e-mail: contact@dpa.gr].
7. Data Protection Information regarding
COMPLAINTS OR WHISTLEBLOWING CHANNEL
Who is responsible for the processing of your data?
Spain
Identity: Copernicus Servicing S.L. – CIF B86641180
Postal address: Rafael Calvo, 5 1º 28010 Madrid SPAIN
Tel: +34 600 97 87 77Email: protecciondedatos@copernicus.es
Data Protection Officer: See section 1 of the index.
Greece
Identity: Copernicus Hellas Α.Ε.Δ.Α.Δ.□. – CIF 800848406
Postal address: Panepistimiou 10, 10 671 Athens GREECE
Tel: +30 210 710 26 58
Email: gr.dpo@copernicusgroup.gr
Data Protection Officer: See section 1 of the directory.
For what purpose do we process your personal data?
According to Copernicus policy, anyone (employees, suppliers, customers, debtors, buyers of flats…), may file a complaint or report irregular behaviour. With respect to the persons who file a complaint, we process their data in order to resolve possible violations of their rights. As regards allegations of irregular behaviour, the aim is to protect the reputation of Copernicus from the possible commission of crimes.
No automated decisions will be made.
How long do we keep your personal data?
The data provided will be retained until Copernicus complies with all its contractual, regulatory and legal obligations, which could include the period until the completion of the relevant judicial investigations.
What is the legitimacy for the processing of your data?
We use your data on the basis of the consent you give us when you send us the complaint or report irregular behaviour and for Copernicus to comply with the obligations imposed by the applicable legal, regulatory and supervisory framework.
To which recipients could we disclose your data?
Your data may be communicated to the relevant authorities.
What are your rights when you provide us with your data?
You have the right to know if we are processing your personal data (right of access), as well as to request the rectification of data that is inaccurate or, where appropriate, to request its erasure. Other rights you have are to request the limitation of the processing of your data, to oppose the processing, or to request the portability of your data. You also have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
Spain
To exercise your rights, please send an email to protecciondedatos@copernicus.es
If you consider that we have not satisfied the exercise of your rights, you can lodge a complaint with the Supervisory Authority in www.aepd.es
Greece
To exercise your rights, please send an email to gr.dpo@copernicusgroup.gr.
If you believe that we have not complied with the exercise of your rights, you can lodge a complaint with the Personal Data Protection Authority [1-3 Kifissias Avenue, PC 115 23, Athens, tel.: +30 2106475600, www.dpa.gr, e-mail: contact@dpa.gr].
8. Data Protection Information regarding CUSTOMERS and POTENTIAL CUSTOMERS
Who is responsible for the processing of your data?
Spain
Identity: Copernicus Servicing S.L. – CIF B86641180
Postal address: Rafael Calvo, 5 1º 28010 Madrid SPAIN
Tel: +34 600 97 87 77Email: protecciondedatos@copernicus.es
Data Protection Officer: See section 1 of the index.
Greece
Identity: Copernicus Hellas Α.Ε.Δ.Α.Δ.□. – CIF 800848406
Postal address: Panepistimiou 10, 10 671 Athens GREECE
Tel: +30 210 710 26 58
Email: gr.dpo@copernicusgroup.gr
Data Protection Officer: See section 1 of the directory.
For what purpose do we process your personal data?
At Copernicus we process the information provided to us by you or your representative in order to be able to manage the (pre)contractual relationship that may be reached and in order to comply with our legal and regulatory obligations.
No automated decisions will be made.
In addition, if you have given us your consent, we may send you marketing communications.
How long do we keep your personal data?
The data provided will be retained until Copernicus complies with all its contractual, regulatory and legal obligations, from the moment Copernicus knows for sure whether the contractual relationship is terminated. With regard to data relating to commercial communications, we will stop processing them at the time you withdraw your consent. However, the withdrawal of such consent shall not affect the lawfulness of the processing carried out previously.
What is the legitimacy for the processing of your data?
The legal basis for the processing of your data is your consent to enter into and maintain a contractual relationship.
Once a contractual relationship has been established, we will process your personal data in order for Copernicus to comply with its contractual, legal and regulatory obligations.
To which recipients could we disclose your data?
Your data may be communicated to those Copernicus customers and/or suppliers who need to process your data so that Copernicus can fulfil the (pre)contractual relationship.
What are your rights when you provide us with your data?
You have the right to know if we are processing your personal data (right of access), as well as to request the rectification of data that is inaccurate or, where appropriate, to request its erasure. Other rights you have are to request the limitation of the processing of your data, to oppose the processing, or to request the portability of your data. You also have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
Spain
To exercise your rights, please send an email to protecciondedatos@copernicus.es
If you consider that we have not satisfied the exercise of your rights, you can lodge a complaint with the Supervisory Authority in www.aepd.es
Greece
To exercise your rights, please send an email to gr.dpo@copernicusgroup.gr.
If you believe that we have not complied with the exercise of your rights, you can lodge a complaint with the Personal Data Protection Authority [1-3 Kifissias Avenue, PC 115 23, Athens, tel.: +30 2106475600, www.dpa.gr, e-mail: contact@dpa.gr].
