Privacy Notice
The website operates strictly adhering to all modern data processing methods (encryption, anonymization) as well as organizational measures in order to achieve data security.
As is the case for most other websites, the website ifghellas.com automatically collects certain information and stores it in log files. This information will include Internet Protocol (IP) addresses, the region or general location from which your computer or device accesses the internet, the type of browser, the operating system, and other usage information regarding the use of the website ifghellas.com, including the pages you visit. We use this information to design our website so that it better responds to our users’ needs. We may also use your IP address to help diagnose problems with our server and to manage our website, to analyze trends, to monitor visitor movements, and to collect broad demographic information that helps us determine visitor preferences, as well as for fraud prevention purposes. The website ifghellas.com also uses cookies and web beacons. It does not track users when they move to third-party websites, does not provide targeted advertising on those, and therefore does not respond to Do Not Track (DNT) messages.
Users’ Rights
The user of the website may, as the case may be, exercise the following rights:
- Right of access (to know which data the Company processes about them, for what reason, and the recipients thereof)
- Right to rectification (to correct any omissions or inaccuracies in the data)
- Right to erasure / right to be forgotten (to delete the data from the Company’s files, provided that their processing is no longer necessary)
- Right to restriction of processing (in case of dispute over the accuracy of the data, etc.)
- Right to data portability (to receive their data in a structured, commonly used, and machine-readable format)
These rights may be exercised by the user at no cost, by sending a relevant letter or email to the Data Protection Officer, unless the requests are repeated frequently and, due to their volume, incur administrative costs for the Company, in which case the user will be charged the relevant cost. If the user exercises any of these rights, the Company will take every possible measure to satisfy the request within thirty (30) days from receipt of the relevant request, after informing the administrator either about its satisfaction or the objective reasons preventing its satisfaction.
Processing of Data by Third Parties
The Administrator, as a data controller, uses only processors who provide sufficient assurances for the implementation of appropriate technical and organizational measures, so that the processing meets the requirements of EU Regulation 2016/679 and any other applicable European and national legislation, and ensures the protection of the data subject’s rights.
The processing by the processor, a partner of the Administrator, is governed by a contract or other legal act subject to Union or Member State law, which binds the processor to the Administrator and specifies the subject matter and duration of the processing, the nature and purpose of the processing, the type of personal data and the categories of data subjects, and the obligations and rights of the controller. The said contract or other legal act specifically provides that the processor:
- a) processes the personal data only on documented instructions from the Company as the controller, including with regard to transfers of personal data to a third country or an international organization, unless required to do so by Union or Member State law to which the processor is subject; in such a case, the processor shall inform the controller of that legal requirement before processing, unless that law prohibits such information on important grounds of public interest,
- b) ensures that persons authorized to process the personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality,
- c) takes all measures required pursuant to Article 32 of EU Regulation 2016/679,
- d) respects the terms referred to above for the engagement of another processor,
- e) takes into account the nature of the processing and assists the controller by appropriate technical and organizational measures, insofar as this is possible, for the fulfilment of the controller’s obligation to respond to requests for exercising the data subject’s rights under EU Regulation 2016/679,
- f) assists the controller in ensuring compliance with the obligations pursuant to Articles 32 to 36 of EU Regulation 2016/679, taking into account the nature of processing and the information available to the processor,
- g) at the choice of the controller, deletes or returns all the personal data to the controller after the end of the provision of processing services and deletes existing copies, unless Union or Member State law requires storage of the personal data,
- h) makes available to the controller all necessary information to demonstrate compliance with the obligations laid down in this article and allows for and contributes to audits, including inspections, conducted by the controller or another auditor mandated by the controller.
With regard to the first subparagraph of point h), the processor shall immediately inform the controller if, in its opinion, an instruction infringes this Regulation or other Union or national data protection provisions.
When a processor engages another processor for carrying out specific processing activities on behalf of the Company as the controller, the same data protection obligations as set out in the contract or other legal act between the Company as the controller and the processor, as referred to in paragraph 3, shall be imposed on that other processor by way of a contract or other legal act under Union or Member State law, in particular to provide sufficient guarantees to implement appropriate technical and organizational measures so that the processing meets the requirements of this Regulation. Where the other processor fails to fulfill its data protection obligations, the initial processor shall remain fully liable to the Company as the controller with respect to the performance of that other processor’s obligations.
Contact Forms and Email Links
If you choose to contact the company using a contact form or one of our email links, none of the data you provide will be stored by this website or transferred to or processed by any third-party data processor, as defined above in the section “Processing of Data by Third Parties.” Instead, this data will be sent to us via an email message using the SMTP (Simple Mail Transfer Protocol). Our SMTP servers are protected by the TLS security protocol (sometimes known as SSL), which means that the email content is encrypted before being sent over the internet. The content of the email is decrypted by our local computers and devices.
Electronic Newsletter
If you choose to participate in our electronic newsletter, the email address you submit will be forwarded to Mailchimp, which provides us with email marketing services. Mailchimp is a data processor (see above the section “Processing of Data by Third Parties”). The email address you submit will not be stored in the website’s database or in any of our internal IT systems. Your email address will remain in Mailchimp’s database for as long as we continue to use its services for our email marketing or until you explicitly request its removal from the list. You can do this by using the unsubscribe link included in all electronic newsletters we send you. As long as your email address remains in Mailchimp’s database, you will receive periodic (approximately once a month) electronic newsletter messages from us.
Log Files
As is the case for most websites, we automatically collect certain information and store it in log files. This information may include IP addresses, browser type, referring/exit pages, operating system, date/time stamp, and clickstream data. We will also collect information about specific devices (such as the operating system version). We use this information to analyze trends, manage the website, and monitor how visitors interact with the website.
Cookies
Cookies are small text files that a website stores on your computer or mobile device when you visit it.
- First-party cookies are cookies set by the website you are visiting. They can only be read by that specific website. Additionally, the website may use external services, which also set their own cookies, known as third-party cookies.
- Persistent cookies are cookies that are stored on your computer and are not automatically deleted when you close your browser, unlike session cookies, which are deleted as soon as you close your browser.
Every time a user visits the website, they will be asked to accept or reject cookies. By storing a user’s cookies, our website remembers their preferences so that it can suggest new products that may interest them, display advertisements on social media. This way, the user is given the opportunity to choose from a new range of products they may not have known about, to be informed about offers, etc.
Cookies can also be used to collect anonymized statistics regarding the browsing experience on the Commission’s websites.
The three types of first-party cookies we use are intended for:
- Storing visitor preferences
- Improving the functionality of our websites
- Collecting analytics data (regarding user behavior)
Preference Cookies
These are set by us and can only be read by us. They remember the following:
- whether you have accepted (or rejected) the website’s cookie policy
- whether you have already answered the pop-up window asking you to complete our survey (regarding how useful the website content was), so that you are not asked again
Functional Cookies
For the operation of certain websites, it is necessary to include certain cookies. In this case, your consent is not required. Specifically:
- Authentication cookies
- Technical cookies required by certain IT systems
Authentication Cookies
These are stored when you log in to the website using your credentials as a member. When you do this, you accept the relevant privacy policy.
Analytics Cookies
These are used purely for internal research purposes to improve the service we provide to all users.
Cookies simply assess how you interact with our website – as an anonymous user (the data collected does not personally identify you).
Also, this data is not shared with third parties or used for any other purpose. Anonymized statistical data may be shared with communication project contractors who have entered into a contractual agreement with the Administrator. However, you have the right to refuse this type of cookie.
Promotion or Marketing
Promotional cookies are used to serve advertisements that are more relevant to you and your interests. They are also used to send targeted advertising, with the aim of limiting mass unwanted and irrelevant advertising messages.
Third-party Cookies
On our website, content is displayed from external providers, e.g., YouTube, Facebook, and Twitter. To view third-party content, you must first accept the terms and conditions set by them. Among these is their cookie policy, which is beyond our control. However, if you do not display the specific content, no third-party cookies are placed on your device.
These third-party services are beyond the control of the Administrator. The providers may at any time change the terms of use, the purpose, and the use of cookies, etc.
Submission of Objections and Requests by Users
The user may contact the Data Protection Officer regarding any issue related to the processing of their data. The contact details of the data controller are as follows:
Zacharakis Alexandros
E-mail: [email protected]
Phone: +30 697 7349 807
Address: 110 Arapaki Str., Kallithea, Athens