The protection of your personal data is important to us. This Privacy Policy (hereinafter the «Policy») concerns the conditions for collecting, storing and using your personal data when you visit, register on or use the website https://demokedivim.unipi.gr/ , provided that you are a natural person. If you have any questions, please do not hesitate to contact us. The «Centre for Training and Lifelong Learning» of the University of Piraeus is the Controller of the Data it processes. Our address is 80 Karaoli & Dimitriou St., Piraeus 18534, telephone: +30 210 414 2481, email: kedivim@unipi.gr

If you wish to contact us about any matter relating to the processing of your Data and the exercise of your rights, you may contact the Organisation’s Data Protection Officer (DPO) at dpo@unipi.gr. 1. About the website https://demokedivim.unipi.gr/

The website https://demokedivim.unipi.gr/ is the website of the «Centre for Training and Lifelong Learning» of the University of Piraeus (hereinafter the «Organisation»). The personal data you provide to us while browsing our website or when registering as a user of our services (Registration in the Trainers’ Register, Registration in the Trainees’ Register) are processed and will be kept in a file under the responsibility of the Organisation. 2. What is personal data?

The term «personal data», as used in this Policy, refers to information about natural persons, whether private individuals or professionals, such as full name, postal address, email address, contact telephone number, credit card details, etc., which can be used to identify a visitor to the website (hereinafter «Personal Data» or «Data»). 3. What is the processing of Personal Data?

Processing of Personal Data means the collection, recording, organisation, storage, adaptation, alteration, retrieval, consultation, use, disclosure to third parties, dissemination, alignment, combination, restriction, erasure and destruction of the Personal Data of natural persons. 4. What Data do we collect?

A) When you visit and browse our website: We collect the Personal Data that you choose to provide to us while browsing (e.g. by completing the contact form on our website). Any Data collected by strictly necessary cookies, which are essential for the operation of our website and are always enabled without the possibility of disabling them, as well as by the cookies you have allowed with your consent («non-essential cookies»), may also be processed. Detailed information about cookies can be found in our Cookie Policy. B) When you register as a user of our services: We may collect various information, such as your name, postal address, telephone number, email address, CV data, employment data and education data. C) If you have consented to receive our newsletter, we collect and record your email address in the «newsletter mailing list». 5. Do we process the Data of minors?

We do not process the data of minors. 6. For what purpose do we process your Data?

We process your Data exclusively for the purposes of the services provided by our Organisation, as well as for the smooth operation of our website in general, and in particular for: a) providing you with the online services supported by our website, b) monitoring website traffic, c) contacting you at the details you provide through the contact form, d) complying with the obligations imposed by the legislation in force from time to time, e) ensuring information security and the proper operation of the website, f) sending you newsletters about products and services, g) conducting satisfaction surveys 7. What is the legal basis for the processing of your Data by the Organisation?

The data of website users are processed either in the context of the services offered or on the basis of the user’s consent. Specifically: A) To provide you with online services through the website (purpose «a»), the processing is carried out because it is necessary for you to receive the service provided by the Organisation in the exercise of public authority. B) For monitoring website traffic (purpose «b»), contacting you about matters for which you used the contact form (purpose «c»), ensuring information security and the proper operation of the website (purpose «e») and conducting satisfaction surveys (purpose «g»), the legal basis for the processing is the pursuit of the public interests of our Organisation. In particular, processing for purpose «b» aims to increase the reach of our website; processing for purpose «c» aims to maintain effective lines of communication with the citizens and partners we deal with and to increase their satisfaction; processing for purpose «e» aims to ensure the proper operation of the website, through the use of strictly necessary cookies, and to protect the data and intellectual property of both the Organisation and the visitors to our website; and purpose «g» aims to monitor the satisfaction of those who use the services provided by the Organisation, with a view to increasing satisfaction and continuously improving the services provided by the Organisation. C) For the processing of your Data for the purpose of sending newsletters (purpose «f»), the lawfulness of the processing is based on the consent you provide when registering on the Organisation’s website (e.g. the trainers’ registration form). For more information, please see our Cookie Policy. 8. Who are the recipients of your Data?
The recipients of your data are, as a rule, the staff of the Organisation who are necessary in each case and who have been duly informed about the secure processing of your personal data. In addition, the recipients of your Data are: 1) Natural and legal persons to whom the Organisation assigns the performance of specific tasks on its behalf, such as providers of IT application services and their maintenance. These partners, acting as Processors of Personal Data, have been informed and have undertaken in advance to maintain the confidentiality of your Data, know and follow our instructions regarding the processing of Personal Data and take all appropriate measures to protect them. 2) Supervisory, audit, independent, judicial, public and/or other authorities and bodies within the scope of their statutory competences, duties and powers, where transfer to them is required or provided for by law. 3) Lawyers, law firms, court bailiffs, experts and assessors, in any case of legal action to safeguard our rights and interests. 9. How do we ensure that Processors respect your Personal Data?

Processors have agreed and are contractually bound with the Organisation: ▪to process your Personal Data exclusively in accordance with our instructions and orders, ▪to maintain confidentiality, ▪not to send Data to third parties without the Organisation’s permission, ▪to take appropriate security measures, ▪to comply with the legal framework for the protection of personal data and in particular the European GDPR. 10. Do we send your Data outside the European Union/European Economic Area?

In certain cases, your Data may be transferred outside the European Economic Area due to the use of services and tools of «Microsoft Corporation». The transfer of your Data outside the EEA (specifically to the USA) for the above purposes is carried out on the legal basis of an adequacy decision (Article 45 GDPR). Where, in the course of using the services of «Microsoft Corporation», Data are transferred to third countries outside the EEA and outside the USA for which no adequacy decision has been issued, the security of the transfer is ensured through standard contractual clauses. 11. When do we delete your Data?

We delete the Data you have entered in the Trainers’ or Trainees’ registration form and in the satisfaction survey within twenty years of the submission of the request. We delete the Data you have entered in the contact form depending on the content of the request you have submitted and in any case within 2 years of receipt of the request. We delete consent data for sending the newsletter as soon as you state that you no longer wish to receive newsletters by selecting the unsubscribe link of the «newsletter mailing list», and in any case within five years. Data collected by Cookies are deleted in accordance with the Cookie Policy .

12. Is your Data secure?

We are committed to safeguarding your Personal Data. We have taken appropriate organisational and technical measures to secure and protect your Data against any form of accidental or unlawful processing. We use an SSL (Secure Socket Layer) security certificate to ensure the secure exchange of data between the website and your browser. These measures are reviewed and amended when deemed necessary. 13. What are your rights?

You have the right of access to your Personal Data.
This means that you have the right to be informed by us whether we process your Data. If we process your Data, you may request information on the purpose of the processing, the type of your Data we hold, to whom we disclose them, how long we store them, whether automated decision-making takes place, as well as on your other rights, such as rectification, erasure of data, restriction of processing and lodging a complaint with the Hellenic Data Protection Authority.

You have the right to rectification of inaccurate personal data.
If you find that there is an error in your Data, you may submit a request to us to correct it (e.g. correction of your name or an update of a change of telephone number).

You have the right to erasure/right to be forgotten.
You may ask us to delete your Data if they are no longer necessary for the processing purposes mentioned above, or if you wish to withdraw your consent where it is used as the legal basis for the processing.

You have the right to data portability.
You may ask to receive the Data you have provided in a readable format, or ask us to transfer them to another controller, where the processing is based on your consent or is necessary for the performance of a contract between us.

You have the right to restriction of processing.
You may ask us to restrict the processing of your Data while your objections to the processing are being examined, or if part of the processing is no longer required to fulfil the purposes for which your data were collected.

You have the right to object to the processing of your Data.
You may object to the processing of your Data where it is carried out in pursuit of our legitimate interests, and we will stop processing your Data unless there are other compelling legitimate grounds that override your right.

Right to withdraw your consent
Where the processing of your Data for a specific purpose is based on your prior consent to the processing, you have the right to withdraw your consent, with the result that the processing will not continue in the future. 14. How can you exercise your rights?

To exercise your rights, you may send us a Request either to the Organisation’s postal address (80 Karaoli & Dimitriou St., Piraeus 18534), or to the email address (dpo@unipi.gr) with the subject «Exercise of the right of access/rectification/erasure/portability/restriction/objection», or through the online contact form (Contact – e-learning – Centre for Training and Lifelong Learning (unipi.gr)) with a description of your Request, and we will examine it and reply to you as soon as possible. 15. When do we respond to your Requests?

We respond to your Requests free of charge and without delay, and in any case within one (1) month of receiving your request. However, if your Request is complex or there is a large number of Requests, we will inform you within the month if we need an extension of a further two (2) months, within which we will reply to you. If your Requests are manifestly unfounded or excessive, in particular because of their repetitive nature, the Organisation may charge a reasonable fee, taking into account the administrative costs of providing the information or taking the requested action, or may refuse to act on the Request. 16. Right to lodge a complaint

If you consider that: a) a request of yours has not been satisfied adequately and lawfully, or b) your right to the protection of your personal data is infringed by any processing we carry out, you have the right to lodge a complaint with the Hellenic Data Protection Authority (postal address: 1-3 Kifisias Ave., 115 23 Athens, https://www.dpa.gr/, tel. +30 210 6475600, email: contact@dpa.gr). 17. Do we use automated decision-making, including profiling, when processing your Data?

We do not make decisions or carry out profiling based on the automated processing of your Data. «Cookies» are used on our website, always after you have been informed and have given your consent. 18. How will you be informed of any changes to this Policy?

We will update this Policy whenever necessary. If there are significant changes to the Policy or to the way in which we use your Personal Data, we will notify you either by posting a notice in a prominent place before the changes take effect or by any other appropriate means. We encourage you to read this Policy periodically to be aware of how your Data are protected.