Privacy notice

Notification for the Processing of Personal Data

(articles 13, 14 of Regulation (EU) 2016/679)

The legal entity governed by private law under the name “HELLENIC COPYRIGHT ORGANIZATION” based in Athens, at 5 Metsovou Str. (hereinafter called as the “H.C.O.”), handles personal data protection and privacy issues with responsibility and as a matter of fundamental importance and complies with the Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and the repealing of Direst 95/46/EC (General Data Protection Regulation) (hereinafter referred to as “GDPR”) and the relative Greek legislation.

Specifically, in order to inform and raise awareness among teachers, students and young people in general about the importance of protecting intellectual property, the H.C.O. has launched the “Greek Copyright School” program and the website through which it announces and manages a series of projects. Considering the above, we provide you with this Notification according to articles 13, 14 of the GDPR, in order to inform you about the way we collect and process your personal data in terms of your visit and/or use of the abovementioned website and/or social media of the above program.

1. Controller

The Controller for the collection of your data and their processing is the H.C.O., as defined above. That means that the HCO determines the purposes and means of processing your personal data, in accordance with the GDPR and the data protection legislation in general.

2. Sources of personal data collection

The H.C.O. normally collects your personal data directly from you and not from third sources, and they are considered as a necessary condition for ensuring the smooth interaction with you during the operation of the features of the H.C.O.’s websites and/or social media.

3. Processing of personal data and legal bases

The following table lists the purposes of processing of personal data processed by the H.C.O., the categories of the personal data, as well as the legal basis for such processing.

Purpose of ProcessingCategories of Personal DataLegal Basis of Processing
ContactPersonal Information (Name/ Surname), mailing details (e-mail address), any message content/communicationArt.6 par.1 (b) – processing is necessary in order to take steps at the request of the data subject
Website ManagementΙP Address, cookies data, visit dataArt.6 par.1 (f) – processing is necessary for the purposes of the legitimate interests pursued by the Controller
Social Media Managment (Facebook and Instagram) for the Copyright SchoolΙP Address, cookies data, visit dataArt.6 par.1 (f) – processing is necessary for the purposes of the legitimate interests pursued by the Controller

4. Disclosure to third parties and Categories of recipients

Your personal data as described above are disclosed on a case-by-case basis to public and private authorities, to organization’ s external partners who are in charge of IT tasks as well as to the organization’ s competent internal departments and to its duly authorized officials for social media management.

In any case and where possible, the H.C.O. complies with the requirements of the GDPR (art. 28) for the compliance of third parties/ processors with whom it deals and commits them to the protection of the personal data that communicates to them, in compliance with the special provisions of GDPR and its specific policies and procedures. The H.C.O. may transfer your personal data to third countries, such us the U.S.A., depending on the registered office of each social media. In such a case, the H.C.O. takes into account and applies all the appropriate safeguards provided (including standard contractual clauses) to ensure a high-level protection of personal data in the course of such transfer.

5. Security

The H.C.O. process your personal data in a manner that ensures its protection, taking all the appropriate organizational and technical measures for data security and its protection against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access and any other form of unlawful processing.

6. Subject’s rights

This section presents your rights in respect of personal data. These rights are subject to certain exemptions, reservations or limitations. Please submit your requests responsibly. The H.C.O. will respond as soon as possible and in any case within one (1) month of receipt of the request. If the view of your request is going to take longer, you will receive relevant information. To exercise your rights, you may contact us on the following email address:

The H.C.O. ensures the uninterrupted exercise of your rights:

6. 1 The right to information

You have the right to request and receive clear, transparent and easily understandable information about the way we process your personal data in accordance with the H.C.O.’s policies and procedures.

6.2 The right to access    

You have the right to access your personal data free of charge, in accordance with the H.C.O.’s policies and procedures, with the exemption of the following cases where there may be a reasonable charge to cover the administrative expenses of the H.C.O.:

  • manifestly unreasonable or excessive / repeated requests, or
  • additional copies of the same information

6.3 The right to rectification

You have the right to ask for your personal data to be corrected if they are inaccurate or incomplete, in accordance with the H.C.O.’s policies and procedures.

6.4 The right to erasure       

You have the right to request the deletion or removal of your personal data when it is no longer necessary for the purposes collected or there is no legitimate reason to continue processing it in accordance with the H.C.O.’s policies and procedures. The right to erasure is not absolute, to the extent that there is a particular legal obligation or other legitimate reason for the retention of your personal data by the H.C.O.

6.5 The right to restriction of processing   

In certain cases, you have the right, in accordance with the H.C.O.’s relevant policies and procedures, to restrict or remove further processing of your personal data. In cases where processing has been restricted, your personal data remain stored, without further processing.

6.6 The right to data portability

You have the right to request your personal data which you have provided us with in a structured, commonly used and machine readable format, and to transfer that data to another controller in accordance with the H.C.O.’s relevant policies and procedures.

6.7 The right to object

You have the right to oppose, at any time and for reason related to your particular situation, to the processing of your personal data, based on Article 6 (1) (f) of the GDPR (processing for reason of lawful interest of the H.C.O.), on the basis of that provision. In such a case, H.C.O. as controller will no longer submit the personal data unless it demonstrates imperative and legitimate reasons for processing, that prevail the interests, rights and freedoms of the subject, or for filing, exercising or supporting legal claims.

6.8 Right to withdraw consent

You have the right to freely withdraw the consent that you gave us, without prejudice to the lawfulness of the processing during the period preceding the withdrawal.

6.9 Rights on automated decision – making mechanisms and profiling

The HCO does not proceed with automated individual decision -making, including profiling.

6.10 How to exercise the right

The exercise of the aforementioned rights takes place with a submission of a written application with the H.C.O., in accordance with the H.C.O.’s relevant policies and procedures. The H.C.O. reserves the right to reply no later than one month after receiving the request, in accordance with the terms of the GDPR and its policies and procedures.

7. Retention period of personal data

For each category of personal data, the H.C.O. determines the retention period of personal data in accordance with the provisions of the law for each category of personal data and its policies and procedures.

8. Data Protection Officer

For any matter related to the procession of personal data and the current notification, please contact the Data Protection Officer appointed by the H.C.O.:

Data Protection Officer: DRAKOPOULOS LAW FIRM

Telephone: +30 210 6836561


9. Contact with the supervising authority

For further information and advice on your rights or to submit a complaint, you may contact the Hellenic Data Protection Authority, the Greek supervising authority: Mail Address:

Hellenic Data Protection Authority, Offices: 1-3 Kifissias Avenue, P.C. 115 23, Athens, Call Center: +30 210 64756000, Fax: +30-210 6475628, email:

10. Amendments of the present Notice

We aim to review and keep up-to-date the present Notice, in order to comply with privacy laws and new developments. Any updates to this Notice will be communicated to you immediately.