Privacy Policy
The Grand Lodge of Greece, in accordance with the provisions of Regulation (EU) 2016/679 (hereinafter “GDPR”), the Law. 4624/2019, the Decisions, Directives and Opinions of the Personal Data Protection Authority and in general, the relevant legislation on personal data protection (hereinafter referred to as “Applicable Legislation”), in its capacity as Data Controller, wishes through this Privacy Policy, to inform the natural persons visiting its website (hereinafter referred to as “Data Subject”, “you”) about the processing of their personal data.
Ι. What personal data we collect, for what purposes and what are the respective legal bases
| PURPOSE | PERSONAL DATA COLLECTED | LEGAL BASIS |
|
Name, surname, email address, telephone number, personal data that may be included in the message | Article 6 par. 1(b) GDPR: The processing is necessary for the performance of a contract to which the data subject is a party or in order to take measures at the request of the data subject prior to the conclusion of the contract. |
| PURPOSE |
| Communication with the users of the website (via the contact form) |
| PERSONAL DATA COLLECTED |
| Name, surname, email address, telephone number, personal data that may be included in the message |
| LEGAL BASIS |
| Article 6 par. 1(b) GDPR: The processing is necessary for the performance of a contract to which the data subject is a party or in order to take measures at the request of the data subject prior to the conclusion of the contract. |
II.For how long we keep your personal data
We retain your personal data for as long as required by the purpose for which it was collected, as described in Section I, unless otherwise required by law. Upon completion of the required retention period, your data will be irretrievably deleted or securely destroyed.
III. To whom we disclose and/or transmit your personal data
The Grand Lodge of Greece may disclose the personal data collected through this website to authorized members, if this is deemed necessary to achieve its legitimate purposes, or,
a)To entities to which the execution of specific tasks is entrusted, such as, indicatively but not limited to, providers of IT products and/or services and/or support of all kinds of information and electronic systems and networks, consulting companies, etc. These entities shall provide sufficient assurances that appropriate technical and organisational measures are in place, such that the data processing operations are carried out in accordance with the requirements of the GDPR and the relevant data protection legislation.
b) To supervisory, independent, judicial, prosecutorial, public and/or other authorities or bodies or parties entrusted with the control/monitoring of its activities within the scope of their competences.
ΙV.Your rights
According to the Applicable Law, you have the right and you can ask us:
- inform you about the data we hold about you and how we process it. If you wish, we will also provide you with a copy at no charge to you. (Right of access)
- correct inaccuracies or errors, fill in gaps or update your data. (Right of correction)
- delete data if we do not hold it for a specific, lawful and stated purpose. (Right to be forgotten or Right to erasure)
- to suspend processing a) while you dispute the accuracy of the data, b) if you consider the processing to be unlawful (but do not want it deleted), c) when the data are not necessary for the purpose of the processing and d) for as long as it is in doubt whether the reasons for which we process your data outweigh the reasons you invoke for us to definitively stop the processing.
- object at any time on grounds relating to you to the processing of personal data carried out by us, in particular for direct marketing or profiling purposes. The objection may, in particular, also relate to your compliance with a decision we have taken by automated means. In the latter case, you may require us to allow you to intervene. (Right to object – Automated individual decision-making)
- provide you with your data in a specific format (usually machine-readable) or transfer it directly to another controller at your request, provided, of course, that this is technically feasible and always under the conditions set out by law. (Right to portability).
- no longer process your data, giving you the opportunity to freely withdraw the consent you have given us.
You can address your requests via email, at gdpr@grandlodge.gr The Grand Lodge of Greece will respond to all your requests immediately and in any case within one (1) month. In extremely rare cases, when it is almost impossible for us to satisfy your rights, we will inform you immediately, explaining the reasons for our relative impossibility. In the event that you believe that Applicable Law is being violated, you reserve the right to file a complaint with the Data Protection Authority (DPA).
V. Contact details
DETAILS OF THE PERSON RESPONSIBLE FOR PROCESSING
Grand Lodge of Greece
2 Surmelis, Athens 104 38