Privacy Policy

Last updated: January 2025

Protecting your personal data is a priority for the Creative Activity Center for People with Disabilities «ΔιαΔράσεις» (DiaDraseis). This Privacy Policy explains what data we collect, why we process it and how we protect it, in accordance with the General Data Protection Regulation (GDPR 2016/679) and Greek law.

Who we are

The controller of your personal data is ΔιαΔράσεις – ΚΔΑΠ ΑμεΑ (DiaDraseis – Creative Activity Center for People with Disabilities), based in Argyroupoli, Attica. For any matter relating to your personal data, you can contact us at info@diadraseis.com.

What data we collect

Depending on how you get in touch with us, we may collect the following categories of data:

Identification and contact data

Full name of the parent or guardian and of the participant
Home address
Contact telephone number
Email address

Sensitive personal data

In order to provide specialized services to the participants of the Creative Activity Center, we may collect — always with your explicit consent — data relating to:

Health status and disability
Medical opinions and diagnoses
Specific needs and accommodations

Data concerning minors

DiaDraseis Creative Activity Center serves children and young people. We collect data concerning minors exclusively with the written consent of the parent or guardian, in accordance with Article 8 of the GDPR and Greek law.

Photographs and video

During our activities, we may record photographic or audiovisual material. Such material is captured, stored and published only if you have given specific written consent.

Browsing data

When you visit diadraseis.com, we automatically collect certain technical data through cookies, such as your IP address, browser type and the pages you visited.

Why we process your data

We use your personal data for the following purposes:

Service provision: Registration and attendance of participants at the Creative Activity Center
Communication: Answering questions and providing updates about our activities
Program personalization: Adapting activities to the needs of each participant
Legal obligations: Compliance with the requirements of public authorities and funding bodies
Website improvement: Traffic analysis in order to improve the browsing experience

Legal basis for processing

The processing of your data is based on one or more of the following legal bases:

Consent: You have given your explicit consent (in particular for sensitive data and photographs)
Performance of a contract: Processing is necessary in order to provide our services
Legal obligation: We are required to comply with legal requirements
Legitimate interest: To improve our services and the security of our website

Cookie Policy

The site diadraseis.com uses cookies so that the website runs smoothly and to improve your experience. Specifically, we use:

Essential cookies

These ensure the basic functionality of the website. Without them, browsing is not possible.

Analytics cookies

These help us understand how you use our website so that we can keep improving it. The data is anonymized.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect how the website works.

Sharing data

We do not sell, rent or trade your personal data with third parties for commercial purposes. We may share data only:

With public authorities and funding bodies, where required by law
With health professionals we work with, with your consent
With technical service providers (for example website hosting), under strict confidentiality terms

Data security

We take appropriate technical and organizational measures to protect your data from unauthorized access, loss or destruction. Specifically:

SSL encryption on all pages of the website
Access to the data limited to authorized staff only
Regular backups
Secure storage of physical files

Retention period

We keep your personal data for as long as is necessary to fulfill the purposes for which it was collected. Specifically:

Participant data: For as long as attendance lasts and for five (5) years after it ends
Contact data: For two (2) years from the last contact
Photographs/video: Until you withdraw your consent

Once these periods have passed, the data is securely deleted or anonymized.

Your rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access: To be informed which of your data we hold
Right to rectification: To request the correction of inaccurate data
Right to erasure: To request the deletion of your data (the “right to be forgotten”)
Right to restriction: To request that processing be restricted
Right to portability: To receive your data in a structured format
Right to object: To object to processing for specific purposes
Right to withdraw consent: To withdraw your consent at any time

To exercise any of the above rights, contact us at info@diadraseis.com. We will respond within thirty (30) days.

In addition, you have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

Frequently Asked Questions

How can I withdraw my consent for photographs?

Send an email to info@diadraseis.com stating that you wish to withdraw it. We will remove the relevant material within ten (10) business days.

Is my child’s health data safe?

Absolutely. Sensitive health data is kept with enhanced security measures and is accessible only to authorized staff.

Do you share my details with third parties?

Not for commercial purposes. We share data only where required by law or with your explicit consent.

How long do you keep my data?

Participant data is kept for five (5) years after attendance ends. Contact data is kept for two (2) years.

Changes to this policy

We reserve the right to amend this Privacy Policy at any time. Any change will be published on this page with an updated date. We recommend that you check this page periodically.

Contact

For any question or request regarding your personal data, contact us:

DiaDraseis Creative Activity Center
Argyroupoli, Attica
Email: info@diadraseis.com