Privacy Policy

1. Collection of Personal Data

We collect and process personal data that is voluntarily provided to us through our website, including but not limited to event registration forms, volunteer applications, and partnership inquiries. The types of personal data we may collect include name, email address, phone number, professional details, and any additional information provided by users in the course of their interaction with our services. In addition, we may collect technical data such as IP addresses, browser information, and usage details through automated means, including cookies and tracking technologies, in order to analyze website performance and enhance user experience.

2. Legal Basis for Processing Personal Data

In accordance with the GDPR, we process personal data based on the following legal grounds:

Consent (Article 6(1)(a)) – Where users voluntarily submit their data for registration, partnership, or communication purposes.
Contractual Necessity (Article 6(1)(b)) – Where processing is required for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract.
Legitimate Interests (Article 6(1)(f)) – Where processing is necessary for the legitimate interests of Panathēnea, including website optimization, analytics, security measures, and event organization.

Users have the right to withdraw consent at any time by contacting us at info@panathenea.org . Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.

3. Use of Personal Data

We use personal data for the purpose of facilitating event registration, volunteer coordination, and partnership engagement. Additionally, we process data to communicate with users regarding event details, updates, and promotional materials, subject to applicable consent requirements. Data may also be used for analytical purposes to improve the user experience and optimize our services. We do not sell, rent, or otherwise disclose personal data to third parties for marketing purposes.

4. Data Retention and Security Measures

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws. Personal data related to event participation, volunteering, and partnerships is typically retained for up to one year after the event, unless continued engagement necessitates further processing. Marketing communications data is retained until users opt out. Upon expiration of the retention period, personal data is securely deleted or anonymized.

We implement appropriate technical and organizational security measures to safeguard personal data against unauthorized access, alteration, disclosure, or destruction. These measures include data encryption, restricted access controls, and periodic security reviews to ensure the integrity and confidentiality of personal information.

5. Data Subject Rights under GDPR

Under the GDPR, users have the following rights in relation to their personal data:

Right to Access (Article 15 GDPR): Users may request confirmation as to whether their data is being processed and obtain a copy of their personal data.
Right to Rectification (Article 16 GDPR): Users have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure (Article 17 GDPR): Users may request the deletion of their personal data under certain conditions.
Right to Restrict Processing (Article 18 GDPR): Users may request that the processing of their personal data be restricted in specific circumstances.
Right to Data Portability (Article 20 GDPR): Users may request to receive their personal data in a structured, commonly used, and machine-readable format and to have it transmitted to another controller.
Right to Object (Article 21 GDPR): Users may object to the processing of their personal data based on legitimate interests, including direct marketing activities.
Right to Withdraw Consent: Where processing is based on consent, users have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, users may contact us at info@panathenea.org. If users believe that their rights under GDPR have been violated, they have the right to lodge a complaint with the relevant Data Protection Authority.

6. Use of Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience and improve website functionality. Cookies are small text files stored on users' devices that help analyze website traffic and user interactions. The types of cookies we use include:

Essential Cookies: Necessary for website operation and functionality.
Analytics Cookies: Used to analyze website performance and user engagement.
Marketing Cookies: Used for targeted advertising and promotional activities, subject to user consent.

Users may manage cookie preferences through their browser settings or via our website’s cookie consent tool.

7. Third-Party Data Processing and Transfers

We may engage trusted third-party service providers for hosting, analytics, and communication purposes. These providers process personal data strictly on our behalf and in accordance with contractual obligations ensuring GDPR compliance. Where personal data is transferred outside the European Economic Area (EEA), we implement safeguards such as Standard Contractual Clauses (SCCs) or other lawful mechanisms to ensure adequate data protection.

8. Updates to This Privacy Policy

We reserve the right to update this Privacy Policy periodically. Changes will be posted on this page, and the "Last Updated" date will be revised accordingly. In cases of significant modifications, we will provide notice via email or a website announcement. Users are encouraged to review this Privacy Policy regularly to stay informed about our data practices.