Evalion Consulting Ltd (hereinafter “Evalion”) in our capacity as data controller we are committed to protecting the personal data of everyone, we interact with, including active and former customers and employees, service users, service providers and suppliers.
This policy outlines how we collect and process your data in accordance with the EU General Data Protection Regulation (GDPR) 2016/679 and Greek Law 4624/2019. Personal data includes any information that identifies you, such as your name, contact details, ID numbers, financial information, or digital identifiers like cookies and log files, as defined by applicable data protection laws.
1. Who We Are
EVALION is a premier provider of competency and skills assessment solutions. We support organizations and individuals in the evaluation of both soft and hard skills through our comprehensive suite of online and offline methodologies, specialized services, and platforms.
Address: 10 Skoufa str., Kolonaki, 10673 – Athens, Greece
Telephone: +30 210 8839938
Website: http://evalion-shl.com
Data Protection Officer: dpo@evalion.gr
2. What personal data we process and where we collect it from
We collect and process only the necessary personal data to fulfil our services and legal obligations. This data may include:
– Identification Data: Name, surname, VAT number, social security, age
– Contact Information: Physical and email addresses, phone
– Financial Data: Bank details, credit/debit/prepaid card
– Usage Data: Internet search history, cookies, log data
Data is primarily collected directly from you or through your employer (if applicable) to execute contracts or to provide services.
3. Data concerning children
EVALION does not process the personal data of individuals under the age of 18, except for specialized initiatives such as vocational guidance programs. In these specific instances, processing is conducted only upon receiving the explicit consent of a parent or legal guardian.
4. Special categories of personal data
Data of this nature encompasses information that discloses racial or ethnic background, political views, religious or philosophical convictions, and trade union affiliation. It also includes genetic or biometric details, health-related information, and data regarding an individual’s sexual orientation or sex life.
Pursuant to client contracts or specialized programs, EVALION processes such data exclusively upon receiving explicit consent for defined objectives, including psychometric assessments for recruitment or professional development initiatives. Findings are securely transmitted to the designated client, and no personal data is retained once the specific purpose of processing has been fulfilled.
5. Legal basis for processing
EVALION is dedicated to safeguarding your privacy and ensuring transparent data management. Consequently, we process personal data in compliance with the GDPR and Greek data protection legislation based on at least one of the following legal grounds:
A. For the execution of a contract
We process personal information to facilitate transactions and deliver our services in accordance with our Terms of Service. This also encompasses the contracting phase with prospective clients and partners. The specific nature of data processing is dictated by the requirements of each service, with further details provided in the respective contractual terms.
B. For compliance with legal obligations
EVALION is subject to various legal and regulatory mandates, including tax, and social insurance laws, as well as the Digital Services Act (DSA). These obligations necessitate processing activities for identity verification, compliance with judicial orders.
C. For protecting legitimate interests
Data processing is conducted to protect the legitimate interests of EVALION or third parties. Such an interest is present when there is a clear business justification for using your data, provided it does not override your fundamental rights. Representative processing activities include:
• The deployment of CCTV surveillance to deter criminal activity and ensure the safety of personnel and property.
• The establishment and defence of legal claims.
• Maintaining robust system security measures.
• Operational expansion and the development of specialized services.
• Client communications regarding new professional offerings and specialized insights.
• Provision of technical and infrastructure support.
D. Because you have given your consent
Provided that you have given us your specific consent for processing (other than for the reasons set out hereinabove) then the lawfulness of such processing is based on that consent. You have the right to revoke consent at any time. However, any processing of personal data prior to the receipt of your revocation will not be affected.
6. Data disclosure and sharing
To fulfil our contractual, statutory, and operational obligations, personal data may be shared internally across various EVALION departments. Furthermore, personal data may be disclosed to authorized third-party service providers and vendors who assist in the provision of our services. These external parties are strictly bound by Data Processing Agreements (DPAs) to uphold rigorous confidentiality standards and comply fully with national and EU data protection regulations (GDPR). Data may also be disclosed as legally mandated or upon receipt of your explicit, documented consent. All appointed external data processors are contractually obliged to adhere to the provisions of the GDPR. Categories of data recipients include:
• Evaluation and psychometric platforms.
• External consultants and legal advisors.
• External accounting firms.
• Specialized IT and infrastructure support providers.
7. International data transfers
EVALION does not currently transfer personal data to countries outside of the European Economic Area (EEA).
8. Data retention period
Pursuant to the principle of storage limitation, we shall retain and process personal data for the duration of the contractual relationship and as strictly required for compliance with legal or regulatory obligations. Destruction or erasure of data shall occur upon the fulfilment of any of the following conditions:
• The data is no longer requisite for the initial specified purpose of processing.
• A valid request for erasure or objection is received, absent compelling and overriding legitimate grounds for continued retention.
• The legal necessity for mandatory retention ceases to exist.
• Withdrawal of the data subject’s explicit consent, where such consent constituted the sole legal basis for processing.
9. Profiling and automated decision-making
Pursuant to Article 22 of the GDPR, EVALION does not employ automated decision-making processes, including profiling, that produce legal effects or significantly affect data subjects. However, limited automated processing may be utilized solely for the preliminary assessment requisite for the establishment and execution of a commercial relationship.
10. Marketing activities and personal data use
Pursuant to our operational objectives, EVALION may process personal data to facilitate communications regarding professional services and specialized commercial offerings pertinent to you or your organization. The legal grounds for such processing are established either through your explicit consent or our legitimate interests, utilizing data obtained directly or during the provision of services. In accordance with applicable regulations, you maintain the absolute right to object to such processing, including any profiling related to direct marketing, at any time
11. Your data protection rights
Pursuant to the GDPR, you maintain the following rights regarding the personal data we process:
1. Right of Access: You may request a copy of the personal data held by us to verify the lawfulness of our processing activities. To facilitate such a request, please contact the Data Protection Officer of more.com at 2117609105 or via email at dpo@evalion.gr.
2. Right to Rectification: This entitlement allows for the correction of any inaccurate or incomplete personal information within our records.
3. Right to Erasure: Also referred to as the “right to be forgotten,” this allows you to request the deletion of personal data when no overriding justification for continued processing exists.
4. Right to Data Portability: You are entitled to receive your personal data in a structured, machine-readable format or to request its direct transfer to another designated organization.
5. Right to Object: You may object to data processing based on legitimate interests due to your particular situation. In such cases, processing will cease unless compelling legitimate grounds are demonstrated. This also includes an absolute right to object to processing for direct marketing and related profiling.
6. Right to Restriction: You may request that we limit the use of your data to specific circumstances, notably if the accuracy is contested, the processing is unlawful, but erasure is not desired, the data is needed for legal claims, or while a verification of legitimate grounds is pending.
7. Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. This withdrawal does not affect the lawfulness of processing conducted prior to revocation. To exercise these rights, please contact our Data Protection Officer at dpo@evalion.gr
12. Lodging a complaint with supervisory authorities
Prior to initiating a formal complaint, we encourage you to contact us directly to exercise your data protection rights under the GDPR. Should your request remain unresolved to your satisfaction, you maintain the absolute right to lodge a formal complaint with the Hellenic Data Protection Authority via their portal at www.dpa.gr.
13. Security of personal data
To ensure the robust protection of your privacy, EVALION deploys highly trained personnel and implements stringent security protocols. Our comprehensive technical and organizational safeguards encompass advanced encryption, pseudonymization, firewall protection, and multi-level access controls, all of which are subject to regular auditing. Authorized partners granted access to data are strictly confined to the objectives delineated within this Policy, and information disclosure is restricted exclusively to the instances specified herein.
14. Use of cookies
Pursuant to the provisions of the E-Privacy Directive 2009/136/EC, our website utilizes “cookies” to facilitate the analysis of site functionality and performance. For comprehensive details regarding these mechanisms, please refer to our dedicated cookies policy (https://www.evalion-shl.com/cookies-policy/).
15. Policy enforcement and revisions
This Policy became effective on 15/05/2026 and is subject to periodic, necessary review. Pursuant to EVALION’s commitment to transparency, any subsequent revisions shall be deemed applicable to all personal data currently held and all information collected from the date of the revision’s publication. The data subject’s continued utilization of EVALION’s digital platforms following the official dissemination of such updates shall constitute formal acceptance of the revised terms.