Information on the Processing of Personal Data
Introduction
The Hellenic Gaming Commission (HGC) places great importance on the protection of personal data and the privacy of individuals. We take appropriate technical and organisational measures to safeguard the personal data we process and to ensure that all processing activities are carried out in compliance with the applicable national and European legal framework, including Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).
Before using this website, please read this Privacy Statement carefully.
Controller and Data Protection Officer (DPO)
The Hellenic Gaming Commission (HGC), headquartered at 17 Acharnon Street & Mavrokordatou Square, Athens, Attica, 10438, Greece, is the Controller of the personal data processed through this website.
Contact details:
For any matter relating to the processing of personal data, you may contact the Data Protection Officer (DPO):
What is personal data?
Personal data means any information relating to an identified or identifiable individual. Such information may include, among others, a name, postal address, email address, telephone number, tax identification number, or any other information that can directly or indirectly identify an individual.
What is the processing of personal data?
“Processing” means any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure, or destruction.
What Personal Data Do We Collect?
During your visit and use of this website, the HGC collects only the personal data that are necessary, appropriate and relevant to the purpose for which they are processed.
Information may also be collected through the use of cookies and similar technologies. For more information, please refer to our Cookie Policy.
What is the Legal basis for processing Personal Data?
The legal basis for processing personal data depends on the purpose of processing.
The processing is based on your consent pursuant to Article 6(1)(a) GDPR.
The processing is based on your consent pursuant to Article 6(1)(a) GDPR.
The processing is based on your consent pursuant to Article 6(1)(a) General Data Protection Regulation (GDPR).GDPR.
The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the HGC pursuant to Article 6(1)(e) GDPR.
The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the HGC pursuant to Article 6(1)(e) GDPR.
How and why do we use your personal data?
Personal data is processed for the following purposes:
To Whom Is Your Personal Data Disclosed?
The HGC may disclose personal data to:
Personal data is not transferred outside the European Economic Area (EEA) unless such transfer is necessary and appropriate safeguards are implemented in accordance with applicable data protection legislation.
Retention Period
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory or administrative obligations. Where necessary, data may be retained for longer periods for the establishment, exercise or defence of legal claims.
What are your rights in relation to your personal data?
Subject to the conditions and limitations set out in the GDPR, you have the following rights:
You have the right to obtain confirmation as to whether your personal data is being processed and, where that is the case, to access your personal data and receive information regarding its processing.
You have the right to request the correction or updating of inaccurate or incomplete personal data.
You have the right to request the erasure of your personal data where the conditions set out in the GDPR are met. This right may be restricted where processing is necessary for compliance with a legal obligation, the performance of a task carried out in the public interest, the exercise of official authority, or the establishment, exercise or defence of legal claims.
You have the right to request the restriction of the processing of your personal data in the following circumstances:
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data where such processing is carried out in the public interest or in the exercise of official authority vested in the HGC. The HGC will assess your request in accordance with the applicable provisions of the GDPR.
Where processing is based on consent or a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format and, where technically feasible, to have those data transmitted directly to another controller.
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to its withdrawal.
To exercise any of the above rights, you may contact the DPO at:
Email: dpo[@]hgc.gov.gr
Telephone: +30 211 1075000
How can you exercise your rights?
You may submit a request by emailing dpo@hgc.gov.gr with the subject line “Exercise of Rights”.
The HGC will examine your request and respond without undue delay and, in any event, within one (1) month of receipt. If the request is particularly complex or if numerous requests have been submitted, this period may be extended by an additional two (2) months. In such a case, you will be informed accordingly within the initial one-month period.
Requests are handled free of charge unless they are manifestly unfounded or excessive, in accordance with the GDPR.
Right to Lodge a Complaint with the Hellenic Data Protection Authority
If you believe that the processing of your personal data violates applicable data protection legislation, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).
Website: https://www.dpa.gr
Telephone: +30 210 6475600
Fax: +30 210 6475628
Email: contact[@]dpa.gr
Personal Data Security
The HGC implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access or any other form of unlawful processing.
While every reasonable effort is made to ensure the security of personal data, no method of transmission over the internet or electronic storage can be guaranteed as completely secure.
Profiling and Automated Decision-Making
Profiling refers to any form of automated processing of personal data used to evaluate certain personal aspects relating to an individual.
The HGC does not carry out profiling or automated decision-making that produces legal effects concerning individuals or similarly significantly affects them within the meaning of applicable data protection legislation.
Changes to this Privacy Statement
This Privacy Statement reflects the current processing activities carried out through the HGC website. It may be updated from time to time to reflect changes in applicable legislation, regulatory requirements or processing activities.
The most recent version of this Privacy Statement will always be available on this website.
