PERSONAL DATA PROCESSING POLICY OF THE "GREEN CITY" SERVICE

This Privacy Policy ("Privacy Policy") is published on the website www.thegreencity.gr (the "Website") on the date indicated herein.

Southstar, and ESDNA, respect your personal data ("you" or the "User") and fully comply with the General Data Protection Regulation (EU 2016/679, "GDPR"), with Law 4624/2019, as well as with all provisions of the Personal Data Protection Law, and take the technical and organizational measures foreseen and available as provided therein.

The purpose of the Privacy Policy is to inform you about the processing of your Personal Data by Southstar.

The terms of this Privacy Policy may be changed at any time, with the Users' latest notification.

1. Definitions

The following terms have the corresponding meanings in the Privacy Policy:

(a) The term "Southstar" means the company named SOUTHSTAR S.A., located at 23 Kallirois Street, Athens.

(b) The term "ESDNA" means the Unified Intergraded Association of the Prefecture of Attica.

(c) "Personal Data" means personal data as referred to in Article 4(1) GDPR. Personal Data shall in no case include special categories of data, in accordance with Article 9 GDPR.

(d) "Data Subjects" means natural persons as defined in Article 4(1) GDPR. In any case, the Privacy Policy is addressed to adults, and Southstar does not process Personal Data of minors.

(e) "Data Protection Authority" means the Personal Data Protection Authority, Kifissia 1-3, www.dpa.gr

Otherwise, (a) the definitions of the Terms of Use of the "Green City" Service, as published on the Website, and (b) the definitions of article 4 of the GDPR apply.

2. Controller and Processor - Ways of communication

ESDNA is a "controller" in accordance with Article 4(7) GDPR for all the processing of Personal Data in this Privacy Policy.

Southstar is a "processor" in accordance with Article 4(8) GDPR for all the Personal Data processing of this Privacy Policy.

Southstar's contact details, in case you wish to exercise your rights under the Data Protection Law in relation to this Privacy Policy or for any comments, remarks or questions, are as follows:

Address: 23 KALIRROIS 23 ATHENS, GREECE, ZIP CODE 11743
Phone: 2106424100
e-mail: info@southstar.gr

Southstar, as the processor, complies with the provisions of the Data Protection Law that apply to it. In any case, it undertakes to forward any request, comment or observation you may make to ESDNA, as controller.

3. Purposes and legal bases of processing

1. Southstar processes your Personal Data solely in the context of the operation of the Application and for the purposes of providing the Service.

2. The legal basis for the processing of your Personal Data by Southstar is consent.

3. In any case, Southstar, as processor, has entered into a contract with the controller, in accordance with the provisions of Article 28 GDPR.

4. Duration of processing

The duration of the processing of your Personal Data by Southstar is the duration of our contract with the data controller.

Exclusively for the defense of any rights, Southstar may retain your Personal Data until the point in time when the respective limitation period expires, up to a maximum of twenty (20) years.

5. Recipients

Southstar does not generally disclose or transfer Personal Data to third parties. The recipient of your Personal Data is ESDNA, as the controller.

However, Southstar may outsource to third parties, sub-processors, the processing of your Personal Data in order to better operate the Application and provide the Service. Such outsourcing is always done in compliance with the requirements of the Personal Data Protection Law, in particular in accordance with the terms of the contract between Southstar and ESDNA. The sub-processors may not further process your Personal Data nor are they allowed to transfer your Personal Data to third parties.

Southstar may also transfer Users' Personal Data in cases expressly provided for in applicable legislation, such as, but not limited to, where the disclosure of personal data must be made to a competent public authority in order to comply with a legal obligation.

6. Transfers outside the EU

Southstar does not transfer Personal Data outside the EU. Especially in the case of internet social media (Facebook, Twitter, YouTube, Flickr) Southstar applies the provisions of the Data Protection Law and the decisions of the competent national and European institutions, as applicable.

7. Safety measures

Southstar implements appropriate technical, material and organizational security measures in order to protect Users' Personal Data against accidental or unlawful destruction or accidental loss, alteration, unlawful disclosure or access (including remote access) and against all other forms of unlawful processing (including unnecessary collection or further processing). These measures shall ensure a level of security appropriate to the risk, taking into account the evolution of technology, the cost of implementation and the nature, scope, context and purposes of the processing.

8. Your rights

Any natural person, in particular Users, may submit a request to Southstar for access, rectification or erasure of their Personal Data or for restriction of processing or for the exercise of one of the data subject's rights of opposition or portability.

In particular, each User may at any time withdraw the consent of Article 3 of this Privacy Policy. The revocation is valid for the future.

Also, any User may make a modification to the means and manner or content of Southstar's communication with him/her either through the Application or through the Website.

Each request shall be submitted exclusively and only by one of the above mentioned communication methods of Article 2 of this Privacy Policy.

The satisfaction of any request regarding the processing of your Personal Data will be done in accordance with the applicable legislation.

9. cookies

- Southstar uses cookies, in accordance with standard internet practices, to facilitate and improve Users' access to and browsing of the Site, to obtain certain information about the Site, and to serve personalized advertisements.

- Cookies, pixel tags and similar technologies (collectively called "cookies") are files containing small amounts of information that are downloaded to any Internet-enabled device - such as your computer, smartphone or tablet - when you visit a website. The cookies are then sent back to the website from which they originated on each subsequent visit or to another website that recognizes that cookie. Cookies do many different and useful things, such as remembering your preferences, generally improving your online experience and helping us to provide you with the best products and services. Some cookies are strictly necessary for the proper functioning of the Internet and do not require user consent, such as those that ensure that the content of a page loads quickly and efficiently by spreading the workload across multiple computers or on computers that provide security. Other cookies are still reasonably necessary or important, but are not strictly necessary and therefore require the user's consent.

- The Website uses the following types of Cookies, as listed in the table below:

Α.     Necessary Cookies

These Cookies are necessary for the proper functioning of the Website and cannot be disabled. You can set your browser to block or warn you about these Cookies, but some parts of the Website will not work afterwards. These cookies do not store Personal Data. The Necessary Cookies that we may use on our Website are as follows:

B. Performance Cookies (Analytics)

Performance Cookies collect information about the use of a specific website and allow us to improve the way it works. The Performance Cookies that may be used on the Website are the following:

10. Data Protection Authority

The competent authority for any comments you may have on this Privacy Policy is the Data Protection Authority.