PRIVACY POLICY - GDPR

PRIVACY POLICY - GDPR PERSONAL DATA PROTECTION POLICY

The following privacy policy provides you with information regarding the processing of personal data by the company “ATHENS BOIS S.A.”, (hereinafter the “Company”) and describes the manner in which the Company protects personal information as well as the procedure by which you as individuals can exercise your rights. The Company processes your personal data always with respect for the fundamental rights of individuals in accordance with the current European and Greek legislation (including the General Regulation (EU) 2016/679, the Greek law L. 4264/2019 and any other relevant applicable legal text).

DATA CONTROLLER

The company with the name ATHENS BOIS PUBLISHING COMPANY S.A., based in Exarchia, at 22 Charilaou Trikoupi Street, is the controller of personal data. Contact details for questions regarding personal data can be found at the end of this privacy policy.

PERSONAL DATA

Any information relating to an identified or identifiable natural person ("data subject") (e.g. name, surname, email address).

Special categories of personal data are personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, as well as genetic data, biometric data, data concerning health, sex life or sexual orientation of a person.

PROCESSING OF PERSONAL DATA

Processing of personal data is any operation or set of operations which is performed upon personal data or upon sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

WHAT PERSONAL DATA DO WE PROCESS

The personal data we process are those that are absolutely necessary for the purpose we pursue. More specifically, we may collect, by way of example and not limitation, the following:

Identity data: e.g. name, surname

Contact data: e.g. telephone number, e-mail address

Data that you further declare in the contact form

Data collected through the use of Cookies: e.g. IP address

Image data through the video surveillance system

Data related to possible position coverage / recruitment: e.g. CV

FOR WHAT PURPOSE DO WE PROCESS THE PERSONAL DATA

We process your personal data only for the purpose we pursue. By way of example and not limitation, we use your personal information to:

-to contact you in order to answer any question you have asked us or to satisfy any of your requests.

-to send you updated content via “push notifications”

-to manage our website and app and to be able to provide you with our services to the best extent

-to ensure the protection of persons and property through the video surveillance system

APP APPLICATION

When downloading our application to your mobile phone, we collect the following information: unique identifier, MAC address – other device identifier, location.

POSTING COMMENTS ON ARTICLES

When you provide personal comments on articles published on our website, the information, comments you post and your personal information are accessible to the public and may be processed by third parties unknown to us. For this reason, we urge you to be careful in the comments and posts you make, as we cannot guarantee the confidentiality of your personal information.

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

We process your personal data only if there is a relevant legal basis, such as:

Consent: where required, we may process your personal data if you have given us your consent for the relevant purpose. You can withdraw the relevant consent at any time.

Legitimate interest of the Company: the Company sometimes has a legitimate interest in processing your personal data provided that the pursuit of the legitimate interest does not seriously impact the fundamental rights and freedoms of the data subjects.

Performance of a contract: we may process your personal data in order to fulfill contractual obligations.

Legal obligation: in some cases we must

process your personal data to comply with a legal obligation.

Vital interests: the processing of personal data is necessary to protect the vital interests of the data subject or another natural person.

Public interest: the processing is necessary for the performance of a task carried out in the public interest.

WHO IS THE RECIPIENT OF YOUR DATA

Your personal data is processed internally within the Company by the personnel strictly necessary for this purpose who are bound by confidentiality.

If we use a third-party supplier or business partner, who will process personal data on our behalf and in accordance with our instructions, we will have ensured that the third party that performs the processing for us will have the appropriate security and protection measures for personal data as required by law and will process the personal data only for the performance of their contractual obligations towards us and always in accordance with the instructions we have given them and for no other reason.

In some cases, your personal data may be transferred to the competent police or judicial authorities for the defense of our legal claims and only for cases where it is required by applicable law.

PERSONAL DATA SECURITY

We take care to take all necessary technical and organizational measures and procedures to prevent illegal access and misuse of information and personal data. The measures we take include preventive security procedures, technical and physical access restriction mechanisms as well as control of granting access rights to authorized personnel.

YOUR DATA IS SENT TO COUNTRIES OUTSIDE THE EU

Your personal data is not sent to countries outside the EU/EEA with our knowledge. If your data is sent to such countries, we will take all necessary measures to ensure an adequate level of protection of personal data in accordance with applicable law. In the event that we are informed and/or suspect that data is being sent or processed outside the EU/EEA by our partner or a third party and in the context of ensuring the lawful processing of your personal data, we will make every effort to quickly investigate the fact and will act accordingly as soon as possible. At the same time, where appropriate and in the context of the proper exercise of your rights, we will ensure that you are informed of the above actions by any means the Company deems appropriate.

FOR HOW LONG IS YOUR DATA STORED

We process your personal data only for as long as is necessary to fulfill the respective purpose, unless there is a legal provision for further retention or we need it to meet and fulfill our legal claims.

SOCIAL MEDIA

Our Company has its own pages on social media (Facebook, Instagram, Twitter). These pages are publicly accessible and any content, comment, personal information you provide will be visible to the general public and for this reason we recommend that you be careful with the content of the information you post.

COOKIES

Cookies are small text files that are stored on your computer or mobile device when you visit a website. The cookie policy provides further details on the use of cookies as well as on how you can delete or prevent the storage of specific cookies on your computer or mobile device.

WHAT ARE YOUR RIGHTS AS A DATA SUBJECT

As a data subject, you have the following rights:

Right of access: You can obtain information from us whether and how we process your personal data, for what purpose we use your data, what data we keep about you, for how long, and whether automated decision-making is being carried out.

Right of rectification: You can ask us to correct inaccurate data or to complete incomplete data about you.

Right to erasure: You can ask us to erase your data if there is no reason that justifies our non-fulfilment.

Right to portability: You can ask us to receive the data you have provided to us in a readable format or request that we transmit it to another controller.

Right to restriction: You can ask us to restrict the processing of your personal data for as long as any objections to the processing are pending.

Right to object: You can object to the processing of your personal data at any time or withdraw your consent, in which case we will stop the processing if there are no legal grounds for doing so.

compelling reasons justifying our further use of your data.

HOW CAN YOU EXERCISE THE ABOVE RIGHTS?

You can exercise your rights at any time through the Data Subject Right Exercise Request (Request Form) and the Company will respond to you within thirty (30) days from the date of receipt and confirmation of your identity, unless the request is unusually long and complex, in which case the response may be delayed for another sixty (60) days.

The satisfaction of your request is free of charge. However, in the event that a request is manifestly unfounded or excessive, a reasonable fee may be charged.

In any case, if we do not respond to your request, you have the right to file a complaint with the Hellenic Data Protection Authority (HDPA): 1-3 Kifissias, Athens / www.dpa.gr tel. 2106475600.

COMMUNICATING WITH THE COMPANY

Individuals may contact the Company for any information or clarification regarding the processing of their personal data either by post to the following address: Attention Data Protection Officer, Athens Voice, 22 Char. Trikoupi, P.C. 10679, Exarchia, or electronically to the following address: info@athensvoice.gr

AMENDMENTS TO THIS POLICY

From time to time it is necessary to adapt the content of this information regarding data protection. Therefore, we reserve the right to change it at any time for the future. We will also publish the amended version here. If you visit us again, you should therefore read the data protection information again.

TRANSFER AND DISCLOSURE OF PERSONAL DATA

The website undertakes not to sell, rent or in any way publish and/or communicate the personal data of the website users to any third party.

DATE OF PUBLICATION UPDATE: 19.5.2023