PERSONAL DATA PROTECTION POLICY
IN.E. - G.S.E.E.

IN.E. - G.S.E.E. is committed to respecting the confidentiality and security of Personal Data (PII) collected in the exercise of its statutory purposes and its activities in general, and to complying with the applicable laws and regulations regarding the processing of PII.

The data protection policy of the IN.E. - G.S.E.E. is based on the following principles:

• The processing of personal data takes place in a lawful, fair and transparent manner.

• Personal data is processed only for specified, explicit and legitimate purposes and further processed in a way that is incompatible with those purposes.

• The processing of personal data is adequate, relevant and limited to what is necessary in relation to the purpose of the processing.

• Personal data must be accurate and, where possible, up to date.

• Personal data shall be kept in a form which permits identification of the data subject for no longer than is necessary for the purpose of the processing.

• All personal data is kept confidential and stored in a manner that ensures its protection.

• Personal data will not be transmitted to third parties unless necessary for the purpose of processing.

• Data subjects have the right to demand access, rectification or erasure of personal data, or restriction of processing, or to object to processing, as well as the right to data portability.

• When you fill in your personal data such as your full name and your email address through the forms posted on our website, you agree to the processing of your personal data for the purpose indicated in the form you have filled in.

• Your personal data will not be transferred or used by any third party, unless required by law or for the performance of a contract or in any other case where a transfer is required.

• IN.E. - G.S.E.E. has adopted policies and implemented technical and organizational measures to ensure that the personal data it collects is protected in accordance with applicable privacy and data protection laws.

• These security measures are designed to prevent unauthorized access, inappropriate use or disclosure of data, unauthorized modification and unlawful destruction or accidental loss of your personal data.

• Your personal data is kept by IN.E. - G.S.E.E. only for as long as necessary to achieve the purposes of processing in accordance with applicable laws.

• We do not collect more personal data than we need to fulfil the purposes stated in this privacy policy and we will not retain it for longer than the period of time deemed necessary.

Your rights regarding the protection of your personal data

Your rights regarding the protection of your personal data, as applicable under the conditions set out in the General Data Protection Regulation (EU 679/2016) and applicable national legislation, are as follows:

• Right of access to your personal data held, held and processed by IN.E. - G.S.E.E.
• Right to correct inaccurate or inadequate data concerning you or to complete incomplete data concerning you.
• Right to erasure of your data from the files of INE - GSCE if the processing is not necessary for the purposes for which they have been collected and in accordance with Article 17 of the GDPR.
• Right to restrict the use of your data if you question their accuracy.
• Right to receive the data you have provided yourself in a structured, commonly used format.

The exercise of the aforementioned rights is subject to the submission, free of charge, of a written request to IN.E. - G.S.E.E. You can address your request to: Benaki 71A, 10681, Athens, Tel: 210-3327784, email: svergou@inegsee.gr and/or to the Data Protection Officer (DPO) of the IN.E. - G.S.E.E. (The Records Hub S.A., 64, Aigeos St., Koropi, tel. 2113110870, email address: dpo@TheRecordsHub.com), and in any case you have the right to contact the Data Protection Authority either in writing (1-3 Kifissias Street, 11523 Athens) or online (www.dpa.gr). In the event of the exercise of one of the aforementioned rights, IN.E. - G.S.E.E.  will take all possible measures to satisfy it within thirty (30) calendar days from the receipt of the request, informing in writing of its satisfaction, or the reasons preventing the exercise of the right.