INFORMATION TO DATA SUBJECTS
(Articles 12, 13 and 14 of the General Data Protection Regulation – EU 2016/679)
1. GENERAL TERM
The Municipality of Salamina, local authority of first degree, at 1 K. Karamanlis & Famagusta Avenue, as every public service must do, maintains an e-government website (Law 3979/2011, Official Gazette A 138), collects and processes data of a personal nature for the exercise of its responsibilities and the fulfillment of its legal obligations.
In accordance with the principles of legality, objectivity and transparency provided by Article 5 of the GDPR, when the Controller, in this case the Municipality, processes personal data relating to a Data Subject (natural person) upon receipt of such personal data, provides the Data Subject with all necessary information.
With this text you can be informed about the Policy of collection, use and management of personal data during the use of the services of the Municipality and the exercise of your rights.
2. ABOUT THE MUNICIPALITY
The Municipality of Salamis, having as its highest principle the protection of privacy and personal data, complies with the General Data Protection Regulation (EU) 2016/679 as well as the Greek legislation 4624/2019.
In order to operate in accordance with the current legal framework, the Municipality has taken a series of actions required, implementing the appropriate technical and organizational measures for the legal collection, maintenance, processing and safe storage of personal data files, in order to ensure and to protect in any way the processing of personal data from every loss or leakage, alteration, transmission or improper processing in any other way their. The protection concerns all personal data, which have come or will come to the notice of the Services of the Municipality, in the context of its legal operation and its cooperation with citizens and bodies of the public or private sector.
Therefore, the Municipality is the Responsible for the processing of your personal data and determines the purpose and the manner of the processing. For any clarification regarding this Policy or the exercise of your rights you can contact the Municipality at the email address firstname.lastname@example.org or you can contact the Data Protection Officer (DPO) appointed by the Municipality at email@example.com.
3. DATA COLLECTION AND USE
The data you provide through the submission of applications, questions and/or complaints, may be used by the Municipality, so that it processes your requests, responds to your questions and complaints and facilitates the exercise of your rights.
Depending on the purpose of its use, your data may be processed regarding one or more of their categories as follows:
(a) police identification, such as name and surname;
(b) financial data, such as VAT number and bank account number;
(c) contact details, such as telephone and e-mail;
(d) education and employment data, such as qualifications;
(e) health data, such as medical reports;
(f) data relating to criminal convictions and sanctions, such as criminal records;
(g) child data, such as date of birth.
4. NOTIFICATION OF DATA
Your personal data is not notified or transferred to third parties except with your own written permission or in case of law enforcement. The processing of personal data is carried out exclusively for the purposes for which they are submitted.
The Municipality of Salamina, in no case sells leases or in any other way grants or transmits to third parties personal data, which are submitted to its services. An exception is the case where the notification of data is required by explicit provision of law and exclusively to the competent public authorities through the electronic platform they use.
In case, after the implementation of the current legislation on the conclusion of public contracts, a contractor arises and has access to personal data processed by the Municipality, a confidentiality clause may be signed under the responsibility of the competent Services or the terms of this contract may be incorporated within the main contract.
The aim of the above action is to provide sufficient assurances for the implementation by the contractors of appropriate technical and organizational measures, so that the processing meets the requirements of the GDPR and to ensure the protection of the rights of data Subjects.
5. PURPOSE OF THE PROCESSING
In addition to the required purposes, your personal data may be used to manage and process your requests, respond to your questions and complaints, as well as to satisfy your rights, always in accordance with the responsibilities of each service, as they arise from existing legislation and regulations.
6. LEGALITY OF TREATMENT
The legitimation of data processing is based on the following relevant provisions of the GDPR and the processing takes place only in case:
a) the processing is necessary for the compliance of the Municipality with one of its legal obligations. Primarily, the Municipality processes only the data that it is obliged to process in order to exercise its responsibilities provided by law (article 6 par. 1c GDPR) and / or
b) the processing is necessary for the safeguarding of a vital interest of the data Subject or other natural person (Article 6 par. 1d GDPR) and / or
c) the processing is necessary for the fulfillment of a duty performed in the public interest or in the exercise of official authority assigned to the Municipality (article 6 par. 1e GDPR).
The processing of personal data is also allowed on the basis of consent (article 6 par. 1a GDPR) in cases where a service of the Municipality is provided to the citizen as a “service of added value”, which consists in the possibility of electronic activation or monitoring.
The data processing regarding special categories is carried out only in case:
a) the processing is necessary for the performance of duties and the exercise of rights (article 9 par. 2b GDPR) and / or
b) the processing is necessary for reasons of substantial public interest (Article 9 par. 2g GKPD) and / or
c) is necessary for archiving purposes in the public interest, scientific research purposes or statistical purposes (article 9 par. 2i GKPD).
7. TIME OF DATA RETENTION
Your data is processed for the period of time that is absolutely necessary for the achievement of the respective purpose and is then retained securely stored and protected for the necessary period of time, subject to any provisions of applicable law, including the fulfillment of any legal obligation, as well as for archiving in the public interest.
8. YOUR RIGHTS
Regardless of the legal basis, the purpose and the way, based on which your data is processed, you retain the following rights, which you can exercise by addressing the Municipality through the above-mentioned electronic contact details and you can request the following:
(a) access to the retained data concerning you;
(b) the correction of inaccurate data concerning you;
(c) the deletion of data concerning you, to the extent that it is no longer necessary in relation to the purposes for which it was collected or when there is no longer any legalization to be processed and if such action is not contrary to legal obligation, for reasons of public interest, or on the basis of legal claims;
(d) the limitation of the processing of your data, if it is based either on the questioning of the accuracy of the data, or on the exercise of legal claims, or on objections to the processing;
(e) the portability of data concerning you, i.e. the transmission of this data to another Controller. This action may be taken if the processing is based on your consent and is carried out by automated means, without prejudice that the processing is not based on the performance of a duty in the public interest or the exercise of official authority entrusted to the Controller;
(f) the exercise of the right to object to the processing of your data, which is based on the performance of a duty in the public interest or on a legitimate interest pursued by the Controller, unless the latter demonstrates compelling and legitimate reasons to the contrary;
(g) the withdrawal your consent, provided that your data is processed on the basis of your explicit consent.
In case it is necessary for your identity to be confirmed for the above requests, you may be asked to provide documentary evidence. Once the legality of the request has been verified, the Municipality shall respond within the period of one month provided by the GDPR after the receipt of your request and provide you with relevant information.
Finally, you reserve the right to file a complaint to the competent Supervisory Authority (Personal Data Protection Authority) through the electronic platform: www.dpa.gr.
Cookies are small sets of data stored on electronic devices, which have access to the internet, allowing the website to operate smoothly and without technical anomalies, as well as to “remember” browsing actions and offer more convenient use.
10. DATA SECURITY
Taking into account the latest developments, the implementation cost, the nature, the scope, the context and the purposes of the processing, as well as the risks of different probability of occurrence and seriousness for the rights and freedoms of individuals, the Municipality implements appropriate technique and organizational protection measures in order to prevent the unintentional and unauthorized loss, alteration, disclosure and use or access of your personal data.
Only a restricted number of employees, who have to perform their working duties, has access to your personal data. These employees process your data exclusively in accordance with the instructions of the Controller and shall comply with the relevant confidentiality terms.
The above terms as well as any modification thereof are governed and supplemented by Greek law, European Union law and relevant international treaties. If any provision of the above terms becomes contrary to law, it is automatically terminated and is removed from this document, without in any way affecting the validity of the other terms.