1.1. Welcome to the privacy statement of “Vasilikianagnostouart.” This privacy statement serves as our Policy on the protection of personal data. We respect your privacy and are committed to protecting your personal data. Through this privacy statement, you are informed about how we handle your personal data when you entrust it to us—either as a simple visitor or user of the “Vasilikianagnostouart” website, or as a person who is interested in and requests to receive updates regarding the matters of “Vasilikianagnostouart.”
This privacy statement also provides information about your privacy rights and how you are protected under applicable law. On our part, we assume responsibility for the collection, management, and general processing of your personal data.
1.2. For any clarification regarding this privacy statement or the exercise of your legal rights, you can contact us directly using the following details:
“Vasilikianagnostouart,” Achilleos 7-9, 17562 P. Faliro, Tel: +30 210 9843303, Email: contact@vasilikianagnostouart.gr
2. Your Obligation to Inform Us of Any Changes
It is important that the personal data we hold about you is accurate and up to date. Therefore, through this statement, we ask that you inform us as soon as possible of any changes to your personal data that may occur during the course of your relationship with us.
3. Categories of Information We Collect
We reserve the right to collect, store, and generally process different types of personal data about you, which we have grouped as follows:
-Contact data, which may include postal address details, email address, and telephone numbers.
-Usage data, which may include information about how you use our website.
-Promotion and communication data, which includes your preferences regarding receiving promotional materials from us and third parties, as well as your communication preferences with us.
-Health data, when voluntarily provided by you, in order to make the organization of our programs, activities, and events as safe and effective as possible for everyone, as well as to tailor our programs, activities, and events to better meet your specific needs.
-Profile data (Profile creation)
When we send or display personalized notifications or content, we may use certain techniques referred to as “profiling”: That is, any form of automated processing of personal data that involves using such data to evaluate certain personal characteristics of an individual, particularly to analyze or predict aspects related to personal preferences, interests, behavior, location, health (in cases where medical data is voluntarily provided by you), reliability, or movements of that individual.
This means that we may collect personal data about you in the different scenarios mentioned above. These data are collected and analyzed to assess and predict your personal preferences and/or interests. Based on our analyses, we send or display notifications and/or content tailored to your interests/needs.
– The above data may include unique numerical identifiers, such as the IP address of your computer or the MAC address of your mobile phone, as well as cookies.
4. How We Collect Your Information
We collect personal data about you whenever you visit and browse our website, as well as whenever you express interest and request to receive updates about the matters of “Vasilikianagnostouart.”
5. Why We Process Your Information
We process your personal data only in legally permitted cases. In general, we process your personal data only when you express interest and request to receive updates about the matters of the website.
-In case it is necessary for the protection of our legitimate interests or for the protection of the legitimate interests of a third party, and your interests and fundamental rights do not outweigh the former interests.
-If we need to comply with a legal or regulatory obligation
– Where we have been expressly requested or consented by you to do so
You have the right to withdraw your consent to receive updates at any time by using the unsubscribe link at the bottom of any unsolicited email or alternatively by contacting us at the contact details set out in paragraph 1.2 of this statement.
6. Change of purpose
We will use your personal data solely for the purposes for which we collect it and for purposes compatible with those purposes. If you wish to obtain clarification on the compatibility of the latter purposes with the original purposes, you can contact us using the contact details in paragraph 1.2. If we should need to use your personal data for an unrelated or incompatible purpose, you will be informed by means of an amendment to this privacy statement.
7. Third-Party Links
Our website may include links to third-party websites, embedded microsites, plugins, and applications. If you choose or activate these links, you grant third parties the right to collect or share personal data about you. We cannot control third-party websites and are not responsible for their privacy statements. Therefore, whenever you use these links or microsites, or when you leave our website, we encourage you to read the privacy statement of the third parties mentioned above.
8. Cookies, web beacons and other similar technologies
Our website does not use “cookie” and “web beacon” technologies.
9. Who Else May Have Access to Your Information
We reserve the right to disclose your personal data to a third party either when you request it, or when you give us your prior or subsequent consent for such disclosure, or when we are required to do so by law, or when it is provided for by our privacy statement.
11. Countries that have access to your personal information
Our servers, which store and protect your information, are located within the European Economic Area (EEA).
12. Data Security
We implement appropriate protective measures, including encryption, anonymization, or pseudonymization procedures where deemed necessary, in order to prevent the accidental loss, alteration, disclosure, use, or access to your personal data in an unauthorized manner. Furthermore, we restrict access to your personal data to those employees and other third parties, such as our members and volunteers, who need to know the information in order to perform their professional or volunteer duties. All of the above individuals process your personal data solely in accordance with our instructions and are contractually committed to maintaining confidentiality.
We have procedures in place to handle any suspected personal data breaches and will notify both you and any competent authority or agency of any such breach. We will make the above notification both voluntarily and in those cases where we are required by law to do so.
13. Retention of Your Information
We retain your personal data for the purpose of using it in any future participation or requests for your participation in programs, activities, and events organized by us or our affiliates. Additionally, for cases where you may express interest in participation in the future or require us to notify you, as you have requested, about the conduct of our programs, activities, and events.
In general, we retain your personal data only as long as necessary to fulfill the purposes for which we collected it, including the fulfillment of any legal obligations or reporting requirements.
In determining the appropriate period of retention of personal data, we consider the quantity, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data, and whether we are able to fulfil those purposes by other means and in accordance with applicable legal obligations.
Details regarding the retention periods of different categories of your personal data are available upon contacting us using the contact details in paragraph 1.2.
In certain cases, we reserve the right to anonymize your personal data so that it cannot be associated with your identity, for statistical or research purposes. In this case, we reserve the right to use this information indefinitely without any obligation to notify you further.
14. Your Rights
You have the right to:
14.1. Request access to your personal data (“data subject access request”). This allows you to receive a copy of the personal data we hold about you and confirm that we process it in accordance with the law.
14.2. Request correction of the personal data we hold about you. This allows you to correct any incomplete or inaccurate data we hold about you. In this case, we reserve the right to ask you to verify the accuracy of the new data you provide to us.
14.3. Request the deletion of your personal data. This allows you to ask us to delete or remove your personal data when there is no legitimate reason, in your view, for us to continue processing it. You also have the right to request the deletion or removal of your personal data when you have successfully exercised your right to object to processing (you can refer to this right in the immediately following subsection), when we may have processed the information unlawfully, in your view, or when there is a need for compliance with local regulations. Please note, however, that we may not always be able to fulfill your deletion request for specific legal reasons, which we will notify you of if necessary, upon submission of your request.
14.4. Object to the processing of your personal data when we rely on our legitimate interest or the legitimate interest of a third party, and in this case, you have reason to object to the processing based on the above legitimate interest, as you believe it affects your fundamental rights and freedoms. You also have the right to object when we process your personal data for direct marketing purposes.
14.5. Request restriction of the processing of your personal data. This allows you to ask us to suspend the processing of your personal data in the following cases: (a) if you want us to verify the accuracy of the data, (b) when you believe the use of the data by us is unlawful, but you do not wish for us to delete it, (c) when you want us to retain your data even if we no longer need it, in case it is necessary for you to exercise, defend, or establish legal claims, (d) when you have objected to the use of your data by us, but we need to confirm whether we have overriding legitimate grounds for continuing to process it.
14.6. Request the transfer of your personal data to you or a third party. We will provide you, or a third party you indicate, with your personal data in a structured common machine-readable format. This right only applies to automated information for which you have given your consent for us to use.
14.7. Withdraw your consent at any time where our processing of your personal data is based on your consent. However, this is something that cannot affect lawful processing carried out in the period before you withdraw your consent. If you do withdraw your consent, it is possible that you may not be allowed to participate in our programmes, activities and events. We will ensure that we inform you in such a case at the time of withdrawal or after you withdraw your consent.
If you wish either to obtain clarification of your rights above or to exercise any of the rights described above, you can contact us at the contact details set out in paragraph 1.2 at the beginning of this statement.
15. Usually No Fee Required
You will not be required to pay any fee to access your personal data or to exercise any other related rights regarding your data. However, we reserve the right to charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we reserve the right to refuse to comply with your request in the same cases as mentioned above.
16. What we may need from you
We reserve the right to request certain information from you in order to confirm your identity and to ensure your right to access your personal data or exercise any other right. This is a protection measure, which is applied in particular for your benefit, as it ensures that personal data is not disclosed to any person who is not entitled to receive it. We also reserve the right to contact you for more information about your request in order to reduce our response time.
17. Response Time Limit
We strive to respond to all your legitimate requests within one (1) month. We may need more time than one month to respond to your request, especially if your request is particularly complex or if you have submitted a series of requests. In such cases, we will ensure that we inform you accordingly.
18. Complaint submission
You have the right to submit complaints to the supervisory authority in your country about personal data protection issues. In Greece, the competent authority is the Hellenic Data Protection Authority. However, we would greatly appreciate it if you would give us the opportunity to manage your concerns before you contact the Data Protection Authority. For this reason, you are therefore requested to contact us in advance using the contact details mentioned in paragraph 1.2.
19. Changes to the Privacy Statement
This version of the privacy statement was last updated on May 24, 2018. This statement replaces all previous versions and disclosures that we may have provided regarding our information practices. We reserve the right to modify this statement by making changes to the information previously collected, in accordance with legal requirements. In the event of future changes to this statement or our practices regarding information, you will be notified accordingly by publishing the changes on our website www.vasilikianagnostouart.gr (DATA PROTECTION POLICY – PRIVACY STATEMENT).
ANNEX I
Definitions
Personal data refers to information that can be associated with an individual. Data is considered personal if the individual it pertains to can be identified, either directly or indirectly. Relevant examples include the person’s full name, identity card number, date of birth, location data, and contact details. Data from which identifying information has been removed (anonymous data) is not included.
Sensitive personal data or special categories of data are data such as: religious, ideological, political opinions or actions, health information, gender or biometric data, racial or ethnic origin, practices or sanctions of a criminal nature.
Profiling is any form of automated processing of personal data, where personal data is used to evaluate specific personal characteristics related to an individual.
A data subject is a natural person to whom personal data are connected.
.
Data processing is any activity, operation or set of operations which is performed on personal data or on sets of personal data, whatever the process and means (whether or not automated) by which it is carried out, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, revision, disclosure by transmission, dissemination, alteration, storage, retrieval, consultation, use, review, disclosure by transmission, alteration or use of personal data.
A data file is any structured set of personal data that is accessible in such a way that it allows the identification of the individual to whom the data pertains.
Disclosure means access by a third party, unauthorised or unauthorised person, to personal data.
Data protection impact assessment is a systematic process for identifying, evaluating, and documenting the risks and impact of personal data processing activities on the rights of individuals.
The data controller is the legal entity that decides on the purpose and means of processing personal data.
A processor is the natural or legal person who processes personal data on behalf of the data controller.
DECLARATION OF RESIGNATION
Vasilikianagnostouart
VERSION 15.04.2024