The website www.centralathens.gr is property of the non-profit company “AEGEAN FILM AND YOUTH MEDIANET” with the distinctive title “AEGEAN MEDIANET”, which is seated in Paparigopoulou Str. 40, GR-11473, tel. +30 693 2731605, e-mail email@example.com (hereinafter "the Company") aiming at the organisation of educational/media literacy programmes, events and international projects in the audiovisual sector.
Personal data is collected for specified, explicit and legitimate purposes and is not further processed in a manner that is incompatible with those purposes. In line with the Data Protection legislation in force, the Company makes sure that the information collected is: (a) used fairly and lawfully; (b) used for limited, specifically stated purposes; (c) used in a way that is adequate, relevant and not excessive; (d) accurate; (e) kept for no longer than necessary; (f) handled according to data protection rights provisions; (g) kept safe and secure; (h) not transferred outside Greece without adequate protection.
Any processing of personal data is carried out in accordance with (a) the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of physical persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), (b) the national and European data protection legal framework.
DEFINITIONS OF PERSONAL DATA
Personal data: Any information relating to an identified or identifiable physical person (‘data subject’); such as name, phone number, postal address, email or one or more factors specific to the identity of that physical person; (hereinafter referred to as "Personal Data or Data").
Processing of Personal Data: means any operation or set of operations performed on personal data or on sets of personal data, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
COLLECTION OF PERSONAL DATA
(A) During your visit and navigation to our website, we use Google Analytics (GA) to track the country of origin and the websites you visit.
(B) Curriculum vitae, video, photos, earlier projects, and any other related material that you send us concerning the presentation of your professional activity. These data are collected and processed with your consent.
(C) In case of an agreement between us, we collect the financial data, which are provided by the current legislation as necessary for the agreement.
The collection of your data concerns:
a) tracking the traffic of this website,
b) communicating and contacting you by the information provided through the contact form,
c) complying with our legal obligations,
e) enhancing our cooperation for the implementation of the production of audiovisual projects,
f) promoting your CVs and related material regarding your participation in our educational programmes, events, or audiovisual productions.
In principle, processing of personal data revealing racial origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a physical person, data concerning health or data concerning a natural person's sex life or sexual orientation shall be prohibited.
The processing of your data is exclusively carried out, in order to provide you with the best digital experience, personalise content and show you more relevant information
(upon your request).
LEGAL BASIS OF PROCESSING
The processing of your data is carried out according to our agreements or is based on your consent. The legitimate interests of the Company to which the personal data may be disclosed, may provide a legal basis for processing, provided that your interests or the fundamental rights and freedoms are not overriding, taking into consideration your reasonable expectations based on your relationship with the Company.
USE OF YOUR DATA
Recipients of your data are the employees of the Company who are obliged to treat in confidence any information which they have acquired in the course of their duties, our authorised partners, our suppliers who may process your data on our behalf and in accordance with our orders, or our customers as joint controllers, as well as organisations involved in the fulfillment of our legal obligations.
In addition, we may share or disclose your data upon your request or when is legally required.
The processor(s) processing your personal data on our behalf, have been contractually bound (a) to keep confidentiality, (b) not to transmit data to third parties without the Company's permission, (c) to take the appropriate security measures and (d) to comply with the legal framework for the protection of personal data and in particular the GDPR Regulation.
TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES
We may transmit your data to non-EU countries, using the appropriate safeguards on standard contractual clauses of the EU legislation. Any transfer of personal data which are undergoing processing or are intended for processing after transfer to a third country or to an international organization, shall take place only if the conditions laid down in this the current legal framework are complied with by the Company and processor.
DURATION OF DATA RETENTION
The Company retains your data only for the time deemed necessary for the purposes they have been collected or upon your request for their erasure, save as otherwise provided for in the law or our agreements. The retention time of your personal data is recorded in the Company’s activity logs.
Certain categories of data are retained for a longer time period for the purpose of safeguarding the rights of the Company and exercising its legitimate claims. In these cases, the processing of your data will extend until the limitation of actions, the irrevocable termination of any judicial or administrative proceedings, or the completion of an out-of-court dispute resolution procedure between us.
In addition, it should be pointed out the likelihood of need to investigate a security incident.
DATA OF MINORS
We process data relating to children under the age of 16 years only with the consent of their parents or guardians, in accordance with the provisions of relevant legislation. If you are below the age of 16 years, you must provide your parent’s or guardian’s consent before signing up to the website's services. The Company shall make reasonable efforts to verify in such cases that consent is given or authorised by the parent or guardian of the child, taking into consideration every available technology. Where it appears that the Company collected data from a person below the age of 16 years without the abovementioned conditions, the Company will erase the data without any delay.
SECURITY OF PROCESSING
We are committed to protect your personal data. We have taken the appropriate organisational and technical measures to ensure the security and protection of your data from the risks presented upon processing, in particular from accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data transmitted, stored or otherwise processed.
Access to your data is authorized only to our authorized employees and partners and solely for the abovementioned purposes. These measures shall be reviewed and amended where deemed appropriate.
- You have the right to access your personal data.
If we process your data you may request to be informed about (a) the processing to which they are submitted, (b) the recipients or categories of recipients to whom the personal data have been or will be disclosed. Τhe Company shall, at the time, when personal data are obtained, provide the data subject with the following further information necessary to ensure fair and transparent processing: (a) the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period; (b) the existence of the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability.
- You have the right to correct inaccurate personal data.
You may request to correct/update any incorrect data (e.g., correcting a name or updating a phone number).
- You have the right to erasure/the right to be forgotten.
You may request to erase your data if the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed. You may also request the erasure of your personal data for the reasons provided in the current legal framework (indicatively revocation of the consent on which the processing is based, illegal processing etc.).
- You have the right to data portability.
You may request (a) to receive your personal data in a structured, commonly used and machine-readable format and (b) to transmit those data to another controller without hindrance from the Company to which your personal data have been provided.
- You have the right to restriction of processing.
You may request that we restrict the processing and use of your personal data (a) when the accuracy of your personal data is contested and until it's verification, (b) when the processing is unlawful and (c) when you have objected to the processing.
- You have the right to object.
You may object at any time to processing your data and may withdraw your consent. The Company shall no longer process your personal data unless the Company demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms.
If you wish to exercise your rights, you can send your request by post to AEGEAN MEDIANET Paparigopoulou 40, GR-114 73 Athens or by e-mail to firstname.lastname@example.org with subject "Exercise the right of access / correction / erasure / portability / restriction / objection" and a full description of your request.
We reply to your requests (free of charge) without undue delay and in any case within one month upon receiving your request. That period may be extended by two further months where necessary, taking into account the complexity and number of your requests.
If your requests are found to be unsubstantiated or excessive due to their repetitive nature, the Company may charge a reasonable fee taking into account the administrative costs of providing information or communication or taking the action requested.
FILING A COMPLAINT
If you have any queries that cannot be clarified as a result of contact with us or you wish to file a complaint, you can contact the Hellenic Data Protection Authority, Kifissias 1-3, GR-115 23, Athens. For further information on how to file a complaint, please visit the Authority’s website at https://www.dpa.gr/en.