Protection of personal data
The on-line visitor/use is the object of personal data protection under national and EU law. The non-profit company Istorima, as Data Processor within the meaning of the GDPR 2016/679 and Law 4624/2019, is in full compliance with their framework, principles and provisions.
The collection and processing of the personal data of internet visitors/users takes place within the framework of the principle of minimisation and is exclusively for the purposes of communication of the non-profit company Istorima with the on-line visitors/users of the Archive, to respond to their requests, or to provide information.
It is only within this context that personal data is collected (any information the relates to identified or identifiable natural persons). The non-profit company Istorima collects, where appropriate, the following data:
Name, surname, and correspondence email, for registered users and those who send some form of request via the contact form. In the case of donors, in addition to the above information, the non-profit company Istorima also collects bank details with their permission (credit card or bank account number).
Correspondingly, the processing of data of a personal nature takes place insofar as there are: a) consent, b) performance of a contract, c) compliance with the obligations of the non-profit company Istorima flowing from the law, d) safeguarding the vital interests of on-line visitor/users, e) reasons of public interest or the need to meet the legitimate interests of the Data Processor or third parties. Data of a personal nature provided by on-line visitors/users to the Archive are only revealed if there is consent from their Subject for their publication, or if required by law, court order, or government authorities.
By providing his/her consent, the Personal Data Subject agrees to the collection, storage, and processing of this data by the non-profit company Istorima, declaring that they have previously been fully informed of the purpose of the collection, storage, and processing, and their legal protection and rights. The consent of the Personal Data Subject can be withdrawn at any time with no temporal or procedural condition.
Each Personal Data Subject retains all their rights under national and Union law. Specifically: a) the right to accesses and information; b) the right to correct personal data; c) the right to have personal data deleted; d) the right to limit processing of personal data; e) the right to transfer of personal data; f) the right to object to the processing of personal data.
To exercise these rights please contact GDPR@istorima.org or send mail to: Ploutarchou 18 10676, Athens.