Personal Data Collection Policy

INTRODUCTION

The NPDD Cave of Perama is committed to ensuring the protection of the privacy of personal data it collects for visitors to the website https://www.spilaio-perama.gr.

This Policy implements the Cave's commitment to the protection of your personal data.

The processing and protection of the personal data of the visitor is subject to the terms of this policy, as well as to the provisions of the European Regulation 679/2016 (GDPR), but also the other provisions of national (Law 4624/2019), Community and international law. on the protection of the individual from the processing of personal data, as applicable.

Any future changes or adjustments will be the subject of this policy which will be amended accordingly. In any case, the website reserves the right to change the terms of protection of personal data, in accordance with the applicable legal framework and information hereof.

Please review this Policy. By visiting the website you confirm that you have read, understand and receive full knowledge of its content and accept its terms. It is proposed to periodically study this policy for possible changes. In case you disagree with the terms of use of this, you should avoid visiting our website.

YOUR PERSONAL DATA - WHAT IS IT?

"Personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one whose identity can be established, directly or indirectly, in particular by reference to an identity , such as name, ID number, location data, online ID, or one or more factors that characterize the physical, physiological, genetic, psychological, economic, cultural, or social identity of that individual. Personal data relates only to natural persons and can identify a natural person, either directly or on their own, or in combination with other information held by the controller. The processing of personal data is governed by the General Regulation of Data Protection 2016/679 and any other relevant domestic (Law 4624/2019) and European legislation.

WHO WE ARE

The NPDD Cave of Perama is the person in charge of processing the data of the natural persons who visit its website. This means that it decides the processing that your personal data undergoes as well as the purposes of processing it. NPDD has entrusted the hosting and support of its website to the company Click4web, which has the position of executing the processing, in terms of the service provided by it, with all that implies this for the obligations of the parties.

HOW WE PROCESS YOUR PERSONAL DATA

The NPDD Cave of Perama, in compliance with the requirements of the GDPR, processes your personal data in a fair and transparent manner, ensuring the legality, objectivity and transparency of the processing. It collects data for specified, explicit and legitimate purposes and does not process it in a manner incompatible with those purposes. It collects the data that is necessary and suitable for the purposes of processing and not more data than it needs. Keeps the data up to date and takes care of their accuracy or their deletion and correction when they are inaccurate in relation to the purpose of the processing. It retains the data for as long as the purpose of the processing takes and then ensures their safe destruction. Ensures the protection of personal data from loss, misuse and misuse, unauthorized access and leakage by ensuring that appropriate technical and organizational measures are taken to protect them.

The website collects your personal data only if you provide it voluntarily and by visiting it or utilizing any of the features it provides. Areas that are useful or popular. The Website may collect the identities of its users using appropriate technologies, such as cookies and / or the monitoring of Internet Protocol (IP) addresses. Cookies are small text files that are stored on the hard drive of each visitor and do not take note of any document or file from his computer. They are used to facilitate the visitor's access to the use of specific services and / or pages, for statistical purposes and in order to determine these may also include the type of browser used by the visitor, the type of computer, the operating systemsystem, internet service providers and other such information. In addition, its information system automatically collects information about the sites that its visitor visits and about the links to third party websites that it may choose through its use. The visitor can configure his program for Internet browsing (web browser) in such a way that either warns him about the use of cookies in specific services or does not allow the acceptance of the use of cookies in any case. In case the visitor of the specific services and pages does not wish the use of cookies for his identification, he can not have further access to these services.

If the website includes (links) to other websites which are under the responsibility of third parties (natural or legal persons), in no case is it responsible for the terms of protection of personal data that these websites follow.

The Website may process part or all of the information submitted by visitors for statistical purposes using Google Analytics. For more information about Google Analytics Terms of Use, you should refer to their respective policy.

In case of filling in the contact form or the submission form that exists in it, the personal identification data (name, email) are transferred with a link to a corporate e-mail of NPDD and are used to respond to your request exclusively. For any other processing (eg updates, newsletter, your consent will be requested separately. In order to submit the relevant contact form, provide your consent, according to what is mentioned in the relevant section.

LEGAL BASIS OF PROCESSING

For the above purposes, the processing of your personal data is done only on the basis of your explicit, free and fully informed consent and after you have been informed about the terms of this, through your visit to it. In particular, to use the contact form, fill in a special consent form, as provided in the relevant section.

CONSENT

In cases where the processing of personal data is based on your consent, in accordance with the above and by filling out the relevant forms, a copy of the statement is kept with all the information contained in it to prove its issuance and to facilitate in the event that its revocation is requested. The consent is given for clear and distinct purposes which have been notified in advance and from the moment you give it you have become fully aware of them. It is possible to withdraw the consent at any time. Withdrawal of consent shall not affect the lawfulness of the proceedings which were based on prior consent.

MINOR CONSENT

The terms herein for the purposes of the processing contained therein and obtaining consent where required are also applicable to minors who have reached the age of 15 and our website is not intended for individuals under 15 years of age. In any other case the consent, where required is given or approved by the persons who have the parental care of the minor. In order to fully ascertain the age of the person or those who have parental care, the submission of a relevant consent form is a position responsible for declaring that you are over 15 years old.

SUBMISSION OF REQUESTS - EXERCISE OF RIGHTS

In order to exercise your rights as defined below, you have the opportunity to submit a relevant request. The NPDD Cave of Perama undertakes to respond and provide the relevant information without delay within one month from the proven receipt of the request. This period may be extended by a further two months, if necessary, taking into account the complexity of the request and the number of requests. In this case the applicant will be informed within one month of receipt of the request. In case of inability to respond within the stipulated time frames, the applicant will be informed of its reasons within one month from the proven receipt of the request. The requests are checked for their size and repeatability per applicant for possible abuse in order to provide the NPDD Perama Cave with the rights of art. 12 par. 3 of the GDPR. The process of submitting requests is done only in writing by sending a relevant mail to dpospileoperama@ioannina.gr or by registered letter at the headquarters of the institution, 19 Spilaiou, Spilaio, PC 45500. Your request must include clear wording, your name and exact details communication (mail, phone, address).

SHARING YOUR PERSONAL DATA

Your personal data is treated with complete confidentiality and security and is not disclosed further, except where disclosure may be required by applicable law, for reasons of protection of vital interests or force majeure. The NPDD Cave of Perama uses your data exclusively for the purposes described herein and for its own use and does not sell or transmit in any other way or disclose personal data of its visitors / users to third parties.

TIME OF KEEPING YOUR DATA

Your personal data is kept for no longer than the reasonable time required for the purpose of the individual edits made for it and there are certain criteria that determine it. In cases where the processing of your personal data is based on a legal obligation, in accordance with the above, the time of their observance is determined based on the requirements of the legislation, the period during which inspections can be carried out by the competent authorities, the prescribed limitations, but also your own legal interests. In cases where the processing is based on public interest, the retention time of the data is determined by the need of the processing purpose and for a reasonable period of time to ensure the efficiency, traceability and documentation of the procedures, but also the legitimate interests of the subjects. .

When the processing is based on your consent, your personal data is kept for each purpose until the consent is revoked and in accordance with what is mentioned in detail above. As soon as you withdraw your consent, the relevant personal data will be deleted.

The exact compliance times for each individual processing process are recorded in the processing register maintained by the NPDD Perama Cave in accordance with the requirements of the GDPR. In case you want more detailed information, you can submit a relevant request according to the procedure provided herein.

YOUR RIGHTS

As subjects of the data we process you have the following rights, subject to the inclusion in some of the exceptions set by the Regulation and all relevant legislation.

1) You have the right to request a copy of the personal data we hold about you. In particular, you have the right to receive confirmation as to whether or not your personal data is being processed and, if so, you have the right to be informed of the following information:

• the purposes of the processing,
• the relevant categories of personal data,
• the recipients or categories of recipients to whom personal data have been disclosed or will be disclosed, in particular recipients in third countries or international organizations,
• if possible, the period for which the personal data will be stored or, where this is not possible, the criteria for determining that period,
• the existence of a right to request the correction or deletion of personal data or a restriction on the processing of personal data or the right to object to such processing,
• the right to lodge a complaint with a supervisory authority,
• any available information about the origin of the personal data, in case it does not come from you but was obtained through a third party.
• the existence of an automated decision-making process, including the preparation of profiles and information on the logic followed, as well as the significance and intended consequences of such processing.
• You have the right to request a correction of your personal data if it is found to be inaccurate or to supplement the data held if it is incomplete.

3) You have the right to request the deletion of your personal data when one of the following reasons applies:

• Personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
• you have revoked the consent on which the processing is based and there is no other legal basis for the processing,
• you have stated your opposition to the processing and there are no compelling and legitimate reasons for processing
• personal data have been processed illegally; (e) personal data must be deleted in order to comply with a legal obligation under EU law or domestic law
• personal data has been collected in connection with the provision of information society services.

4) You have the right to revoke your consent to edita, at any time in cases where we process your personal data based on it.

5) In case your data is processed with consent or under a contract you have the right to request that we hand over your personal data or transfer it directly to another data controller.

6) You have the right to request a restriction on the further processing of your personal data in the following cases:

• if you dispute the accuracy of the personal data, for a period of time that will allow us to verify the accuracy of the personal data,
• if the processing is illegal and instead of deleting personal data you want to restrict their use,
• if the purpose of the processing has been completed but you wish to restrict it for reasons relating to legal claims,
• if you have objections to the processing and you have exercised the right to object to it for as long as it takes to verify whether the legal processing grounds take precedence over the reasons put forward by you.

7) You have the right to state your objection to the processing of personal data, at any time and for reasons related to your particular situation, including profiling, in accordance with the relevant provisions. As soon as your objection is declared, the processing of personal data ceases unless there are compelling and legal reasons for the processing which take precedence over the interests, rights and freedoms of the data subject or for the establishment, exercise or support of legal claims. .

The data subject has the right not to be subject to a decision taken solely on the basis of automated processing, including profiling, which produces legal effects that affect or significantly affect it in a similar way.

DATA TRANSFER TO THIRD COUNTRIES OUTSIDE THE EU OR INTERNATIONAL ORGANIZATIONS

For the purpose of processing, your personal data is not transferred to countries outside the EU, and in case this happens will be modified and you will be notified again with the individual protection measures and related safeguards.

AUTOMATIC DECISION MAKING

Your personal data is not subject to automated decision-making processes. While in case this happens the present will be modified and you will be informed again with the relevant logic and the importance and the consequences of the treatment for the individual.

FURTHER PROCESSING

The NPDD Cave of Perama has the ability to modify this whenever there is a difference in its content that needs notification. If the NPDD Cave of Perama wishes to use your personal data for a new purpose that is not covered by this policy, then you will be notified again of the present for the new use before the start of processing and specifying the relevant purposes and processing conditions . Where and when necessary, your prior consent for the new processing will be sought.

OTHER TERMS

The NPDD Cave of Perama declares that it has taken all the necessary organizational and technical measures for the protection of your personal data and observes a complete security plan in accordance with the requirements of the Regulation.

The collection and processing of personal data in the context of the present is carried out by lawful means and in a way that ensures respect for privacy, personality and human dignity.

The observance of the present is done in the context of good faith and business ethics and with the free will of the parties, with the aim of good and efficient cooperation with the protection of all.

In case of inability to exercise the rights provided by the Regulation, but also in general, in case of questions, clarifications and complaints, you have the right to contact the Personal Data Protection Authority, for support and assistance.

Contact info:

Postal Address: Personal Data Protection Authority,

Offices: Kifissias 1-3, PC 115 23, Athens

Call Center: + 30-210 6475600

Fax: + 30-210 6475628 E-mail: contact@dpa.gr

The NPDD Cave of Perama has no responsibility other than the cases that are reasonably proven and there is no reason for force majeure or justified delay.

Furthermore, for any issue concerning your protection against the processing of personal data, you have the right to submit a request in accordance with the above, as well as the right to address for any reason to the Data Protection Officer of DEYA Trikala, by sending an email to dpospileoperama @ ioannina .gr. Your request must be clearly worded and include contact details and names.

Sincerely, DEYA Trikala