Privacy and Personal Data Protection Policy
The “Hellenic Association for Psychosocial Support, Rehabilitation and Community Care” (Civil Non-Profit Company) gives priority to, and is committed to, the protection of personal data, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Law 4624/2019.
This Privacy Policy concerns in particular the personal data collected through the contact forms and the forms for expressing interest in cooperation/employment on our website.
1. Our commitment to the GDPR
The Organisation has adopted, by a relevant decision of its Board of Directors, a comprehensive personal data protection policy, which governs all of its activities and not only the operation of this website. In this context, the Organisation has taken, among others, the following GDPR compliance actions:
- Appointment of a Data Protection Officer (DPO) for all of its activities.
- Maintenance of a Record of Processing Activities (Article 30 GDPR) for all categories of data it processes (e.g. data of residents/beneficiaries, staff data, website visitor data).
- Implementation of appropriate technical and organisational security measures (Article 32 GDPR) to protect data against unauthorised access, loss or leakage.
- Establishment of internal procedures for dealing with and notifying any data breach (Articles 33-34 GDPR).
- Information and awareness-raising of its staff on personal data protection issues.
- Compliance with the general principles of processing of Article 5 GDPR (lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity and confidentiality) in every data processing operation it carries out, whether it concerns beneficiaries and residents of its structures, its employees and collaborators, or visitors to its website.
This Privacy Policy constitutes the public, specialised part of this overall policy, specifically as regards the data you submit through the forms on our website.
2. Data Controller
The controller of your personal data is the Organisation, with the details above, duly represented.
3. What data we collect
Through the contact form we collect: full name, contact telephone number (optional), e-mail address and the content of your message.
Through the form for expressing interest in cooperation/employment we collect: full name, contact details (telephone, e-mail), specialty, educational qualifications and professional experience details, as you yourself declare them in the form.
We do not collect special categories of data (e.g. health data) through the above forms, unless you yourself choose to include them in the free text of your message.
4. Purpose and legal basis of processing
The data you send us through the contact form are processed for the purpose of responding to your request or question, on the legal basis of your consent (Article 6(1)(a) GDPR), which you provide by ticking the relevant acceptance field when submitting the form.
The data you send us through the form for expressing interest in cooperation/employment are processed for the purpose of assessing your interest in cooperating with the Organisation, on the legal basis of your consent and of taking steps prior to entering into a possible contract, at your request (Article 6(1)(a) and (b) GDPR).
5. Who has access to your data
Access to the data you submit is granted exclusively to the competent staff of the Organisation, within the scope of their duties, and to the website technical support providers we work with (e.g. hosting, form management), who act as processors and are bound by corresponding confidentiality and security contractual obligations. Your data are not transferred to third parties for commercial or advertising purposes.
6. Retention period
The data collected through the website forms are kept only for as long as is necessary to serve the purpose for which they were submitted (responding to your request or assessing interest in cooperation), and are then securely deleted, unless another legal obligation requires a different retention period.
7. Your rights
In relation to your personal data you have the right to: access, rectification, erasure, restriction of processing, portability, as well as the right to object to processing. You also have the right to withdraw your consent at any time, without affecting the lawfulness of the processing already carried out on the basis of it.
To exercise the above rights you can contact us at the e-mail: psyhologia@psyhologia.gr.
8. Data Protection Officer (DPO)
The Organisation has appointed a Data Protection Officer (DPO), whom you can contact for any issue related to the processing of your personal data, at the e-mail: psyhologia@psyhologia.gr.
9. Right to lodge a complaint
If you consider that the protection of your personal data is affected in any way, you retain the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA), 1-3 Kifissias Ave., P.C. 11523, Athens, www.dpa.gr.
10. Data security
The Organisation takes appropriate technical and organisational measures to protect the data it processes from accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Indicative measures applied by the Organisation include: encrypted backups on secure cloud services within the European Union, a strict password policy, tiered access to data only by authorised staff, signed confidentiality commitments by all staff, regular training on data protection issues, as well as an established procedure for handling any data breach incident, with notification to the Hellenic Data Protection Authority within 72 hours where required (Articles 32-34 GDPR).
11. Amendments to this Policy
The Organisation reserves the right to amend this Privacy Policy whenever it deems necessary, informing this page accordingly.