Privacy Policy
Data Protection
Table of Contents
─ Preface
─ Concepts and Definitions
─ Principles Governing Data Processing
─ Personal Data
─ Retention and Destruction
─ Transfers
─ Links to third-party websites
─ Online ticket sales
─ Your Rights
─ Personal Data Breach
─ Update
─ Aren't you sure?
_____________________________________________________________________
General Data Protection Regulation
This notice informs the User of the terms and conditions governing the collection and processing of their personal data by the Eugenides Foundation (EF) as the owner of all rights to the website www.eef.edu.gr and the Data Controller of said personal data.
The EF, as the Data Controller, in accordance with General Regulation 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016, on the protection of natural persons with regard to the processing of and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR” or “Regulation”), effective as of May 25, 2018, maintains a personal data file in full compliance with applicable law.
Protecting your privacy and personal data is a priority for EF, in the sense that it is committed to ensuring that, in the event it is required to retain your personal data, it will be stored securely by taking the appropriate organizational and technical measures to ensure full compliance with the requirements of the GDPR and the relevant legislation in force.
EF respects privacy and confidentiality and is committed to taking all reasonable measures to ensure that your personal data is protected, while also keeping you informed about its use.
The Privacy Policy describes the categories of personal data that the EF collects, the principles according to which it processes them, how it processes such data, as well as any transfers it may make.
In addition, the Privacy Policy describes your rights in detail, as well as how you can exercise them.
We hope that this Privacy Policy clearly explains how your personal data is processed. Nevertheless, our contact information is available so that you can contact us if you have any questions regarding your personal data. The EF will make every effort to respond to your inquiries in a timely manner.
Concepts and Definitions
To ensure that this Privacy Policy is concise and understandable to users, specific terms used in the Regulation have been included.
Personal Data: Any information relating to an identified or identifiable natural person, that is, a person whose identity can be ascertained directly or indirectly.
Processing: Any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, storage, alteration, retrieval, use, transmission, dissemination, combination, restriction, erasure, or destruction.
Data subject: The individual whose personal data is being processed—that is, you.
Data Controller: The natural or legal person, public authority, agency, or other body that determines the purposes and means of the processing of personal data, i.e., the EF.
Data processor: Any third-party service provider of the EF to whom it may entrust the processing of personal data on its behalf.
Supervisory Authority: The Personal Data Protection Authority.
Principles Governing Data Processing
At EF, any processing of personal data is carried out in accordance with the fundamental principles established by the Regulation:
Legality, Integrity, and Transparency: Personal data is processed in a lawful and legitimate manner and in a transparent way.
Limited Purpose: Personal data is collected for specific, explicit, and legitimate purposes and is not subject to further processing in a manner that is incompatible or abusive.
Minimization: Personal data must be appropriate, relevant, and limited to what is necessary to achieve the purposes of the processing.
Accuracy: We ensure that your personal data is accurate and take all reasonable measures on our part to keep it up to date.
Limited Retention Period: Personal data is retained only for as long as necessary for the purposes of processing personal data, or for a longer period if expressly provided for by applicable law.
Integrity and Confidentiality: Personal data is processed in a manner that ensures its security and protection against unauthorized or unlawful processing, as well as accidental loss or destruction.
Personal Data
The personal data that the EF collects from you and processes is limited to the data it deems absolutely necessary for the purposes mentioned above, as well as for the effective fulfillment of its public benefit purpose.
More specifically, the type of personal data we request from you depends on the nature of the processing. The Eugenides Foundation, in pursuit of its public-benefit mission and in the course of carrying out its activities, may request the following:
* Contact Information (Full Name, Phone Number, Email Address, etc.).
* Unique Identifiers (e.g., Identification Number).
* Information regarding your visit to the Foundation's premises or our website (IP address, browser type, etc.).
* With regard to emails that are sent: The information the User provides when sending an email (such as, for example, their email address and full name).
* Regarding the information required to subscribe to the newsletter: Personal data entered in the designated section of the Website (email address).
Purposes of processing:
a) To assist the User while navigating the Website. b) To keep the User informed about news, programs, events, announcements, and, in general, the activities of the EF. c) To present and report on the EF’s charitable work within the framework of its charitable purpose. d) To protect the interests of the EF and fulfill its obligations under the law; and e) To fulfill its public benefit purpose and carry out its activities.
By submitting a consent form, each Data Subject provides consent for the collection, storage, and general processing of the personal data they provide by the Eugenides Foundation, having first been informed of the purpose of the collection and processing, as well as of the measures taken to protect such data.
Consent may be withdrawn at any time by a statement from the Data Subject, without the need to notify the Eugenides Foundation in advance.
Retention and Destruction
The Eugenides Foundation will retain your personal data only for as long as necessary to fulfill the purposes of the processing, to fulfill its public benefit purpose, and to demonstrate fulfillment of its purpose to public and other competent authorities. However, there may be times when we need to retain your personal data for longer periods due to a legal obligation with which we are required to comply.
Retaining personal data for longer than is strictly necessary is contrary to the principles of data minimization and necessity; therefore, once the processing is complete or the retention period specified by law has expired, your personal data will be deleted.
Please note that when personal data and confidential documents are deleted, a document shredder is used (a device that shreds paper into small, unreadable pieces) to ensure the confidentiality of your information even during the destruction process.
Data transmission
The personal data collected and processed by the Eugenides Foundation is not shared or disclosed in any way to third parties, unless such a transfer is expressly required by law.
As part of the EF’s commitment to the principle of transparency and in order to effectively fulfill its public benefit purpose, it may be necessary to share your personal data with our third-party partners. This transmission will be carried out after you have been notified and after your consent has been obtained.
Links to third-party websites
EF is not responsible for the content or privacy policies of third parties whose websites are linked to from our website. You should review the privacy policies of each website before providing your personal information.
Online Ticket Issuance
Users can purchase tickets online through the website www.eef.edu.gr using: (a) credit, debit, and prepaid cards such as Visa, MasterCard, American Express, and Diners, and (b) the MasterPass digital wallet.
The terms of use for electronic tickets apply to the issuance of electronic tickets.
For all payments made using cards, the user's personal data (card/account number) is processed through the "Alpha" online payment platform
EF retains only users' contact information to send updates regarding its activities and to send tickets and receipts for ticket purchases.
YOUR RIGHTS
Right of Access
You have the right to request confirmation as to whether or not your personal data is being processed and, if so, you have the right to access it and to receive copies of it.
Right to Correction
You have the right to request the correction of any inaccurate personal data concerning you.
Right to Be Forgotten
You have the right to request the deletion of your personal data. EF will respond to your request and, if applicable, will delete the information if any of the following apply:
* Your personal data is no longer necessary for the purposes of processing.
* You have withdrawn your consent.
* You object to the processing, and there are no legitimate grounds for the processing.
* Personal data has been processed unlawfully.
* Personal data must be deleted in compliance with a legal obligation.
However, please be aware that there may be cases in which the EF is unable to grant your request because it is required to
retain them due to a legal obligation. In this case, it will not be able to delete your data until the conflicting legal obligation has been fulfilled or lifted.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data when:
* The integrity of the personal data is in question.
* The processing is unlawful, and you object to the erasure of your personal data.
* EF no longer needs the personal data for the purposes of processing.
Right to Portability
You have the right to receive the personal data concerning you from EF in a structured, commonly used, and machine-readable format, as well as the right to have that data transmitted to another data controller when the processing is based on your consent.
Right to File a Complaint
Without prejudice to any other administrative or judicial remedies available to you under the law, the data subject has the right to file a complaint with the Personal Data Protection Authority if he or she believes that the processing of personal data violates his or her rights and freedoms.
To exercise any of the rights listed above, please contact us using the contact information provided in the “Contact Information” section of this Privacy Policy.
Personal Data Breach
In the event of a breach of the security and integrity of your personal data, the EF will assess the following:
* Assessment of the risk and its impact on your rights and freedoms.
* Steps and actions to mitigate the breach.
* Timely notification of the breach to the Personal Data Protection Authority, where required.
* Take appropriate measures to prevent a relapse.
In the event of any violation, our Public Benefit Foundation’s actions will be guided by your rights and freedoms. Where appropriate, the EF will consult with the Personal Data Protection Authority regarding the most effective way to handle the incident.
Update
The Privacy Policy may be amended from time to time to keep pace with changes and amendments to the regulatory framework. Your EF
We encourage you to check his website periodically so that you can see any updates to this document.
Not sure?
We hope this Privacy Policy has made it clear to you how we at EF process your personal data. However, if you still have any questions or need further information, please use the contact information below. Furthermore, if, in your capacity as a Data Subject, you wish to exercise the aforementioned rights, please send an email to info@eef.edu.gr or a letter to the following address:
Name: Eugenides Foundation
Headquarters: 387 Syggrou Avenue, Palaio Faliro, ZIP Code 17564
Tax ID Number: 090003404
Phone: (+30) 210-9469642
FAX: (+30) 210-9417372
e-mail: info@eef.edu.gr
Website: www.eef.edu.gr
Please be advised that prior verification of your identity is required for us to take any further action regarding your portability or access requests.