PRIVACY POLICY

Respecting your privacy and the management, protection and security of your personal data is one of our top priorities. The Hellenic Association of Brewers has established this Privacy Policy, which should be read as a single text together with our  which is an integral part of this document (hereinafter the “Data Policy” or the “Policy“), in order to inform you who are visiting and navigating the website https://www.ellinikienosizithopoion.gr/ (hereinafter the “Website“), making use of the services provided through it and making any general use of the services, features and functions of the Website or otherwise (hereinafter the “User“, “you“, “your“).

1. Who is the Data Controller?
   1. 1. The Data Controller responsible for the processing of your personal data is the “Hellenic Association of Brewers“, which is located in Egaleo, Attica, at 102 Kifissou Avenue, P.C. 12241, with TIN (Tax Identification Number) EL999879412, Tax Office of EGALEO, Tel. No +30 698 1499350, email address info@ellinikienosizithopoion.gr (hereinafter the «Association»).
      2. Details of the Data Protection Officer: Ms Kelly Tsichli
   2. Contact details: For all matters concerning this Privacy Policy and the processing of your personal data, you can contact us

By sending an email to info@ellinikienosizithopoion.gr

2. What types of personal data do we process and how?

Your personal data includes any information that allows, either alone or in combination with other data, your individual identification, in accordance with the provisions of the General Data Protection Regulation (GDPR 2016/679 or General Regulation), the applicable Greek legislation and the decisions of the Hellenic Data Protection Authority (HDPA).

We process your personal data when you browse the Website, contact the Association via the contact form available on the Website or otherwise; we collect various types of personal data that concern you, either directly from you or from third parties and/or by automated means.

Indicatively, we collect the following personal data:
– Identity Data: (full name) that you provide when you fill in the contact form on the Website.
– Contact Data: (email address and, optionally, your mobile phone number) which you provide when you fill in the contact form on the Website.
– Data via Cookies, as detailed in the .

3. What is the purpose and the legal basis of each type of data processing?

The Association and its trained staff apply all the processing principles of the GDPR (lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage time limitation, integrity, confidentiality and accountability). The Association protects and safeguards all your rights regarding the use of your personal data. The above applies without distinction to all processing carried out by the Association through the Website.

Purpose of Processing	Data	Legal Basis for Processing
Contacting the Association at the initiative of the Website User We process your data: (a) to be able to manage the contact requests that you voluntarily submit via the contact form that is available on our website and (b) to contact you following your request via the contact form, as set out above	Identity Data: Your full name Contact Data: Your email address and mobile phone number (if you choose to provide it, since it is optional)  Data you provide in the content of your message: The contact form available on our website includes a field where the User can freely fill in his/her message to the Association. We encourage you to only enter the information that is strictly necessary to communicate with the Association and not to include in your message, by way of example and without limitation, special categories of personal data (e.g. health data) or any other information that is not strictly necessary for the purpose of communicating with the Association. We cannot (and are under no obligation to) check the legality of the content of your message and the Association will not be liable in the event that the content of your message is illegal and/or in the event that you provide us with personal data that is either unrelated or exceeds what is strictly necessary for the purpose of our communication.	Your consent to the processing of your personal data for the processing of your request through the contact form and for contacting you.* You may withdraw your consent at any time by contacting the Association via the contact details referred to in Article 1. It is clarified that your sending a contact request does not constitute a subscription to any newsletter database.

  

4. How long do we retain your personal data?

1. We will retain your personal data for as long as you continue to interact with us and for as long as such data are necessary for the fulfilment of the processing purposes described herein (e.g. when you contact the Association through the Website, the data will be retained only for as long as necessary to complete the communication between us).
2. Furthermore, we retain your personal data for our legal coverage in the event of a dispute in the context of the use of the Website as well as for the management by the Association of any legal claims (e.g. out-of-court dispute, dispute before a court and/or for prosecutors or other authorities), for the period of time during which liability could arise from the processing, in accordance with the applicable legislation.
3. To determine the retention period of your personal data, we take into account the nature of your data, its quantity, the purpose of its processing, its security, etc. You have the right to ask us to delete your data, provided that no legitimate interest of the Association is affected and/or that there is no legal obligation to retain it, as described above. To exercise your rights, please visit the
4. In any event, your data are stored securely, in accordance with the security measures set out in Article 8 below, for as long as we retain it.

5. What are your rights and what are the procedures for exercising them?
   1. You can exercise your rights by reaching out to
   2. The rights you can exercise (where applicable and in accordance with the conditions set out in the GDPR) are: Right of Access (Article 15), Right to Rectification (Article 16), Right of Erasure (Article 17), Right to Limit Processing (Article 18), Right to Data Portability (Article 20), Right to Object (Article 21), Right to Human Intervention in Automated Individual Decision-Making, including Profiling (Article 22).
   3. We take the confidentiality of all files that contain personal data seriously and we reserve the right to ask you for proof of your identity if you submit a request to exercise your rights in relation to those files.
   4. You will not be burdened with a cost for exercising your rights in relation to your personal data unless, as prescribed by law, your request for access to information is unfounded or excessive, in which case we have the right to charge a reasonable fee under the specific circumstances. In any case, we will notify you of any charges before completing your request.
   5. We aim to respond to any valid requests no later than one (1) month after receiving them, unless they are particularly complex, or you have submitted several requests. We will let you know if we need more than one (1) month for the reasons listed above.
   6. Complaint to a Supervisory Authority: You also have the right to lodge a complaint with the local Supervisory Authority regarding the processing of your personal data, after having contacted us to find a solution to any problems you may be facing. In Greece, the Supervisory Authority for data protection is the Hellenic Data Protection Authority (dpa.gr), 1-3 Kifissias Avenue, 11523 Athens, Greece, (+30) 210 6475600, fax: +30 210 6475628.
6. Who are the third party recipients of your data?
   1. For the smooth and uninterrupted operation of the Website, the Association cooperates with third party companies which have access only to the data that is absolutely necessary for the operational and computerised organisation of our Website, the optimisation of the User’s experience, the submission of the relevant form to contact the Association, etc. Indicatively, the companies cooperating with us include the company that technically supports and hosts the Website, etc.
   2. When transmitting your personal data in accordance with the above, we continuously ensure the highest possible level of security. Therefore, your data will only be transmitted to service providers and partner companies that have been carefully selected and contractually bound in advance.
   3. We clarify that in the event that through our Website you are directed to websites of third parties, whether they are partners of our Association or not, the Association has no involvement in any collection or processing of your data carried out by the administrators of the third party websites that you enter. You are therefore advised to consult the relevant privacy policy of the website you are visiting.
   4. The Association as a rule retains your personal data within the European Economic Area (EEA). Where data are to be transferred to third countries outside the European Economic Area for which there is no adequacy decision by the European Commission or to International Organisations, all appropriate safeguards provided for in the applicable legislation on the protection of personal data relating to transfers to third countries will be taken and the relevant information will be posted on the Association’s website.
   5. Finally, we may need to provide personal data to law enforcement bodies in order to comply with a legal obligation or court order.
7. How is the security of your data ensured?
8. The Association takes all necessary technical and organisational security measures to protect and ensure the confidentiality of your personal data and their protection from accidental or unlawful destruction/loss/alteration, unauthorised disclosure or access and any other form of unlawful processing (e.g. firewalls, access rights control, domain controller, lan segmentation, antivirus, partially encrypted information).
9. The data you submit to the Association shall be handled exclusively by specifically authorised personnel of the Association under its control and only on its instructions and by the recipients, where necessary. To carry out the processing, the Association shall select persons with appropriate professional qualifications who provide sufficient guarantees in terms of technical knowledge and personal integrity to safeguard confidentiality. The Association, through its respective contractual commitments and its partners, shall take all necessary security measures to protect and ensure the privacy, confidentiality and integrity of personal data. In any case, their security in the environment of the Website is without prejudice to grounds beyond its sphere of influence, as well as grounds owing to technical or other network failures beyond the control of the Association or reasons of force majeure or unforeseeable circumstances.
10. Confirmation of Age

The Website is not intended for use by persons under the age of 18. To establish your age before you gain access to the website, we ask you about your date of birth. This data is required solely to confirm your adult status before you enter the Website (within the framework of the legal obligations of the Association) and the Association does not store or use it for any other purpose. Please do not provide us any personal data if you are under 18.

9. Applicable Law

In the event of any dispute arising from the use of this Website, the Greek courts shall have exclusive jurisdiction.

10. Changes to the present Policy

We reserve the right to modify this Policy, e.g. to comply with new requirements imposed by the applicable laws, directives, or technical requirements or in the event of a revision of our procedures or practices. We will notify you of any revision to our Privacy Policy by posting it on our website. We also encourage you to check this page from time to time.