Notification for the Processing of Personal Data
(Articles 13, 14 of Regulation (EU) 2016/679)
The legal entity governed by private law under the name “HELLENIC COPYRIGHT ORGANIZATION” based in Athens, at 5 Metsovou Str. (hereinafter called as the “H.C.O.”), handles personal data protection and privacy issues with responsibility and as a matter of fundamental importance and complies with the Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and the repealing of Direst 95/46/EC (General Data Protection Regulation) (hereinafter referred to as “GDPR”) and the relative Greek legislation.
In particular, in order to safeguard the creator by documenting the time of existence of his/ her work, the H.C.O. created the service of electronic timestamping through the website www.timestamp.gr. Considering the above, we provide you with this Notification pursuant to Articles 13, 14 of the GDPR, in order to inform you about the way we collect and process your personal data in terms of your visit and/or use of the above website.
1. Controller
The Controller for the collection of your data and its processing is the H.C.O., as defined above. That means that the H.C.O. determines the purposes and means of processing your personal data, in accordance with the GDPR and the data protection legislation in general.
2. Sources of personal data collection
The H.C.O. normally collects your personal data directly from you and not from third parties, and it is considered as a necessary condition for ensuring the smooth interaction with you during the operation of the features of the H.C.O.'s websites and/ or social media.
3. Processing of personal data and legal bases
The following table lists the purposes of processing of personal data processed by the H.C.O., the categories of these personal data, as well as the legal basis for such processing.
|
Purpose of Processing |
Categories of Personal Data |
Legal Basis of Processing |
|---|---|---|
|
Contact |
Personal Information (Name/ Surname), mailing details (e-mail address), any message content/communication |
Art.6 par.1 (b) - processing is necessary to take steps at the request of the data subject. |
|
Website Management |
ΙP Address, cookie data, visit data |
Article 6, par. 1(f) - processing is necessary for the purposes of the legitimate interests pursued by the Controller. |
|
Submission of registration application |
Personal Information (Name/ Surname, Father’s Name), Address, Contact Details (telephone number, email) |
Art.6 par.1 (b) - processing is necessary for the performance of the contract. |
|
Payment of the registration fee |
Personal Information (Name/ Surname, Father’s Name), Address, Contact Details (telephone number, email), payment details (card details or IBAN) |
Art.6 par.1 (b) - processing is necessary for the performance of the contract. |
4. Disclosure to third parties and categories of recipients
Your personal data as described above are disclosed on a case-by-case basis to public and private authorities, auditors as well as to H.C.O.‘s external partners who are in charge of IT tasks and to the H.C.O.’s competent internal departments. In any case and where possible, the H.C.O. complies with the requirements of the GDPR (art. 28) for the compliance of third parties/ processors with whom it deals and commits them to the protection of the personal data that communicates to them, in compliance with the special provisions of the GDPR and its specific internal policies and procedures. The H.C.O. does not transfer your personal data to third countries.
5.Security
The H.C.O. processes your personal data in a manner that ensures its protection, taking all the appropriate organizational and technical measures for data security and its protection against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access and any other form of illicit processing.
6. Subject’s rights
This section presents your rights in respect of personal data. These rights are subject to certain exemptions, reservations or limitations. Please submit your requests responsibly. The H.C.O. will respond as soon as possible and in any case within one (1) month of receipt of the request. If the view of your request is going to take longer, you will receive relevant information. To exercise your rights, you can contact us on the following email-address: privacy@opi.gr.
The H.C.O. ensures the uninterrupted exercise of your rights:
6. 1. The right to information
You have the right to request and receive clear, transparent and easily understandable information about the way we process your personal data in accordance with the H.C.O.’s policies and procedures.
6.2. The right to access
You have the right to access your personal data free of charge, in accordance with the relevant policies and procedures of H.C.O., with the exemption of the following cases where there may be a reasonable charge to cover the administrative expenses of the H.C.O.:
• manifestly unreasonable or excessive / repeated requests, or
• additional copies of the same information
6.3. The right of rectification
You have the right to ask for your personal data to be corrected if it is inaccurate or incomplete, in accordance with the relevant policies and procedures of the H.C.O.
6.4. The right to erasure (“to be forgotten”)
You have the right to request the deletion or removal of your personal data when it is no longer necessary for the purposes collected or there is no legitimate reason to continue processing it in accordance with the H.C.O.’s policies and procedures. The right of erasure is not absolute, to the extent that there is a particular legal obligation or other legitimate reason for the retention of your personal data by the H.C.O.
6.5. The right to restriction of processing
In some cases, you have the right, in accordance with the relevant policies and procedures of the H.C.O., to restrict or remove further processing of your personal data. In cases where processing has been restricted, your personal data remains stored, without further processing.
6.6. The right to data portability
You have the right to request your personal data which you have provided us with in a structured, commonly used and machine-readable format, and to transfer that data to another controller in accordance with the relevant policies and procedures of the H.C.O.
6.7. The right to object
You have the right to oppose, at any time and for reason related to your particular situation, to the processing of your personal data, based on Article 6 (1) (f) of the GDPR (processing for reason of lawful interest of the H.C.O.), on the basis of that provision. In such a case, H.C.O. as controller will no longer submit the personal data unless it demonstrates imperative and legitimate reasons for processing, that override the interests, rights and freedoms of the subject, or the filing, exercise or support legal claims.
6.8. Right to withdraw consent
You have the right to freely withdraw the consent that you gave us, without prejudice to the lawfulness of the processing during the period preceding the withdrawal.
6.9. Rights on automated decision – making mechanisms and profiling
The H.C.O. does not make automated individual decision-making, including profiling.
6.10. How to exercise the right
The exercise of the aforementioned rights takes place with a submission of a written application to the H.C.O., in accordance with the relevant policies and procedures. The H.C.O. reserves the right to reply no later than one month after receiving the request, in accordance with the terms of GDPR and its policies and procedures.
7. Retention period of personal data
For each category of personal data, the H.C.O. determines the retention period of personal data in accordance with the provisions of the law for each category of personal data and its policies and procedures.
8. Data Protection Officer
For any matter related to the procession of personal data and the current notification, please contact with the Data Protection Officer appointed by the H.C.O.:
|
Data Protection Officer |
DRAKOPOULOS LAW FIRM |
|---|---|
|
Telephone |
+30 210 6836561 |
|
e-mail: |
9. Contact with Data Protection Authority
For further information and advice on your rights or to submit a complaint, you may contact the Hellenic Data Protection Authority, the Greek supervisory authority: Mail Address:
Hellenic Data Protection Authority, Offices: 1-3 Kifissias Avenue, PC 115 23, Athens, Call Center: +30 210 64756000, Fax: +30-210 6475628, email: contact@dpa.gr.
10. Amendments of the present Notice
We aim to review and keep up-to-date the present Notice, in order to comply with privacy laws and new developments. Any updates to this Notice will be communicated to you immediately.