Privacy Policy

1. Introduction

At Paulina Alday, we are committed to protecting your privacy and handling your personal data transparently and responsibly.

This Privacy Policy explains how SVUUM S.A., operating under the brand "Paulina Alday – A Svuum Company" ("Paulina Alday", "Company", "we", "us" or "our"), collects, uses, stores, shares, and protects personal data in connection with:

• our website located at www.paulinalday.com (the "Website");
• our relocation, moving, packing, storage, and related services;
• communications with prospective and existing customers;
• our customer portal and digital tools; and
• recruitment and employment application processes.

This Privacy Policy has been prepared in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – "GDPR"), Greek data protection legislation, and applicable privacy laws.

2. Data Controller

The Data Controller for the processing of your personal data is:

SVUUM S.A.
76 Kifisou Avenue
12241 Aigaleo, Athens, Greece
VAT number (ΑΦΜ): 801526857
Companies Registry (ΓΕΜΗ): 158528403000

Email: paulina@paulinalday.com

For data protection matters, you may also contact our Data Protection Officer (DPO):

Email: dpo@svuum.gr

3. Categories of Individuals Covered by This Policy

This Privacy Policy applies to:

• prospective customers requesting information or quotations;
• customers purchasing our services;
• website visitors;
• authorized users of our online customer portal;
• individuals contacting us through online forms, email, telephone, or chat services;
• job applicants and recruitment candidates.

4. Personal Data We Collect

Depending on your relationship with us, we may collect the following categories of personal data:

Identity Information

• name;
• surname;
• title.

Contact Information

• email address;
• telephone number;
• postal address;
• destination address.

Relocation Information

• moving origin and destination;
• inventory lists;
• information regarding properties, access requirements, elevators, parking arrangements and other logistical details;
• valuation and insurance information.

Financial Information

• payment details;
• invoicing information;
• tax details where required.

Technical Information

• IP address;
• browser information;
• operating system;
• device information;
• cookie identifiers.

Recruitment Information

• CVs and resumes;
• work experience;
• qualifications;
• education records;
• professional references.

Communications Data

• correspondence with us;
• requests, inquiries, quotations and feedback.

5. How We Use Your Personal Data

5.1 Prospective Customers

Where you request information or a quotation, we process personal data to:

• communicate with you;
• assess your relocation requirements;
• prepare and provide quotations;
• respond to inquiries.

Legal Basis:

• your request for pre-contractual measures;
• your consent when contacting us;
• our legitimate interests in responding to business inquiries.

5.2 Customers

We process personal data to:

• provide relocation, packing, storage and related services;
• manage bookings and logistics;
• communicate regarding the execution of services;
• process payments;
• administer insurance requests;
• issue invoices and financial records;
• comply with legal and tax obligations.

Legal Basis:

• performance of a contract;
• compliance with legal obligations;
• legitimate business interests.

5.3 Website Visitors

We process technical and usage data to:

• ensure website security;
• maintain website functionality;
• improve user experience;
• generate website analytics;
• comply with security and legal requirements.

Legal Basis:

• legitimate interests;
• consent where cookies or analytics technologies require it.

For further information please see our Cookie Policy.

5.4 Customer Portal Users

Where we provide an online portal, we process personal data to:

• create and manage user accounts;
• authenticate users;
• provide secure access to relocation information;
• maintain platform security.

Legal Basis:

• performance of a contract;
• legitimate interests in platform security and administration.

5.5 Job Applicants

We process recruitment-related data to:

• evaluate applications;
• conduct interviews;
• assess suitability for employment opportunities;
• communicate regarding recruitment processes.

Legal Basis:

• pre-contractual measures requested by the applicant;
• legitimate interests in recruitment and staffing.

6. Marketing Communications

Where permitted by law, we may send service updates, newsletters, or information about our services.

You may opt out at any time by:

• using the unsubscribe link included in emails;
• contacting us at paulina@paulinalday.com.

The legal basis for such communications may be:

• your consent; or
• our legitimate interest in promoting related services to existing customers where permitted by law.

7. Sharing Personal Data

We may share personal data with:

• relocation and logistics partners;
• transport and storage providers;
• insurance providers;
• payment processors;
• IT service providers and software platforms;
• professional advisers;
• public authorities where legally required.

All third parties are required to process personal data in accordance with applicable data protection laws and appropriate contractual safeguards.

8. International Transfers

Personal data is generally stored within the European Economic Area (EEA).

Where data is transferred outside the EEA, we ensure that appropriate safeguards are implemented, including:

• adequacy decisions adopted by the European Commission;
• Standard Contractual Clauses (SCCs);
• other safeguards recognized by applicable law.

9. Retention of Personal Data

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy.

Retention periods may vary depending on:

• contractual requirements;
• legal and regulatory obligations;
• tax and accounting requirements;
• dispute resolution needs;
• defense of legal claims.

Financial and taxation records will be retained for the periods required under applicable law.

Aggregated and anonymized statistical information may be retained indefinitely.

10. Your Rights

Subject to applicable law, you may exercise the following rights:

Right of Access

To obtain confirmation of whether we process your personal data and receive a copy of that data.

Right to Rectification

To request correction of inaccurate or incomplete personal data.

Right to Erasure

To request deletion of personal data where permitted by law.

Right to Restriction

To request that processing be temporarily restricted in certain circumstances.

Right to Data Portability

To receive personal data in a structured, commonly used, machine-readable format and, where applicable, transmit it to another controller.

Right to Object

To object to processing based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Rights Related to Automated Decision-Making

We do not make decisions producing legal or similarly significant effects solely through automated processing.

11. Exercising Your Rights

Requests may be submitted to:

Email: paulina@paulinalday.com

or

DPO: dpo@svuum.gr

We may require verification of your identity before responding to requests.

We will respond within the timeframes required by applicable law, generally within one month of receiving a valid request.

12. Security Measures

We maintain appropriate technical and organizational measures designed to protect personal data against:

• unauthorized access;
• accidental loss;
• misuse;
• disclosure;
• alteration;
• destruction.

Such measures include access controls, encryption where appropriate, confidentiality obligations, monitoring procedures, and secure technology environments.

While we implement appropriate safeguards, no system can be guaranteed to be completely secure.

13. Complaints

If you believe that your personal data has been processed unlawfully, you may contact us directly.

You also have the right to lodge a complaint with the competent supervisory authority.

For individuals located in Greece:

Hellenic Data Protection Authority (HDPA)
Website: https://www.dpa.gr

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or business operations.

The latest version will always be available on our Website and will indicate the date of the most recent update.

Continued use of our Website or services after publication of an updated Privacy Policy constitutes acknowledgment of the revised version.