Personal Data Protection Policy

INTRODUCTION

Welcome to the Privacy Policy of the website of the International Fur Fair of Kastoria, which is organized under the initiative and supervision of the Kastorian Fur Association ‘The Prophet Elias’’. The purpose of this Policy is to explain the following to you, as simply, comprehensibly and concisely as possible:

What data do we collect and process about you?

What are the purposes for which we process these data and what is the legal base on which we process them?

Who are the recipients of your data?

How long do we keep your data for?

What are your rights in relation to your data and how you can exercise them?

DEFINITIONS

Personal Data: Any information that refers to the Data Subject. For the purposes of this article, "Personal Data" shall mean information and data relating to a specific individual, such as, for example, date of birth, name and surname, residential address, telephone number, gender, nationality, education data, professional career, marital status, IP address, etc. Data of a statistical nature, from which the Data Subjects can no longer be identified as Data subjects, do not count as personal data.

Data Subject or Subject: Natural persons to whom the data refers, and whose identity is known to the data subject ‘’The Fur Association’’. For example, including, but not limited to, you as visitors and users of the website are also referred to as "data subjects".

Processing of Personal Data or Processing: A process or series of operations performed on personal data, such as the process of collecting, recording, organizing, maintaining, storing, modifying, extracting, using, reading, transmitting, disseminating or otherwise making available, associating or combining, interconnecting, blocking, deleting and destroying personal data.

Controller: The person or anyone who determines the purpose and means of the Processing of personal data, such as a natural or legal person, public authority or agency. In our case it is the Fur Association.

Consent of the Data Subject: Any free, explicit and specific declaration of intent expressed in a clear manner and in full knowledge of the facts, by which the Data Subject, having been expressly and unambiguously informed in advance, accepts that the personal data concerning him or her may be processed. Consent may be revoked at any time, without retroactive effect.

Data recipient: Any natural or legal person, public authority or agency or any other body to whom the data are communicated, whether or not it is a third party.

Third party: Any natural or legal person, public authority or agency or any other organization, other than, the data subject, the data controller or any other person or body authorized to process personal data, provided they are authorized to do so under the authority or on behalf of the Controller.

Processor: Anyone who processes personal data on behalf of the Controller, such as the data controller who is a natural or legal person, a public authority or agency or any other natural or legal person or any other body.

RESPONSIBILITY FOR THE PROCESSING OF YOUR PERSONAL DATA

DATA CONTROLLER

The Kastorian Fur Association ‘The Prophet Elias’’ (hereinafter referred to as the "Fur Association") is responsible for the processing of data.

The contact details of The Fur Association are as follows:

Postal address: Argos Orestiko, Kastoria, in the Kastoria Industrial Area. P.O. Box 52057

Telephone: +302467023116, +302467044441

E-mail address: This email address is being protected from spambots. You need JavaScript enabled to view it., This email address is being protected from spambots. You need JavaScript enabled to view it.

We would like to inform you that a Contact person for personal data protection issues has been appointed by The Fur Association, to whom you can put your questions regarding the processing of your personal data. Any interested party may contact the contact person in charge of their personal data protection via the following contact details:

Postal address: Argos Orestiko, Kastoria, in the Kastoria Industrial Area. P.O. Box 52057

Telephone: +302467022353

E-mail address: This email address is being protected from spambots. You need JavaScript enabled to view it.

OUR BASIC PRINCIPLES FOR PROCESSING YOUR DATA

We are committed to processing your data in a lawful and transparent manner, always in accordance with the applicable legal framework, and in particular Regulation (EU) 2016/679 of the European Parliament and of the Council and Law 4624/2019.

What this means in practice:

We collect and process your data only for specified, explicit and legitimate purposes. We only collect and process data that is necessary for the purposes we set out. We make every effort to ensure that your data is used for the purposes for which we need it, providing you, where appropriate, with the possibility of correction and/or deletion. We keep your data for a limited period of time, which is determined as necessary either by law or by our Policy that fulfils the processing purposes we set out. We make every effort to protect your data from unauthorized or unlawful processing, as well as accidental loss, destruction or damage.

We do not transfer data to unauthorized third parties, except where required by law or necessary to provide you with our services. We ensure that any of our partners who process your personal data on our behalf, implement all technical and organizational protection measures. As part of the protection of the personal data processed, the Fur Association applies a number of appropriate technical and organizational measures and adopts internal security policies, while at the same time utilizing a series of technologies to ensure the security of your data. As required by the principles of information security and data protection, technical and organizational security measures are monitored regularly and, if necessary, updated and adapted to the best and new practices in the market and in accordance with commonly accepted international standards.

COLLECTION OF PERSONAL DATA

In this Privacy Policy, the term "Personal Data" means information about you that allows us to identify you, directly or in combination with other information that we may have (see also chapter 2. Definitions). When you visit our website, we collect and ask you to provide us with certain information about you.

We only collect as much personal data as is deemed necessary and appropriate, in order to provide you with a functional website. This information may include:

Device information.

Navigation information when visiting our website and Cookie data.

IP address.

Full name and e-mail when using the contact form.

In some other cases your personal data may be collected automatically or through information transmitted to us by third parties.

In particular:

1. Collection of data we automatically collect when you visit our website

In general, you can browse our website without sharing data that identifies you. However, login information, navigation and interaction with our website is collected automatically, in order to ensure the security of our site and the security of the services we provide to you and to improve the online user experience. In particular, in compliance with Article 6 par. 1(f) of Regulation (EU) 2016/679, our website collects a range of data and information of a general nature on each access you make, which are stored temporarily. The log file is created as part of the automatic logging carried out by the online processing system.

In any case, we reserve the right to check the records of server log files, if there are specific indications of illegal use. The collection and storage of the above data are necessary for the operation of our website in order to provide functionality and offer its content. In addition, we use the data to optimize our website and ensure the security of our website information technology systems. The legal basis for the processing of the above data is Article 6 par.1(f). of EU Regulation 2016/679.

2. Cookies and Google Analytics/Google Ads

The Fur Association makes use of specific cookies (see “Cookies Policy”) in the website, in order to provide you with a comprehensive browsing experience. In particular, we collect the following information about you through Cookies. A cookie does not contain any personal information and is automatically deleted when you close your browser (temporary cookie).

The Fur Association also makes use of the Google Analytics service and Google Ads for the purpose of analyzing statistical data on the use of the website and the use of the data for advertising/promotional purposes (Google Ads). Google Analytics is a web analytics service provided by Google Inc. (https://www.google.com, Amphitheater Parkway, Mountain View, CA 94043, USA, hereinafter referred to as "Google").

More specifically, as part of this service provided by Google, pseudonymized user profiles are created and cookies are used (see Cookies Terms of Use). The information that is collected is used to create a personalized profile of the user generated by cookies about the use of this website, such as:

o Browser type/version,

o Type, version of browser, operating system you are using,

o Computer host/IP address

The above data is transmitted to a Google server in the USA and stored there. Under no circumstances will your IP address be linked to other data held by Google. For more information about personal data protection please refer to the Google Analytics Help Center: https://support.google.com/analytics/?hl=en#topic=3544906

This information is used to evaluate website usage, to compile reports on the activity of the website, to provide other services related to the website and use of the internet for research purposes, market research and web design.

The legal basis for the above processing is your consent under Article 6 par. 1(a) of EU Regulation 2016/679, which you provide to us by accepting the cookies when first entering our website. Information on how to withdraw your consent for cookies and on the terms of use of cookies on our website can be found here.

3. Data collection through the contact form

Through the contact form we collect your name and your email address for the sole purpose of being able to respond to any communication you may have with us, which may concern possible comments and remarks by you, or any other information concerning our services, but also the exercise of your rights as data subjects of the personal data we process.

The information you provide us with is collected and stored by us on the basis of Article 6 par. 1(f) of EU Regulation 2016/679. Our communication is recorded and the data is collected in order to enable proof of communication in accordance with legal requirements. Your data are processed for the purposes of the legitimate interests we pursue.

PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA

The information we collect or hold may be used by us only when the law allows us to do so. In particular, the main purposes of processing your data are:

Management of navigation and registration data on our website. The creation of a User Account involves the processing of navigation and registration data on our website. The processing of the personal data you have provided us with, including your navigation data on our website, such as your IP address, the sections of our site that you have visited etc., takes place in order to ensure the comfortable use of our Website, as well as for the security of our products and Website.

Optimization of our website services, products and services, and our relationships with our customers. In pursuit of our legitimate interests and to improve our services, evaluate how customers interact with our website, develop our business, tailor our communication with you according to your preferences and behavior, and to provide you with the best possible personalized experience, we may analyze and combine all information related to browsing data and data regarding your interactions with the Fur Association. These data are collected to improve our website and our applications, including the use of technologies that place cookies on your devices or in the emails we send you, and to provide you with higher quality services.

Managing communication through our website

Responding to the exercise of access, rectification and deletion rights, as well as to queries and complaints

Compliance with a legal obligation

Protection, detection and prevention of fraud and other criminal activities, claims and other liabilities

Network and information security, in order to take measures to protect your information from loss, damage, theft or unauthorized access

TRANSFER OF PERSONAL DATA

The personal data of our website users (navigation and connection data) are not transferred to third parties. Data transfer to third countries does not currently take place nor are there any plans to do so. We may transfer your personal data to our direct partners, in the event that this is absolutely necessary for the provision of our services to you, but also in the event that it is required in order to respond to your query. In any case, we ensure that each partner to whom we assign the provision of services takes appropriate personal data protection measures. For this reason, we agree on specific data protection measures and monitor these measures on a regular basis. Each of these recipients of your personal data is a processor on our behalf and therefore we ensure that they undertake the commitment to refrain from processing your data in any way that goes beyond the above transfer purposes.

The Fur Association does not sell or otherwise transfer or disclose your personal information to third parties, other than those mentioned above, without your consent, with the exception of cases in which it is required to do so by law or the competent authorities. The information kept on file may be transmitted to the competent judicial, police and other administrative authorities, upon their lawful request and in accordance with the applicable legal provisions. Furthermore, in the event of a legal order, official order or official preliminary examination, we reserve the right – without any further obligation – to make the relevant information available to the relevant service.

DATA RETENTION PERIOD AND ACCURACY

Servers located within the European Economic Area (EEA) are used to store and further process your data. In order to ensure the security of our information systems, we use third-party applications from specific service providers (such as firewalls), who are contractually bound to ensure the protection of your personal data processed on our behalf.

Your data is retained for as long as is necessary to fulfill the purpose for which it is stored or for as long as we are required by law. In order to determine the appropriate retention period for your data, we consider:

The amount and nature of your data.

The potential risk of harm from unauthorized use or disclosure of your data.

The purposes for which we process your personal data, in order to consider the possibility of fulfilling those purposes by other means.

All of the applicable legal obligations.

In general, navigation data is retained for a period of six (6) months, in order to be able to fulfill our obligation to keep accurate records for technical or other legal reasons.

The log files are kept for a period of twelve (12) months and may be disclosed to the competent authorities if deemed necessary for investigating any potential cyber-attack or incident.

The data collected through the contact form is retained for as long as required in order to respond to your request/inquiry, and is then permanently deleted.

The information that is investigated or used in the context of legal claims is kept for the period required for these purposes.

For the duration of the retention period of cookie data, a detailed reference is made in the Cookie Policy.

It is noted that a specific procedure has been provided for the deletion/destruction of personal data which must be deleted (see also 10. rights of subjects).

COLLECTION AND USE OF CHILDREN'S PERSONAL DATA

We do not collect and use personal data belonging to children under the age of 15. If it is determined that any personal information has been collected from a minor under the age of 15 without verifiable parental consent, such information will be deleted as soon as possible. If you believe that information may have been collected from a minor under the age of 15, please notify us via email at: This email address is being protected from spambots. You need JavaScript enabled to view it.

RIGHTS OF SUBJECTS

Based on GDPR, you have a series of rights in relation to the processing of your personal data. Specifically, you can:

Submit a request to the Fur Association to be informed as to whether we are processing data and if so, what data is being processed, by receiving a copy if you wish (right of access).
Request their correction in case your data are inaccurate, incomplete, misleading, irrelevant or limited (right of rectification).
Request, under certain conditions, their deletion (right to erasure).
Request, under certain conditions, the restriction of their processing (right to restriction of processing).
Object, under certain conditions, to our processing of them (right to object).
To request the data you have provided in a structured, commonly used and machine-readable format (if technically possible), so that you can transmit them to another controller (right to data portability).

In the event of a data breach that is likely to pose a high risk to your rights and freedoms, which does not fall under one of the exceptions provided for in the GDPR, the Fur Association undertakes the commitment to inform you of the breach without undue delay. Compliance with the legal framework for data processing and, in this context, the exercise of your rights is a priority for the Fur Association. For this reason, we have the right to request the provision of additional information necessary to confirm your identity before exercising your rights. The Fur Association is obliged to respond to your request promptly and at the latest within one (1) month. If deemed necessary, taking into account the complexity of the request and the number of requests, this deadline may be extended by two (2) more months. In any case, the Fur Association will inform you as soon as possible and, in any case, within one (1) month from the submission of your request, about its progress and the reason for any delay in its processing. In the event that your request is not answered (in a timely manner) or you are not satisfied with the Fur Association’s response, you have the right to submit a complaint to the competent supervisory authority (Personal Data Protection Authority | 1-3 Kifissias Avenue | P.C. 115 23 | Athens | Greece | tel. 210 6475600 | email: This email address is being protected from spambots. You need JavaScript enabled to view it.).

DATA SECURITY

The Fur Association implements all appropriate technical and organizational protection measures (including encryption, anonymization and/or pseudonymization procedures, where deemed necessary), in order to prevent the loss, alteration, disclosure and use or access of your data in an unlawful manner. In addition, we limit the collection, processing and access to your data to those partners and other third parties required to fulfill their professional duties. All our partners process your personal data exclusively in accordance with our instructions and are committed to observing relevant confidentiality terms.

The Fur Association will notify you and any competent authority of any breach of your data, when required by law to do so.

SUBJECT CONSENT AND WITHDRAWAL

By using our website and any of our services, you declare that you agree with this Privacy Policy. In cases where the legal basis for processing your data is your consent, you have the option to revoke it without retroactive effect by sending an email to This email address is being protected from spambots. You need JavaScript enabled to view it..

You can also change your preferences regarding Cookies through your browser settings if you wish to make a different choice regarding our ability to combine your personal data and create user profiles.

There is no option to unsubscribe from certain informational messages that are necessary for the execution of contracts and the operation of our website, including emails related to requests and inquiries you have submitted to us.