With the following data protection notices, we inform you about the manner and scope of the processing of personal data by the Court of Appeal of Crete. Personal data is information that is classified or can be classified directly or indirectly about you. In particular, Regulation (EU) 2016/679 – General Data Protection Regulation (hereinafter GDPR) and National Law 4624/2019 apply as a legislative basis for data protection.
1. Overview
By entering the website of the Court of Appeal of Crete – https://efeteio-kritis.gov.gr – various information is exchanged between your terminal and our forwarder. In this case there may also be processing of personal data. The information collected in this way will be used, among others, to optimize the services we provide you through our website.
2. Entering our website
Purposes of data processing/legal bases:
- When you enter our website, the terminal browser you are using is sent automatically to our website’s forwarder and without any action on your part:
- The IP address of the Internet-enabled device that made the request
- The date and time of access
- The name and URL of the requested file
- The website/application from which the access was made (referrer-URL)
- The browser used, the operating system of your internet-enabled computer and the name of the access provider.
- The above is temporarily stored in a log file for the following purposes:
- Guarantee of correct connection establishment
- Guaranteed comfortable use of our website/app
- Evaluation of system security and stability
- If you have consented to the so-called geolocation in your browser or operating system or with other settings of your terminal, this function will be used to improve the content of the information and services we provide you.
- The legal basis for the processing of the above is article 6, paragraph 1, point f) of the GDPR Our legitimate interest arises from the aforementioned purposes of data processing.
Recipients/categories of recipients:
- Generally, we exclude the transmission of this data to third parties.
Duration of storage/criteria for determining the duration of storage:
- The data is stored for a period of 40 days and then deleted automatically. Once you stop using our website, the geolocation data is deleted.
3. Application forms – email communication – phone calls
Purposes of data processing/legal bases:
- The personal data that you provide to us when filling in an application form or by phone or email or the website will naturally be treated as confidential by us. We will only use your data for a specific purpose, to process your request.
- The legal basis for data processing is Article 6 paragraph 1 point f) of the GDPR as well as article 5 of National Law 4624/2019. Both our and your parallel (legal) interest in such data processing arises based on the objective of fulfilling a duty performed in the public interest or in the exercise of public authority as well as providing you with a response and, where appropriate, solve any existing problems.
Recipients/categories of recipients:
- The transfer of data to third parties is generally prohibited. We do not transmit personal data to third parties, unless the law stipulates otherwise or if it is a contractual obligation necessary for the proper operation of the Service and the performance of its functions, in accordance with the provisions of article 26 of National Law 4624/2019.
Duration of storage/criteria for determining the duration of storage:
- All the personal data you provided to us in the context of your requests remain in the file of our Service for as long as required by law and are then destroyed based on what is provided for in the provisions on the liquidation of records of the Public Sector (article 9 of the P.D. 162/1979 “On the liquidation of the archives of the Public Services” and article 11 of the P.D. 25/2014 “Electronic archive and digitization of documents”).
4. Online presence and website optimization
4.1 Cookies – general instructions
On our website we use so-called cookies based on article 6 paragraph 1 point f) of the GDPR. Our interest in optimizing our website must be considered as legitimate, within the meaning of the aforementioned provision. Cookies are small files that are stored on your terminal device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause damage to your terminal device, they do not contain viruses, trojans or other harmful programs. Cookies collect information, which is generated each time in relation to the specific terminal device used. This does not mean that we have direct knowledge of your identity because of them.
The use of cookies aims, on the one hand, to offer you a more comfortable use. For this reason, we use so-called session cookies, to recognize that you have already visited individual pages of the website. These are automatically deleted once you leave our website. In addition, we use temporary cookies for ease of use, which are stored for a specified period of time on your terminal device. If you visit our page again to use our services, we automatically recognize that you have already visited us, which entries/settings you made, so that it is not necessary to make the same actions again.
On the other hand, we use cookies to statistically analyze the use of our website in order to optimize our offer as well as display information that is specifically tailored to you. These cookies allow us to automatically recognize on a subsequent visit to our website that you have visited us again. These cookies are automatically deleted after a predetermined period of time.
Most browsers automatically accept cookies. You can set your browser so that cookies are not stored on your computer or a hint is displayed continuously before a new cookie is stored. However, the complete deactivation of cookies may result in the inability to use some functions of our website.
As long as you give your consent to the use of cookies, through the cookie options menu, they are stored on your terminal device for a period of 60 days. In case of opposition-withdrawal of consent, through the cookies options menu, they are deleted immediately.
4.2 Website targeting and website optimization
Purposes of data processing/legal bases:
- On our website, the information is analyzed and evaluated with the use of cookies in order to optimize our website and the information displayed on it. This ensures that only information tailored to your actual or perceived interests based on your usage behavior so far is displayed on your terminal device.
- The legal basis for this data processing is Article 6 paragraph 1 point f) of the GDPR. Therefore optimizing our website for the best browsing experience and avoiding incorrect information that is not of interest to you is in our interest as well as yours.
- The analysis and evaluation is carried out exclusively under a pseudonym and does not allow us to identify you. In particular, the information is not merged with your personal data.
Recipients/categories of recipients:
- The processing leads to the transmission of data to the processors of the providers of tracking and targeting technologies authorized by us.
Duration of storage/criteria for determining the duration of storage:
- The cookies used here and the information contained in them are stored on your terminal device for a period of 60 days. In case of opposition-withdrawal of consent, through the cookies options menu, they are deleted immediately.
4.3 Possibility of opposition / opt-out
You can block the targeting technologies, which are analyzed in 4.2, through a corresponding cookie setting in your browser (see also point 4.1) or through the cookie options menu.
5. Recipients outside the EU
With the exception of the processing described in point 4, we do not provide your data to recipients based outside the European Union or the European Economic Area.
The processing referred to in point 4 leads to the transmission of data to the forwarders of the providers of tracking and targeting technologies authorized by us.
The transfer of data is carried out in accordance with the principles of the so-called Privacy Shield as well as on the basis of the so-called Standard Contractual Clauses of the European Commission.
6. Your rights as a data subject
6.1 Overview
In addition to the right to withdraw the consents you have given us, you also have the following rights, provided that the respective legal conditions exist:
- Right of access regarding your personal data that we store in accordance with article 15 of the GDPR.
- Right to correct incorrect or to be completed incorrect data in accordance with article 16 of the GDPR.
- Right to delete your data that we have stored in accordance with article 17 of the GDPR.
- Right to restrict the processing of your data in accordance with article 18 of the GDPR.
- Right to data portability according to article 20 of the GDPR.
- Right to object according to article 21 of the GDPR.
6.2 Right of access according to article 15 of the GDPR
You have the right to be informed upon request and free of charge, in accordance with article 15 paragraph 1 of the GDPR, regarding the personal data we have stored about you. This includes in particular:
- The purposes of processing personal data
- The relevant categories of personal data we process
- The recipients or categories of recipients to whom your personal data is or will be disclosed
- If possible, the period for which the personal data will be stored or, when this is impossible, the criteria determining that period
- The existence of the right to submit a request to the controller for correction or deletion of personal data or restriction of the processing of personal data concerning the data subject or the right to object to said processing
- The right to lodge a complaint with a supervisory authority
- When personal data are not collected from the data subject, any available information about their origin
- The existence of automated decision-making, including profiling, provided for in article 22 paragraphs 1 and 4 of the GDPR and, at least in these cases, significant information about the logic followed, as well as the significance and intended consequences of said processing for the data subject
When personal data is transmitted to a third country or an international organization, the data subject has the right to be informed of the appropriate guarantees in accordance with article 46 of the GDPR regarding transmission.
6.3 Right of rectification according to article 16 of the GDPR
You have the right to request from us without undue delay the correction of inaccurate personal data concerning you. Bearing in mind the purposes of the processing, you have the right to request the completion of incomplete personal data, including through a supplementary statement.
6.4 Right to erasure according to article 17 of the GDPR
You have the right to ask us to delete personal data without undue delay if one of the following reasons applies:
- Personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed
- You withdraw your consent on which the processing is based in accordance with Article 6 paragraph 1 letter a) or Article 9 paragraph 2 letter a) of the GDPR. and there is no other legal basis for the processing
- Object to the processing in accordance with article 21 paragraph 1 or paragraph 2 of the GDPR and there are no compelling and legitimate reasons for the processing in accordance with article 21 paragraph 2 of the GDPR
- Personal data was processed unlawfully
- Personal data must be deleted to comply with a legal obligation
- The personal data have been collected in relation to the offer of information society services referred to in article 8 paragraph 1 of the GDPR
Where we have made personal data public and are required to delete it, taking into account available technology and implementation costs, we will take reasonable steps to inform third parties processing your personal data that you require and have requested them to delete any links with this data or copies or reproductions of said personal data.
6.5 Right to restriction of processing in accordance with article 18 of the GDPR
You have the right to ask us to restrict processing when one of the following conditions applies:
- Dispute the accuracy of personal data
- The processing is illegal and you request the restriction of the use of personal data instead of deletion
- The controller no longer needs the personal data for the purposes of the processing, but the data is required by the data subject to establish, exercise or support legal claims
- You object to processing in accordance with Article 21(1) of the GDPR, pending verification of whether the controller’s legitimate reasons prevail over those of the data subject
6.6 Right to data portability according to article 20 of the GDPR
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, as well as the right to transmit said data to another controller without objection from us; when:
- The processing is based on consent in accordance with Article 6 paragraph 1 letter a) or Article 9 paragraph 2 letter a) or on a contract in accordance with Article 6 paragraph 1 letter b) of the GDPR and is carried out by automated means
When exercising the right to data portability, you have the right to request that your personal data be transferred directly from us to another controller, if this is technically possible.
6.7 Right to object according to article 21 of the GDPR
Under the conditions of article 21 paragraph 1 of the GDPR you may object to data processing for other reasons arising from the specificity of the situation.
The above general right to object applies to all data processing purposes described in these data protection conditions, which are processed pursuant to article 6 paragraph 1 point f) of the GDPR. For related requests you can contact to the data protection officer of the Court of Appeal of Crete.
7. Privacy Contact Officers
7.1 Contact Officers for questions or regarding the exercise of your data protection rights
For questions about the website or the exercise of your rights during the processing of your data (data protection rights) you can contact grammateia@efeteio-kritis.gov.gr.
7.2 Contact Officer for data protection questions
If you have further questions about the processing of your data, you can contact the data protection officer of the data controller.
7.3 Right of complaint to the data protection supervisory authority
In addition, you have the right to complain to the competent data protection supervisory authority at any time. You can contact the data protection supervisory authority, in particular the Member State in which you have your usual residence or place of work or the place of the alleged infringement or the authority of the State in which the controller is established.
You may revisit Cookie Settings here.