ELLINIKI ETAIRIA – Society for the Environment and Cultural Heritage, which is incorporated in Greece, with registered seat at Tripodon Street no. 28 in Plaka, Athens, County of Attica, with Postal Code: 10558 (hereinafter “We” “ELLET”).
ELLET is committed to preserving the privacy and to protecting any personal data that you may provide to us.
For the purposes of applicable data protection law (in particular, the General Data Protection Regulation (EU) 2016/679 (the “GDPR”)), ELLET will be the data controller.
1. Personal data we may collect
1.1. We collect and process the following personal data.
1.1.1. Personal details, such as your name, the company you work for, your title or position and other contact information;
1.1.2. Contact information, such as your postal address, your e-mail address and phone number (-s);
1.1.3. Financial data, such as credit/debit card numbers, bank account information, and other invoicing and payment related information ;
1.1.4. Profile Information, such as information about your preferences in receiving newsletters, your communication preferences and information about how you use our websites, including the services you viewed or searched for, page response times, download errors, length of visits and page interaction information, referring website (a site that has led you to ours) or application. To learn more please refer to our Cookies Policy;
1.1.5. Technical information, such as information collected during your visits to our website(s), the Internet Protocol (IP) address, browser type and version, device type, time zone setting, browser plug-in types and versions, operating system and platform, type of mobile device and its settings; unique device identifier (UDID) or mobile equipment identifier (MEID) for your mobile device; device and component serial numbers online activity on other websites, applications, or social media; communications to us or regarding us on social media To learn more please refer to our Cookies Policy;
1.1.6. Any other personal information you choose to give us when you interact with us;
1.1.7.We may collect information about you when you interact with us through social media.
1.2. Personal data of other people: If you provide information to us about any person other than yourself, you must ensure that they have been made aware of how their personal data will be used by Us, and that they have given their consent for you to disclose it to Us and for you to allow Us to use it.
2. How we collect personal data
2.1. The ways we collect personal data include the following:
2.1.1. Directly from you when you communicate with us by phone, mail, email or otherwise;
2.1.2. Directly from you when you use the functionalities of our Website (eg. Donation, contact forms);
2.1.3. While monitoring the use of our Website, and your communication with Us via the Website;
3. How we use your personal data
3.1. We use the personal data we collect about you in the following ways:
3.1.1. For the performance of contractual obligations or in order to take steps at the request of the data subject prior to entering into a contract;
a) To accept and process donations and funds provided by ELLET’s friends;
b) To process invoicing, payments and other monetary transactions;
3.1.2. To conduct and to pursue our legitimate interests, in particular:
a) To administer and monitor our relationship, including for accounting, auditing purposes, as well as for confirming legal representation of our counter parties;
b) To exercise or defend our legal rights or to comply with court orders;
c) To protect the security of our communications and other systems and to prevent and detect security threats, frauds or other criminal or malicious activities;
d) Analyse and improve our services and communications and to monitor compliance with our policies and standards;
e) To communicate with you; to send you updates, announcements, publications and newsletters and other information about Us and events or initiatives organised, sponsored or otherwise affiliated to us;
f) To protect the security of our communications and other systems and to prevent and detect security threats, frauds or other criminal or malicious activities;
g) To provide this website and monitor its use.
3.2. For purposes required by law, including maintaining records.
4. On what basis we use your personal data
4.1. We use your personal data on the following basis:
4.1.1. On the basis of your consent, when you subscribe to our newsletter;
4.1.2. For legitimate purposes;
4.1.3. For the performance of contractual obligations;
4.1.4. To comply with legal and regulatory obligations;
For additional information, please refer to the section “How we use your personal information”.
5. Where we store your personal data
5.1. The data that we collect from you shall not be transferred to and stored at a destination outside the European Economic Area (“EEA”). All information you provide to us is stored on our secure servers within the European Union (EU).
6. Retention of personal DATA
7. Who we share your personal data with
7.1. We may disclose your personal data to:
7.1.1. We may share your personal data with third parties who provide services to us, such as providing information technology services, services of carrying out research and analysis. We do not allow these third parties to use this information or to share it for any purpose other than to provide services on our behalf.
7.1.2. Upon request with courts, law enforcement and other public authorities;
7.2. There may be times where we may share information when it does not directly identify you. For example, we may share anonymous, aggregated statistics about your use of our Website. Or we may combine information about you with other customers and share the information in a way that does not identify you.
8. Your rights
8.1. Under the applicable legislation you have the following rights:
The right to access: You have the right to request a copy of the personal data We hold on you as well as information about how it is used.
The right to rectification: You have the right to request to correct personal data We hold on you where it is incorrect or incomplete.
The right to erasure: This right entitles you to require the erasure of your personal data from Our systems and records. However, this right applies only in certain circumstances (e.g. where the organisation no longer needs the personal data for the purpose for which we collected it or where you withdraw consent to our use of your personal data and where there is no other legal basis for continuing to use it).
The right to restrict processing: This right entitles you to restrict the processing of your personal data by us. Where this right is exercised, We are still permitted to store your personal data but other use of the data is prohibited, save in certain limited circumstances.
The right to object to processing: You have the right to object to our use of your personal data in certain circumstances. However, We may continue to use your personal data, despite your objection, where there are compelling legitimate grounds to do so or We need to use your personal data in connection with any legal claims.
The right to data portability: This right allows you to obtain your personal data in a format that enables you to transfer that personal data to another organisation where the organisation is processing your personal data on the basis of consent or on the fulfilment of a contract and if processing is carried out by automated means. You may have the right to have your personal data transferred by us directly to the other organisation, if this is technically feasible.
The right to withdraw consent: To the extent that processing requires your consent, you may withdraw that consent at any time. However, the withdrawal of your consent will not affect the lawfulness of processing based on consent before its withdrawal.
8.2. If such a request places us in breach of our obligations under applicable laws, regulations or our codes of practice, then We may not be able to comply with your request but you may still be able to request that we block the use of your personal data for further processing.
8.4. If you believe that the processing of your personal data described above, is unlawful, you may also file a complaint with the Greek Data Protection Authority (Greek Data Protection Authority 1-3 Kifissias str., Post Code: 115 23, Athens, T: +30 210 64 75 600, F: +30 210 64 75 628))
9. Links to other websites and social media
9.1. Our Website may, from time to time, contain links to and from the websites of our partner networks, and advertisers. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
11. How to contact us