Disclosure and transfer of data

As a rule, we do not share or transfer data to third parties. In some cases, however, we are legally obliged to disclose your data for example, when we enforce a judgment or cooperate with other supervisory authorities in dealing with complaints or audits. We can also exchange information with other audit bodies in the exercise of our duties. In case a criminal offence is detected, all relevant information may be forwarded to the competent judicial and public prosecutor’s authorities.

In our capacity as Greece’s data protection supervisory authority, there are some cases in which we need to cooperate and assist other data protection supervisory authorities in the European Economic Area (EEA) in handling complaints and carrying out audits. This may lead to the exchange of personal information between the supervisory authorities involved, if they are related to the complaint or audit. In some cases of application of the consistency mechanism, the recipient of personal data may be the European Data Protection Board.

We do not share your personal data with third parties for the purposes of promoting products or services.

Your data may be communicated to the processors with which the Authority cooperates to support its systems. In particular, the Portal is hosted in the Governmental Computing Cloud (G-Cloud) of the Information Society S.A., which is managed by the General Secretariat of Information Systems for Public Administration of the Ministry of Digital Governance. When you use the services of this Portal and register as a user of the Authority’s electronic services, your data is stored on servers in Greece and not transferred abroad, and access to them may be provided to the staff of Modus S.A. to the extent necessary for the provision of technical support of the system. Finally, the Portal is managed by DOTSOFT S.A., whose staff can access the lists of recipients of the Authority’s e-Newsletter and press releases to the extent necessary for the provision of technical support services. The processors may not further process your personal data unless we have explicitly instructed them to do so, nor to transfer your personal data to third parties.

More about the terms of use of the Portal is available here.