
Privacy Policy
Informing Individuals about the Protection of Personal Data
As of 25.5.2018, the General Data Protection Regulation (EU) 2016/679, also known as the GDPR, which was adopted on 04/05/2016 and entered into full force on 25/05/2018, after a 2-year adaptation period. The ultimate goal of the Regulation is to protect the privacy of the personal data of the subjects, by defining and appropriately restructuring the ways and forms in which organizations process this data (collection, management, storage, deletion, etc.).
As a Data Controller, we at the Municipality of Karpenisi recognize the need to protect privacy and personal data, comply with the requirements of the General Data Protection Regulation and take effective technical and organizational measures to protect the personal data of our Residents, Citizens, partners and employees. The processing and protection of your personal data is subject to the provisions of the GDPR, as well as to other provisions of national, community and international law regarding the protection of individuals from the processing of personal data, as applicable.
What personal data of mine is collected and how?
At the Municipality of Karpenissi, in compliance with the requirements of the GDPR, we process your personal data in a fair and transparent manner, ensuring the lawfulness, objectivity and transparency of the processing. The personal data processed by the Municipality of Karpenissi are only those that are necessary each time for a specific and clearly defined purpose and with a specific legal basis.
In this context, the processing that takes place concerns the personal data that you provide in real time when you use our services or communicate with us by e-mail or through our website (www.karpenissi.gr).
The personal data you provide to us includes information depending on the service you choose and is categorized as follows:
Identification Data (e.g., User ID, Full Name, Father and Mother’s Name, Photo, Identity or Passport Number, Social Security Number, Tax ID, etc.)
2. Contact Data (e.g., postal address, landline and mobile phones, email address, etc.)
3. Demographic Data (e.g., Nationality, Citizenship, Religion, Date of Birth, Place of Birth, Country of Birth, etc.)
4. Health Data and Social Welfare Data (e.g., Medical Opinions, Medical Certificates, etc.)
5. Curriculum Vitae (CV) Data
6. Financial Data (Assets, E9, tax returns, earnings, financial situation, IBAN etc.)
7. Data from other sources:
8. Complaints and Requests from Citizens (Identification Data, Contact Data and Demographic Data)
9. Traffic Code Violations (Vehicle Data, Area, Date and Time of Violation)
10. Karpenisi Municipality Website (cookies that facilitate access and use of specific services and/or pages of our website)
Legal Basis of Processing
For all of the processing purposes described above, the legal basis for processing arises from the following:
1. Processing of personal data with the consent of the data subject.
2. Processing of personal data for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
3. Processing of personal data to protect your vital interests or those of another natural person.
4. Processing of personal data for the performance of a contract in order to respond to a request for services.
5. Processing of personal data for the fulfillment of our legal obligations.
6. Processing of personal data for reasons of our own or a third party’s legitimate interest.
Sharing your Personal Data
Your personal data is treated with complete confidentiality and security (taking the appropriate technical and organizational measures) and is not disclosed further, except in cases where disclosure is required.
Your Rights
As a data subject, you have the right to access the record of the personal data we have collected about you. You can also request the erasure or rectification or restriction of processing or object to the processing of such data, except in cases where we are obliged to keep your data for administrative, legal or security reasons. In addition, as a data subject, you have the right to withdraw the consent you have given to the processing of your data.
In summary, your rights over your personal data, according to the GDPR, are as follows:
- Right of access: You can at any time be informed by us about your personal data that we hold, and have access to them.
- Right of rectification: You have the possibility to contact us to correct the data that is inaccurate.
- Right to erasure (“Right to be forgotten”): As long as we are not obliged by any legislative framework to retain the data that we hold and that relates to you, you can ask us to delete it.
- Right to restriction of processing: If you disagree with the way we process your personal data, you can request the cessation or restriction of processing
- Right to portability: You can ask us to transfer your data to another entity
- Right to object and object to automated individual decision-making, including profiling: You also have the right to withdraw your consent at any time. The withdrawal of your consent does not affect the lawfulness of the processing that was based on it and took place before its withdrawal.
Submitting Requests – Exercising Rights
To exercise your rights, as defined above, you have the possibility of submitting a relevant request. We undertake to respond and provide you with the relevant information, without delay, within one month of the proven receipt of the request.
This deadline may be extended by two more months, if necessary, taking into account the complexity of the request and the number of requests. In this case, you will be informed within one month of the proven receipt of the request.
In the event of failure to respond within the stipulated time frame, you will be informed of the reasons for this within one month of the proven receipt of the request.
The Municipality of Karpenissi has in any case the right to refuse to satisfy your request to restrict the processing or delete your personal
data, if such processing is necessary for the establishment, exercise or support of its legal rights or the fulfillment of its obligations
The requests are checked in terms of their size and repeatability per applicant for possible abuse, so that the Municipality of Karpenissi is provided with the rights of art. 12 par. 5 of the GDPR.
For any questions regarding the processing of your personal data, you can contact the Data Protection Officer, in the context of exercising your rights, by sending a relevant e-mail to contact@karpenissi.gr or documents (by completing the relevant rights exercise form) to the postal address Personal Data Protection Officer, Municipality of Karpenissi, Hydra 6, 36100 Karpenissi. Your request must include clear wording, your full name and accurate contact information (e-mail, telephone, address).
Contact details of the Personal Data Protection Authority
In the event of inability to exercise the rights granted to you by the Regulation, but also more generally, in the event of questions, clarifications and complaints, you have the right to contact the Personal Data Protection Authority for support and assistance.
Postal Address: Hellenic Data Protection Authority
Offices: 1-3 Kifisias, P.C. 115 23, Athens
Call Center: +30-210 6475600
Email: contact@dpa.gr
Website: www.dpa.gr
Δήμος Καρπενησίου ταξίδι στην μαγεία των εποχών
6 Hydra Street
36100 Karpenisi
EVRYTANIA
Τ. +30 22373-50000
E. contact@karpenissi.gr
F. +30 22373-50028