On May 25, 2018, European Regulation 679/2016 (also known as GDPR – General Data Protection Regulation) was implemented by the EU for the protection of natural persons with regard to the processing of Personal Data.
The specific regulation establishes rules concerning the protection of natural persons against the processing of personal data and rules concerning the free movement of personal data. (art. 1, 2)
According to Article 4 of the G.D.P.R.:
a)”personal data” means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
b) “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
2. Personal Data Controller
The Hellenic Cosmetic, Toiletry & Perfumery Association (PSVAK) based in Marousi, Attica, 46 Agios Konstantinou Street and 1 Hephaistou Street, with contact phone number +302106828955 and email: email@example.com, in accordance with the provisions of the aforementioned data protection regulation of a personal nature, is the personal data controller.
3. “Data Subject”
The Data Subject is the natural person who is identified or can be identified and to whom the personal data subject to processing refer. In the context of using the official website of PSVAK, the subjects whose personal data is processed by PSVAK are:
- visitors to the PSVAK website, as long as they voluntarily provide their information,
- registered members of PSVAK.
4. Use of Personal Data
Every online visitor can browse the official website of PSVAK at www.psvak.gr, without providing any personal information.
We may collect your personal data with your consent in the following cases:
- When you contact our office or PSVAK staff: when you contact us via e.g., e-mail, through the special contact form found on the PSVAK website, by phone, by mail or to register as our member, you will be asked to provide us with your personal information, such as name, address, telephone, email.
5. Legal processing of personal data
PSVAK sends informative electronic messages, with the aim of informing the recipients about its activity, that is, the events, actions, news and initiatives it takes to fulfill its purposes.
PSVAK, complying with the provisions of the European Regulation on the Protection of Personal Data (EU 2016/679), manages the Personal Data disclosed to it with the utmost care, ensuring, in any case, their protection and privacy.
In order to ensure increased security of Personal Data, PSVAK has taken all the necessary organizational and technical measures (encryption, security codes, security systems, staff confidentiality agreements, etc.), drawing up internal security policies and procedures, using suitable electronic means, updating and properly training its staff to ensure the privacy of personal data and not share it with third parties.
PSVAK expressly declares and guarantees the maximum possible security of any data and its protection against accidental or unlawful destruction, accidental loss, alteration, leakage, prohibited dissemination or access and any other form of unlawful processing, in order to ensure a high level of security commensurate with risks involved in the processing and the nature of the data that is processed in the context of this. PSVAK acknowledges, accepts and undertakes to act within the legal framework on the protection of personal data, as applicable each time. However, it is recognized that personal data may have to be disclosed following a relevant court decision or order of another public administrative authority or by virtue of relevant special legislation.
6. Rights of the subjects of personal data
According to articles 12-22 of the aforesaid regulation, the subjects of personal data (their owners) have the right, under the conditions provided for in the law, to:
- submit a request to the controller for access and correction or deletion of personal data or restriction of processing concerning the data subject, and
- objection to processing, as well as data portability,
- information: viewing the information stored in the PSVAK.
In addition, in the event that they believe that their data has been breached, they have the right to file a complaint with the competent Personal Data Protection Authority.
The owners of the data can contact us by email at firstname.lastname@example.org or by using the general contact form on the PSVAK website.
7. Retention time of personal data
All the personal data of the visitors-users of the website are stored in the archives of PSVAK, only if they are required for the above purposes of lawful processing and are deleted if the data subjects request it or if they withdraw their consent. The maximum retention limit for personal data is 20 years. When the processing of personal data is no longer necessary, the data is securely destroyed or anonymized, unless otherwise required by law.
Last update: December 2022