Privacy Policy
Last Updated: January 2025

Introduction

Thank you for visiting our website, owned and operated by CS Compass Executive Consultants L.P. (hereinafter referred to as “the Company”), with registered offices at 6 Fidiou Street, Athens, Greece, VAT number EL802320160, legally represented by Mr. Spyridon Christodoulatos, Managing Partner. The Company provides Executive Search and Leadership Advisory services.

Definitions

Personal Data: Any information that directly or indirectly identifies an individual (e.g., name, email, IP address, location data, purchasing habits).

Processing of Personal Data: Any operation performed on personal data, such as collection, storage, retrieval, transmission, or deletion.

Data Controller: The entity that determines the purposes and means of processing personal data (CS Compass).

Data Processor: The entity processing personal data on behalf of the Data Controller.

Third Party: Any individual or entity other than the data subject, Data Controller, or Data Processor.

Data Controller

CS Compass determines the objectives and methods of personal data processing. For any requests regarding your data, contact us at:
Email: info@cscompass.gr
Address: CS Compass Executive Consultants L.P., Fidiou 6, Athens, Postal Code 106 78, Greece

What Personal Data We Collect

 

1. Automatic Collection (Website Visit)

When you visit our website, we may collect:

Time, date, and duration of visit

User location (city, country)

Device information (browser, operating system, IP address)

Activity logs (URL redirections, usage analytics, errors)

Language preferences

 

2. Newsletter Subscription

Full Name

Email Address

 

3. Communication (Contact Form, Email, Phone)

Full Name

Email Address

Phone Number (if provided)

Message Content

 

4. Cookies & Tracking Technologies

Our website uses cookies to enhance user experience and analyze traffic. Some cookies are essential for website functionality, while others require user consent.
Manage your cookie preferences in our Cookie Policy or via the cookie settings banner.

 

5. CV Submission (Job Applications)

Candidate name, contact details, education, work experience, and other CV data

Stored for 5 years unless requested for deletion

Legal Basis for Processing

Processing Activity	Legal Basis (GDPR)
Website visit data collection	Consent (Art. 6(1)(a))
Contact & inquiries handling	Contractual necessity (Art. 6(1)(b))
Security monitoring (IP logging)	Legitimate interest (Art. 6(1)(f))
CV storage & recruitment	Consent (Art. 6(1)(a)), Legitimate interest (Art. 6(1)(f))

Data Retention Period

Log files: 24 months

Contact form/email inquiries: 24 months from last communication

CVs: 5 years (candidates may request deletion earlier)

Cookies: Per browser settings (see Cookie Policy)

Legal/administrative actions: Data may be retained longer if required by law

Data Sharing & Transfers

We share personal data only when necessary, under strict security controls. Recipients include: IT Service Providers (website hosting, cloud storage, analytics)
Recruitment Clients (for CV submission with candidate consent)
Regulatory Authorities (if required by law)

We do not sell, rent, or share personal data for marketing purposes.

International Transfers

If data is transferred outside the EU/EEA, we ensure compliance through:

EU Commission Adequacy Decisions

Standard Contractual Clauses (SCCs)

Binding Corporate Rules (BCRs)

Security Measures

We implement technical and organizational measures to protect data from unauthorized access, loss, or misuse, including:
SSL encryption for secure website browsing
Access controls for authorized personnel only
Regular security audits and risk assessments

Your Rights Under GDPR

You have the right to:
Access: Request a copy of your personal data
Rectification: Correct inaccurate or outdated data
Erasure: Request deletion of your personal data (subject to legal retention requirements)
Restrict Processing: Limit how your data is used
Data Portability: Transfer data to another service provider
Object to Processing: Stop processing for direct marketing purposes
Withdraw Consent: Revoke consent at any time
File a Complaint: Contact the Greek Data Protection Authority:
1-3 Kifisias Ave., 115 23, Athens
+30 210 6475600
Email: contact@dpa.gr

To exercise your rights, email info@cscompass.gr with your request. We will respond within 30 days (extendable by 60 days if necessary).

Data Breach Notification

In the unlikely event of a personal data breach, affected individuals and authorities will be notified within 72 hours, in accordance with GDPR regulations.

Changes to This Privacy Policy

We may update this policy periodically. Check the “Last Updated” date at the top for recent changes. If major updates affect how we process your data, we will notify you and seek consent where required.

Contact Us

For any privacy-related concerns, contact:
Email: info@cscompass.gr
Address: CS Compass Executive Consultants L.P., Fidiou 6, Athens, Postal Code 106 78, Greece

Your privacy matters to us!