Data subjects, that are passengers, have the right of access, rectification, erasure and restriction of processing and rights to compensation and judicial redress, for any infringement of the provisions on the protection of personal data (see Article 15 of L.4579/2018).
These rights are exercised before the controller, namely the Passenger Information Unit of the Information Management and Analysis Division, Ministry of Citizen Protection.
The Hellenic Data Protection Authority (HDPA) is designated as the competent supervisory authority under Article 17 of L. 4579/2018, before which data subjects may bring an action in case their rights are not satisfied by the controller.
The contact details of the HDPA are as follows:
Hellenic Data Protection Authority
Kifissias 1-3, GR- 115 23, Athens, tel: 210-6475600, email: firstname.lastname@example.org, www.dpa.gr