privacy

Welcome and thank you very much for using our website! We attach great importance to the protection of the personal data of our visitors and users (hereinafter collectively referred to as the "person concerned"). We would therefore like to inform you here about the type and scope of the collection, processing and use of personal data in connection with the use of our website and the associated functions, activities and contents as well as our external pages in social networks (hereinafter comprehensively referred to as the "Offer").

The responsible body for data processing on this website is:

educommart
Meeting Point for Creative Education
Non-Profit Civil Partnership

Address
Grigoriou Kidonion 108
12241 Egaleo 

Contact
phone: +30 / 69 8070 8436
This email address is being protected from spambots. You need JavaScript enabled to view it.

Represented by
Kalliopi Angeli | General Manager of educommart

Incorporation
Commercial Register: G.E.M.I (General Commercial Registry)
Registration Number: 849912

The contact data published within the framework of the imprint obligation may not be used by third parties to send unsolicited information material and advertising. We reserve the right to take legal action if unsolicited advertising information (such as spam mails) is sent.

Since we are not obliged to appoint a company data protection officer pursuant to Art. 37 DSGVO, we do not have a specific person for data protection whose contact data could be published here. Nevertheless, we fulfil all obligations in connection with data processing with the utmost professional care.

Legal basis of the processing

If the legal basis is not mentioned in the privacy statement, the following applies:

  • The legal basis for obtaining consents for a specific purpose of processing is Art. 6 Para. 1 B. a DSGVO and Art. 7 DSGVO
  • The following applies to the processing for the provision of our services and the implementation of contractual measures as well as the processing of enquiries Art. 6 Para. 1 B. b DSGVO as legal basis
  • The legal basis for the processing for the fulfilment of our legal obligations, which make the processing of personal data necessary, such as the fulfilment of tax obligations, is as follows Art. 6 Para. 1 B. c DSGVO
  • Where vital interests of the data subject or of another natural person require the processing of personal data, the following shall apply Art. 6 Para. 1 B. d DSGVO as legal basis
  • Processing to safeguard our legitimate interests, provided that the interests, fundamental rights and fundamental freedoms of the data subject do not prevail, is regulated on the basis of Art. 6 Para. 1 B. f DSGVO Processing operations of this kind are permitted, in particular, as they have been specifically mentioned by the European legislator. In this respect, the European legislator took the view that a legitimate interest could be assumed if the data subject is a customer of the data processor (recital Art. 47 Para. 2 DSGVO)

Purpose of processing

  • Provision of the online offer, its functions and contents
  • Answering contact requests and communicating with affected persons
  • For the implementation of safety measures for affected persons: Protection against misuse, spam
  • Reach measurement and marketing

Safety precautions

We have implemented numerous technical and organizational measures to ensure that the processed personal data of data subjects are protected as completely as possible.

The measures are taken taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the different probability of occurrence and severity of the risk to the rights and freedoms of natural persons, in accordance with Art. 32 DSGVO.

All persons who have access to personal data under our supervision are informed about the correct handling of data and instructed on the basis of the internal documentation on the protection of personal data; they process personal information on the basis of the DSGVO. We regularly monitor data protection legislation and adjust our security measures accordingly. Your personal data is processed on PCs and notebooks which are password protected and located in lockable rooms, access by third parties to these areas is restricted. All computers and laptops are only operated with legal and approved software that offers protection against viruses, spyware and hacker attacks. All pages and apps on which personal data is stored are password protected and encrypted. Documents in printed form are destroyed by a document shredder, electronic documents and data are permanently and irrevocably removed from the hard disk of the server computer.

In order to be able to offer our online service without restriction and on the basis of our legitimate interests in an efficient and secure provision of this online service in accordance with Art. 6 Para. 1 B. f DSGVO in conjunction with Art. 28 DSGVO 

(conclusion of an order processing contract), we use cloud hosting from an external provider. A contract has been concluded with this provider. Before the contract was concluded, the reputation, specialisation and location of the provider, reliability, potential conflicts of interest, risk of misuse of stored information, exact localisation of servers, physical and electronic security of servers and computer centre were checked.

We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can always be subject to security gaps, which is why complete protection of data against access by third parties cannot always be guaranteed.

Our security measures are continuously improved in line with technological developments.

Rights of the person concerned

According to DSGVO the following rights apply to users of our online offer. If a person concerned wishes to make use of the rights listed below, he or she can contact us at any time using the contact options listed in the imprint.

Right of confirmation

Pursuant to Art. 15 DSGVO, every data subject has the right to request confirmation from us as to whether personal data relating to him or her will be processed.

Right of information

Pursuant to Art. 15 DSGVO , every person affected by the processing of personal data has the right at any time to receive from us free information about the personal data stored about him and a copy of this information. The following information is granted to the person concerned:

  • the processing purposes;
  • the categories of personal data processed;
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
  • if possible, the envisaged duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
  • the existence of a right to the rectification or erasure of personal data relating to him or her or to the limitation of the processing carried out by the controller or of a right to object to such processing;
  • the existence of a right of appeal to a supervisory authority;
  • where the personal data are not collected from the data subject, any available information as to the source of the data;
  • the existence of automated decision making including profiling in accordance with Art. 22 Para. 1 DSGVO und Art. 22 Para. 4 DSGVO 
  • and at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

Furthermore, the data subject has a right of access to information on whether personal data have been transferred to a third country or to an international organisation. Where this is the case, the data subject shall also have the right to obtain information on the appropriate safeguards relating to the transfer.

Right of rectification

According to Art. 16 DSGVO, every person concerned has the right to demand the correction of incorrect or incomplete personal data stored by us without delay. Furthermore, the data subject has the right to demand the completion of incomplete personal data - also by means of a supplementary declaration - taking into account the purposes of the processing.

Right to cancellation ("right to be forgotten")

According to Art. 17 DSGVO, every person concerned has the right to demand the deletion of his/her personal data stored by us. And we are obliged to delete personal data immediately if one of the following reasons applies:

  • to request the deletion of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
  • the data subject revokes the consent on which the processing was based pursuant to Art. 6 Para. 1 B. a or Art. 9 Para. 2 B. a DSGVO and there is no other legal basis for the processing;
  • the data subject objects to the processing pursuant to Art. 21 Para. 1 DSGVO and there are no overriding legitimate reasons for the processing or the data subject objects to the processing pursuant to Art. 21 Para. 2 DSGVO
  • the personal data have been processed unlawfully;
  • the deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we, as the controller, are subject;
  • the personal data were collected in relation to services offered by the information society pursuant to Art. 8 Para. 1 DSGVO.

If the personal data have been made public by us and if our company is obliged to delete the personal data as the person responsible pursuant to Art. 17 Para. 1 DSGVO, the company shall take appropriate measures, also of a technical nature, taking into account the available technology and the implementation costs, to inform other persons responsible for data processing who process the published personal data that the data subject has requested the deletion of all links to this personal data or of copies or replications of this personal data from these other persons responsible for data processing, insofar as the processing is not required. We will take the necessary steps in individual cases.

Right to limitation of processing

Pursuant to Art. 18 DSGVO, every person concerned must demand that the processing of your personal data be restricted if one of the following conditions is met:

  • the accuracy of the personal data is contested by the data subject for a period of time which allows the data controller to verify the accuracy of the personal data,
  • the processing is unlawful and the data subject refuses to erase the personal data and instead requests the restriction of the use of the personal data;
  • the controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the assertion, exercise or defence of legal rights, or
  • the data subject has lodged an objection to the processing pursuant to Art. 21 Para. 1 DSGVO, as long as it has not yet been established whether the legitimate reasons of the data controller outweigh those of the data subject.

If one of the above conditions is met and a data subject wishes to request the restriction of personal data stored by us, he or she can contact us at any time.

Right of data transferability

Pursuant to Art. 20 DSGVO, every person concerned has the right to receive the personal data concerning him which he has provided to us in a structured, common and machine-readable format. In addition, it has the right to transfer this data to another data controller without being hindered by the data controller to whom the personal data was provided, provided that the processing is based on an agreement pursuant to Art 6 Para. 1 B. a DSGVO or Art. 9 Para. 2 B. a DSGVO or on a contract pursuant to Art. 6 Para. 1 B. b DSGVO and the processing is carried out using automated procedures.

Furthermore, in exercising his or her right to data transferability pursuant to Art. 20 Para. 1 DSGVO, the data subject shall have the right to obtain that the personal data be transferred directly from one data controller to another data controller to the extent that this is technically feasible and provided that the rights and freedoms of other persons are not affected thereby.

Automated decisions in individual cases including profiling

Pursuant to Art. 22 DSGVO, every person concerned has the right not to be subject to a decision based exclusively on automated processing - including profiling - which has legal effect on him or her or significantly impairs him or her in a similar manner. This does not apply if the decision

  • is necessary for the conclusion or performance of a contract between the person concerned and us as the responsible party,
  • is permitted by the laws of the Union or of the Member States to which we are subject as the data controller, and those laws contain adequate measures to safeguard the rights and freedoms and the legitimate interests of the data subject, or
  • with the express consent of the data subject.

These decisions may not be based on special categories of personal data pursuant to Art. 9 Para. 1 DSGVO, unless Art. 9 Para. 2 B. a DSGVO or Art. 9 Para. 2 B. g DSGVO applies and appropriate measures have been taken to protect the rights and freedoms as well as the legitimate interests of the data subject.

If the decision is necessary for the conclusion or performance of a contract between the data subject and us as the responsible party or if it is made with the express consent of the data subject, we shall take appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject, including at least the right to obtain the intervention of a person on the part of the responsible party, to present our own position and to challenge the decision.

Right to revoke consent under data protection law

Every person concerned has the right to revoke at any time any consent granted pursuant to Art. 7 Para. 3 DSGVO for the processing of personal data.

Right of appeal to the competent supervisory authority

Pursuant to Art. 77 DSGVO, without prejudice to any other administrative or judicial remedy, any person concerned has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his habitual residence, place of work or place of presumed infringement, if that person considers that the processing of his personal data is in breach of this Regulation. A list of Data Protection Officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/ Anschriften_Links/anschriften_links-node.html.

Right of objection

Pursuant to Art. 21 DSGVO, every person concerned has the right to object at any time to the processing of his/her personal data on the basis of  Art. 6 Para. 1 B. e DSGVO or Art. 6 Para. 1 B. f DSGVO for reasons arising from his/her particular situation. This also applies to profiling based on these provisions.

In the event of an objection, we will no longer process the personal data unless we can prove compelling reasons for the processing worthy of protection which outweigh the interests, rights and freedoms of the person concerned, or the processing serves to assert, exercise or defend legal claims.

In addition, the data subject has the right to object to the processing of personal data relating to him/her by us for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Para. 1 DSGVO for reasons arising from his/her particular situation, unless such processing is necessary for the performance of a task in the public interest.

The data subject is also free to exercise his or her right of objection in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

Personal data

When you visit the website http://pssst.eu, no personal data of yours will be stored.

Collection of access data

When you visit our website and each time you access it, our web server collects protocol information based on our legitimate interests under Art. 6 Para. 1 B. f DSGVO. This information contains: Name of the website and file, date and time of access, amount of data transferred, web browser and its version, operating system used, domain of the Internet provider, URL of the page from which the person concerned came to our site and the corresponding IP address.

These are not personal data. It is not possible for us to assign the collected data to a specific natural person.

All these data are evaluated by us exclusively for statistical purposes and for the recognition of faulty links and program errors as well as for the optimization of the offer. They will not be passed on to third parties. We do not link this data with other data. The data will also be anonymized or deleted regularly within one week after a statistical evaluation.

Cookies

Cookies are small files that the visited website places in a user's computer via the browser in order to provide the server with information about the user at a later time.

This website uses one type of cookies:

Temporary cookies: so called "session cookies" are used to facilitate navigation on the website. These cookies store a randomly generated unique identification number, a so-called session ID, and expire automatically at the end of the session or after closing your browser.

Session cookies store user settings, such as language selection, speech recognition settings and user IDs, to simplify the use of the website.

The use of cookies can be deactivated in the settings of the Internet browser either specifically for this website or also generally for all websites. Information about this can be found on the websites of the respective Internet browsers. When cookies are deactivated, however, some functions, such as automatic login to the website, can no longer be used as intended.

Online presences in social media

We maintain online presences within social networks and platforms in order to be able to communicate with the people, interested parties and users active there and to inform them about our activities. When calling up the respective networks and platforms, the terms and conditions and data processing guidelines of the respective operators apply.

Unless otherwise stated in our data protection declaration, we process the data of the person concerned who communicates with us within the social networks and platforms, e.g. write articles on our online presences or send us messages.

Contact

If you contact us (e.g. via contact form, post, e-mail, telephone or via social media), the data of the person concerned will be processed to process your request. The data provided by the person concerned can be stored in a CRM system (Customer Relationship Management System) or in comparable organisational systems for enquiries. The processing of the data entered is therefore based exclusively on the consent of the data subject (Art. 6 Para. 1 B. a DSGVO). This data will not be passed on without the consent of the person concerned.

Data that are entered during the establishment of contact remain with us until the person concerned requests deletion, withdraws his consent to storage or the purpose for storage no longer applies (e.g. after the person concerned has finally processed his request). Mandatory legal provisions - in particular retention periods - remain unaffected.

Deletion of data and duration of storage

Unless otherwise stated in our Privacy Policy, we will store personal information until it is no longer needed to provide our services and products, or until the account of the registered person is deleted, whichever occurs first. This is a case-by-case determination and depends on such things as the nature of the data, why it is collected and processed, relevant legal retention periods or operational storage needs.

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done within the framework of the use of third party services or the disclosure or transfer of data to third parties, this will only occur if it is necessary to fulfil our (pre)contractual obligations pursuant to Art. 6 Para. 1 B. b DSGVO, on the basis of your consent pursuant to Art. 6 Para. 1 B. a DSGVO, on the basis of a legal obligation or on the basis of our legitimate interests pursuant to Art. 6 Para. 1 B. f. DSGVO happens. Subject to legal or contractual permissions, we process or allow the data to be processed in a third country only if the special requirements of Art. 44 ff. DSGVO of the German Data Protection Act are met. DSGVO. This means that the processing takes place, for example, on the basis of official agreements which guarantee that the European level of data protection is observed (e.g. for the USA through the Privacy Shield) or by observing officially recognised special contractual obligations (so-called "standard contractual clauses").

If we entrust third parties with the processing of data on the basis of a so-called "processing contract", this is done on the basis of Art. 28 DSGVO.

Use of Youtube

On the basis of our legitimate interests in accordance with  Art. 6 Para. 1 B. f DSGVO, we can integrate the videos of the "YouTube" platform of the provider YouTube LLC (01 Cherry Ave., San Bruno, CA 94066, USA). YouTube LLC is a subsidiary of Google Inc. (1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA).

Google is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection law.

This website integrates components Internet video portal YouTube. YouTube and Google receive information through the YouTube component that the data subject has visited our website whenever the data subject is simultaneously logged on to YouTube at the time of visiting our website, regardless of whether or not the data subject clicks on a YouTube video. This technical process allows YouTube and Google to know which specific subpage of our website is visited by the person concerned. This information is collected by YouTube and Google and assigned to the respective YouTube account of the person concerned.

If the data subject does not wish this information to be transferred to YouTube and Google, he or she can prevent the transfer by logging out of his or her YouTube account before accessing our website.

Further information on the use of data by Google, setting and objection options, can be found in the Google privacy policy (https://policies.google.com/ technologies/ads) and in the settings for the display of advertising by Google (https://adssettings.google.com/ authenticated).

Google's current data protection regulations can be found at https://policies.google.com/privacy.

Additional settings can also be made on the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

The privacy policy published by YouTube, which can be found at https://www.google.de/intl/de/ policies/privacy/, provides information about the collection, processing and use of personal data by YouTube and Google.

Existence of an automated decision making process

As a responsible company, we refrain from automatic decision-making or profiling. "Profiling" means any automated processing of personal data used to evaluate, analyse or predict personal aspects relating to a natural person. These personal aspects may relate to the individual's work performance, economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or relocation.

Links to websites of other providers

Our web pages may contain links to web pages of other providers as well as references to services and products of third parties. The websites of these providers have their own privacy policies and this privacy statement does not apply to the services of these providers. If the collection, processing or use of personal data is associated with the use of the Internet pages of other providers, the data protection information of the respective providers should be observed. We assume no legal responsibility and liability for the content and activities of third party websites.

Updating and amendment of this data protection declaration

Due to the further development of our website and offers about it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. The current data protection declaration can be called up and printed out at any time on the website at https://www.facesofhistory.eu/en/ privacy.html.