Privacy policy
Purpose
The purpose of this text is to describe the policy followed by RESEARCH CENTRE FOR GENDER EQUALITY to ensure the protection of the personal data it processes.
Exceptions - Scope
The subject of this document includes the policy followed by RESEARCH CENTRE FOR GENDER EQUALITY for the processing of personal data when this occurs either digitally or in printed form through a structured system archiving in compliance with the General Data Protection Regulation.
The text is part of the compliance of RESEARCH CENTRE FOR GENDER EQUALITY with the G.D.P.R.
This policy is addressed to the staff and external collaborators of RESEARCH CENTRE FOR GENDER EQUALITY, to any person who processes personal data in RESEARCH CENTRE FOR GENDER EQUALITY, while at the same time it is addressed to the citizens who come in contact with it. in the context of any transactions, requests, or communication.
Privacy Policy
Application Statement
The implementation of the General Regulation for Data Protection (G.D.P.R.) is a priority for RESEARCH CENTRE FOR GENDER EQUALITY
The RESEARCH CENTRE FOR GENDER EQUALITY accepts as personal data: Any information that concerns natural persons, as an identified or identifiable person in life. For example, those of the information included the name, the address of residence, the number of identities, the code WEB Protocol (IP), the information on the health their and their insurance capacity, their employment status, and more.
The data specific category, such as the data that relate to health, racial or ethnic origin, trade union activity, and others, receive special protection.
These rules apply when the collection, the use, and storage of data of individuals is DIGITAL or in printed form through a structured system archiving.
This policy is in line with the EU General Data Protection Regulation. (G.D.P.R.), as well as with opinions/decisions issued by the Hellenic Authority for the Protection of Personal Data.
Definitions
- "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one whose identity can be ascertained, directly or indirectly, in particular by reference to an identifier such as a name; ID number, location data, online ID or one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of the individual concerned;
- "Processing" means any operation or sequence of operations performed, with or without the use of automated means, on personal data or personal data sets, such as collection, registration, organization, structure, storage, adaptation or change, retrieval, search for information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction,
- "Restriction of Processing" means the labeling of stored personal data to limit their processing in the future;
- "Profile Training" means any form of automated processing of personal data consisting of the use of personal data for the assessment of certain personal aspects of a natural person, in particular for the analysis or prediction of aspects of work performance, financial status, or health; the personal preferences, interests, credibility, conduct, position or movements of that natural person,
- "Nickname" means the processing of personal data in such a way that the data can no longer be attributed to a particular data subject without the use of additional information, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that cannot be attributed to an identified or identifiable natural person,
- "Archiving system" means any structured set of personal data which is accessible based on specific criteria, whether that set is centralized, decentralized or distributed on a functional or geographical basis;
- "Processor" means a natural or legal person, public authority, service or other entity which, individually or jointly with others, determines the purposes and manner of processing personal data; where the purposes and manner of such processing determined by Union law or the law of a Member State, the controller or the specific criteria for his appointment may be laid down by Union law or the law of a Member State;
- "Executor" means the natural or legal person, public authority, department or other body which processes personal data on behalf of the controller;
- "Recipient" means the natural or legal person, public authority, department or other body to whom personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the context of a specific investigation under Union or Member State law shall not be considered as recipients; the processing of such data by such public authorities shall be by applicable data protection rules. depending on the purposes of the processing,
- "Third-party" means any natural or legal person, public authority, service or entity, except the data subject, the controller, the processor and the persons who, under the direct supervision of the controller or processor, are authorized to process personal data,
- "Consent" of the data subject: any indication of will, free, specific, express and fully aware, by which the data subject expresses that he agrees, by a statement or by clear positive action, to process the personal data concern it,
- "Personal Data Infringement" means the breach of security that results in accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data transmitted, stored or otherwise processed;
- "Special Category Data" means personal data disclosing racial or ethnic origin, political views, religious or philosophical beliefs or trade union affiliation, as well as the processing of genetic data, biometric data to relate to health or data relating to the sexual life of a natural person or sexual orientation,
- "Main Installation": a) the place of the central administration of the controller b) in the case of the processor the installation of the processor in which the main processing activities are performed.
- "Supervisory Authority": an independent public authority established by a Member Statbyth Article 51 of the G.D.P.R.
Categories Data Personnel character who collected
The RESEARCH CENTRE FOR GENDER EQUALITY in the context of top activities and the normal operation of the sake of public interest may be collecting data of personal character as citizens or colleagues who do use the services of, as and employees of, as well and the general partner of, but ́ and other natural persons with whom it deals within the framework of its responsibilities
Depending on the form and purpose processing per service, the RESEARCH CENTRE FOR GENDER EQUALITY may be collected and processed data of personal character, as indicative of the following:
|
CATEGORIES OF SUBJECTS |
DATA CATEGORIES |
|
|
Beneficiaries |
F extraction to devolve persons who occasionally have requested or requesting support from RESEARCH CENTRE FOR GENDER EQUALITY The personal data held by RESEARCH CENTRE FOR GENDER EQUALITY may include:
|
|
|
Other beneficiaries |
Data non-Greek citizens who are beneficiaries or transactions are done with RESEARCH CENTRE FOR GENDER EQUALITY because suffice the capacity of the natural person to aa piece of information which relates to self to fall in data personal character, not be required and the status the Greek citizen and therefore the provisions protect also data of personal character aliens as may refugees and migrants and others. |
|
|
Suppliers / Contractors |
The data suppliers of RESEARCH CENTRE FOR GENDER EQUALITY, if it comes to natural persons or legal representatives of legal entities because of the "data of personal character " concern only information that concern natural persons and do not fall into this the category of data which concern legal persons as are the companies, the unions, the institutions. These may include:
|
|
|
Data of other Natural Persons |
The data of other natural persons who happen to visit the infrastructure of RESEARCH CENTRE FOR GENDER EQUALITY, or to cooperate with it or to belong to collaborating bodies. |
|
|
Employees (Active and Not) / Candidate Employees |
Data workers of RESEARCH CENTRE FOR GENDER EQUALITY, under any WORK relationship as well and data former and candidate workers, of which met in official records or any other services for purposes of the operation of the employment relationship of the legal person. These may include:
|
|
Table 1. The Categories of Subjects and their data
Purposes ́ and Legal Processing Bases
The RESEARCH CENTRE FOR GENDER EQUALITY, in the context of related to electronic governance activities and the operation of the sake of public interest, may be collected and processed data of personal character of citizens and other natural persons mentioned in paragraph and who make use of the services provided, its employees, and its associates in general Commission of authority, the RESEARCH CENTRE FOR GENDER EQUALITY may be collected and processed data of personal character for the following purposes in the respective legal bases processing :
|
PURPOSE OF PROCESSING |
LEGAL BASIS |
|
Operation of RESEARCH CENTRE FOR GENDER EQUALITY in all their areas of responsibility, as well as the study, operation, administration, management of Information and Communication Systems, equipment, software, and services respectively. |
|
|
The service of people that benefit from it |
|
|
The cooperation and interconnection with the relevant bodies of the European Union |
Compliance with a legal obligation [ art . 6 §1 case c) G.D.P.R.] |
|
The provision to any service of the State and the European Union statistics and other types of information and assessments in the context of participation in European programs |
|
|
The study, development, operation, operation, management and, maintenance of Information and Communication Systems RESEARCH CENTRE FOR GENDER EQUALITY |
|
|
The collection, processing, cross-referencing and transmission of data of the Tax, Insurance and Labor Administration exclusively for the support and operation of the framework of its responsibilities |
|
|
The collection and processing of data image by using CLOSED circuit cameras (CCTV), as also the collection and processing of data identification (eg id card authentication), for reasons of safety |
Serving legal interests [ art . 6 §1 approx. F ) G.D.P.R.] or / and |
|
The collection and processing of necessary data workers and / or candidate employees and partners for the proper servicing of existing labor relations or relations of cooperation or consideration of possible future cooperation |
|
|
The collection ́ and processing of the necessary data of minor children. |
|
|
For any other form of treatment, the RESEARCH CENTRE FOR GENDER EQUALITY asks special written, free, and prior informed consent of subjects before the initiation of treatment, if required. |
|
Table 2. The main purposes and legal bases of the processing
The reference to more than one legal basis of processing does not mean that the RESEARCH CENTRE FOR GENDER EQUALITY changes them (lawful basis swapping) undermining the rights of data subjects, but that there are cases where more than one legal processing base is applicable.
Furthermore, as RESEARCH CENTRE FOR GENDER EQUALITY is part of the Public Administration bodies, further elaboration is applied after the end of an elaboration archiving in the public interest or for scientific or historical research or statistical purposes, which is not considered incompatible with the original purposes according to article 5 para. b 'and no. 89 paragraph 1 of the G.D.P.R.
Finally, RESEARCH CENTRE FOR GENDER EQUALITY does not use the consent of the data subjects (whether it is simple data or specific categories) as the main basis for processing, recognizing the inherent inequality that exists about the data subjects each time and by the recommendations of its Working Group No. 29 (now European Data Protection Council). However, and exceptionally, for a few cases where additional service is provided to the subjects (ie beyond the legal ones), the consent is used to a limited extent as a legal basis for processing and only then.
Rights of Natural Persons
The RESEARCH CENTRE FOR GENDER EQUALITY recognizes the rights of individuals about the protection of their data. Thus, natural persons have the right to:
- being informed about the processing of personal data.
- gain access to personal data concerning them.
- ask for correction of incorrect, inaccurate, or incomplete personal data.
- apply requests for deleting data of personal character when no longer necessary or if the processing is unlawful. If the no. 6 par. 1 case is applied as a legal basis for processing. ε 'Γ.Κ.Π.Δ. (elaboration for the fulfillment of a duty performed in the public interest or during the exercise of public authority and the no.9 par.2 case b ', g, j) in most of the elaborations of RESEARCH CENTRE FOR GENDER EQUALITY, the right deletion is limited and will be judged on a case-by-case basis under strict conditions. Besides, according to no. 4 of the Explanatory Memorandum of the G.D.P.R., the right to the protection of personal data is not absolute; it must be valued about its functioning in society and weighed against other fundamental rights, by the principle of proportionality.
- They oppose the processing of personal data for reasons related to their special situation, subject to no. 21 par.6 G.D.P.R.
- They request a restriction on the processing of personal data in specific cases.
- Express their opinion and challenge the decision.
- To submit a complaint to the PDF
These rights are valid in the entire area of application of the G.D.P.R., regardless of where the data processing takes place and where the RESEARCH CENTRE FOR GENDER EQUALITY
Processing principles
The RESEARCH CENTRE FOR GENDER EQUALITY accepts the basic principles governing the processing of personal data. Personal data (Article 5):
- They are processed lawfully and fairly in a transparent manner about the data subject ("legality, objectivity and transparency").
- They shall be collected for specified, express, and lawful purposes and shall not be further processed in a manner incompatible with those purposes; Article 89 (1) ("limitation of purpose").
- They are appropriate, relevant, and limited to what is necessary for the purposes for which they are processed ("data minimization").
- They are accurate and, where necessary, update; all reasonable steps must be taken to promptly delete or correct personal data which is inaccurate about the purposes of the processing ("accuracy").
- They shall be kept in a form which allows the identification of data subjects only for the period required for personal data; personal data may be stored for longer periods, provided that the personal data are processed for personal purposes only. in the public interest, for scientific or historical research or statistical purposes, by Article 89 (1) and if the appropriate technical and organizational measures required by this Regulation are applied to safeguard the data subject 's rights and freedoms ( "Limitation of the storage period").
- They are processed in such a way as to guarantee the appropriate security of personal data, including their protection against unauthorized or unlawful processing and accidental loss, destruction, or deterioration, using appropriate technical or organizational measures ("integrity and confidentiality").
The RESEARCH CENTRE FOR GENDER EQUALITY keeps a record of the processing activities for which it is responsible. This file contains all the following information:
- the name and contact details of the controller and, where applicable, the joint controller, the representative of the controller and the data protection officer,
- a description of the categories of data subjects and the categories of personal data,
- the categories of recipients to whom personal data are to be disclosed or disclosed, including recipients in third countries or international organizations,
- where appropriate, the personal data to a third country or international organization, including the identification of that third country or international organization and, in case of transfers referred to in n G.D.P.R. Article 49 paragraph 1, second subparagraph, the documentation of appropriate safeguards,
- where possible, the deadlines for deleting the various categories of data,
- where possible, a general description of the technical and organizational security measures referred to in Article 32 (1) of the G.D.P.R.
Protection of personal data
Taking into account there, the scope of application, the context, and the purposes of the processing, as well as the risks of differing the probability of occurrence and seriousness for the rights and freedoms of natural persons, RESEARCH CENTRE FOR GENDER EQUALITY apply appropriate technical and organizational measures to ensure and be able to prove that the processing is carried out in G.D.P.R regulation.
During the assessment of the appropriate level of security by RESEARCH CENTRE FOR GENDER EQUALITY the account shall be taken in the particular of the risks arising from the processing, in particular from an accidental and unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data transmitted, stored or otherwise processed.
In case of violation of personal data (article 33), the RESEARCH CENTRE FOR GENDER EQUALITY as the controller shall notify without delay and, if possible, within 72 hours of becoming aware of the breach of personal data to the supervisory authority responsible under Article 55 of the G.D.P.R., unless the breach of personal data is not may endanger the rights and freedoms of individuals. When notification to the supervisory authority is not made within 72 hours, it will be accompanied by a justification for the delay.
Staff training
The RESEARCH CENTRE FOR GENDER EQUALITY Accepts that the protection of personal data presupposes the awareness of its human resources regarding the protection of personal data. In this regard, accepts the adoption and implementation of the following:
- Theory of appropriate training by exploiting Fair Information Practices ( FIP), which condense a set of standards governing the collection and use of personal data and addressing issues of privacy and accuracy. Human resources cannot become experts in the field of privacy protection overnight, however, their familiarity with the international requirements of privacy protection is possible and necessary. Employees who have key roles in the field of privacy need to acquire more specific knowledge. For the majority of the workforce, however, a thorough knowledge of the general principles of privacy is essential.
- The RESEARCH CENTRE FOR GENDER EQUALITY seeks to raise awareness of key concepts of personal data protection on the part of its human resources. This in no way means that the training of its staff is too theoretical or abstract. Instead, it becomes a practice. The core of education focuses on three simple but essential issues:
- Motivation: Why employees need to care about privacy.
- Definition: What is personal data.
- c.Responsibility: What should employees know about how the Center is accountable for privacy.
Communication of Natural Persons
The above rights as well as any rights related to personal data are exercised upon a written request submitted to any point that is accessible to the public, or via email by sending a message to DPO@ kethi.gr and is also examined by the Data Protection Officer.
Amendment
This policy may need to be amended about the processing of personal data. In case the modification of the terms in question is of such nature and extent, that it is not covered by the above data processing terms, the RESEARCH CENTRE FOR GENDER EQUALITY must make public the new version of the policy.
Date of issue of this policy: July 2020
