Notification for the Processing of Personal Data
(articles 13, 14 of Regulation (EU) 2016/679)
The legal entity governed by private law under the name “HELLENIC COPYRIGHT ORGANIZATION” based in Athens, at 5 Metsovou Str. (hereinafter called as the “H.C.O.”), handles personal data protection and privacy issues with responsibility and as a matter of fundamental importance and complies with the Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and the repealing of Direst 95/46/EC (General Data Protection Regulation) (hereinafter referred to as “GDPR”) and the relative Greek legislation.
Specifically, in order to inform and raise awareness among teachers, students and young people in general about the importance of protecting intellectual property, the H.C.O. has launched the “Greek Copyright School” program and the website www.copyrightschool.gr through which it announces and manages a series of projects. Considering the above, we provide you with this Notification according to articles 13, 14 of the GDPR, in order to inform you about the way we collect and process your personal data in terms of your visit and/or use of the abovementioned website and/or social media of the above program.
1. Controller
The Controller for the collection of your data and their processing is the H.C.O., as defined above. That means that the HCO determines the purposes and means of processing your personal data, in accordance with the GDPR and the data protection legislation in general.
2. Sources of personal data collection
The H.C.O. normally collects your personal data directly from you and not from third sources, and they are considered as a necessary condition for ensuring the smooth interaction with you during the operation of the features of the H.C.O.’s websites and/or social media.
3. Processing of personal data and legal bases
The following table lists the purposes of processing of personal data processed by the H.C.O., the categories of the personal data, as well as the legal basis for such processing.
| Purpose of Processing | Categories of Personal Data | Legal Basis of Processing |
| Contact | Personal Information (Name/ Surname), mailing details (e-mail address), any message content/communication | Art.6 par.1 (b) – processing is necessary in order to take steps at the request of the data subject |
| Website Management | ΙP Address, cookies data, visit data | Art.6 par.1 (f) – processing is necessary for the purposes of the legitimate interests pursued by the Controller |
| Social Media Managment (Facebook and Instagram) for the Copyright School | ΙP Address, cookies data, visit data | Art.6 par.1 (f) – processing is necessary for the purposes of the legitimate interests pursued by the Controller |
4. Disclosure to third parties and Categories of recipients
Your personal data as described above are disclosed on a case-by-case basis to public and private authorities, to organization’ s external partners who are in charge of IT tasks as well as to the organization’ s competent internal departments and to its duly authorized officials for social media management.
In any case and where possible, the H.C.O. complies with the requirements of the GDPR (art. 28) for the compliance of third parties/ processors with whom it deals and commits them to the protection of the personal data that communicates to them, in compliance with the special provisions of GDPR and its specific policies and procedures. The H.C.O. may transfer your personal data to third countries, such us the U.S.A., depending on the registered office of each social media. In such a case, the H.C.O. takes into account and applies all the appropriate safeguards provided (including standard contractual clauses) to ensure a high-level protection of personal data in the course of such transfer.
5. Security
The H.C.O. process your personal data in a manner that ensures its protection, taking all the appropriate organizational and technical measures for data security and its protection against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access and any other form of unlawful processing.
6. Subject’s rights
This section presents your rights in respect of personal data. These rights are subject to certain exemptions, reservations or limitations. Please submit your requests responsibly. The H.C.O. will respond as soon as possible and in any case within one (1) month of receipt of the request. If the view of your request is going to take longer, you will receive relevant information. To exercise your rights, you may contact us on the following email address: privacy@opi.gr.
The H.C.O. ensures the uninterrupted exercise of your rights:
6. 1 The right to information
You have the right to request and receive clear, transparent and easily understandable information about the way we process your personal data in accordance with the H.C.O.’s policies and procedures.
6.2 The right to access
You have the right to access your personal data free of charge, in accordance with the H.C.O.’s policies and procedures, with the exemption of the following cases where there may be a reasonable charge to cover the administrative expenses of the H.C.O.:
- manifestly unreasonable or excessive / repeated requests, or
- additional copies of the same information
6.3 The right to rectification
You have the right to ask for your personal data to be corrected if they are inaccurate or incomplete, in accordance with the H.C.O.’s policies and procedures.
6.4 The right to erasure
You have the right to request the deletion or removal of your personal data when it is no longer necessary for the purposes collected or there is no legitimate reason to continue processing it in accordance with the H.C.O.’s policies and procedures. The right to erasure is not absolute, to the extent that there is a particular legal obligation or other legitimate reason for the retention of your personal data by the H.C.O.
6.5 The right to restriction of processing
In certain cases, you have the right, in accordance with the H.C.O.’s relevant policies and procedures, to restrict or remove further processing of your personal data. In cases where processing has been restricted, your personal data remain stored, without further processing.
6.6 The right to data portability
You have the right to request your personal data which you have provided us with in a structured, commonly used and machine readable format, and to transfer that data to another controller in accordance with the H.C.O.’s relevant policies and procedures.
6.7 The right to object
You have the right to oppose, at any time and for reason related to your particular situation, to the processing of your personal data, based on Article 6 (1) (f) of the GDPR (processing for reason of lawful interest of the H.C.O.), on the basis of that provision. In such a case, H.C.O. as controller will no longer submit the personal data unless it demonstrates imperative and legitimate reasons for processing, that prevail the interests, rights and freedoms of the subject, or for filing, exercising or supporting legal claims.
6.8 Right to withdraw consent
You have the right to freely withdraw the consent that you gave us, without prejudice to the lawfulness of the processing during the period preceding the withdrawal.
6.9 Rights on automated decision – making mechanisms and profiling
The HCO does not proceed with automated individual decision -making, including profiling.
6.10 How to exercise the right
The exercise of the aforementioned rights takes place with a submission of a written application with the H.C.O., in accordance with the H.C.O.’s relevant policies and procedures. The H.C.O. reserves the right to reply no later than one month after receiving the request, in accordance with the terms of the GDPR and its policies and procedures.
7. Retention period of personal data
For each category of personal data, the H.C.O. determines the retention period of personal data in accordance with the provisions of the law for each category of personal data and its policies and procedures.
8. Data Protection Officer
For any matter related to the procession of personal data and the current notification, please contact the Data Protection Officer appointed by the H.C.O.:
Data Protection Officer: DRAKOPOULOS LAW FIRM
Telephone: +30 210 6836561
e-mail: gdpr@drakopoulos-law.com
9. Contact with the supervising authority
For further information and advice on your rights or to submit a complaint, you may contact the Hellenic Data Protection Authority, the Greek supervising authority: Mail Address:
Hellenic Data Protection Authority, Offices: 1-3 Kifissias Avenue, P.C. 115 23, Athens, Call Center: +30 210 64756000, Fax: +30-210 6475628, email: contact@dpa.gr.
10. Amendments of the present Notice
We aim to review and keep up-to-date the present Notice, in order to comply with privacy laws and new developments. Any updates to this Notice will be communicated to you immediately.