1 Content of the Policy : Your privacy and the protection of your personal information is a top priority for us. This Privacy & Data Protection Policy is intended to inform you about the processing of your personal data in the environment of www.eedieke.gr (hereinafter the “Platform”) when you visit the Platform, communicate or have any interaction with us or when you use a certain Platform service. The Policy applies in full order of the Terms of Use and the Platform Cookies Policy. This informs you about who we are, for what purpose and which of your personal data we process, on what lawful basis and for how long we process them, who and if they become aware of them, and what your rights are in relation to them.
By using the Platform, you accept that this applies to the processing of your personal data, and you take responsibility to respect the Privacy Policy in the context of your interaction with the Platform and other users of the Platform.
2. Contact details of the Data Controller : For any processing of personal data carried out in the context of any possible interaction with the Platform, including the use of its services, exclusively for purposes and in the manner that the Scientific CompanyContinuing Education in Clinical Research determines, the Data Controller is EEDIEKE based in Thessaloniki, 54 Dimitriou Gounari, 54635, P.O. Box 54635, e-mail: info@eedieke.gr which has developed and offers the Platform operating at the link www.eedieke.gr.
3. Definitions
‘Personal Data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one whose identity can be verified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person
‘Special categories of personal data‘ means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade-union membership, as well as the processing of genetic data, biometric data for the purpose of positive identification of a person, data concerning health or data concerning the sex life of a natural person or sexual orientation or data concerning criminal convictions.
‘Health-related data’ or ‘health data’ means personal data relating to the physical or mental health of a natural person, including the provision of health care services, which reveal information about the state of health of that person,
‘processing’ means any operation or set of operations which is performed, whether by automated means, on personal data or on sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
‘Pseudonymization’ means the processing of personal data in such a way that the data can no longer be attributed to a specific data subject without the use of supplementary information, provided that such supplementary information is kept separately and subject to technical and organizational measures to ensure that it cannot be attributed to an identified or identifiable natural person.
‘Anonymized data’ means data which have been processed in such a way that they can no longer be attributed to a specific data subject. ‘Anonymization’ means the processing of personal data in such a way that the data can no longer be attributed to a specific data subject.
‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
‘processor’ means the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
‘Third party’ means any natural or legal person, public authority, agency or body, apart from the data subject, the controller, the processor and persons who, under the direct supervision of the controller or the processor, are authorized to process personal data.
‘recipient’ means the natural or legal person, public authority, agency or other body to whom the personal data are disclosed, whether a third party. However, public authorities which may receive personal data in the context of a specific investigation in accordance with Union or Member State law shall not be considered as recipients.
‘Consent’ of the data subject: any freely given, freely given, specific, explicit and informed indication of the data subject’s wishes by which the data subject signifies his or her agreement, by a statement or by clear affirmative action, to the processing of personal data relating to him or her.
‘Personal data breach’ means a breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access of personal data transmitted, stored or otherwise processed.
“Data Protection Legislation”: the applicable national and Union legislation on the protection of personal data, such as the General Data Protection Regulation (EU) 2016/679 (hereinafter “GDPR”), Law No. 4624/2019, as well as the Decisions, Directives and Opinions of the Personal Data Protection Authority.
4. When and how we collect your data
Your personal information that is processed is provided directly by you either when you browse the Platform or when you provide our services or when you communicate with us in any way or when you subscribe to our forum or newsletters or when you participate in our various actions [such as, but not limited to, webinars we organize, the display of your personal stories related to your health (the “true stories” folder), etc.]. Most of your information is provided by you in electronic form, but we may also process audiovisual material that relates to you in the context of our legal action and with your explicit consent.
5. Data processing (purpose – data – legal basis for processing)
We process your personal data in a transparent manner (Legitimacy, objectivity, transparency), only for specified, explicit and legitimate purposes (Purpose limitation) and only what is appropriate, relevant and necessary for each purpose (Data minimization). We ensure that your data is always accurate and up to date (Accuracy) and that it is not kept for longer than the purposes for which it was collected and processed (Limitation of the storage period).
6. Sharing and transferring your data
Generally, your data is not read and shared with third parties but is processed exclusively by us or by our specialized partners and processors on our behalf (e.g. for technical support of the platform and the provision of our services, newsletter management, video interviews) and to the extent required. In this case, the processors are contractually bound to data protection and the unhindered exercise of your rights and/or are governed by a regulatory obligation of confidentiality and secrecy and are under our direct supervision and guarantee their lawful and secure processing. Indicatively, the processor is The Rocket Science Group (Mailchimp) (Mailchimp Privacy Policy: https://www.intuit.com/privacy/statement/).
However, in certain circumstances, we may share your information as required by law, such as in execution of a court order/warrant, notification to relevant judicial/prosecutorial/police authorities or to protect our legal rights and/or the safety of a person.
It is expressly noted that the content, information, contact details and so on that you post on the Platform forum is freely accessible by anyone who registers as a user of our services.
EEDIEKE uses the Google Analytics service. EEDIEKE is a joint Data Controller with Google Inc. for some of the processing activities, while for other processing operations Google and EEDIEKE are separate Data Controllers (Google Privacy Policy: https://www.google.com/intl/en/policies/privacy/). Google decisively determines some of the purposes and means of processing the data collected through its technology. For each processing of Data solely for the purposes and in the manner determined by Google, it is a unique Data Controller. Google may even use your non-anonymous data for its own purposes, such as profiling and correlation with other data from user accounts on its other services. The processing of your Data in the context of the Google Analytics service, either by EEDIEKE or by Google, is carried out based on your prior consent.
7. Transfers to Third Countries
Your personal data collected through the Platform and/or in the context of its operation are not transferred to third countries and Organizations. Exceptionally, they are only transferred when there is a reason to do so and you have given us your prior consent or, more generally, when the transfer is required by law or, finally, when the transfer is necessary for the performance of our contractual obligations. In all cases, the Data Controller obtains the necessary assurances from the third country recipients as to their compliance with European data protection standards (e.g. checking whether the Commission has issued an adequacy decision for the third country to which the transfer is to be made and whether the appropriate safeguards under the GDPR are respected for the transfer of such data).
8. Data on minors
We do not provide services to minors (people under the age of 18) or collect their personal data. As it is practically impossible to determine the age of each User, please contact us immediately in case the person exercising parental care finds unauthorized processing of data of a minor, to take the necessary measures, such as deleting the relevant data.
9. Consent
Your declaration of acceptance of this Privacy Policy, by completing/checking the relevant box on the Platform’s web pages or in a similar manner, is deemed to be an express, free and unconditional provision of your consent (where required and where there is no other legal basis) to the collection, processing and further transfer of your personal data for the provision of its Services, as detailed in this Policy. To use the Platform Services, it is necessary to provide certain data that we request from you. Your refusal to provide the personal data requested (refusal to provide consent) makes it impossible, where applicable, to serve the purposes of the processing described above (e.g. subscription to the newsletter mailing list).
10. Your rights
Every natural person whose data is processed enjoys all rights under the Data Protection Legislation. In any case of a request to exercise a right, you will receive a response within one (1) month from the receipt and confirmation of your identity, unless your request is complex or we are handling a large volume of requests, in which case, the above deadline may be extended for a further two (2) months and after we have informed you accordingly.
In case the information you provide is not sufficient to identify you, we may ask you to provide additional information. To exercise your rights, you may contact the Data Protection Officer of the Data Controller at the details set out in clause 10. Your rights are set out below:
α) Right to withdraw consent:
In cases where the processing is based solely on your prior consent, you have the right to withdraw your consent at any time. Withdrawal of your consent does not affect the lawfulness of the processing based on consent in the period prior to its withdrawal.
(b) Right of access:
You have the right to know at any time what data we are processing in order to verify the lawfulness of the processing. Therefore, upon request, you have access to the data and can obtain copies of the data, additional information about the processing, to whom we transmit it or to whom we process it and for what purpose, etc.
(c) Right of rectification:
You have the right to complete, correct, update or modify your personal data by submitting a request or directly through the options available on the Platform.
d) Right to erasure:
You have the right to request the erasure of your personal data when we process it on the basis of your consent or for reasons of our legitimate interest or when it is no longer necessary in relation to the purposes for which it was collected or otherwise processed or if you object to the processing and there are no compelling and legitimate grounds for processing it. In all other cases (e.g. obligation to process personal data imposed by law, purposes of scientific research), this right is subject to specific limitations or does not exist.
(e) Right to restriction of processing:
You have the right to request restriction of the processing of your personal data (a right alternative to the right to erasure) in the following cases: (i) when you dispute the accuracy of the personal data and until it is verified; (ii) when you object to the erasure of personal data and request restriction of use instead of erasure; (iii) when the personal data is no longer necessary for us, but is nevertheless necessary for you to establish, exercise, support legal claims; and (iv) when you object to the processing
(f) Right to object to processing and right to object to automated individual decision-making, including profiling:
You have the right to object at any time to the collection and processing of your personal data where, as described above, it is necessary for legitimate interest pursued by us as data controllers, as well as to processing for direct marketing and consumer profiling purposes. Please note that the Platform does not use an automated decision-making process. In cases of processing for scientific research purposes, you have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you, except where the processing is necessary for the performance of a task carried out in the public interest or where the conditions and safeguards set out in paragraph 1.1. 1 of Article 89 of the GDPR (e.g. use of pseudonyms).
(h) Right to portability:
You have the right to receive, free of charge, upon identification, your personal data that you have provided to us, in a format that allows you to access (pdf, word, etc.), use and process them using commonly used processing methods. You also have the right to ask us, if technically feasible, to transfer the data directly to another controller. This right exists for the data you have provided to us and the processing is carried out by automated means on the basis of your consent or in the performance of a relevant contract.
- Contact details of the Data Protection Officer (DPO) of the Data Controller
At the email or postal address info@eedieke.gr and 54 Dimitriou Gounari 54, 54635, Thessaloniki, you can address any requests for exercising your rights, as explained above, but also your questions regarding the processing of personal data included in this Policy.
- Right to complain to the Personal Data Protection Authority
If you believe that your personal data protection is in any way affected, you may appeal to the Personal Data Protection Authority (www.dpa.gr, 1-3 Kifissias Avenue, P.K. 115 23, Athens, 210 6475600, 210 6475628, contact@dpa.gr).
13. Data retention time
Your personal data is kept securely and only for as long as necessary to fulfil the intended and predetermined purpose, and then either anonymized or securely deleted. In particular, the personal data of users that are processed with consent (e.g. data from the subscription to the Newsletter) is kept until the withdrawal of consent, without this withdrawal affecting the lawfulness of the processing that has taken place up to the point of withdrawal. Where processing is imposed as an obligation by provisions of the applicable legal framework or a specific retention period is provided for, your personal data will be stored for as long as the relevant provisions require. The personal data of data subjects collected and processed for the purposes of our legitimate interests and for the establishment, exercise, and/or support of legal claims are kept for as long as necessary according to the purpose pursued. Your User account, information and User data will remain on the Platform for as long as your account is active and will be deleted or anonymized upon your request. Specifically for the medical history that you provide us, it is noted that it is collected solely for research purposes and is processed after full anonymization (i.e. it cannot be directly or indirectly associated with you) for as long as required in accordance with recognized ethical standards for scientific research.
14. Personal Data Security
Taking into account the latest developments, the implementation costs and the nature, scope, context and purposes of the processing, as well as the risks of varying likelihood and severity to the rights and freedoms of users from the processing, the Controller shall implement appropriate technical and organizational measures (including but not limited to pseudonymization techniques, encryption, strict role and access allocation, access logging system, entering into confidentiality agreements and/or ensuring that the processing is carried out in accordance with the requirements of the Directive). At the same time, where a processing operation is likely to present a high risk to the rights and freedoms of natural people, it shall carry out, prior to the processing operation, an assessment of the impact of the envisaged processing operations on the protection of personal data (‘impact assessment’).
In the event that a Personal Data Breach occurs, or you suspect one, please notify us immediately at info@eedieke.gr.
15. Shortcuts to social networks
Our site uses shortcuts from the social networks Facebook, LinkedIn and YouTube. By using these through a visit or a user login, your data is automatically transmitted to the respective social network. For more information on the use of your data from the above social networks and for the protection of your privacy and data protection, please visit and consult the pages below:
– https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
-https://www.linkedin.com/legal/privacy-policy
– https://policies.google.com/privacy#infodelete
In case you are referred to third-party websites through special links (links, banners, frames), EDRIECE is not responsible for the protection of your data on these websites. The responsibility for the content, the information, the security of visitors and protection of their personal data and the quality of the services provided is entirely the responsibility of the owners, administrators and beneficiaries of these websites, which you visit at your own risk.
16. Policy revisions This Policy is subject to future amendments/revisions in the context of regulatory compliance and upgrading of our services. We recommend that you periodically check back for any updates. Last revision.
COOKIE POLICY
What are Cookies
“Cookies” are self-installing text files with short content, which are stored on the terminal equipment (PC, mobile, tablet) and specifically on your browser when you visit a website and give your consent for this, unless they are technical / functional Cookies, whose installation you cannot prevent. The “Cookies” files are sent by eedieke.gr to your terminal equipment during your first visit to it and follow a reverse course during your subsequent visits to eedieke.gr.
- Why we use cookies
The collection, through the use of Cookies, of information contributes, among other things, to the smooth operation of the Platform, to the recording and maintenance of your browsing choices, to enhance security and prevent cyber-attacks, to the statistical analysis of Users’ activity on the Platform, to control and improve its functioning, to personalize the advertisements displayed to Users in other places on the Internet and, in general, to improve your experience when using the Platform. The exact purpose of use of each Cookie is described in the tables below.
- Consent
Where your consent has been obtained for the use of Cookies, you have the possibility to withdraw your consent by deleting the “Cookies” files from your terminal equipment at any time, without affecting the lawfulness of the processing based on the consent before its withdrawal. You have the possibility of deletion for each type of Cookie of the Platform.
Check the official website of your browser (Google Chrome / Mozilla Firefox / Apple Safari / Microsoft Edge / Opera and so on) for information on how to manage / clear Cookies from your terminal device.
We inform you that the deletion of Cookies may have an impact on the ease of access to the Platform and its Services and may cause reduced functionality or usability. Moreover, certain functions are only available using Cookies and if you choose to reject Cookies, these functions may not be available.
ookies used by the Platform and purposes of processing
- The Platform uses:
α) Necessary technical/functional Cookies.
These are Cookies used for the proper and smooth functioning of the Platform.
| Cookie name | Function – Purpose | Duration | Recipient |
| wordpress_sec_ | Offers protection against hackers and stores account details. | Connection period | eedieke.gr |
| wordpress_logged_in_ | Stores registered users. | Login period | eedieke.gr |
b) Statistical and performance analysis cookies
We use statistical analysis cookies to collect information about your interaction with the content of eedieke.gr. Based on this data we can improve the content and the efficiency of the Platform.
| Cookie name Function | Purpose Duration Recipient | Duration | Recipient |
| _ga | _ga A unique identifier is registered that is used to generate statistical data on how the Visitor uses the Platform | 399 days | |
| _ga_# | Used by Google Analytics to collect data on the number of times a User has visited the Platform, as well as the dates of the first and most recent visit 399 days Google | 399 days |
The eedieke.gr uses Google Analytics.
More information: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage.
Google Analytics Privacy and Information Security Policy: https://support.google.com/analytics/answer/6004245?p=privpol_data&hl=el&visit_id=636852664111108818-758842679&rd=1.
You can manage personalized ads at the link: https://www.google.com/settings/ads/anonymous.
The Platform is a joint Data Controller with Google Inc. for some of the processing activities, while for other processing operations Google and the Platform are separate Data Controllers.
Google decisively determines some of the purposes and means of processing the data collected through its technology. For each processing of Data solely for the purposes and in the manner determined by Google, it is a single Data Controller. Google may even use your non-anonymous data for its own purposes, such as profiling and correlation with other data from user accounts on its other services. The processing of your Data in the context of Google Analytics, either by the Platform or by Google, is carried out based on your prior consent.
c) Advertising and preference cookies – third party cookies
By using these Cookies, we collect information about your preferences, which allow the Platform to show you personalized advertisements and improve the effectiveness of the advertisements.
| Cookie name Function | Purpose Duration Recipient | Duration | Recipient |
| _fbp | Used to show visitors ads and their products in the Facebook environment | 3 months |
The eedieke.gr uses services and functions of Meta Platforms Inc. (www.facebook.com), advertising / promotional nature.
Facebook Privacy Policy: https://www.facebook.com/policy.php.
You can manage the targeted ads shown to you on Facebook: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen-
6. Duration of cookie storage
Cookies are either temporary (session cookies) and are kept until you close your browser, or persistent cookies and are kept for a longer period.
Cookies are retained depending on the type of each and are either automatically deleted at the time of expiry or manually deleted via the browser of your terminal equipment.
The Cookies used by eedieke.gr are retained for the period indicated in the above tables.
7. Modifications to the Cookies Policy
The Platform may at any time update or modify this Policy to respond to any changes in the operation of eedieke.gr, the services it offers and the provisions of the law. The modifications will be posted on this website.
Last update of the Cookies Policy: November 2024