Privacy Policy
PRIVACY POLICY – WEBSITE VISITORS
Introduction
This document, referred to as the Privacy Policy, explains in simple terms how we process the personal data that we collect from you or that you voluntarily provide to us when browsing the website of the Nikos Poulantzas Institute or when communicating with our organization.
The Data Controller responsible for the processing of personal data is the organization with the following details:
NAME: Nikos Poulantzas Institute (Non-Profit Civil Company – AMKE)
ACTIVITY: Research Institute
VAT Number: 999686349
ADDRESS: 57 Stournari Street, 10432, Athens, Greece
PHONE: +30 210 3217745
EMAIL: info@poulantzas.gr
Our priority is the lawful processing of these data and your full and transparent information regarding such processing. If you have any questions, please do not hesitate to contact us.
Contents of the Privacy Policy
Part One: General Information
- What is personal data
- What is personal data processing
- Is the processing of your personal data mandatory?
- When and how we collect your data
- Principles we follow when processing your data
Part Two: Processing Analysis
A. Categories of personal data we process
B. Purposes of processing – Legal bases
C. Data retention period and storage location
D. Your rights
Part Three: Additional Information
PART ONE: General Information
1. What is personal data?
The term “personal data” (hereinafter referred to as data) refers to any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one whose identity can be determined directly or indirectly, in particular by reference to identifiers such as a name, identification number, address, telephone number, or by reference to one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of that person.
In simple terms, personal data is any information related to a natural person that either directly reveals their identity or could potentially reveal it.
2. What is Personal Data Processing?
Processing refers to any operation or set of operations performed on personal data, whether by automated means or not. This includes actions such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. In other words, almost any action performed on personal data, from the moment it is created until it is deleted or anonymized, constitutes processing.
The processing of personal data is lawful when carried out in accordance with applicable legislation, namely Greek Law 4624/2019 and the General Data Protection Regulation (GDPR) 679/2016/EU.
3. Is the processing of your personal data mandatory?
Providing certain data to our organization is necessary when you visit our website or communicate with us. Through this policy, we inform you about the rules governing such processing. If you do not provide the data referred to below, you may not be able to use certain services of our website and we may not be able to respond to your communication request or any other request you submit.
4. When and how do we collect your data?
We collect your data at the following times:
A. When you contact us
B. When you visit our website
5. Principles applied during data processing
When processing your personal data, we adopt and apply the principles set out in Article 5 of the GDPR, meaning that your data:
a) are processed lawfully, fairly and transparently in relation to the data subject (lawfulness, fairness and transparency)
b) are collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes (purpose limitation)
c) are adequate, relevant and limited to what is necessary for the purposes of processing (data minimization)
d) are accurate and kept up to date where necessary (accuracy)
e) are kept in a form that permits identification of data subjects only for as long as necessary for the purposes of processing (storage limitation)
f) are processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures (integrity and confidentiality)
PART TWO: Processing Analysis
A. Categories of personal data we process
Our organization collects and processes mainly the following categories of personal data:
• Browsing data, including the IP address of your device when you visit our website
• Contact information that you provide when communicating with us
B. Purposes of processing – Legal basis
We collect and process the above categories of personal data for the following purposes:
• Website visitor support (providing information about services and maintaining a record of website visitors)
Legal basis for processing
Processing for the above purposes is carried out:
• Based on Article 6(1)(a) GDPR, meaning that the data subject has given consent to the processing of their personal data for one or more specific purposes.
C. Data retention period and storage location
Personal data are retained only for the period necessary to fulfill the purposes for which they are processed. Your data are stored at the facilities of our organization in physical or digital form, depending on the circumstances.
D. Your rights
We process your data in accordance with this policy and fully support and facilitate the exercise of your rights. We respond to your requests free of charge, without undue delay, and in any case within one (1) month from the time we receive your request and verify your identity. If the request is complex or if we receive a large number of requests, we will inform you within that month if an extension of up to two (2) additional months is required. If requests are manifestly unfounded or excessive, we may charge a reasonable administrative fee or refuse to respond to repeated abusive requests.
You have the following rights:
- Right to information regarding the processing of your personal data
- Right of access, meaning the right to receive a copy of the data you have provided to us
- Right to rectification, if your data are inaccurate or incomplete
- Right to erasure, subject to legal obligations that may require retention
- Right to restriction of processing, under conditions defined by the GDPR
- Right to data portability, meaning the right to receive your personal data in a structured, commonly used and machine-readable format and transmit them to another controller
- Right to withdraw consent, including withdrawal from newsletter communications through the unsubscribe link in any such email
- Right to lodge a complaint with the Hellenic Data Protection Authority (HDPA – www.dpa.gr) if you believe your data protection rights are violated
PART THREE: Additional Information
A. Data security
Our organization applies modern and updated technical and organizational measures to prevent unlawful access, disclosure, alteration or destruction of personal data.
B. Automated decision-making
We do not engage in automated decision-making or profiling.
C. Cookies
Our website uses cookies to facilitate browsing, collect statistical traffic data and for marketing purposes.
For more information, please refer to our Cookies Policy.
D. Contact form
Through the contact form you may send us a message and request information.
We advise you not to send messages containing sensitive personal data, either about yourself or third parties.
E. Changes to this Privacy Policy
Our organization reserves the right to modify or update this Privacy Policy periodically at its discretion.
If changes are made, the date of the update will be indicated, and the revised policy will apply from that date.
We encourage you to review this Privacy Policy periodically.
F. Contact – Requests – Complaints
If you have questions, comments or complaints regarding the processing or protection of your personal data, or if you wish to exercise your rights, please contact us using the contact details provided above.
You may also submit a complaint to the Hellenic Data Protection Authority (HDPA):
Kifisias 1-3, 11523 Athens, Greece
Phone: +30 210 6475600
Fax: +30 210 6475628
Email (data breach notification): databreach@dpa.gr
General email: contact@dpa.gr
