Privacy Notice

regarding personal data processing

For the purpose of sending newsletters by electronic means with relation to events of the Onassis Foundation and of Onassis Cultural Center (“Stegi”) we, ARIONA HELLAS S.A. (G.E.MI. no: 1220017010000), a company established in Athens, at 2 Galaxia Str. & Evridamantos Str. acting as representative in Greece of Onassis Foundation (“ARIONA” or “We”) will process as data controller your contact details (name, surname and email address – hereinafter “the Data”) in accordance with the provisions of the applicable legislation for the protection of personal data and any rulings and guidelines of the competent supervisory authority. More specifically:

We will process your Data in order to send you newsletters in relation to actions on behalf of the Onassis Foundation and more specifically to the various events and shows that are organized or realized in Stegi and our collaborations in or outside Stegi’s premises.

Your Data will be maintained and processed for the above purpose by our relevant departments and staff who handle the communication of ARIONA for the said actions. In addition, we will be entitled to transfer the Data, to the extent that it is necessary for the operation of our website and the fulfilment of the processing purpose, to third parties companies which provide advertisement and information technology systems services to us. In this case, we will take all necessary measures so that our collaborators shall be authorized especially for this purpose and shall be bound by confidentiality and the obligations set by law in relation to the collection and processing of the said Data.

We will keep your data for in order to fulfill the purpose for which the Data were provided and until we receive a request from you, through the process that we describe below, that you do not wish us to send you newsletter messages. We may record any prior related correspondence with you until the submission of your aforementioned request in order to be able to prove our compliance with our obligations under law and to exercise our legal rights taking into account the applicable legislation’s requirements and statute of limitation time periods.

In case you do not wish to provide us your contact details or you do not wish for us to keep same for the above purpose, provided that you declare this to us, there will be no burden or any consequence for you.

With regards to the aforementioned processing of your data, you are entitled to the rights that are attributed by law depending on the case and under the applicable legal terms and conditions and more specifically:

The right to request that we stop sending you the said newsletters (unsubscribe) or the right to amend your consent for this processing any time by selecting the respective button at the last email that you received from us.

The withdrawal of previously given consent will have effect only for the future and any processing based on such consent will remain lawful until the time of its withdrawal.

The right to be informed and have access to your Data that we process according to this privacy notice, to rectify any inaccurate Data that we have in order to contact you, to request the erasure of your Data, to object and to request the restriction of processing that we do and to receive the Data in a structured, commonly used and machine – readable format and to transmit these to another data controller or data processor. You may exercise such rights by sending a written request at the email address: gdpr@onassis.org to the attention of ARIONA’s Data Protection Officer.

If you exercise any of these rights, we shall undertake all necessary measure to satisfy the relevant request within the time limits set by the law, by notifying you in written of the satisfaction of the request or alternatively the reasons that prevent the exercise of such rights or satisfaction of such request.

In the event that you disagree with our response or to the processing of your data by us according to this privacy notice, you are entitled to address a request to the competent supervisory authority (Greek Data Protection Authority), which reviews written complaints in accordance with the instructions provided for in its website (www.dpa.gr).