Personal Data Protection Policy & Cookies Policy

Welcome to the website www.services.totalenergies.gr (the “Website”). By accessing, browsing, or using the Website, you acknowledge that you have read, understood, and accepted, without limitation or reservation, the General Terms and Conditions of Use and the Personal Data Protection Policy and Cookies Policy. (the “Policy”).
Please note that different terms and conditions and personal data protection policies may apply to other TotalEnergies websites and to specific data processing activities (such as job applications, marketing activities, or other dedicated services). We encourage you to review these documents carefully when accessing such services.
The purpose of this Policy is to inform you of the manner in which we process your personal data, the safeguards implemented to ensure its protection, and the rights available to you with respect to such data.
TotalEnergies Marketing Hellas Single Member S.A., with registered offices at 74–76 Voriou Ipirou Street, 15125 Marousi, Athens, Greece (tel.: +30 213 0172100, email: [email protected]), is the administrator of this Website and acts as the data controller for the processing of your personal data carried out in connection with and for the purposes of your use of the Website (hereinafter referred to as “TotalEnergies Marketing Hellas S.A.”, “we”, “us”, or “our”). 
All personal data processing activities are carried out in accordance with applicable data protection laws and regulations. 
1. Purpose of Processing & Types of Personal Data Processed
When you visit the Website and choose to contact us by email, you may provide us with personal data such as your first and last name, email address, telephone number, and any other information you voluntarily include in your message, depending on the nature and purpose of your communication.
Your personal data is processed for the following purposes:

• Managing and responding to queries submitted by email:

When you contact us by email (e.g. regarding technical, operational, or commercial matters), we process your identification and contact details, as well as the content of your message, in order to examine your request and respond or take appropriate action.

• Managing and responding to complaints submitted by email:

When you contact us by email to submit a complaint, we process your identification and contact details together with information relating to your complaint, insofar as necessary to investigate it and respond or take appropriate action.

• Recruitment purposes:

When you submit your CV and other relevant information for recruitment purposes, your personal data is processed in accordance with a separate privacy policy applicable to applicants for positions at TotalEnergies Marketing Hellas S.A., which is available [here].

• Operation and improvement of the Website through the use of trackers (e.g. cookies):

The Website uses trackers (e.g. cookies) in order to ensure its proper operation and improve user experience. Further information on the use of trackers is provided in Section 7 of this Policy.
2. Legal Basis for Processing
The processing of your personal data for the purposes described above is based on the following legal grounds, as applicable:
Legitimate interests:
Processing of personal data for managing and responding to queries and complaints submitted by email is based on our legitimate interest in communicating with users, providing support, handling requests and complaints, and improving our services and the Website. Such processing is limited to what is necessary for these purposes. 
Employment:
Processing of personal data for the evaluation of your CV and other relevant information that you share with TotalEnergies Marketing Hellas S.A. is based on the necessity to take steps at your request prior to entering into an employment contract. Further details are provided in the separate privacy policy applicable to applicants for positions at TotalEnergies Marketing Hellas S.A., which is available [here]. 
Consent:
Processing of your personal data via the use of certain trackers (e.g. cookies), such as targeting or advertising cookies, is also based on your prior consent. For further details on the use of trackers on the Website, please refer to Section 7 of this Policy.
3. Retention Period 
Your personal data will be retained for as long as necessary to fulfil the purposes described above and, in any case, for as long as this is permitted or required by applicable law, including for the establishment, exercise, or defense of legal rights.
More specifically:
Queries (including technical or product‑related advice):
Personal data relating to queries submitted by email, including requests for technical or product‑related information or advice, will be retained for as long as necessary to examine, respond to, and handle the query.
Thereafter, such data may be retained for an additional period of up to five (5) years, to the extent necessary for documentation purposes and to enable TotalEnergies Marketing Hellas S.A. to defend its legitimate interests in the event of disputes, claims, or liability arising from the information or advice provided.
Complaints:
Personal data relating to complaints will be retained for as long as necessary to investigate and resolve the complaint. In the event of a legal dispute or claim, the relevant personal data will be retained until the final resolution of the matter, including any applicable limitation periods.
Recruitment:
A separate privacy policy applies to the processing of personal data for recruitment purposes and defines the applicable retention periods. This policy is available [here]. 
Trackers (e.g. cookies):
Retention periods applicable to trackers are described in Section 7 of this Policy. 
4. Recipients of Data
For the needs of the above-mentioned purposes, your personal data may be shared with and processed by third-party providers of IT, Marketing and Social Media services.
5. Data Transfers to Third Countries
As a general principle, we process Personal Data within the European Economic Area (EEA). However, in limited cases, and where necessary for the purposes of our activities, we may share Personal Data with carefully selected subcontractors, affiliates, or service providers acting on our behalf. Such recipients may include providers of IT systems, data hosting, maintenance, or other operational support services.
In the event that Personal Data is transferred to a recipient located outside the EEA, such transfer shall be carried out in strict compliance with applicable data protection laws and subject to appropriate safeguards to ensure an adequate level of protection. These safeguards may include, as applicable, transfer agreements based on Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.
6. Data Security & Confidentiality 
TotalEnergies Marketing Hellas S.A. implements appropriate technical and organisational measures to ensure the security, integrity, and confidentiality of personal data and to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.
These measures include, where appropriate, access controls and authentication mechanisms limiting access to personal data to authorised personnel only, secure IT systems and infrastructures, encryption and secure communication protocols, regular system monitoring, and procedures designed to ensure ongoing confidentiality, availability, and resilience of processing systems. In addition, personnel handling personal data are bound by confidentiality obligations, and service providers processing personal data on our behalf are subject to contractual data‑protection and security requirements.
Personal data is processed solely for authorised purposes and in accordance with the principles of data protection by design and by default. The level of security applied takes into account the nature of the data, the purposes of the processing, and the potential risks involved.

#trackers7. Trackers (e.g., cookies) Management

7.1. Principle
A cookie is a file which enables a website to save information relating to your computer’s browsing of the website (e.g., number of visits, number of pages viewed, visited pages, date, and time of browsing, viewed links etc.), to make your visits to the website smoother.
You can at any time delete the cookies stored on your computer, object to the storage of new cookies and receive a notification before new cookies are stored by changing your browser settings using the instructions below (“Types of cookies, cookies and statistics, and settings”). 

Please note that if you remove a cookie or object to the storage of cookies on your device, you may not be able to use some of the website's services. 

7.2. Types of cookies, cookies and statistics, and settings.
The cookies that may be stored on your server when you browse the website are cookies which are intended solely to enable or facilitate electronic communication or which are strictly necessary to provide the service you are requesting (language cookies, login cookies, etc.), or statistics cookies or other cookies in accordance with the conditions below. 

When cookies require your consent before they can be used (e.g., targeting/ advertising and social media cookies), we obtain it via the use of appropriate mechanism. 

7.2.1. Which cookies are stored?

Technical and functional cookies

Statistical cookies 
Client Side Cookies :

Server Side Cookies :

Social Networks cookies

7.2.2. How do you delete cookies, receive notification of their storage or change your browser settings?

•    How do you delete cookies already stored on your computer?
-    On your workstation:
-    On the C:\ drive select the Windows folder;
-    Open the “Temporary Internet Files” folder;
-    Select all files (CTRL A);
-    Choose the “delete” option.

•    How do you change browser settings to reject or be informed of the storage of cookies?
-    In the Internet Explorer 5 (Microsoft) browser: Select “Tools”, and then “Internet Options”. Click on the “Security” tab, then “Custom level” and scroll down to the “cookies” section. Next to “Allow cookies that are stored on your computer” select “Ask” to be notified or “Disable” to decline all cookies;
-    In the Internet Explorer 6, 7 or 8 (Microsoft) browser: Select “Tools”, “Internet Options”, “Privacy”, then the level you wish to apply;
-    In the Firefox browser: Click on “Tools” and select “Options”. In the “Privacy and security” tab, untick the box “Accept cookies from websites”;
In the Chrome (Google) browser: Click “Customize and control Google Chrome” and select “Settings”. Under “Privacy and security”, click on “Content settings” and enable “Block third-party cookies”.

8. Your Rights 
You may have the following rights, under the conditions set out under the GDPR: 

1. Right of access: You have the right to obtain from us confirmation as to whether or not Personal Data concerning you is being processed, and, where that is the case, to request access to the Personal Data. The access information includes – inter alia – the purposes of the processing, the categories of Personal Data concerned, and the recipients or categories of recipients to whom the Personal Data have been or will be disclosed. You have the right to obtain a copy of the Personal Data undergoing processing. For additional copies requested by you, we may charge a reasonable fee based on administrative costs.
2. Right to rectification: You have the right to obtain from us the rectification of inaccurate Personal Data concerning you. Depending on the purposes of the processing, you have the right to have incomplete Personal Data completed, including by means of providing a supplementary statement.
3. Right to erasure (right to be forgotten): You have the right to ask us to erase your Personal Data.
4. Right to restriction of processing: You may have the right to request the restriction of processing your Personal Data. In this case, the respective data will be marked and may only be processed by us for certain purposes.
5. Right to data portability: You have the right to receive the Personal Data concerning you which you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit those Personal Data to another entity without hindrance from us.
6. Right to object: You have the right to object, on grounds relating to your particular situation, at any time to the processing of your Personal Data by us and we can be required to no longer process your Personal Data. If you have a right to object and you exercise this right, your Personal Data will no longer be processed for such purposes by us. Exercising this right will not incur any costs. Such a right to object may not exist, in particular, if the processing of your Personal Data is necessary to take steps prior to entering into a contract or to perform a contract already concluded.

Please note that the aforementioned rights might be limited under the GDPR or other applicable data protection legislation.

9. Links, Widgets & Third‑Party Services (including social media)
The Website may contain links, icons, buttons, or widgets that redirect you to websites or online services operated by third parties, including, but not limited to, social media platforms (such as LinkedIn, Facebook, or similar services), professional networks, business partners, or other external resources. By clicking on such links or activating such widgets, you will be redirected to the relevant third‑party website and leave the Website. TotalEnergies Marketing Hellas S.A. does not control and is not responsible for the content, availability, or personal data processing practices of these third parties, which are governed by their own terms of use and privacy policies. Users are encouraged to review the applicable privacy and data‑protection policies of such third parties before interacting with their services.

10. Contact
For any questions regarding the protection of personal data or in order to exercise your above-mentioned rights, you can contact TotalEnergies Marketing Hellas S.A.  at: [email protected] . 
You also have the right to lodge a complaint with the Greek Data Protection Authority Hellenic Data Protection Authority .