Privacy Notice

Purpose of the Privacy Notice

This Privacy Notice aims to inform visitors (hereinafter also referred to as “you” or “your”) of the website https://fundraising.demokritos.gr/ (hereinafter the “Website”) of the National Centre for Scientific Research “Demokritos” (hereinafter “NCSR Demokritos”, the “Centre” or “we”) about the way we process your personal data through the Website, as well as your rights under applicable data protection legislation, in particular the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Law 4624/2019 (Greek law).

Useful Definitions

For your better understanding, we use the following terms with the meanings set out below:

  1. Personal Data: Any information relating to an identified or identifiable natural person (such as full name, postal and email address, contact details, etc.), referred to as the “Data Subject”. For the purposes of this Notice, Website visitors are considered Data Subjects.
  2. Processing: Any operation performed on personal data, including collection, recording, organisation, storage, alteration, retrieval, transmission, erasure, etc.
  3. Controller: The natural or legal person, public authority or other body which, alone or jointly with others, determines the purposes and means of processing and is responsible towards Data Subjects.
  4. Data Logs: Electronic records of Website activity stored on the servers used by NCSR Demokritos for the operation of the Website.
  5. Cookies: Small text files used by the Website and stored on the device you use to access the internet (e.g. computer, mobile phone, tablet).

Data Controller

The controller for the data processed through the Website is NCSR “Demokritos”, which you may contact at: Patriarchou Grigoriou E’ & Neapoleos 27, 15341 Agia Paraskevi, Attica, Greece, Tel.: +30 2106503410, Email: support@egov.demokritos.gr, Data Protection Officer (DPO): dpo@central.demokritos.g

Data Collected Automatically

A) Data logs: NCSR “Demokritos” does not directly collect personal information through the Website, but only technical data (error logs) commonly collected by websites worldwide, such as date, type and time of error, which are automatically stored on the Website servers. The purpose of this collection is to ensure the proper functioning and security of the Website.

B) Cookies: In addition to the above, when using the Website, cookies (small text files) are stored on your device. These cookies do not record identifying information or your IP address. However, they may include data (such as session IDs) which, when combined with other identifiers (e.g. IP address), could potentially be attributed to a specific individual and thus qualify as personal data under the GDPR. Such data are retained only for as long as strictly necessary to ensure the technical functionality and security of the Website.

For more information about the cookies used by the Website, please refer to the Cookies Policy. NCSR “Demokritos” does not collect information from non-essential cookies unless you provide your consent via the Cookie Settings.

Data You Provide

Communication via email: You may contact us by telephone or email using the contact details available on the “Contact us” page of the Website. In this case, we collect your contact details and the content of your message in order to respond to you.

Legal Basis for Processing

Processing of data collected automatically through the Website is necessary for the performance of a task carried out in the public interest (Article 6(1)(e) GDPR and Article 5 of Law 4624/2019). Similarly, the legal basis for processing personal data for communication purposes is Article 6(1)(e) GDPR, which allows NCSR “Demokritos” to process personal data where necessary to fulfil its duty to respond to citizens’ requests, carried out in the public interest.

Recipients of the Data

Processing of data collected through the Website is carried out within the Centre and access is granted only to authorised personnel of the Fundraising Unit. Personal data may be disclosed to third parties only

  • where necessary for the fulfilment of the purpose for which they were collected, including:
  • where required by law (e.g. upon lawful request by judicial, police or other administrative authorities), in the context of contractual relationships (e.g. IT service providers, event organisers, cloud services/platforms), or
  • in exceptional cases, based on the Data Subject’s consent.

For more information, please refer to the NCSR “Demokritos” Privacy Policy.

Data Retention

Your data are retained for as long as necessary to fulfil the purposes described in this Notice. These purposes may also include compliance with legal obligations, establishing the lawfulness of processing, and the exercise or defence of legal claims, until the expiry of the relevant retention period.

Data submitted via email are retained for one (1) year following the resolution of your request, unless a longer retention period is required by law. Log files are retained for six (6) months for security and proper operation purposes. In case of a security incident, they may be retained longer, to the extent necessary for investigation and resolution.

Links to Third-Party Websites & Social Media

The Website may include links to third-party websites and social media platforms (e.g. LinkedIn), which operate under separate controllers and may process your data and install cookies for which we bear no responsibility. You are advised to review their respective privacy and cookies policies.

The Fundraising Unit maintains a LinkedIn page and processes personal data received through it solely for communication and service purposes. Additionally, we receive anonymised statistical data (e.g. age, profession, demographics) regarding user interaction with our page, through cookies installed on your device when visiting the platform. For these statistics, NCSR “Demokritos” acts as a joint controller with the social media platform. If you do not wish your data to be processed for such statistical purposes, you may refuse or disable cookies via the platform settings. For more information, please consult LinkedIn’s terms of use, privacy policy and cookies policy.

Your Rights

You may contact NCSR “Demokritos” or the DPO at dpo@central.demokritos.gr at any time to confirm whether we process your personal data and, if so, to exercise your rights of access, rectification, erasure, restriction, objection, data portability, and withdrawal of consent (where applicable), in accordance with the GDPR and Law 4624/2019. Please note that no decisions are taken based solely on automated processing.

We will respond within the time limits set by the GDPR and without undue delay. If a request cannot be fulfilled, you will receive a justified response.

For more information regarding your rights, please refer to the NCSR “Demokritos” Privacy Policy.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority: (https://www.dpa.gr/).

For any questions regarding the protection of your personal data, you may contact the Data Protection Officer (DPO) at: dpo@central.demokritos.gr

Updates

In the event of changes affecting personal data processing, the Centre will update this Privacy Notice and publish the revised version on the Website to ensure you remain informed and able to exercise your rights effectively.