The protection of your personal data in “Dimofelia”

For us, the protection of your personal data is top priority and for this reason we ensure the protection of any processing action, so that you feel in every cooperation with “Dimofelia” the respect and fortification for your privacy.

At Dimofelia we have adopted this Privacy Notice in order to ensure and strengthen trust for all our business relationships, visitors, employees, volunteers and suppliers and compliance with the requirements of the General Regulation for the protection of personal data (EU 679/2016).

We invite you to carefully read this Privacy Policy, which is intended to inform you, in full and transparency, of the type of data we collect, how it is collected and the purposes for which it is processed, its retention time, and its intended recipients. which are transmitted.

Data Controller
Public Benefit Organisation
117 Omonias, PC 65403, Kavala
T. 2510 831388, 2510 831358,
F. 2510 831378
e-mail: [email protected]

Contact Person
Full name
Tel.
Mail

Data Protection Officer
Eleni Diafonidou and Co. OE
Protagoras Educational Center
7th Merarchias and Nafpliou 2, Kavala
T: 2510241241
e-mail: [email protected]

What personal data do we collect?

For the operation of “Dimofelia” and the visiting places it manages, the organization of events and the provision of our services, we process the following personal data: 

When we hire an employee: we collect, register and file the name, patronymic, maiden name, ID number, TIN, Tax Office, Employment ID, Social Security ID, address, telephone, email, ethnic origin, bank account number, educational status, years of service, marital status, number of children, additional skills certificates, detailed CV. We collect the data, required by the current legislation, whether it is for recruitment through the Supreme Council For Civil Personnel Selection (ASEP), or for fixed-term employment or internship contracts

For employees: we collect, register and file any sick leave, records proving a change in the employee’s marital status that has an impact on his / her salary, Disability Certificates (KEPA), training certificates, bank account for salary payments. 

For volunteers: we collect, register and file your name, patronymic, ID number, address, phone, email, CV or skills details

For suppliers: we collect, register and file your name, VAT number, Tax Office, address, telephone, email and bank account number.

For our website visitors: we collect and file the IP address, information about your login time and the name of your browser. When you send us a message through the contact form on the website, we process your name, email and contact phone number.

For those who want to know our news: we collect and save your e-mail. You can unsubscribe at any time.

For the visitors of our touristic places: we collect and file when necessary the name and contact telephone, which are kept only until the completion of your visit.

For the visitors of thermal tourism in the Pilotherapeutic Center of Krinides: we collect and store name, patronymic, date of birth and contact details.

For our students: we collect and file: name, home address, contact phone, e-mail, social media account. For the processing of children’s data we process the absolutely necessary data (name, date of birth) to provide our services and take stricter protection measures. The same applies to the organization of events and activities aimed at children.

For parking users: we collect and file the number plate of the vehicle. For those who maintain a permanent service, we also register name, VAT number, contact details.

For those who enter our premises: for the safety of property and persons, there is a CCTV operation in the visitable areas managed by “Dimofelia”. Through the system operation we collect and file biometric data that are kept for 15 days and then are deleted. The closed cctv system does not record audio.

We do not process personal data of special categories (sensitive) that reveal racial or ethnic origin, political views, religious or philosophical beliefs or trade union affiliation, genetic data, child data, data on the sexual life or health data.

Exception to the above is the procession of data, especially of ethnic origin and health data in compliance with the applicable labor law and civil service law, social security law and social protection, as well as actions and events aimed at minors.

In the procession of biometric data for the information and promotion of festivals, events, and actions of “Dimofelia” we first ensure that explicit and clear consent is received by you.

The principles we adopt in the processing of your data 

Any processing of personal data by “Dimofelia” obeys the following principles, meeting the requirements of the General Regulation for Data Protection and the national legal framework for data protection. Therefore, your personal data:

• They are subjected to lawful and fair processing in a transparent manner “legality, objectivity and transparency”,
• Collected for specified, express and lawful purposes and not subjected to further processing in a manner incompatible with those purposes collected “limitation of purpose”;
• They are appropriate, relevant and limited to what is necessary for the purposes for which they are being processed “data minimization”;
• It is accurate and, when necessary, updated. We take all reasonable measures to promptly delete or correct personal data which is inaccurate in relation to the purposes of processing “accuracy”;
• They are kept in a form that allows your identification only for the period required for the purposes of processing, always applying for the entire period the appropriate technical and organizational measures to safeguard your rights and freedoms “limitation of data storage period”,
• They are processed in a way that guarantees the appropriate security of personal data, including their protection against unauthorized or illegal processing and accidental loss, destruction, or deterioration, using appropriate technical or organizational measures “integrity and confidentiality”.

The purpose of processing your personal data

For our employees, students, visitors and suppliers, we process personal data, (1) for the provision of services, (2) for the processing of financial transactions, (3) for the compliance with the respective legislation (tax, labor, insurance, etc.). a.), (4) for the service of our legal interests and (5) for purposes of public interest, if required.

For any future processing for purposes other than the above, we will only proceed with it if we have received new and discreet consent from you. Please note that you have the right to revoke your consent at any time by contacting the Data Protection Officer.

Your rights

In each of your relations with “Dimofelia” we have established a specific procedure, so that you can exercise the following rights:

• the right of access, to be informed about your data, any processing, the purpose and the recipients,
• the right of correction, to correct any deficiencies or inaccuracies in your data,
• the right to delete (“right to be forgotten”), your personal data from our files, when their processing is no longer necessary or the retention of data is no longer required for our compliance with legal obligations; or to defend our legal interests before the Courts,
• the right to restrict processing, in case of dispute regarding the accuracy of the data
• the right to portability, to receive your data in a structured and commonly used format
• the right of objection, in case you do not wish to use your data for direct marketing purposes.
• the right to file a complaint to the Personal Data Protection Authority (www.dpa.gr)

You can send your request to the Contact person for Personal Data or deliver it to the headquarters of Dimofelia (117 Omonias, Kavala). In any case, we will facilitate the exercise of your rights, unless we are unable to verify your identity and always having the priority to protect your personal data. We will respond to your every request within a month, a deadline that can be extended by two more months, if required, considering the complexity of the request and the number of requests. In any case we will inform you of the extension required and the reasons for the delay.

Contact the Data Protection Authority 

If for any reason you do not feel that your request has been satisfied, you can contact the National Data Protection Authority. Contact info: email [email protected], phone 210 6475600, postal address: Kifissias Ave. no. 1-3, T.K. 115 23, Athens.

How long will we process your data?

Our policy focuses on minimizing the processing time of your personal data. Therefore,  we take care to delete your data, safely, if the purpose of processing has been performed. Many times, however, the existing legislation and our legal interest require our compliance for a longer period. For the CVs you send us, we will keep them for 2 years and then we will either update your data or destroy them

Where will we transfer your personal data?

Personal data is kept secure and is not transferred to third parties unless disclosure is necessary for our compliance with a legal obligation as required by law, for your own service or to safeguard our legal interest. Classified access to your data is maintained within “Dimofelia”, and in any case processing in a legal manner and confidentiality are ensured. Your data may be transferred to DIAVGEIA or KIMDIS as provided by law, or to associates, who act as processors on our behalf, in order to carry out our operations, however in each case care is taken that conventionally to ensure the same level of protection of this data.

How we protect your data

At “Dimofelia” we take technical and organizational measures in order to achieve the protection of your personal data from any unauthorized access, misuse, alteration, prohibited dissemination, notification, loss or accidental / unfair destruction and any other form of improper processing. 

The executives and staff of the Public Benefit have received the appropriate education and training, so as to operate professionally and to ensure to the maximum the confidentiality, the availability and the integrity of your personal data.

We are updating our Policy

As we improve and expand our operations, we will ensure that this policy is updated immediately. It is very important that you visit our website and receive the latest news, always looking at the review date.

Date of Issuance of Privacy Notice, 03/06/2019