PRIVACY POLICY WEBSITE

PRIVACY POLICY

Centre for Research and Technology Hellas (CERTH) pays special attention to the privacy and personal data protection of individuals. For this reason, it applies this policy, which sets out the manner in which it processes and safeguards the personal data of visitors/users of its website.

This policy is fully compliant with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (the “GDPR”) and Greek legislation (Law 4624/2019) and aims to inform you about how CERTH collects and processes your personal information when you use and navigate through the website eketa25.gr.

 

Data Controller

CENTRE FOR RESEARCH AND TECHNOLOGY HELLAS (CERTH)

6th Km Charilaou - Thermi Road, 57001, Thessaloniki, Greece, tel. 2310 498100, email: This email address is being protected from spambots. You need JavaScript enabled to view it..

 

Categories of Personal Data, Purposes and Legal Basis for the processing

When you visit the website, CERTH collects and processes the following personal data:

1) When you fill in the electronic contact form, the following data are requested: name and email address. In this case, CERTH may also collect and process any other personal information that you voluntarily provide through the free text field. Such data are processed in order to respond to contact requests and to provide you with the requested information or services. The legal basis for this processing is our legitimate interests (Article 6(1)(f) GDPR) in maintaining the necessary channels of communication with visitors/users of our website, as well as in generally informing the scientific community and the public about the work and results of the organization.

2) For participation in student competitions, personal identification and contact data of students, parents/guardians and teachers are requested, as well as school and class information, information and files of submitted works (e.g., projects, images, videos, documents) and parental/guardian declarations/consents. The purpose of collecting the provided personal data is the effective organisation of the competitions, the evaluation of submitted works and communication with participants. The legal basis for this processing is explicit consent (Article 6(1)(a) GDPR).

3) When you visit CERTH’s website, technical information may be collected automatically (i.e., via the browser or the mobile device used), such as the Internet Protocol (IP) address of the device, cookie information, browser type, unique device identifiers, etc. The purpose of processing such data is the analysis and improvement of the website’s operation. The legal basis is our legitimate interests (Article 6(1)(f) GDPR), in ensuring proper website operation and improving the user experience. For cookies that are not necessary for the operation of the website, your consent is required (Article 6(1)(a) GDPR). For more information regarding the use of cookies, please refer to Cookie Policy.

 

Retention period

Your personal data is kept by CERTH only for the reasonable period of time required by the nature of the processing and only for as long as it is required to achieve the above purposes of processing, unless a longer retention period is required by law or for the establishment, exercise or defense of legal claims. 

 

Disclosure/Transfer of data to third parties

The personal data collected may be disclosed to third parties where required to comply with a legal obligation or where necessary for the fulfilment of the purposes of processing, in accordance with the applicable legislation. Indicatively, your personal information may be disclosed to public authorities, bodies and organisations, courts and partners of the organisation, such as natural or legal persons entrusted with the performance of certain services and functions of the website (processors). Only those personal data necessary for the fulfilment of the intended purposes are transmitted to such persons, who are contractually bound to confidentiality and secure processing of personal data. CERTH shall never transfer, sell, rent or exchange your data to third parties for commercial promotion purposes. It is also noted that CERTH does not transfer your personal data outside the European Union/European Economic Area (EU/EEA).

 

Confidentiality and security

Personal data collected by CERTH in the context of the operation of its website are strictly confidential and are maintained only for the purposes of processing. Moreover, CERTH implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in particular against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

 

Your lawful rights

According to GDPR, you have the following rights:

  • Right to access: You have the right to request access to your personal data and be informed if we process your personal data, about the purpose and way of their processing, their security, as well as about your rights. You can also request a free-of-charge copy of your personal data undergoing processing.
  • Right to rectification: If you believe that your personal data is inaccurate or needs an update, you have the right to request the rectification of the inaccurate information and the completion of the incomplete data.
  • Right to restriction of processing: If you consider that your data is inaccurate, or that the processing is unlawful, or that we no longer need your data, or that you have objections to automated processing, you have the right to request the restriction of processing.
  • Right to object to processing: You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data, unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise, or defense of legal claims.
  • Right to erasure (“right to be forgotten”): When you no longer wish the processing and retention of your personal data, you have the right to obtain their erasure, unless the processing is necessary for a specific legal purpose.
  • Right to portability: you have the right to receive or transmit your personal data in a structured, commonly used and machine-readable format to another controller.
  • Right to withdraw your consent: You have the right to withdraw your consent at any time. Where your consent is the only legal basis for processing, we will stop processing your data after its withdrawal. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Please note that the aforementioned rights may be restricted in the light of the GDPR or other applicable data protection legislation.

How to exercise your rights

To exercise the above rights, you may contact our Data Protection Officer by sending an email to This email address is being protected from spambots. You need JavaScript enabled to view it.. We will respond to your request within one (1) month of receipt, at no cost to you. This period may be extended by two (2) additional months due to the complexity of the request or the number of requests. In such case, you will be informed of the delay and the reasons therefor as soon as possible. Where a request is manifestly unfounded or excessive, CERTH may either refuse to act on it or request the payment of a reasonable fee. To exercise your rights, verification of your identity is required. In case of submission by an authorised representative, relevant evidence is required. Finally, if you consider that a request has not been adequately addressed or you believe that any of the above processing operations infringes your right to the protection of your personal data, you have the right to lodge a complaint with the Hellenic Data Protection Authority.

 

Change of this Policy

This policy may change, without notice, whenever required and always in compliance with applicable national and EU law. For this reason, you are invited to visit this website periodically for your own information. By browsing and using the website, users/visitors acknowledge that they have read, understood and unreservedly accepted this policy.

 

Contact

For any question regarding this policy, you may contact CERTH’s Data Protection Officer at This email address is being protected from spambots. You need JavaScript enabled to view it..