The Greek Tunnelling Society and its appointed Professional Congress Organizer (CONVIN SA) for WTC 2023
(hereinafter jointly referred to as WTC2023 Organizing Team), recognize and respect the importance of the personal data they handle within the framework of their activity and therefore have fully adapted their policy to the requirements of the General Data Protection Regulation (hereinafter GDPR) 2016/679/EC.
By this statement, the WTC2023 Organizing Team wishes to inform anyone contacting it in any of the following ways:
in what capacity, for what purpose and on what legal basis it processes information relating thereto and which can be used to identify them directly or indirectly, namely:
To this purpose, please take a moment to read the WTC2023 Organizing Team statement.
If you have any questions or concerns, if you wish to receive a copy of this statement or if you wish to exercise any of the rights related to your personal data, you can contact us by email at email@example.com
The Professional Congress Organizer (CONVIN SA) operates in the form of Société Anonyme, registered at the General Commercial Registry (GEMI) of the Athens Chamber of Commerce and Industry, under number 7359701000 and it has its registered office at 29 K. Varnali street, Chalandri 15233, Athens.
The Greek Tunnelling Society is a nonprofit Association, seated in Athens, Greece, Ippokratous 196 str.
The WTC2023 Organizing Team processes, in the course of its activity, the personal data of the parties trading with it, becoming as regards such data the “controller” or “processor”.
In carrying out its business, the WTC2023 Organizing Team processes (simple and special category) personal data of the subjects participating in the Programs for the purposes of implementation, evaluation and control and the relevant legal obligation for the processing of personal data in the form of individual participants’ data (microdata) derives mainly from both the General Regulation and the European Social Fund Regulation as well as from specific provisions of the Greek legislation.
The data processing concerned is governed by the provisions of Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
The WTC2023 Organizing Team collects your personal data from various sources. Particularly:
1) Personal data you directly provide to it;
2) Personal data that it collects automatically, such as through cookies (see cookies policy). The following may be collected:
– Your IP address;
– Your cookie ID;
– Your browser;
– Your location;
– The web pages you visit on our website (www.wtc2023.gr);
as well as
3) Personal data collected from other sources, i.e. from other public authorities as well as from publicly accessible sources.
4) Personal data collected from its contacts with companies / sponsors of its Programs
The data we process, as the case may be, are:
The reasons the WTC2023 Organizing Team processes your data, as the case may be, are:
– to communicate with you;
– to answer your questions;
– to process your requests;
– to conclude contracts with you;
– to execute its contractual obligations towards you;
– to declare your membership status and any related entitlement;
– to declare your participation in events / activities;
– to fulfil its legal obligations under the domestic and EU law;
– to organize its activity in the field of electronic communications
In particular, as the case may be, the legal bases on which we support the processing of your data are the following:
– Article 6, par. 1a of GDPR
When you have given consent to the processing of your data for one or more specific purposes.
– Article 6, par. 1b of GDPR
Processing necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract.
– Article 6, par. 1c of GDPR
Processing necessary for our compliance with our legal obligation as this derives from the EU or the National Law.
– Article 6, par. 1e of GDPR
Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.
– Article 6, par. 1f of GDPR
Processing necessary for the purposes of the legitimate interests pursued by the WTC2023 Organizing Team, except where such interests are overridden by your interests and fundamental rights and freedoms as data subjects.
And with regard to special category data:
– Article 9, par. 2a of GDPR
When you have given consent to the processing of your special category data (nutritional specificity, health, ethnic origin) for one or more specific purposes.
– Article 9, par. 2b GDPR
Where processing is necessary for carrying out the obligations and exercising specific rights of data subjects in the field of social protection, in so far as it is authorized by the Union or national law.
And as regards data relating to criminal convictions and offences:
– Article 10 of GDPR
Where processing is authorized or required by the Union or national law.
The WTC2023 Organizing Team does not proceed to any unauthorized disclosure or transfer of your personal data to third parties. Therefore, it will not share your data with third parties for marketing purposes.
It uses processors, i.e. third parties, providing services thereto. It has contractually bound the processors in order not to be able to manage your personal data unless it gives them specific instructions and thus they will not share your personal data with anyone other than the WTC2023 Organizing Team itself, while it will retain your data safe for the period that it has indicated to you.
In some cases, it may have a legal obligation to disclose your data. Such a case occurs on the basis of a court order or when it cooperates with other public authorities and bodies within the European Union, under provisions of the EU or domestic law.
The WTC2023 Organizing Team may, therefore, disclose or transfer your data to third parties, provided the legal requirements are met, namely when there is:
– Previous consent on your behalf as data subjects;
– Legal Obligation to disclose data to Competent State Agencies and Organizations and to the relevant Judicial and Prosecution Authorities, if lawfully and competently requested.
The WTC2023 Organizing Team shall retain your personal data for as long as the processing purpose lasts. Upon its expiration, the WTC2023 Organizing Team shall lawfully retain your personal data when this is necessary in order to comply with a legal obligation thereof arising from the provisions of the Union or National Law and where retention is necessary to substantiate, exercise or support legal claims of the Company.
According to the General Data Protection Regulation, depending on the legal basis on which WTC2023 Organizing Team is based to process your data, you have the following rights:
You have the right to receive:
– confirmation as to whether or not your personal data are being processed and
– a copy of such data
You may submit your request to access your personal data in writing, by email to the WTC2023 Organizing Team.
You may not want all the personal data that the WTC2023 Organizing Team has on you. For this reason, it would facilitate and speed up the process if you clarified to the WTC2023 Organizing Team which data do you precisely want.
When requesting access (to personal data), it is necessary to include the following information:
– Your name and contact details
– Any information that the WTC2023 Organizing Team uses to identify you or to differentiate you from other people with the same name, such as a code, etc.
– Details or relevant dates to help the WTC2023 Organizing Team identify what you need. You can use the form below.
The WTC2023 Organizing Team may refuse to satisfy the right of access if your data include other person’s personal data unless the other person has consented to the disclosure of his or her data or it is reasonable that the said information is provided to you without the consent of the other person.
In order to make the relevant decision, the WTC2023 Organizing Team will need to regulate your own right of access vis-a-vis the other person’s rights with respect to his or her own information.
The WTC2023 Organizing Team shall also be entitled to refuse to grant access when this is clearly unfounded or abusive.
In any case, the WTC2023 Organizing Team should notify you and justify its decision. It should also inform you of your right to make a complaint to the Data Protection Authority or even to appeal before Courts.
The WTC2023 Organizing Team must answer your request within a month.
In specific cases extra time may be needed to assess your request and up to two months to answer.
If it is going to use the additional time, the WTC2023 Organizing Team will inform you within one month of the reason why it needs more time.
A copy of your personal data will be provided to you free of charge. However, if your claim is manifestly abusively repeated or excessive, it may charge you a fee for the administrative costs associated with it.
You have the right to ask for your data to be rectified when they are inaccurate or completed when they are incomplete.
In order to exercise your right, you must inform the WTC2023 Organizing Team that you dispute the accuracy and completeness of your personal data. You will need to identify what data are inaccurate or incomplete, explain how the WTC2023 Organizing Team will have to correct them and provide relevant evidence of inaccuracies.
When you ask the WTC2023 Organizing Team to rectify your data, it will thoroughly check whether the data are accurate or not, on the basis of the evidence you will provide thereto and those held by it. It will then let you know if it has rectified, erased or completed the data. In case the WTC2023 Organizing Team considers that the inaccuracy or incompleteness of the data is not substantiated, it will inform you accordingly, providing at the same time a justification for its negative response. If it has disclosed the data to third parties, the WTC2023 Organizing Team will contact them and inform them of the rectification or completion of the data, unless this is impracticable or requires disproportionate efforts. At the same time, if you wish, it can inform you to which recipients it has transferred your data.
You have the right to request the erasure of your personal data if you no longer wish to have such data processed and if there is no legitimate reason for the WTC2023 Organizing Team to hold them as Controller.
In particular, this right shall be exercised:
It should be noted, however, that this is not an absolute right, as further retention of personal data by the WTC2023 Organizing Team is lawful when it is necessary for reasons such as compliance with a legal obligation of the WTC2023 Organizing Team or the establishment, exercise or defense of legal claims.
The WTC2023 Organizing Team is entitled to refuse to erase the data in the following cases:
As an alternative to the right to erasure and the right to object, you have the right to request the restriction of your data processing only where one of the following applies:
This right may be combined with the right of rectification and the right to object, and in particular:
You have the right to receive your personal data that have been processed by the WTC2023 Organizing Team as controller in a structured, commonly used and machine-readable format (e.g. XML, JSON, CSV etc.).
You also have the right to ask the WTC2023 Organizing Team to transmit those data without hindrance directly to another Controller.
The right to portability can only be exercised by you when the following conditions are cumulative satisfied:
You have the right to object at any time and on grounds related to your particular situation to processing of personal data concerning you when processing is based either on a task carried out in the public interest or on the existence of a legitimate interest pursued by the company, including profiling.
The WTC2023 Organizing Team shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms as data subject or for the establishment, exercise or defense of legal claims.
If the WTC2023 Organizing Team is required to make a decision that produces legal effects concerning you based solely on automated processing, including profiling, we inform you of the following:
You are entitled, in the case that profiling takes place, to obtain restriction of processing at any stage thereof.
The WTC2023 Organizing Team will be obliged to erase the relevant personal data if profiling is based on your consent and this is revoked or if you exercise the right to erase your data and if there is no other legal basis for processing in accordance with the provisions of Regulation.
You have the right to object at any time and on grounds related to your particular situation to processing of personal data concerning you when processing is based on the existence of a legitimate interest pursued by the company, including profiling and the WTC2023 Organizing Team shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms as data subject or for the establishment, exercise or defense of legal claims.
If you find out that your personal data are being unlawfully processed or your rights in connection with your personal data have been infringed, provided you have previously contacted the WTC2023 Data Protection Officer (DPO) about the relevant issue, that is you have exercised your rights vis-a-vis the WTC2023 Organizing Team and you either did not receive a reply within one month (the deadline being extended to two months in case of a complex request) or you believe that the response you received from the WTC2023 Organizing Team is not satisfactory and your issue has not been resolved, you can contact the Data Protection Authority, 1-3 Kifisias Avenue, PO Box 11523 Athens firstname.lastname@example.org, fax 2106475628 (for more information, see also the Authority’s Portal https://www.dpa.gr/en).
The WTC2023 Organizing Team implements appropriate technical and organizational measures to ensure an adequate level of protection of personal data in order to prevent the destruction, loss, alteration, unauthorized access, disclosure or transfer to a non-entitled person or entity in any way.
The WTC2023 Organizing Team has business continuity and recovery plans, which it periodically tests and updates; it has in fact established and implemented appropriate policies and procedures for the security and protection of the data it processes.
In addition, to that purpose, the WTC2023 Organizing Team has reviewed the contracts it holds with the processors to commit them to respect your personal data under the GDPR by taking and enforcing measures to secure them from risks of destruction, loss, alteration unauthorized access, disclosure or transfer to a non-entitled person or entity, in any way and by signing a confidentiality clause.
When we provide links to websites or other Organizations, this personal data protection notice does not cover the way in which these sites or Organizations process your personal data and the information provided by you in general. That is why we encourage you to read the privacy policies of other websites you visit.
We maintain social media pages for your information. We do not share your data with another organizations, but social media providing companies have their own GDPR policy to which we refer you.
This statement is subject to periodic revisions and updates. In this case you will be informed through the WTC2023 website.