PERSONAL DATA PROTECTION POLICY
Our full particulars are:
“Hellenic and Ionian Diaspora Research Lab”, Digital Media and Communication Department, Ionian University,
Εmail address: email@example.com
Postal Address: Antoni Tritsi 1, GR-28100, Argostoli, Kefalonia, Greece
Telephone: +30 2671027311
Scope and objectives of the personal data protection policy
The scope of the present Policy is to determine the basic rules and principles according to which the ionianhallofscience website collects, processes and stores personal data, as defined by the applicable EU and national legislation in force and, in particular, Regulation (EU) 2016/679 (hereinafter “the Regulation”) and Law 4624/2019.
Personal Data Concepts/Definitions
For the purposes of the present Policy, the following concepts shall be construed as follows:
“Personal data”: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;.
“Special categories of personal data”: personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
“Processing”: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction
“Anonymization”: the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject.
“Pseudonymization”: the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
“Controller”: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
“Processor”: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
“Consent” of the data subject: any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
“Personal data breach”: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed.
“Data concerning health”: personal data related to the physical or mental health of a natural person, including the provision of health care services, which reveal information about his or her health status.
“Applicable law”: The provisions of the Greek, EU or other law to which the Ionian University is subject and which prescribe personal data protection issues, such as the General Data Protection Regulation (EU) 2016/679 (GDPR), the Law 4624/2019, the Law 2472/1997 , the Law 3471/2006 in the field of electronic communications, the Article F of the Treaty on European Union, the Article 8 of the Charter of Fundamental Rights of the European Union, as wells, as the Article 8 of the European Convention on Human Rights, Convention 108 of the Council of Europe and its modernisation.
General Principles of Personal Data Processing
When the ionianhallofscience processes personal data, it ensures that:
- It collects and processes such data lawfully, in accordance with the provisions of the applicable laws and the conditions thereby prescribed.
- It processes personal data only for defined, express and lawful purposes.
- It implements appropriate technical and organizational measures to ensure that personal data are processed in such manner as to warrant the appropriate level of security for personal data, including, inter alia, their protection with regard to unauthorized or illegal processing and accidental loss, destruction or damage. Moreover, it periodically reviews the adequacy and efficacy of such measures.
- It makes the required effort so that the personal data it keeps and processes are always accurate and updated.
- It does not keep the personal data it collects for a longer time than necessary for the purposes for which they were collected and processed.
Purposes for processing:
The ionianhallofscience processes personal data for the following purposes:
- In order to undertake research and studies for statistical purposes.
- In order to undertake actions and organize seminars, conferences, presentations, etc.
Legal basis for personal data processing
The ionianhallofscience oportionality, confidentiality and integrity, the limitation with regard to the purpose and accuracy, the specific time that data are kept and the minimization of data.
The legal basis for the processing of your personal data may consist in any of the following, as the case may be:
(a) your consent;
(b) the requirement to extract statistical data.
What data are processed
With regard to the aforesaid objectives, ionianhallofscience may collect and process personal data which may include, without being limited to, the following:
Personal Data Categories
Contact data (email address, full name, telephone, etc.): of persons who submit this information to the ionianhallofscience with regard to its objectives and activities, contact data of scientists for the communication of Press Releases and updates about the ionianhallofscience’s actions, campaigns and events, and contact data of persons who have declared their wish and have provided their consent to receive updates from the ionianhallofscience (full name, email address, post office box, capacity, profession, contact telephone numbers).
Purposes – Legal basis for processing: Data are collected for the purpose of:
– Sending updates on the actions, campaigns and events of the ionianhallofscience. The legal basis for processing is the consent of persons who wish to receive updates from the ionianhallofscience about its events and actions and about developments in the tourism sector or the ionianhallofscience lawful interest, provided such data have been legally obtained in the context of the company’s previous cooperation with the subject.
Visitors are specifically informed by means of the special forms about the aforesaid processing and transmitting of their personal data.
Data retention period
The ionianhallofscience shall retain your personal data for a limited time period depending on the purpose of their processing and upon expiry of such period personal data shall be deleted from our files, unless a different retention period is prescribed or allowed by the applicable laws.
The curricula vitae and/or any filled in questionnaires of scientists for a post/partnership are kept by the ionianhallofscience for a period of one year and are subsequently destroyed, unless compliance with the pertinent laws prescribes that the relevant folder be kept for a longer period.
In cases when personal data are provided directly by subjects in order for subjects to receive newsletters and other updates from the ionianhallofscience, such data are kept until subjects should revoke their consent, which may occur at any time, without this affecting the lawfulness of any processing carried out prior to the time when the consent was revoked.
Rights of Personal Data Subjects
The ionianhallofscience shall ensure that data subjects are able to exercise the rights provided for same by the law with regard to the collection and processing of personal data. Said rights are:
The right of access to data.
The right of rectification of data.
The right of erasure of data (“right to be forgotten”).
The right of restriction of processing of data.
The right of portability of data.
The right to object to the processing of data.
In the event that any of the above rights should be exercised, we shall take all possible steps to satisfy your request within a reasonable time and in any event within one (1) month from submission of your request and its/your identification. That period may be extended by two further months where necessary, in the event that your request is complex or if there is a great number of requests. In such case, the ionianhallofscience is obliged, within one month of identifying the request, to notify you about the delay and the reasons for such delay. Within the said time, the ionianhallofscience is obliged to inform you of any refusal on its part to satisfy, in whole or in part, the request you submitted and about the reasons of such refusal.
The ionianhallofscience may refuse to satisfy, in whole or in part, a request received by the data subject only when this option is provided for under the General Data Protection Regulation (EU 2016/679).
If the ionianhallofscience is processing personal data as processor, it shall transmit such requests to the controller, who is responsible for examining and satisfying such requests.
To exercise any of the above rights, you may use the following email address firstname.lastname@example.org.
Right to Appeal to the Personal Data Protection Authority
If you believe that there is a breach of any of your rights with regard to the protection of Personal Data, you may file a complaint with the competent supervising authority, viz. the Hellenic Data Protection Authority. For more information, please visit the website http://www.dpa.gr.
Personal Data Protection Policy Updates
The ionianhallofscience e may from time to time amend the present Policy in order to comply with changes in regulations and for operational reasons.
Updated versions of the present policy shall be posted on the ionianhallofscience website and shall indicate the date, so that you may identify the most recent updated version.
The present Policy was posted on 17.07.2022.