PERSONAL DATA PROCESSING POLICY FOR CANDIDATES

Personal Data Processing Policy for candidate employees/associates of “KOURTIDIS GROUP S.A.”

KOURTIDIS GROUP S.A. places particular importance on the security and protection of your personal data. As part of every recruitment process, the Company collects and processes personal data of candidate associates. We assure you that all information relating to you is processed solely for the purposes clearly described in this notice.

What information do we collect?

As part of expanding the KOURTIDIS GROUP S.A. team, visitors to our Website may express interest in joining us through the CAREER OPPORTUNITIES section. More specifically, when a visitor selects this section, a form appears for submitting an expression of interest in working with KOURTIDIS GROUP S.A. The following personal data are requested:

• Full name
• Email address
• Contact telephone number
• Any additional personal data the candidate chooses to provide in the “Comments” field
• A CV submitted in document format

Why does KOURTIDIS GROUP S.A. process your personal data?

Legitimate interest of the employer. Employers are entitled to collect and process personal data relating to job applicants to the extent that such collection is necessary and relevant to the performance of the job for which the application is submitted. The purpose is to assess and verify a candidate’s suitability for cooperation/employment with our Company.

Candidate consent. Your CV will be retained in our database for one (1) year in view of immediate employment opportunities within our Company. If you so wish and provide your explicit consent to further retention, your CV may remain active in our database for a total period of two (2) years. You may freely withdraw your consent at any time.

Who has access to the data?

Access to your CV and the other data of candidate employees is restricted to duly authorized Company personnel and Management.

How does KOURTIDIS GROUP S.A. protect your data?

We take the security of your data seriously. Processing of personal data is carried out in a manner that ensures confidentiality. KOURTIDIS GROUP S.A. applies appropriate technical and organizational measures in order to ensure a level of security appropriate to the risks of accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access and any other form of unlawful processing. The data you provide are protected by appropriate information-security techniques to ensure both secure transmission over the Internet and secure storage in Information Systems.

How long does KOURTIDIS GROUP S.A. retain your data?

Your CV will be retained in our database for one (1) year in view of immediate employment opportunities. If you provide explicit consent for retention, it may remain active for one additional year, i.e. up to two years in total. If no offer of employment is made within the above period or an offer is not accepted by the candidate, the CV will be securely and permanently destroyed after the applicable one- or two-year period.

If an employment offer is made and accepted, the personal data necessary for employment will be transferred by the Human Resources Department to the Company’s Accounting Department. As an employee, you will receive more specific information regarding retention periods through a relevant annex to your employment agreement.

Your rights

As a data subject, you have certain rights. Under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation), your rights include:

• Right of access to the personal data we process about you.
• Right to rectification of incomplete or inaccurate data held by KOURTIDIS GROUP S.A.
• Right to erasure of your personal data.
• Right to restriction of processing.
• Right to data portability to you or to third parties. Subject to the applicable legal requirements, you may receive personal data concerning you in a structured, commonly used and machine-readable format and transmit them to another controller, provided that this does not adversely affect the rights and freedoms of others. This applies only to automated processing of information that you provided to us based on consent or for performance of a contract.
• Right to object to processing of your personal data at any time. KOURTIDIS GROUP S.A. may refuse to comply where it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where processing is necessary for the establishment, exercise or defence of legal claims.
• Right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) if you consider that your rights have been infringed.

For any additional information or to exercise the above rights, please contact us in writing at Paralia Ofriniou, Kavala, P.C. 64008, or by email at cv@kourtidis.group. As a rule, your request will be fulfilled within one month of receipt. Information, communications and actions taken under Articles 15 to 22 and 34 GDPR are provided free of charge.

What happens if you do not provide your personal data?

You are under no legal or contractual obligation to provide your data during the recruitment process. However, if you do not provide some of the above information, we may be unable to process your application.

Updates to this Policy

This Policy was last updated on 11 September 2026.

This Policy may change from time to time. If we decide to amend it, we will inform you through notices displayed on our Website.

Contact

For any question or comment regarding this Policy and our practices, please contact us at cv@kourtidis.group.