INTRODUCTION
The website ierp.gr is owned by the Institute for Regulatory Policy Research (hereinafter INERP). INERP is a non-governmental organization operating within civil society, aiming to conduct qualitative and quantitative research on regulatory public policies. The findings of INERP's research are made available to state, semi-state, and private entities as well as civil society organizations interested in improving the quality of governance.
INERP recognizes and respects the importance of the privacy of visitors/users of its website. In this context, it has adopted a Privacy Policy, which is fully compliant with the applicable European regulatory framework for the Protection of Personal Data (General Data Protection Regulation – EU 679/2016) and the relevant national legislation. The purpose of this Privacy Policy is to inform visitors to the INERP website about the information collected during their navigation on it.
By navigating and using the INERP website, visitors/users acknowledge that they have read, understood, and — if they have selected the relevant checkbox — accepted the Institute’s Privacy Policy. In any case, ierp.gr reserves the right to change the terms of personal data protection, upon informing its visitors/users and within the existing legal framework. If a visitor or user of the INERP website does NOT agree with the personal data protection terms provided herein, they must NOT use the services of ierp.gr that require the submission of personal data (e.g., newsletter).
DATA CONTROLLER
The controller for the processing of personal data for the operation of this website is the Institute for Regulatory Policy Research, located at 166 Patision Street, Athens.
For any question or request related to the processing of personal data concerning you, you may contact us via e-mail at
COLLECTION AND USE OF PERSONAL DATA
ierp.gr collects personal data:
A. To contact you
INERP collects your information when you use the contact form posted on its website to send questions, comments, or suggestions. For this purpose, ierp.gr collects your full name, e-mail address, and any other information you may provide in the open field of the contact form.
B. To send a newsletter
ierp.gr processes your personal information when it sends you informative material regarding the actions, publications, and events of INERP. If you no longer wish to receive the INERP newsletter, you can unsubscribe from the recipient list at any time by selecting the appropriate field at the end of the newsletter. For sending such materials, ierp.gr only processes your email address.
C. To register you as a member of the Institute
INERP collects your information when you complete the relevant application posted on its website for the purpose of becoming a member of the Institute. For this purpose, ierp.gr processes your full name, father’s name, profession or capacity, telephone number, email address, and your home or professional address.
The personal data collected in the context of the operation of the ierp.gr website are strictly confidential. Access to this data is granted to the Chair of the Board of Directors and the website administrator of INERP, both of whom are bound by confidentiality. Additionally, we have adequate security systems and take all necessary measures to prevent any breach of the security of your personal data.
The data collected electronically and/or physically are processed solely for the purpose for which they were collected and are not used for any other reason. These data are retained for as long as required for the purpose described in this Privacy Policy. At the end of this retention period, your data will either be fully deleted or anonymized in a non-identifiable way, e.g., for statistical analysis. Specifically, regarding the email address you provided to receive the INERP newsletter, please note that it is retained for as long as the newsletter is being sent to you, and in any case, not more than one month after the dispatch is terminated.
It is noted that INERP bears no responsibility for the collection and processing of personal data by the social media platforms it uses. The relevant responsibility lies with those platforms, according to each platform's own privacy policy.
DATA DISCLOSURE/SHARING WITH THIRD PARTIES
INERP commits not to sell, rent, or otherwise publish and/or share the personal data of its visitors/users with third parties. It may transmit personal data of its visitors/users to third legal and/or natural persons only:
a. If it has their explicit consent
b. If required for compliance with legal obligations
c. If necessary for fulfilling the purposes and functions of the website, in compliance with the guarantees of the relevant legislation. Specifically, INERP may assign certain services and website functions (e.g., mass email distribution through a specialized electronic platform, technical problem resolution by IT experts) to individuals or legal entities. Only the personal data necessary for fulfilling the assigned services are transmitted to these persons. These entities are bound to INERP with respect to confidentiality and secure processing of any personal data they access.
YOUR RIGHTS REGARDING ACCESS AND MANAGEMENT OF YOUR PERSONAL DATA
The applicable legislation grants you the right to verify whether your personal data is being lawfully processed (“right of access”). You may exercise your rights of access, rectification, restriction, objection, or deletion (“right to be forgotten”) of your data at any time by sending an email to
NOTIFICATION OF PERSONAL DATA BREACH TO THE SUPERVISORY AUTHORITY AND TO THE DATA SUBJECT
In the event of a personal data breach, INERP shall notify the incident without delay and, if possible, within 72 hours from the time it becomes aware of it, to the Hellenic Data Protection Authority, unless the breach is unlikely to result in a risk to your rights and freedoms. If the breach is likely to pose a serious risk to the rights and freedoms of the affected individuals, INERP shall also notify the data subject without delay.
SUBMISSION OF COMPLAINT TO THE COMPETENT DATA PROTECTION AUTHORITY
If you believe your rights regarding personal data protection have been violated, you may contact INERP by sending an email to