PRAXIS cultural Organisation Loustinianou 19e 62124 Serres Greece Phone: 0030 23210 58800 Fax: 0030 23210 58802 E-Mail: firstname.lastname@example.org (following eferred to as provider) to the users of the websites praxisgreece.com (hereinafter referred to as website) and https://www.facebook.com/praxisgreece. With the following declaration we inform you about the type, scope and purpose of the collection, processing and use of your data in connection with your visit to our website.
The provider stores and processes your personal data in compliance with the relevant data protection regulations, in particular the Basic Data Protection Ordinance (DSGVO), the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG). When you access the provider's website, the provider processes certain usage data in order to enable you to use its services. Certain usage data is transmitted anonymously to Google Inc., USA. If you enter data in the contact, order or registration forms of the provider, the provider processes these exclusively for the purposes stated in each case. All processed personal data will be deleted by the provider at the end of the storage period. You have a right to information regarding your data or to correction, deletion and restriction of the processing of your data, a right to object to the processing, a right to data transfer and a right of appeal to a supervisory authority. Further information is available below.
II. Data protection information according to 13, 14 DSGVO and to §§ 32 ff. BDSG 2018
a. Personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identifier or one or more specific characteristics which express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
b. Inventory data
Inventory data are personal data of a user which are necessary for the establishment, content design or amendment of a contractual relationship between the service provider and the user regarding the use of telemedia.
c. Usage data
Usage data are personal data of a user, which are necessary to enable and account for the use of telemedia. In particular, this includes features for identifying the user, information about the beginning and end as well as the scope of the respective use and information about the telemedia used by the user.
”Processing“ means any operation or set of operations which is carried out with or without the aid of automated processes and which relates to personal data, such as collection, recording, organisation, sorting, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or association, qualification, erasure or destruction.
”Pseudonymisation“ means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without additional information, provided that such additional information is kept separately and is subject to technical and organisational measures ensuring that the personal data are not attributed to an identified or identifiable natural person.
Cookies are small text files that are stored on your computer. Cookies always have a validity period that can be limited to the end of the user session (so-called session cookies) or can also last for a longer period of time (so-called permanent cookies). These permanent cookies remain on your computer and enable the provider or its partner companies (so-called third party cookies) to recognize your computer during your next visit. You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or reject them in certain cases or in general. If cookies are not accepted, the functionality of the website may be restricted.
A website, also referred to as a web presence, is the presence of a private or entrepreneurial provider of telemedia in the worldwide network (World Wide Web) at a specific Internet address. The web presence includes websites or sub-pages and optionally available downloadable documents as well as other retrievable audiovisual media services.
2. DESCRIPTION AND SCOPE OF THE PROCESSING OF YOUR DATA
This section informs you about the purposes for which your personal data will be processed and the legal basis for the processing. The provider publishes information about his company and his services, in particular about his events, via the website. In addition, the Provider maintains various online ordering systems and registration functions, which we will explain to you below.
a. Processing that affects the entire website
The provider processes the data provided by you in order to enable you to use this website. The provider uses technologies to measure reach in the context of advertising and market research. Further explanations can be found in the following explanations.
b. Processing in case of sending e-mails
You can contact the provider via the e-mail addresses provided on the website. The provider processes the data you provide to answer your contact request. Data collection (inventory data) > First name and surname > Company - Street > POSTCODE > Place > Country > Phone > fax > E-mail > Web In the case of sending an e-mail, only the aforementioned inventory data will be processed if you communicate this to the provider. The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO, if you have given your consent to the provider, and also Art. 6 para. 1 lit. f DSGVO. If the purpose of establishing contact is to initiate a contract, Art. 6 para. 1 lit. b DSGVO is also a legal basis for data processing. Data provided by you will be deleted immediately after your request has been dealt with or, in the event of a failure to deal with it, no later than 12 months after the last contact. The enquiry is then settled when it can be inferred from the circumstances that the facts in question have been conclusively clarified. However, the provider will not delete your data if another reason for the processing of your data (e.g. the fulfilment of a contract) arises in the meantime. You have the possibility at any time to revoke your consent to the processing of your personal data or to object to data processing which is not based on consent. The revocation or objection can be exercised by sending an e-mail to email@example.com in particular. All personal data stored by the provider in the course of contacting you will be deleted in this case. Your right of revocation does not apply to data required by the provider in the context of fulfilling a contract or pre-contractual measures. If necessary, however, you are entitled to further rights, on the basis of which you can claim the deletion of your data.
c. Processing Log Data
When accessing the provider's website, your Internet browser automatically transmits certain data to the provider's server for technical reasons. The following data is collected separately from other data that you may transmit to the provider and used for the aforementioned purposes: Data collection (usage data) > Name of the requested web page or url, > Date and time of the retrieval, > Access status / Http status code, > the amount of data transferred in each case, > Website through which the request comes, > Browser software and software version, > Operating system and version, > IP address (anonymized, shortened by the last 3 digits), > randomly generated key number of the cookie or session. The legal basis for the storage of data and log files is Art. 6 para. 1 lit. f DSGVO. If the data is stored in log files, the usage data will be deleted after 7 days at the latest. Storage beyond this is possible in accordance with data protection permissions. In this case, the IP addresses will be deleted or alienated so that it is no longer possible to assign the Internet page retrieval to your computer. The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object. However, you may exercise your right to object by means of automated procedures using technical specifications, such as the anonymisation of your IP address by VPN providers.
3. THE EXISTENCE OF APPROPRIATE GUARANTEES
Insofar as the provider collects usage data, he always stores it under pseudonyms (in the case of cookies, e.g. via a unique session key). The provider does not combine pseudonymous data with data about the bearer of the pseudonym (such as inventory data).
b. Use of encryption technologies
When transferring data between your computer or mobile device and the provider's server, the provider uses the SSL (Secure Socket Layer) security system. This technology is intended to protect your data from being read by unauthorized third parties and offers a very high security standard. You can tell that your data is transmitted in encrypted form by the closed display of a key or lock symbol in the lower status bar of your browser.
4. RECIPIENTS OF PERSONAL DATA IN THIRD COUNTRIES
The provider transmits your usage data to Google LLC in accordance with the following description.
a. Use of the Google Content Delivery Network
b. Use of a Facebook company profile
The provider maintains a company profile at the Internet address https://www.facebook.com/wisuell on the social media portal facebook.com, a web service provided by Facebook Inc., 1 Hacker Way, Menlo Park, California, USA (Facebook). For the European Union, Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland is responsible for data processing. When the company profile is accessed, certain data is sent to Facebook Ireland Limited. You can find out what this data is from the applicable data protection regulations of Facebook Ireland Limited, which can be found at https://www.facebook.com/about/privacy/update . The provider has no control over this information. The legal basis for the storage of data and log files is Art. 6 para. 1 lit. f DSGVO. Within the framework of this agreement, the provider has provided suitable guarantees for the protection of the person concerned, on the basis of which enforceable rights and effective legal remedies are available to the person concerned. The transmission of this usage data to Facebook is mandatory for the operation of the website. Consequently, there is no possibility for the user to object. However, you can exercise your right to object by means of automated procedures in which technical specifications are used, e.g. in the case of anonymizing your IP address by using a VPN service.
5. RIGHTS OF DATA SUBJECTS
You have the right to obtain information about the personal data concerning you and to correct or delete such data or to restrict the processing or the right to object to such processing, the right to data transfer and the right of appeal to a supervisory authority in accordance with the description given below. In the cases of §§ 32 ff. BDSG 2018, these claims only exist to the extent that they are provided for in accordance with BDSG 2018.
a. Your right to information
You have the right to request confirmation from the provider as to whether personal data concerning you will be processed. If this is the case, you have the right to information about this personal data and the following information: the purposes of the processing; the categories of personal data to be processed; the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; if possible, the intended duration for which the personal data will be stored or, if that is not possible, the criteria for determining that duration; the existence of a right of rectification or erasure of the personal data relating to them or of limitation of the processing by the controller or of a right of objection to such processing; the existence of a right of appeal to a supervisory authority; where personal data are not collected from the data subject, all available information on the source of the data; the existence of automated decision-making including profiling (in accordance with Article 22(1) and (4) DSGVO) and, at least in these cases, meaningful information on the logic involved and the scope and intended impact of such processing on the data subject.
b. Right to rectification
You have the right to demand that the provider immediately correct any incorrect personal data concerning you. You have the right to request the completion of incomplete personal data - also by means of a supplementary declaration - if this is compatible with the aforementioned purposes of processing or if there is an objective reason for this.
c. Right to cancellation
You have the right to demand that the provider delete any personal data concerning you immediately. We are obliged to delete personal data immediately if one of the following reasons applies: The personal data are no longer necessary for the purposes for which they were collected or otherwise processed; the data subject withdraws his consent on which the processing was based in accordance with Article 6(1)(a) or Article 9(2)(a) DSGVO and there is no other legal basis for the processing; the data subject objects to the processing in accordance with Article 21(1) DSGVO and there are no overriding legitimate reasons for the processing or the data subject objects to the processing in accordance with Article 21(2) DSGVO; the personal data have been unlawfully processed; the erasure of the personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject; the personal data have been collected in relation to information society services offered pursuant to Article 8(1) DS Block Exemption Regulation (consent of a child in relation to information society services). If we have made the personal data public and are required to delete it, we will take reasonable measures, including technical measures, to inform data controllers processing the personal data that a data subject has requested us to delete all links to, or copies or replications of, that personal data, taking into account the technology available and the costs of implementation. You have a right to cancellation in accordance with Art. 17 Para. 3 DSGVO, however, to the extent that the processing is necessary to exercise the right to freedom of expression and information; to fulfil a legal obligation which the processing requires under the law of the Union or of the Member States to which the controller is subject, or to perform a task which is in the public interest or in the exercise of official authority assigned to the controller; for reasons of public interest in the field of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the DSGVO; for archival, scientific or historical research purposes in the public interest or for statistical purposes pursuant to Article 89(1) of the DSGVO, where the law referred to in paragraph 1 is likely to render impossible or seriously prejudicial the attainment of the objectives of such processing, or for the exercise, exercise or defence of legal rights.
d. Right to limitation of processing
You have the right to demand that we restrict processing if one of the following conditions is met: the accuracy of the personal data is contested by the data subject for a period of time which allows the controller to verify the accuracy of the personal data; the processing is unlawful and the data subject refuses to erase the personal data and instead requests the restriction of the use of the personal data; the controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the exercise, exercise or defence of legal rights, or the data subject has objected to the processing pursuant to Article 21(1), until it is established whether the legitimate reasons of the controller prevail over those of the data subject. Where processing has been restricted, such personal data, apart from being stored, may not be processed without your consent or for the exercise, exercise or defence of rights or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State. If you have obtained a processing restriction, you will be informed by us before the restriction is lifted.
e. Right to data transferability
You have the right to receive the personal data concerning you that you have provided to a data controller in a structured, common and machine-readable format and you have the right to transfer such data to another data controller without interference from us or the data controller to whom the personal data have been provided, provided that the processing is based on a consent pursuant to Article 6 paragraph 1 letter a DSGVO or Article 9 paragraph 2 letter a DSGVO or on a contract pursuant to Article 6 paragraph 1 letter b DSGVO and the processing is carried out using automated procedures. In exercising your right to data transferability pursuant to paragraph 1, you shall have the right to obtain that the personal data be transferred directly from one controller to another controller, where technically feasible. This right must not affect the rights and freedoms of others. The exercise of the right to data transfer does not affect Article 17 DSGVO (right to deletion / "right to be forgotten"). This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
f. Right to object to processing
You have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you carried out pursuant to Article 6(1)(e) (performance of a task required in the public interest) or (f) (safeguarding the legitimate interests of the controller or of a third party) of the DSGVO, including profiling based on those provisions. We will then no longer process the personal data unless we can prove compelling grounds for processing worthy of protection which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. If personal data are processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising. If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes. At the latest at the time of the first communication with you, we must expressly draw your attention to your aforementioned right to object to the processing; this information must be provided in an understandable form separate from other information. In connection with the use of information society services, notwithstanding Directive 2002/58/EC, you may exercise your right of objection by means of automated procedures (e.g. by pressing "do not track" functions on the telephone, by changing browser settings) using technical specifications. You have the right to object to the processing of your personal data concerning you for the purposes of scientific or historical research or for statistical purposes in accordance with Article 89(1) DSGVO for reasons related to your particular situation, unless such processing is necessary for the performance of a task in the public interest.
g. Right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State in which you are staying, at your place of work or at the place where the alleged infringement occurred, if you consider that the processing of your personal data is contrary to this Regulation. The supervisory authority to which the complaint has been lodged will inform you, the complainant, of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 DSGVO. End of data protection provisions