The European Social Fund Coordination and Monitoring Authority (hereinafter EYSEKT), is managing the web page www.esfhellas.gr, which is the central portal for the European Social Fund in Greece. Personal data which have been provided in esfhellas.gr is used exclusively by it for the purpose of supporting, promoting and enforcing its relationship with citizens (data subjects) or for statistical purposes.

EYSEKT manages your personal data in accordance with the General Data Protection Regulation 2016/679/ΕΕ (GDPR) and the applicable national and European laws and regulations on personal data protection, in particular Law 2472/1997 and Law 3471/2006. EYSEKT is not responsible for the availability, the content, the privacy policy and the quality of services of other websites to which the user has access through its own web portal (from links).

This Data Protection and Privacy Policy (hereinafter referred to as the "Policy") describes how we collect and use your personal data, in those cases where EYSEKT is responsible for their processing.

We note that 'personal data' means information about you or about another person whose identity can be identified.

If you do not agree with this Policy, please do not provide your personal information to the website www.esfhellas.gr and EYSEKT.

1. What data do we collect?
There is an online helpdesk on our website (http://www.esfhellas.gr/en/Pages/HelpDesk.aspx.). It is a query form, in which the user is asked to provide their email and, optionally, their full name and telephone, and may also attach a file. Your query, together with the information you provide to us, is stored in a coded form and maintained on a server of the Management Organisation Unit (MOU). The personal data you provide to us is for the sole purpose of safeguarding the helpdesk service and may not be used by any third party without complying with the provisions of Law 2472/1997, Law 3471/2006 and Regulation (EU) No. 2016/679/EU, as they apply with their amendments, on the protection of the processing of personal data.

In addition, for any communication of the user/visitor of esfhellas.gr by email or other means, EYSEKT reserves the right to keep a record of such communication and the information transmitted and to use any information provided to respond to any request by the user/visitor or for the protection of the legitimate interests of EYSEKT.

2. Why do we process personal data?
EYSEKT may process your personal data in order to contact you, for example to inform you that our services have changed, or to send you alerts, or to inform you for any other necessary updates.

3. What is the legal basis for processing your personal data?The legal basis for processing your personal data depends on the purpose of the processing and may vary. In general, we process your personal data in accordance with the following legal bases:

A. Based on your consent
We process your personal data, if you have provided consent to the editing activity. You can revoke your consent at any time. If you do so, EYSEKT will cease any processing of your personal data. If you have also included a request to delete your data, EYSEKT will delete your personal data. Please note that the legality of the processing of personal data, which was performed on the basis of your consent, as it was prior to its revocation, is not affected.

 

B. Compliance with a legal obligation
We process your personal data as required to comply with applicable European or national legislation.

4. How long do we keep your personal data?
EYSEKT is collecting the personal data that is only necessary for the purposes for which they are collected. The length of time that personal data is retained and the criteria that determine that period depend on the nature of the personal data and the purpose for which it was provided and collected. You can contact EYSEKT at privacy_eysekt@mou.gr to obtain additional information about the processing of your personal data.

5. Do we share your personal data?

EYSEKT does not in any way disclose your personal information to third parties, unless:

A. You give us your consent.
We may disclose your personal information once we have obtained your consent.

 

B. Recipients of data may be third parties of the Government that may mediate to promote, support and serve the Government's relationship with citizens solely for the purpose of providing electronic communications services or any value added services requested by the user/visitor and always under the conditions of Articles 4 and 5§5 part b’ of Law 3471/2006, as applicable

 

C. Compulsory disclosures. EYSEKT may be required by law to disclose your personal information, to certain authorities or other third parties. Additionally, EYSEKT may also disclose or process your personal data in order to defend the legitimate interests of the organization, for instance, in legal proceedings or in relation to State Request and claims. Finally, in accordance with the legislation in force, EYSEKT may disclose any information it has collected, in the event that it considers that an unlawful activity is or will be taking place, or in order to respond to any situation of force majeure.

D. Necessary disclosures to third-parties technical support providers. The esfhellas.gr cooperates with third parties who provide technical support services, software systems, and other administrative or non-administrative systems and services. EYSEKT reserves the right to disclose personal data to such persons, as far as possible anonymously, to the extent that it relates with the purpose of provided services from those third parties to EYSEKT. In addition, the software and application development consultants of esfhellas.gr may use such information, for the purpose of modifying, developing, improving and evaluating its technological infrastructure and development.

6. How do we deal with children’s data protection?
Esfhellas.gr does not knowingly collect personal data from persons who have not reached 18 years of age.

7. What measures do we take for data protection?
EYSEKT applies security measures in order to prevent the loss, misuse or modification of your personal data. However, due to the fact that no security system or data transmission system can provide 100% security, in no case does EYSEKT guarantee the security of the servers, the means by which information is transmitted by the user’s PC toward the esfhellas.gr servers, or any information contained regarding this website.

8. What is our Cookies policy?
Cookies are being used for the management and improvement of services provided by esfhellas.gr. Navigation in the site requires your consent to the use of cookies, which is given in a pop-up window when you enter the site.

Cookies are pieces of information which a website can store in the user's navigation application and then retrieve it so that it recognizes the user the next time the user visits the website. In no case do cookies contain any personal information that could allow anyone to contact the site visitor by phone, e-mail, etc.
Cookies generally fall into the following main categories:

- Session Cookies: They exist only in temporary memory while the user navigates the website

- Persistent Cookies: These cookies remain on your computer or mobile device until you delete them or expire at a specific date or after a specific length of time

- Third-party Cookies: They are placed by third parties (eg Google, Facebook, DoubleClick, etc.) for the purpose of collecting data on your ad performance and your interaction with the site as well as our protection against cyberattacks.

Esfhellas.gr uses the following categories of Cookies:

9. Which are your legal rights?
The General Data Protection Regulation (GDPR) establishes certain rights regarding the processing of your personal data, which you may exercise at any given time.

More specifically:

• You have the right to information (article 12 GDPR - article 13 and 14 GDPR) and the right to access (article 15 GDPR) your personal data. That is, you can ask if we keep your personal data, which are these data, the reasons why we keep/use them, its recipients, as well as obtain a copy of it.
• You have the right to rectify (article 16 GDPR) your personal data that we retain. Additionally you can request to correct any incomplete or inaccurate information.
• You have the right to erase (article 17 GDPR) your personal data. You can request that we delete your personal data if processing is no longer necessary.
• You have the right to object (article 21 GDPR), that is, you can oppose the use of your personal data in case you consider this to be illegal.
• You have the right to oppose automated decision making, such as profile creation (article 22 GDPR) that is, you can request not to be subject to a decision made solely on the basis of automated processing, including profile creation, which produces legal effects concerning you or affects you significantly.
• You have the right to require the restriction of the processing of your personal data (article 18 GDPR). That is, to limit the processing of your personal data for as long as your objections to the processing of such data are under consideration. During this period, we can only store your data and do no further processing.
• You have the right of “data portability” (article 20 GDPR), that is, you can request the transfer of your personal data to you or another party in a structured electronic form.
• You have the right to withdraw your consent for the processing of your personal data. In the case you have provided consent that your personal information can be collected, processed and transmitted, for a specific purpose, you have the right to withdraw this consent at any time. Once we receive your request, we will cease processing your personal data for the purpose or purposes for which you originally agreed, unless there is another legal basis for doing so. 
• If you are located in a Member State of the European Union or within the European Economic Area, you have the right to submit a complaint to the competent supervisory authority regarding our data collection and processing procedures,
  

If you wish to exercise any of these rights, you should send your request to privacy_eysekt@mou.gr, or contact EYSEKT by post at 4 Korai Street, Athens, Greece 10564.

10.  Policy Modifications
EYSEKT may amend this Privacy Policy, modify, alter or withdraw the access to this website at any time, with or without any prior notification. However, if this Policy is substantially modified, contrary to what it currently sets out, EYSEKT will publish a notice announcing this modification at the beginning of this Policy, as well as on the home page of this site for a period of 30 days. We recommend that you visit this Policy from time to time to be informed of any such changes.