Privacy Policy

PERSONAL DATA PROTECTION POLICY

Information on Personal Data Protection in accordance with Regulation (EU) 2016/679

Since 25.5.2018 the General Data Protection Regulation (EU) 2016/679, also known as GDPR, has been implemented, which strengthens the framework for the protection of data subjects with regard to the processing of personal data in the European Union. With respect to personal data, and in its role of Coordinator, the National and Kapodistrian University of Athens (NKUA) complies with the GDPR in the context of the activities and scope of the SDG4U project, and takes the respective technical and organizational measures for the effective protection of personal data, in accordance with the GDPR.

Processor – Contact Details

NKUA, in quality of SDG4U Coordinator is considered as processor on behalf of the SDG4U Partners, with the following contact details:

Address: 30 Panepistimiou, Athens, Postal Code 10679
E – mail: dpo@uoa.gr

Pursuant to articles 4, 24 and 26 of GDPR, when two or more data controllers jointly determine the purposes and means of the processing, they are defined as Joint Data Controllers. For the purposes of the Erasmus+ Engaging SDGs for Transformative Education and Enhanced Sustainability in Universities SDG4U project, the data controllers are 6 Partners representing the SDG4U Consortium, are listed below:

National and Kapodistrian University of Athens
Panteion University
University College Cork – National University of Ireland
University of Murcia
The American College of Greece Research Centre
UNIMED – Mediterranean Universities Union.

The Joint Data Controllers take advantage of third parties that provide some services to SDG4U and / or support it in carrying out certain activities: they have been appointed Data Processors pursuant to article 28 GDPR.

What personal data is NKUA processing and how?

The personal data collected and processed by NKUA are limited to those necessary for the specific and clearly defined purpose and the specific legal basis, for each circumstance.

In this context, the processing that takes place concerns the personal data you provide to NKUA when you visit our official web sites, when using our services or interact with us, for example by sending a contact form.

Such personal data is:

Identification data (Name, Surname, Position, Institution)
Communication data (email, phone number, information needed to allow you to contact us, to request information and/or assistance, and to allow us to reply to your requests)
Browsing data (The website acquire, during their normal functioning, certain personal data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses, Internet connection and traffic data, domain names of the devices used by Website visitors. This information is not collected to be associated with identified data subjects or to identify users)
Registration forms webpages (implemented by using Google’s functionalities) are linked to our Website: by filling the forms in with the requested information – some of them are compulsory whereas others are not – you can submit your registration’s request to participate in some of the project activities, and/or to receive information about the project. The personal data collected in such occasions are processed by the SE.TC. partners to issue the services you ask for, to improve the performance and the efficiency of those services, also differing between several professional profiles, interest, etc., and for statistical purposes.

In the event that processing is based on consent, NKUA and the Partners follow all the relevant procedures provided by the GDPR.

Purpose and Lawfulness of processing

Personal information is collected in accordance with the GDPR and the applicable legislation, either at the beginning of your relationship with the SDG4U Consortium or later, and are processed on a legal basis:

consent to the processing of your personal data for one or more specific purposes
for the performance of a contract
for compliance with our legal obligations
for the performance of a task carried out in the public interest
for the purposes of our legitimate interests

NKUA might process your personal data for the following purposes by legal basis:

Consent to the processing of your personal data for one or more specific purposes
- To identify and communicate with you
- To engage you in the project activities
- To provide you with information about the opportunities offered by the project
For the performance of a contract
- For communication during pre-contract or contract performance
For compliance with our legal obligations
- To fulfill our obligations, imposed by current legislation, on our students, our staff and our external collaborators.
- To fulfill our obligations under applicable law on disclosure to Public Authorities.
For the performance of a task carried out in the public interest
For the purposes of our legitimate interests, such as:

To develop and improve our services through your activities and interests.
Complaints management
For the protection and security of our IT systems
For the protection and safety of our facilities
To manage risks from breaching the obligations arising from sponsorship contracts.

Who are the recipients of my personal data?

The staff of NKUA, and in specific cases the staff of the SDG4U Partners institutions, have access to your personal data, in the course of performing the duties assigned to them by the University and/or in compliance with their obligations as implementing partners of SDG4U.

NKUA may be required or entitled to disclose your personal data to a number of third parties such as:

Public authorities
Independent authorities
Technical parties (e.g. graphic designers, website designers, events organizers)

provided that privacy and confidentiality is always respected.

NKUA does not share information with other third parties unless it has obtained your consent.

How long is my data retained?

NKUA retains your personal data for a period defined by the applicable legal and regulatory framework in each case, only for the time necessary to fulfill the purpose for which they were collected, and no longer that the project implementation period (31/12/2022 – 30/12/2025). Once that purpose has been fulfilled, the data will be deleted or anonymised.

Recording of data on our website

Cookies

In some instances, our website and its pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. The purpose of cookies is to make our website more user friendly, effective and more secure. Cookies are small text files that are placed on your computer and stored by your browser.

You can adjust the settings of your browser to make sure that you are notified every time cookies are placed and to enable you to accept cookies only in specific cases or to exclude the acceptance of cookies for specific situations or in general and to activate the automatic deletion of cookies when you close your browser.

Cookies that are required for the performance of the electronic communications transaction are stored on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error free and optimized provision of the operator’s services. If other cookies (e.g. cookies for the analysis of your browsing patterns) should be stored, they are addressed separately in this Data Protection Declaration.

More details on Cookies Policy.

This Cookie Policy applies to citizens and legal permanent residents of the European Economic Area and Switzerland. Our website https://www.sdg4uproject.eu/ (hereinafter: “the website”) uses cookies and other related technologies (for convenience all technologies are referred to as “cookies”). Cookies are also placed by third parties we have engaged.

See the dedicated Cookie Policy on the website.

Server log files

The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:

The type and version of browser used
The used operating system
Referrer URL
The hostname of the accessing computer
The time of the server inquiry
The IP address

This data is not merged with other data sources.

This data is recorded on the basis of Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator’s website. In order to achieve this, server log files must be recorded.

How is my data protected?

Are processed in a legal, fair and transparent manner
Are collected solely for specific and legitimate purposes
Are adequate, they are related to the purpose for which we collect them and are limited to what is necessary
Are accurate and up-to-date
Are maintained exclusively within the specified timeframe and no longer
Are processed in a way as to ensure the necessary security of personal data

My rights as a data subject

Access

You may at any time be informed by us of and access to your personal data we hold.

Correction

You have the right to contact us to correct the data that is inaccurate or incomplete.

Erasure

If we are not obliged by law to maintain the data we hold and relate to you, you can ask for your personal data to be deleted.

Data Portability

You can ask us to forward your data to another authority.

The right to oppose and limit processing

In case you disagree with the way we process your personal data, you can request the interruption or limitation of the processing

The right to withdraw consent

You have the right to withdraw your consent to process your data at any time.

NKUA will make every effort to respond to your request without delay and in any case within one month of receiving it. This period is extended for a further two months if it is necessary taking into account the complexity of the request and the number of requests. NKUA will inform you of this extension within one month of receipt of the request and of the reasons for the delay. If you have submitted the request by electronic means, the update is provided, if possible, by electronic means, unless you request otherwise.

In case NKUA satisfies your request (a) to limit the processing of your data; or (b) to terminate the processing of your data; or (c) to delete your data from the University’s records and if they are necessary for the preparation or continuation and performance of a contract, then either the termination by you of the relevant agreement or the inability to process your request is automatically implied.

NKUA is in any case entitled to refuse the satisfaction of your request to restrict the processing or deletion of your personal data if such processing is necessary for the foundation, exercise or support of its legitimate rights or the fulfillment of its obligations.

The above services are provided free of charge. However, if your claims are manifestly unfounded, excessive or recurrent, NKUA may either impose a reasonable end, inform you or refuse to respond to them.

To exercise your rights please fill the Data Subject Request Form.

Consent withdrawal

You have the right to withdraw your consent at any time. The withdrawal of your consent does not affect the legitimacy of the processing that was previously based on it and was made prior to its revocation.

Questions about Data Protection

The data protection officer is provided by:
Space Hellas S.A
Contact Person: Nadia Liapi
Director Governance, Risk & Compliance Services
302 Messogion Ave., 155 62 Holargos Athens Greece
Tel: +30 210 6504 100
Email: dpo[at]uoa[dot]gr

Personal Data Protection Authority

You have the right to file a complaint to the Personal Data Protection Authority (www.dpa.gr) which is the competent supervisory authority for the protection of the fundamental rights and freedoms of natural persons with regard to the processing of their personal data if you believe that your rights are being infringed in any way. We encourage you to read our Personal Data Protection Policy