Privacy & Cookie Policy
Welcome to lmw.gr, a website administered by LMW S.A., having its registered offices in 208 Kifisias Avenue, Halandri 152 31, Greece (“we”, “us”, “our” “LMW”). Use of our website is subject to the Terms and Conditions and to the present Privacy Policy. Our Privacy Policy has been updated to ensure compliance with the EU General Data Protection Regulation (GDPR).
Via your use of our website you unconditionally declare that you have reviewed, understood and accepted all terms included in the Terms and Conditions and the Privacy Policy. If you do not agree with any of the terms included in the Terms and Conditions and/or the Privacy Policy, you must refrain from browsing and using our website and its services. The Privacy Policy may be amended from time to time without prior notice to you. We encourage you to regularly review the present terms, as your continued use of our website implies that you have accepted such amendments.
LMW is committed to respecting and protecting your privacy. This Privacy Policy describes how LMW, as controller within the meaning of GDPR and the ePrivacy Regulation, collects and processes the personal data and other information of the users of our website and how our website uses cookies.
Types of data collected and how we use it
When you visit or browse our website, when you contact us and when you order a service, we may collect and process certain data in order for you to be able to benefit from the functionalities and services offered via the website. Our website is not intended for children and we do not knowingly collect personal data relating to children. Personal data includes any information about you from which you can be, directly or indirectly, identified.
Data collected directly by you
We may collect some of your personal data for communication purposes, such as to answer your requests for information and in order to better understand your expectations and needs. More specifically, when you use the “Contact Us” and “Call back” forms of our website, we collect and process information about you that you directly provide to us, which may include: name, email address, phone number, the service you are interested in and the content of the communication that you address to us. We will use this information to communicate with you and provide our services to you.
When you purchase a service, e.g. when you book a seminar (“Career Seminar”, “Personal Career Coaching”, “CV Writing”), we will process certain data about you, including your registration details. Payment by card is processed through the electronic payment platform of “Alpha e-Commerce” of Alpha Bank and uses TLS 1.2 encryption protocol encryption with 128-bit (Secure Sockets Layer – SSL); LMW does not collect and process your billing details.
We will also collect and process certain information about you when you send us your CV and when you apply for a job, e.g. your identification and contact information and information on your education and experience. A separate privacy policy applies in this case, which is available here.
Data collected using cookies and other tracking technologies
We also use cookies and other tracking technologies and we may collect information about how you use our website, technical data (including data and time of access, data volume transmitted, status of transmission, browser type, version and language, browser plug-in types and versions, your internet protocol (IP) address, operating system and interface, time zone setting and location, language and version of browser software) and profile data, including your referral website, pages you visit, actions you take, patterns of page visits and information from forms you fill in. On the basis of your prior consent, we may use your data in order to deliver advertising relevant to you based on the use of cookies. For further details on this and how to opt-out of such processing, please see the ‘Cookies and other tracking technologies‘ section of this Privacy Policy.
Data collected by third parties
We receive some of the above-mentioned technical data from analytics providers such as Google.
Aggregated data
We may process aggregated data, such as statistical or demographic data, for any purpose. While aggregated data may be derived from your personal data, these are not considered personal data as such data does not directly or indirectly reveal your identity (e.g. we may aggregate your usage data to calculate the percentage of users accessing a specific website feature); however, if we combine aggregated data with your personal data so that it can directly or indirectly identify you, we shall treat the combined data as personal data which will be used in accordance with this notice.
We do not knowingly collect any special categories of personal data about you through our website, e.g. information about your health, race or ethnicity, religious or philosophical beliefs, sex life, etc.
How we share your data
Service Providers
LMW may engage external service providers, who act as a data processor of LMW, to provide certain services to LMW, such as recruiting service providers (Workable), website service providers, marketing service providers or IT support service providers. When providing such services, the external service providers may process your personal data.
Other recipients
LMW may transfer, in compliance with applicable data protection laws, personal data to law enforcement agencies, governmental authorities, legal counsels or external consultants. In case of a corporate merger or acquisition, personal data may be transferred to the third parties being involved in the merger or acquisition.
International Transfers of Personal Data
LMW transfers personal data in accordance with applicable laws. To the extent that, in the context of and for the needs of the above-mentioned purposes, your personal data need to be transferred outside the EU/EEA, such data transfer will take place in accordance with applicable law and LMW will ensure an adequate level of data protection. By way of entering into appropriate data transfer agreements based on Standard Contractual Clauses (2010/87/EC and/or 2004/915/EC), which are accessible upon request at legal@lmw.gr, or taking other measures to provide an adequate level of data protection, LMW has established or confirmed that all data recipients will provide an adequate level of protection for your personal data. Any onward transfer will be subject to appropriate onward transfer requirements, as required by applicable law.
How we use cookies and other tracking technologies
Our website uses cookies, therefore when you visit the website, a cookie may be installed in your device. A cookie is a small text file that is downloaded onto ‘terminal equipment’ (e.g. your computer or smartphone) when you accesse the website. It allows the LMW to recognize your device, gather information about your usage patterns when you navigate our website, store some information about your preferences or past actions, improve your online experience and enhance your personalized experience. Cookies may also be used in order to provide advertising tailored to your interests on websites you visit and to analyze the effectiveness of such advertising.
You can opt in or out of cookies at any time – except strictly necessary cookies (these are used to help make our website work efficiently) and you can delete cookies installed on your device at any time, prevent new cookies being saved and receive notification before installation of a new cookie by configuring your browser software.
When certain types of cookies require your prior consent in order be installed and used, you are asked through a relevant banner displayed on the front page of the website. If you choose not to enable or delete certain cookies, you’ll still be able to browse our website, but it will restrict some of the functionality of our website.
Types of cookies
We may use ‘persistent’ cookies as well as ‘session-based’ cookies. A ‘persistent’ cookie will remain for a period of time set for that cookie. A ‘session-based’ cookie is allocated only for the duration of your visit to our website and automatically expires when you close down your browser.
| A | Strictly necessary cookies | Used to help make our website work efficiently and enable you to browse around our website and use its features; used e.g. to keep track of your input when filling online forms over several pages and help us ensure that the content of your page loads quickly and effectively by distributing the workload across numerous computers (load balancing). | These cookies are session cookies that are erased when you close your browser. |
| B | Analytical/ performance cookies | Used to analyse the way our website works and how we can improve and optimize it; e.g. for statistical audience measuring, to estimate the number of unique visitors, to detect the most preeminent search engine keywords that lead to a webpage or to track down website navigation issues. | We use such cookies only on the basis of your prior consent. These are typically persistent cookies, because they remain on your device for us to use during a next visit to our website. For information on how to delete these cookies, please refer below to ‘How do I change my cookie settings?’ section of this Privacy Policy. |
| C | Functionality cookies | Help to enhance your experience by doing things like remembering preferences, choices you make while browsing or past actions; e.g. such cookies may remember preferences such as text size, fonts, and other customizable site elements. | We use such cookies only on the basis of your prior consent. These are typically persistent cookies, because they remain on your device for us to use during a next visit to our website. For information on how to delete these cookies, please refer below to ‘How do I change my cookie settings?’ section of this Privacy Policy. |
| D | Targeting/advertising cookies | Used to share some information with third parties who we advertise with, so we know how you’ve reached our website. These cookies record your visit to our website, the parts of the website you have visited and you are interested in and the links you have followed to recognize you as a previous visitor and to track your activity on our website and other websites you visit. This information is used to show you advertisements we think may be of interest to you, to tailor how we communicate with you, or to tailor the contents of the communications we send to you. | We use such cookies only on the basis of your prior consent. These are typically persistent cookies, because they remain on your device for us to use during a next visit to our website. For information on how to delete these cookies, please refer below to ‘How do I change my cookie settings?’ section of this Privacy Policy. |
LMW cookies (first-party cookies):
| Source | Name | Type – Purpose | Retention | Category |
| www.lmw.gr | _icl_current_language | This cookie name is associated with a WordPress multilingual plug-in from WPML. It stores a language value for the website. Where the cookie is set in response to a user action or request, and as long as it has a short lifespan, it can be treated as strictly necessary. | A | |
| www.lmw.gr | PHPSESSID | Cookie generated by applications based on the PHP language. This is a general purpose identifier used to maintain user session variables. It is normally a random generated number, how it is used can be specific to the site, but a good example is maintaining a logged-in status for a user between pages. | A | |
| www.lmw.gr | __utma | This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour and measure site performance. This cookie lasts for 2 years by default and distinguishes between users and sessions. It is used to calculate new and returning visitor statistics. The cookie is updated every time data is sent to Google Analytics. The lifespan of the cookie can be customised by website owners. | 2 years | B |
| www.lmw.gr | _gat | This cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate – limiting the collection of data on high traffic sites. It expires after 10 minutes. | 10 minutes | B |
| www.lmw.gr | __utmz | This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour measure of site performance. This cookie identifies the source of traffic to the site – so Google Analytics can tell site owners where visitors came from when arriving on the site. The cookie has a life span of 6 months and is updated every time data is sent to Google Analytics. | 6 months | B |
| www.lmw.gr | __utmc | This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour and measure site performance. It is not used in most sites but is set to enable interoperability with the older version of Google Analytics code known as Urchin. In this older versions this was used in combination with the __utmb cookie to identify new sessions/visits for returning visitors.
When used by Google Analytics this is always a Session cookie which is destroyed when the user closes their browser. Where it is seen as a Persistent cookie it is therefore likely to be a different technology setting the cookie. | Session | B |
| www.lmw.gr | _ga | This cookie name is asssociated with Google Universal Analytics – which is a significant update to Google’s more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default it is set to expire after 2 years, although this is customisable by website owners. | 2 years | B |
| www.lmw.gr | __utmb | This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour and measure site performance. This cookie determines new sessions and visits and expires after 30 minutes. The cookie is updated every time data is sent to Google Analytics. Any activity by a user within the 30 minute life span will count as a single visit, even if the user leaves and then returns to the site. A return after 30 minutes will count as a new visit, but a returning visitor. | 30 minutes | B |
| www.lmw.gr | _gid | This cookie name is asssociated with Google Universal Analytics. It stores and updates a unique value for each page visited. | B | |
| www.lmw.gr | __utmt_UA-nnnnnnnn | This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It is a variation of the __utmt cookie which is used to limit the amount of data recorded by Google on high traffic volume websites. | B |
Third party cookies:
| Source | Name | Type – Purpose | Retention | Category |
| datr | This domain is owned by Facebook, which is the world’s largest social networking service. As a third party host provider, it mostly collects data on the interests of users via widgets such as the ‘Like’ button found on many websites. This is used to serve targeted advertising to its users when logged into its services. In 2014 it also started serving up behaviourally targeted advertising on other websites, similar to most dedicated online marketing companies. This cookie identifies the browser connecting to Facebook. It is not directly tied to individual Facebook the user. Facebook reports that it is used to help with security and suspicious login activity, especially around detection of bots trying to access the service. Facebook also say the behavioural profile associated with each datr cookie is deleted after 10 days. This cookie is also read via Like and other Facebook buttons and tags placed on many different websites. | 10 days | D | |
| fr
| This domain is owned by Facebook, which is the world’s largest social networking service. As a third party host provider, it mostly collects data on the interests of users via widgets such as the ‘Like’ button found on many websites. This is used to serve targeted advertising to its users when logged into its services. In 2014 it also started serving up behaviourally targeted advertising on other websites, similar to most dedicated online marketing companies. Contains browser and user unique ID combinaton, used for targeted advertising. | 2 years | D | |
| APISID
| This domain is owned by Google Inc. Although Google is primarily known as a search engine, the company provides a diverse range of products and services. Its main source of revenue however is advertising. Google tracks users extensively both through its own products and sites, and the numerous technologies embedded into many millions of websites around the world. It uses the data gathered from most of these services to profile the interests of web users and sell advertising space to organisations based on such interest profiles as well as aligning adverts to the content on the pages where its customer’s adverts appear. | 2 years | D | |
| SSID | This domain is owned by Google Inc. Although Google is primarily known as a search engine, the company provides a diverse range of products and services. Its main source of revenue however is advertising. Google tracks users extensively both through its own products and sites, and the numerous technologies embedded into many millions of websites around the world. It uses the data gathered from most of these services to profile the interests of web users and sell advertising space to organisations based on such interest profiles as well as aligning adverts to the content on the pages where its customer’s adverts appear. | 2 years | D | |
| lu
| This domain is owned by Facebook, which is the world’s largest social networking service. As a third party host provider, it mostly collects data on the interests of users via widgets such as the ‘Like’ button found on many websites. This is used to serve targeted advertising to its users when logged into its services. In 2014 it also started serving up behaviourally targeted advertising on other websites, similar to most dedicated online marketing companies. Used to manage the login process, remembers user on return visit if they choose to stay logged in. | 2 years | D | |
| PREF | This domain is owned by Google Inc. Although Google is primarily known as a search engine, the company provides a diverse range of products and services. Its main source of revenue however is advertising. Google tracks users extensively both through its own products and sites, and the numerous technologies embedded into many millions of websites around the world. It uses the data gathered from most of these services to profile the interests of web users and sell advertising space to organisations based on such interest profiles as well as aligning adverts to the content on the pages where its customer’s adverts appear. This is a common Google cookie, used across several of their services. Stores user preference and can be used to personalise ads on google searches | 2 years | D | |
| SID | This domain is owned by Google Inc. Although Google is primarily known as a search engine, the company provides a diverse range of products and services. Its main source of revenue however is advertising. Google tracks users extensively both through its own products and sites, and the numerous technologies embedded into many millions of websites around the world. It uses the data gathered from most of these services to profile the interests of web users and sell advertising space to organisations based on such interest profiles as well as aligning adverts to the content on the pages where its customer’s adverts appear. This cookie is used by Google in combination with HSID to verify a Google user account and most recent login time. | 2 years | D | |
| SAPISID | This domain is owned by Google Inc. Although Google is primarily known as a search engine, the company provides a diverse range of products and services. Its main source of revenue however is advertising. Google tracks users extensively both through its own products and sites, and the numerous technologies embedded into many millions of websites around the world. It uses the data gathered from most of these services to profile the interests of web users and sell advertising space to organisations based on such interest profiles as well as aligning adverts to the content on the pages where its customer’s adverts appear. | 2 years | D | |
| by Doubleclick (Google) | id | This domain is owned by Doubleclick (Google). The main business activity is: Doubleclick is Googles real time bidding advertising exchange | 2 years | D |
| HSID | This domain is owned by Google Inc. Although Google is primarily known as a search engine, the company provides a diverse range of products and services. Its main source of revenue however is advertising. Google tracks users extensively both through its own products and sites, and the numerous technologies embedded into many millions of websites around the world. It uses the data gathered from most of these services to profile the interests of web users and sell advertising space to organisations based on such interest profiles as well as aligning adverts to the content on the pages where its customer’s adverts appear. Used by Google in combination with SID to verify Google user account and most recent login time | 2 years | D |
How do I change my cookie settings?
Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set, visit http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm, or www.aboutcookies.org or www.allaboutcookies.org.
Find out how to manage cookies on popular browsers:
Legal basis for the processing
We will only process your personal data when the law allows us to, that is, when we have a legal basis for processing. We may carry out the processing of your personal data on the following legal basis:
- You have provided your consent to the processing of your data for one or more specific purposes (e.g. for the installation and use of certain types of cookies);
- The processing is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering a contract (e.g. when you book a service);
- The processing is necessary for compliance with a legal obligation to which LMW is subject to;
- The processing is necessary for the purposes of the legitimate interests pursued by LMW (or those of a third party), provided that your fundamental rights do not override such interests; such legitimate interests include (a) monitoring in order to ensure the efficient and secure running of the website and fraud and misuse detection and prevention; (b) the improvement of our services and website; (c) monitoring how our website is used, e.g. via data analytics, to help us improve the layout and information available on our website, our services, marketing and customer relationship.
Not providing your personal data may in certain cases result in disadvantages for you, e.g. we may not be able to provide you will a service, or respond to your request, or provide you with marketing that we believe you would find valuable.
We do not use automated decision-making without human intervention, including profiling, in a way that produces legal effects concerning you or otherwise significantly affects you.
How long do we keep your data?
Your personal data will be retained for as long as necessary to fulfil the purposes we collected it for, e.g. for as long as necessary to provide you with the functionalities of the website and the services requested. Once the data processing purpose is completed, we will either delete your personal data or anonymize your personal data, unless statutory retention requirements apply.
Cookies are stored on a per-session basis only, to aid your navigation of our website. Persistent cookies may be set to store display related preferences. For further details on how to control cookies, please see the ‘Cookies and other tracking technologies‘ section of this Privacy Policy.
Data security
Considering the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing.
Your rights
If you have declared your consent regarding certain collecting, processing and use of your personal data, you can withdrawal this consent at any time with future effect. Pursuant to the applicable data protection law you may have the right (i) to request access to your personal data, (ii) to request rectification of your personal data, (iii) to request erasure of your personal data, (iv) to request restriction of processing of your personal data, (v) to request data portability, (vi) to object to the processing of your personal data (including objection to profiling; also other rights in connection with automated decision-making). You also have the right to lodge a complaint with the Greek Data Protection Authority. To exercise your rights please contact LMW by email at legal@lmw.gr.
How to contact us
If you have concerns or questions regarding this Privacy Policy or if you want to exercise any of your rights mentioned in the ‘Your rights’ sections of this Privacy Policy, please contact LMW by post at Leof. Kifisias 208, Halandri 152 31, Greece or by email at legal@lmw.gr. The contact details of our data protection officer (DPO) are: privacy@lmw.gr.
Updated: 05.11.2018
