Notification for the Processing of Personal Data
(Articles 13, 14 of Regulation (EU) 2016/679)
The legal entity governed by private law under the name “HELLENIC COPYRIGHT ORGANIZATION” based in Athens, at 5 Metsovou Str. (hereinafter called as the “H.C.O.”), handles personal data protection and privacy issues with responsibility and as a matter of fundamental importance and complies with the Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and the repealing of Direst 95/46/EC (General Data Protection Regulation) (hereinafter referred to as “GDPR”) and the relative Greek legislation.
More specifically, in order to inform the public about the online platforms that have legal content protected by copyright law, the H.C.O. has developed the website www.enjoylegal.gr. Considering the above, we provide you with this Notification pursuant to Articles 13, 14 of the GDPR, in order to inform you about the way we collect and process your personal data in terms of your browsing experience on our H.C.O.’s website.
Controller
The Controller for the collection of your data and their processing is the H.C.O., as defined above. That means that the H.C.O. determines the purposes and means of processing your personal data, in accordance with the GDPR and the data protection legislation in general.
Sources of personal data collection
The H.C.O. collects your personal data, directly from you and not from third parties, and this is considered as a necessary condition to ensure the smooth interaction with you during the operation of the capabilities of the websites of the H.C.O.
Processing of personal data and legal bases
The following table lists the purposes of processing of personal data collected by the H.C.O. for the above-mentioned purposes, the categories of the data collected, as well as the legal basis for such processing.
Purpose of Processing Personal Data Legal Basis of Processing Contact Personal information (Name/Surname), contact details (email), any message/contact content Art.6 par.1 (b)- processing is necessary in order to take steps requested by the data subject Management of the Website ΙP address, cookie data, cookies, visit data Art.6 par.1 (f)- processing is necessary for the purposes of the legitimate interests pursued by the Controller -
Disclosure to third parties and recipients
Considering the above, your personal data is available to private and public authorities or outsourcing services providers of the organization, who are in charge of IT duties as well as to the relevant internal departments of the organization.
In any case and where feasible, the H.C.O. complies with the requirements of the GDPR (art. 28) for the compliance of the third parties/processors with whom it deals, it commits them to the protection of the personal data that it discloses to them, as defined by the GDPR and its respective policies and procedures. The H.C.O. does not transfer your personal data to a third country.
-
Security
The H.C.O. shall process your personal data in a manner that ensures its protection by taking all appropriate organizational and technical measures for data security and its protection against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access and any other form of illicit processing.
-
Subjects’ rights
This section presents your rights with respect to your personal data. These rights are subject to certain exceptions, reservations or limitations. Please submit your requests responsibly.
The H.C.O. will respond as soon as possible and in any case within one (1) month of receipt of the request. If the review of your request is going to take longer, you will receive relevant information. To exercise your rights, you can contact us on the following email-address: privacy@opi.gr.
The H.C.O. ensures the exercise of your rights:
6. 1. The right to information
You have the right to request and receive clear, transparent and easily understandable information about how we process your personal data in accordance with the H.C.O.’s policies and procedures.
6.2. The right to access
You have the right to access your personal data free of charge, in accordance with the relevant policies and procedures of the H.C.O., with the exception of the following cases where there may be a reasonable charge to cover the administrative expenses of the H.C.O.:
- manifestly unreasonable or excessive / repeated requests, or
- additional copies of the same information.
6.3. The right to rectification
You have the right to ask for your personal data to be corrected if it is inaccurate or incomplete, in accordance with the relevant policies and procedures of the H.C.O.
6.4. The right to erasure («to be forgotten»)
You have the right to request the deletion or removal of your personal data when it is no longer necessary for the purposes collected or there is no legitimate reason to continue processing it in accordance with the H.C.O.’s policies and procedures. The right of deletion is not absolute, to the extent that there is a particular legal obligation or other legitimate reason for the retention of your personal data by the H.C.O.
6.5. The right to restriction of processing
In some cases, you have the right, in accordance with the relevant policies and procedures of the H.C.O., to restrict or remove further processing of your personal data. In cases where processing has been restricted, your personal data remains stored, without further processing.
6.6. The right to data portability
You have the right to request your personal data, which you have provided us with in a structured, commonly used and machine readable format, and to transfer that data to another controller in accordance with the relevant policies and procedures of the H.C.O.
6.7. The right to object
You have the right to oppose, at any time and for reasons related to your particular situation, to the processing of your personal data based on Article 6 (1) (f) of the GDPR (processing for reasons of lawful interest of the H.C.O.), on the basis of that provision. In such a case, the H.C.O. as controller will no longer submit the personal data unless it demonstrates imperative and legitimate reasons for processing that override the interests, rights and freedoms of the subject, or the filing, exercise or support legal claims.
6.8. The right to withdraw consent
You have the right to freely withdraw the consent you have given us, without however affecting the legality of the processing during the period preceding the withdrawal.
6.9. Rights on automated decision-making mechanisms
The H.C.O. does not make automated individual decision-making, including profiling.6.10. How to exercise the right
The exercise of the aforementioned rights takes place with the submission of a written application to the H.C.O. in accordance with its policies and procedures. The H.C.O. reserves the right to reply no later than one month after receiving the request, in accordance with the terms of the GDPR.
-
Retention period for personal data
For each category of personal data, the H.C.O. determines the retention period in accordance with the provisions of the law and its policies and procedures.
-
Company’s Representative for data protection affairs
For any matter related to the procession of personal data and the current notification, please contact the Data Protection Officer appointed by the H.C.O.:
Data Protection Officer: DRAKOPOULOS LAW FIRM
Telephone: +30 210 6836561
e-mail: gdpr@drakopoulos-law.com -
Contact of the Data Protection Authority
For further information and advice on your rights or to submit a complaint, you may contact the Personal Data Protection Authority, the Greek Data Protection Authority at: Postal Address: Personal Data Protection Authority, Office: 1-3 Kifissias Avenue Street, P.C. 115 23, Athens, Call Center: +30-210 6475600, Fax: +30-210 6475628, e-mail: contact@dpa.gr.
-
Amendments of the present Notice
We aim to review and keep up-to-date the present Notice in order to comply with privacy laws and new developments. Any updates to this Notice will be communicated to you immediately.