Information on the Processing of Personal Data
Introduction
The Hellenic Gaming Commission attaches great importance to protecting the security and privacy of your personal data. For this reason, we take appropriate measures to protect the personal data we process and to ensure that the processing of your personal data is always carried out in accordance with the obligations set by the legal framework, both by the Commission itself and by third parties who process personal data on behalf of the Commission. Before using our website, please read this Website Personal Data Privacy Policy carefully.
Data Controller / Data Protection Officer (DPO)
The Hellenic Gaming Commission, headquartered in the Municipality of Athens, Attica, 17 Acharnon Street & Mavrokordatou Square, PC 10438, email: info[@]hgc.gov.gr, tel: +30 211 1075000, website: hgc.gov.gr https://www.gamingcommission.gov.gr/, informs you that, during browsing its official website, your personal data are processed in accordance with applicable national legislation and European Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter “Regulation”), as in force. For any issue regarding the processing of personal data, please contact us directly by email: dpo[@]hgc.gov.gr telephone: +30 211 1075000.
What is personal data?
The term personal data refers to information about natural persons, such as name, postal address, email address, contact telephone number, etc., which identifies or can identify you (Personal Data or Data).
What is the processing of personal data?
”Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
What Personal Data Do We Collect?
During your visit, navigation and use of the website, the controller only collects your absolutely necessary Personal Data, which is appropriate and relevant for the intended purpose, as detailed below.
For the subscription of users to the newsletter:
For the registration of users as subscribers:
For the registration of users in the information system for managing suitability licenses and certifications for Games of Chance and Electronic Technical – Amusement Games of Chance
For submitting an illegal betting report
For filing a complaint about online gambling
Information is also collected from the use of cookies in your browser. Learn more about how cookies are used here.
What is the legal basis for processing Personal Data?
We collect your Personal Data only if we have a legal basis for processing it.
For the registration of users as subscribers
The legal basis for this processing is your consent, in accordance with Article 6 paragraph 1a of the GDPR.
For the registration of users as subscribers
The legal basis for this processing is your consent, in accordance with Article 6 paragraph 1a of the GDPR.
For the registration of users in the information system for managing suitability licenses and certifications for Games of Chance and Electronic Technical – Amusement Games of Chance
The legal basis for this processing is the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to Article 6 paragraph 1e of the GDPR.
For submitting an illegal betting report
The legal basis for this processing is the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to Article 6 paragraph 1e of the GDPR.
For filing a complaint about online gambling
The legal basis for the processing of personal data is the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, in accordance with Article 6 paragraph 1 point (e) of the General Data Protection Regulation (GDPR).
How and why do we use your personal data?
To handle communication requests, complaints and reports submitted to the Commission, to manage and process administrative procedures that fall within its competence, to ensure the smooth and secure operation of the website, to comply with the Commission’s legal obligations, as well as to collect statistical data with a view to improving the services provided, in an anonymous or pseudonymized form where possible.
Where is your data disclosed?
The Hellenic Gaming Commission discloses your personal data to the following categories of recipients:
No data is transferred to third countries outside the European Economic Area, unless this is absolutely necessary and an adequate level of protection is ensured.
Storage Period
Your Personal Data is kept only for as long as is necessary for the purpose for which you have communicated it to us, in accordance with the relevant legislation, unless an extension of this period is required due to legal claims or our legal obligations.
What are your rights in relation to your personal data?
Every natural person whose data is processed by the Hellenic Gaming Commission enjoys the following rights under certain conditions:
Access right:
You have the right to be aware of and verify the lawfulness of the processing. Therefore, you have the right to access the data and receive additional information regarding its processing.
Right to correction:
You have the right to review, correct, update or modify your personal data by contacting the Data Protection Officer (DPO) at the contact details above.
Right to erasure:
You have the right to request the deletion of your personal data when we process it based on your consent or in order to protect our legitimate interests. In all other cases (such as, for example, when there is a contract, an obligation to process personal data imposed by law, public interest), this right is subject to specific limitations or does not exist, depending on the case.
Right to restriction of processing:
You have the right to request restriction of the processing of your personal data in the following cases: (a) when the accuracy of the personal data is contested and until verification is carried out; (b) when you oppose the deletion of personal data and request the restriction of their use instead of deletion; (c) when the personal data is not needed for the purposes of processing, but is nevertheless necessary for you to establish, exercise, or support legal claims; and (d) when you object to the processing and until verification is made that there are legitimate reasons that concern us and override the reasons for which you object to the processing.
Right to object to processing:
You have the right to object at any time to the processing of your personal data in cases where, as described above, this is necessary for the purposes of legitimate interests pursued by us as data controllers.
Right to portability:
You have the right to receive your personal data free of charge in a format that allows you to access, use and process them using commonly used processing methods. You also have the right to ask us, if technically feasible, to transfer the data directly to another controller. This right applies to the data you have provided to us and its processing is carried out by automated means based on your consent or in execution of a relevant contract.
Right to withdraw consent:
Where processing is based on your consent, you have the right to freely withdraw it, with no effect on the lawfulness of the processing that was based on your consent before you withdrew it.
To exercise any of your above rights, you can contact the email: dpo[@]hgc.gov.gr or telephone: +30 211 1075000.
How can you exercise your rights?
To exercise your rights, you can submit a relevant request to us at the email address dpo@hgc.gov.gr with the subject “Exercise of Rights” and we will examine it and respond to you as soon as possible. We respond to your Requests free of charge without delay, and in any case within (1) one month from the date we receive your request. However, if your Request is complex or you have a large number of Requests, we will inform you within the month about whether we need to obtain an extension of another (2) two months within which we will respond to you.
Right to complain to the DPA
You have the right to submit a complaint to the Personal Data Protection Authority (www.dpa.gr):
Call Center: +302106475600, Fax: +30210 6475628, Email: contact[@]dpa.gr.
Personal Data Security
The Hellenic Gaming Commission implements appropriate technical and organizational measures aiming at the secure processing of personal data and the prevention of accidental loss or destruction and unauthorized and/or illegal access thereto, use, modification or disclosure thereof. In any case, given the way the internet operates and the fact that it is free to anyone, no guarantees can be provided that unauthorized third parties will never be able to violate the applied technical and organizational measures, gaining access and possibly using personal data for unauthorized and/or unlawful purposes.
Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s personal preferences or movements. We inform you that the Commission does not carry out profiling or automated decision-making that produces legal effects or significantly affects data subjects within the meaning of the data protection legislation in force.
Changes to the Privacy Policy
The information regarding the HGC privacy policy reflects the current status of data processing on our website. In the event of changes to data processing, this data protection information will be updated accordingly. The most recent version of this data protection information will always be available on our website, so that you are informed about the scope of data processing on our website.
