Update on the Personal Data Processing

Controller:

The company “ANASA-SUPPORT SOCIETY FOR PEOPLE SUFFERING FROM EATING DISORDERS“, Urban Non-Profit Company, Headquarters: 36-38 Sygrou Avenue, Athens, P. C. 11742, Tel.: 210-9234904, Fax: 210-9234907, E-mail: [email protected]  informs that, for the purposes of carrying out its statutory activities, it processes personal data under the applicable national legislation and the European Regulation 2016/679 for the natural persons’ protection against the personal data processing and for the free movement of such data (General Data Protection Regulation, hereafter “Regulation”).

For any issue related to the processing of personal data, contact ANASA’s Data Protection Officer directly: [email protected] .

 

Competent Authority for the Protection of Personal Data:

Hellenic Data Protection Authority

(Kifisias 1-3, P.C. 11523, Athens, tel. 210 6475600, Fax: 210 6475628, email: [email protected]).

Our guiding principles

For us at “ANASA”, the strongest foundation for fulfilling our social non-profit purpose is the trust of those who use our services and communicate with us by providing their personal data.

With the effective date of May 25, 2018, of EU Regulation 2016/679, we apply the Personal Data Protection Policy under this Regulation, as shown in this Privacy Statement.

The ANASA website is our most important communication tool. Here we present our work such as guidelines, recommendations, best practices, tips, opinions to achieve our purpose. In addition, we announce news about eating disorder awareness, both to the general and more specialized audiences.

Some services provided on our website require the processing of your personal data.

In addition to your personal data that you have voluntarily entered when you enter and navigate our website, we collect certain data information, which allows us to provide you with a smooth use. The legal basis for this is our legitimate interest in the safe and smooth operation of our website and your consent to accept the corresponding arrangements. This data is collected:

• to allow you to access our website. For cookies, see our policy here
• when you send us an request to become a friend/subscriber or donor through our website or by other means, only for the purpose of managing your request
• for statistical purposes.

We collect your personal information only to the necessary extent to achieve a specific purpose, which is connected to our duties, which are defined in our operating statutes as a Civil Non-Profit Company.

We do not proceed with further use of the information, for another purpose other than the one declared. We will never disclose your personal data for direct marketing purposes. We will not disclose or transmit personal information of visitors/users of our website to third parties, without your consent, except for the application of relevant legal dictates and only to the competent authorities if we have a legal obligation to do so.

We do not transfer the personal data we process to third parties outside the European Union and/or international organizations. We do not carry out automated processing and/or profiling.

As a general rule, we do not retain your personal information for longer than is necessary for the purposes for which we collected it. However, we may retain your personal data for a longer period of time for historical, statistical or scientific purposes, providing the appropriate safeguards.

Users under the age of 16 should only transmit their personal data to us with the consent of their parent or guardian.

Our website may contain links to other websites. We do not influence how your data is processed on these websites or their compliance with data protection regulations.

Collected information

Our pages on other websites

Your rights and how to exercise them

 

Collected information

When you browse our website  https://www.anasa.com.gr/ .

We provide you with access to our website, ensure that it is not offline, and receive an anonymous statistic that helps us determine whether we have succeeded.

Purpose: We process your personal data to provide you with access (such as your IP address) and use it to ensure the security of our website. In particular: While entering our website the following are automatically sent by the terminal browser you are using and without your own action to our website forwarder:

• the IP address of your device,
• the date and time of access,
• the name and URL of the requested file,
• the website/application from which the access was made (referrer-URL),
• the browser you use, the operating system of your internet-enabled computer, and the name of the access provider (Access provider)

The above data is temporarily stored in a log file for the purposes of establishing a correct connection and comfortable use of our website.

If you have consented to “geo-location” in your browser or operating system or other settings of your terminal, we will use this function to be able to provide you with personalized services related to your current location (your location data) solely in relation to and only with the location of our offices.

Legal Basis: Article 6, paragraph 1 of EU Regulation 2016/679 is for the processing of the IP address, i.e. our legitimate interest in the security of our website. In addition, your consent to provide you with the access you requested by your login and browsing. For security reasons, we may process personal data (IP addresses) on our website.

Storage: Data is temporarily stored for the session processing and then deleted automatically. Once you stop using our website, the geolocation data is deleted.

Recipients: None. We do not share personal data with other controllers.

Processors: We only use trusted processors who process your personal data on our behalf, in this case our current hosting provider. (https://www.isol.gr)

Transfers to Third Countries: None. We store your data within the EEA/EU.

When you become a friend (subscriber), donor of ANASA and use https://www.anasa.com.gr/:

We process data necessary to manage your subscription and donation. To this end, we collect your personal information which you provide to us voluntarily if you wish, as a friend (subscriber) or as a donor to have regular communication with us, in relation to the purposes of ANASA.

Information you provide us directly: The personal information you provide us for the above purposes are: Name, Address, Occupation, Telephone and fax (fax) numbers, Electronic address (email), the amount if it is a subscription and the bank of deposit and if it is a donation the amount you wish to donate and the bank of deposit.

The above payments are not made through our website, but by direct deposit from the interested parties to the indicated bank accounts.

We only receive your information by email with your intention to join the “Friends of ANASA” network and become our donor.

After the deposit, we ask you to contact us so that we can send you the relevant document and register you on our website.

If within 15 days we do not receive proof of your deposit and you do not contact us, we will delete your details from your above online application/declaration of intent.

Update when receiving the information: When receiving your personal data that you provide us electronically for your subscription and your participation in the network of friends of ANASA and donations, we provide you with the following information: Your identity, contact information, purpose of processing, recipients, storage period, rights of access, correction, deletion, restriction of processing, withdrawal of consent, submission of a complaint to the supervisory authority. We provide you with the option to provide your consent for your name to be posted on our website. For ANASA friends/subscribers see here, for donors see here.

More details: If you become a friend or donor, we save the data you have filled in the contact forms. We create a member ID upon your registration. In addition, we are required by law to create a markup with the time you signed up as a member or made your donation. We keep a record of all changes you make to your subscription details to manage your account.

Purpose: To manage your subscription and donation and frequent email updates.

Storage: All data is deleted if you leave the registration process (time out). If you become a friend/subscriber, your information is retained for as long as you are a member. If you become a donor, the information is kept and its possible publication and posting on the website is valid until you withdraw its consent or if “ANASA” is obliged to do so for other legal reasons. We may retain information even after you have been removed as a member to comply with legal obligations (e.g. tax provisions on record keeping time) or for legitimate interests (e.g. if you take legal action against us).

Legal Basis: Your express consent to subscribe and join the “Friends of ANASA” or Donors Network, as well as our legitimate interests.

Processors: We only use reliable processors who process your personal data only on our behalf, controlled by us and contractually bound according to article 28 of Regulation 2016/679/

Recipients: None. We do not pass your data on to other controllers.

Transfers to Third Countries: None. We store your data within the EEA/EU.

Appropriate guarantees: The processing is carried out with appropriate guarantees in the context of our legal activities as a non-profit organization and concerns both our members or former members, as well as the persons who have regular communication with us in relation to our purposes. We do not share this data outside ANASA without your consent.

 

When you use the Contact page at https://www.anasa.com.gr/ :

When you contact us via the form on our website or by email, we also receive personal data from you. This data is used by us to handle your request and if it concerns the use of the services of the ANASA Day Center, we inform you to contact it and follow the procedure provided for by it that provides protection of your personal data.

We do not use this data for advertising purposes or share it without your consent.

Storage: In any case, the data we collect through the contact form from the specific page of our website and via e-mail are stored for a period of six months and then deleted.

 

When you use/share our page in the media social network or follow the useful links

When you use certain social media features on our Sites or Apps, you may create a public profile that includes information such as your username, profile picture, and city. You may also share content with your friends or the general public, including information about your interaction with ANASA.

We encourage you to use the tools we provide to manage the Company’s social media sharing to control the information you make available through ANASA’s social media accounts.

We therefore collect your social media username if you interact with us through these channels to help us respond to your feedback, questions or comments.

In addition, the content of our website can be shared on social networks, using integrated social media buttons. All social media buttons that facilitate content sharing are embedded with simple hyperlinks, and not plugins developed by social network providers. This ensures that your data is not automatically transmitted to social network servers as soon as you access our website. In addition, when you share content from our website, we transmit to the respective social network only the information necessary to share the relevant content. In this environment, we do not transfer personal data.

At the same time, in social networks there are also simple links to our websites. If you follow a link from our website to a social network, or if you connect to the social network to share content from our website, the provider of that social network processes your data. For information on the purpose and scope of data collection, its further processing and use by the social network provider, as well as your related rights and settings options for the protection of your privacy, please refer to the Information on protection data available from the respective provider.

If you press any button that allows you to share our page or follow a useful link, you will be redirected to other websites and thus subject to the privacy policy of third parties. We cannot guarantee their compliance with EU Regulation 2016/679.

Information from third parties

We may receive information about you from public sources (as permitted by law), which we may combine with other information we receive from you. We may also receive information about you from third-party social networking services when you choose to connect to those services. In particular, based on current partnerships, we receive information that you have published and/or consented to from the companies: Google, Facebook, Twitter, You Tube.

 

Our pages on other websites

https://www.facebook.com/ANASAgreece/

From our website we refer to a link to our page  https://www.facebook.com/ANASAgreece/     which we created to spread the purpose of ANASA using a service of Facebook Inc. (1601 S California Ave, Palo Alto, California 94304, United States), (hereafter: “Facebook”).

The fanpage https://www.facebook.com/ANASAgreece  was created according to the terms Facebook which also hosts it. Our page has no members, but allows Facebook users who wish to like, follow or share it.

We inform you that by using our page and the “like” social module, Facebook stores at least one cookie on the hard drive of the person who visited it. By using it, you transmit your data to Facebook, which is given the ability to recognize you as a visitor to our page. For your protection and available options see Facebook privacy settings.

On our page we also use buttons provided by Facebook: “Call now”, where our contact phone number is sent via message to the user’s mobile phone, and “Send Message”, where a pop-up window provides the possibility to send text and a camera image. We use the two buttons above to facilitate and shorten your communication with us and this is where our legitimate interest lies. Access to the use of the above information contained in the sent messages is given to a specially authorized person by “ANASA” and the information contained is deleted after fifteen days from its receipt by us.

By using our page, we use the services offered by Facebook and collect personal data, as you have specified using the social network. We process personal data as visitors to our page for the purpose of compiling traffic statistics. In this way, we get a better picture of the profile of our fanpage users. At the same time, however, Facebook also acquires the ability to target the advertisements shown within the context of the specific social network. However, we are not responsible for the display of Facebook ads when using our page https://www.facebook.com/ANASA Greece/ . We do not use Facebook pixels for marketing and optimization purposes. You can object if this happens using the special settings that Facebook has and for which it is responsible as a controller. From our side, we have not authorized Facebook Inc for any further processing, nor are we responsible for this.

 

ANASA NGO on You Tube

From our website we refer to a link to our page/channel https://www.youtube.com/channel/UCz1yZv6eVBo5AAvOadpuPWw.

For this we use the YouTube provider operated by YouTube, LLC and represented by Google LLC. When you enter the above page you can either watch the video by clicking on the “Start a video” button, in which case the information is related to your user account and not to us since we do not receive it, or you can choose to register and have the possibility to you get updates as a subscriber about the new videos we post. In this case, the only data we collect is the username with which you appear to use the tool in question.

If you are logged in as a YouTube member, YouTube assigns this information to your account personally and information about which videos you watched is collected without our responsibility to which we have no access. You can manage your choices at https://myactivity. google.com/myactivity?restrict=ytw

To get more information about the purpose and scope of data collection and processing by YouTube, read the privacy statement posted on its website. There you will receive even more information about your rights and options for the protection of your personal data. We have no further responsibility beyond posting the videos for which we have obtained the legal licenses to reproduce them and respecting the copyrights arising from them.

 

https://twitter.com/ANASAgr

From our website we refer to a link to our page https://twitter.com/ANASAgr. For your participation – commenting, sharing, upvoting, it is necessary to register as a user on twitter managed by Twitter Inc. You can see our terms of use and privacy policy as we do not collect or process any of your personal data. For those who follow us and have used “like” we do not access or collect their data as we only know their account name.

Your rights and how to exercise them

You have rights when we process your data:

When “ANASA” processes your personal data, you have the right to know.

You have the right to access the information and the right to request its correction without delay if it is inaccurate or incomplete.

In some cases you can ask to have them locked. In addition, you can object to their processing, if you consider it unfair and illegal, and request their deletion.

You have the right to withdraw your consent at any time: If the processing of your data by ANASA is based on your consent, you have the right to oppose this processing at any time by withdrawing your consent.

You may request notification of any of the above changes to third parties to whom your data has been disclosed.

You also have the right not to comply with automated decisions (made solely by machines) that affect you, as defined by law.

You have the right to terminate at any time if you believe that your data protection rights have been violated.

The above rights are listed in articles 12 to 23 of the current EU Regulation 2016/679.

Personal Data Security

“ANASA” implements appropriate technical and organizational measures aimed at the safe processing of personal data and the prevention of accidental loss or destruction and unauthorized and/or illegal access to them, use, modification or disclosure. To ensure the appropriate level of security against risks and to select appropriate technical and organizational measures, the company takes into account the latest technological and other developments, the cost of implementation, the nature, context and purposes of the processing, as well as on the one hand, how great is the probability and risk of incidents of accidental loss or destruction and unauthorized and/or illegal access to personal data, use, modification or disclosure, and on the other hand, how serious will the consequences be for the rights and liberties of natural persons.

For the security of our website, to ensure the confidentiality, integrity and origin of an information during transmission, we use the secure HTTP connection through the network security protocol technology, Secure Sockets Layer (SSL).

Storage Period

The retention period on our part of the personal data concerning you depends on the purpose of the collection and the service you have requested to be provided to you:

• The details of our friends and donors are kept for as long as is necessary for the execution of the contract and for the establishment, exercise, and/or support of legal claims based on the contract.
• Your personal data provided in the feedback/contact section will be kept for a maximum period of five (5) years from our reply to you
• E-mails or other contact information that you provide to us in order to participate in contests, surveys or other interactive features on our website are automatically deleted once the corresponding action is completed.
• Data kept for the purpose of promoting services are kept until consent is withdrawn. Consent can be withdrawn at any time. The withdrawal of consent does not affect the lawfulness of the processing that was based on the consent during the period before its withdrawal.

To withdraw your consent, contact ANASA at e-mail: [email protected]

How to exercise your data protection rights against ANASA

“ANASA” has designated and notified to the Hellenic Data Protection Authority [G/EIS/4038/25-05-2018], your Data Protection Officer.

If “ANASA” processes personal data concerning you and you wish to exercise your rights regarding data protection, please complete and send us a written request (you will find it here) or by e-mail to [email protected] ,  or in a sealed envelope, to the attention of ANASA’s Data Protection Officer at the address “ANASA”, 36-38 Sygrou Avenue, Athens, P.C. 11742.

In principle, we cannot accept verbal applications (over the phone or in person), as we may not be able to process your application immediately without first analyzing it and reliably identifying you.

The use of the information you provide in your request to exercise your right will be strictly limited: the information will only be used by us to verify your identity and will not be stored for longer than is necessary for the specific purpose.

 

Right of appeal to the Authority

You have the right to appeal to the Hellenic Data Protection Authority for issues related to the processing of your personal data. For the Authority’s competence and how to submit a complaint, you can visit its website http://www.dpa.gr -> My rights -> Submit a complaint), where there is detailed information.

Last update: September 2018