PRIVACY POLICY

TEDxPatras Privacy Policy

Effective Date: 20/10/2023

1. Introduction

At TEDxPatras (Patras, Greece), we deeply value your privacy and strive to protect your personal data. The purpose of our Privacy Policy is to provide transparency around what information we collect, how and why we collect it, how we use, store and secure it and with whom we share it. As a user of our services and visitor of our website, you are the Data Subject, and we are the Controllers of your data.

By accessing or using our website (https://tedxpatras.com/) or dealing with the functionalities offered through it, you agree to the terms of this Privacy Policy.

2. What information we collect

We collect two types of information:

1. a) Personal information provided directly by you when you submit your data through a form for a specific request or purpose.
2. b) Data collected through cookies and similar technologies that help us understand and improve your experience on our website and to provide you with personalized content.
   
   • Personal information provided directly by you

We may collect information that can identify you, directly or indirectly, when you use the functionalities of our website, register for conferences, submit forms, and interact with our social media accounts. According to the General Data Protection Regulation (“GDPR”), some of this collected information is considered personal data as it can lead to your identification.

Specifically:

• Registration Details for Attendees: Should you sign up to attend an event, we require some basic details to identify you such as your name, address, email, phone number, and affiliation.
• Volunteer Registration Details: Should you apply to volunteer at an event, we require some basic details to identify you such as your name, address, email, phone number and date of birth. Furthermore, to get to know you better, we may ask for further details, more specifically for your education level, prior work experience, prior voluntary work, skills, your social media account and your CV. Submission of any of these further details is voluntary and is not required for your application to volunteer.
• Responses to Conference Surveys: You may be invited to complete surveys about your event experience to help us enhance future events and for related commercial reasons.

Please note that all ticket purchases are conducted through our external partner more.com. Thus, we do not collect nor process any data related to your payments such as credit card number.

• Data collected through cookies and similar technologies

Like most websites, we use cookies and various technologies, such as Google Analytics, to manage www.tedxpatras.com and track the usage of the content we provide. Such information may include information about the computer, mobile device, or other devices you use to access our website, your IP address, date and time of access, geolocation information, unique device identifiers, browser type, browser language, and other automatically collected preferences.

We also collect information on your site activity when you favorite, save or watch TEDxPatras talks.

In order to collect and process data through cookies we require your explicit consent. You have the right to withdraw the consent you have given us at any time, without affecting the legality of the processing carried out based on your consent prior to its withdrawal.

For further information on the specific cookies our website uses, please see our Cookie Policy.

3. How and why we use your information

4. How we store information and for how long

The information you directly provide to us is stored in our secure databases. We take the appropriate technical and operational measures to ensure that your personal information disclosed to us is kept secure and protected.

We will only retain your information for as long as is necessary for the purposes described in this Privacy Policy. This means that the retention periods will vary according to the type of information and the reason that we have collected the information in the first place.

When the processing is necessary for compliance with legal obligations under the applicable legal framework, your personal data will be stored for as long as required by the relevant provisions. The statute of limitations in accordance with the applicable legislation is 20 years.

Any information that has been collected through the use of Cookies and other similar technologies shall be retained solely for the period specified in our Cookie Policy.

5. How we secure the information

We take the appropriate technical and organizational measures to ensure the protection of the personal data we collect and process. We also ensure, through the above measures that access to personal data is not given to anyone other than the appropriate authorized persons, and only for the purposes of processing, specified in this policy.

We recognize the importance of the security of your personal data and take all necessary measures, with the most modern and advanced methods, to ensure your maximum security. All information related to your personal information is secure and confidential. To ensure the confidentiality of data transfer, we use proper encryption protocols. Our website uses the SSL protocol (Secure Sockets Layer), which applies encryption methods to data exchanged between two devices, ensuring a safe connection between them through the Internet and as a result, it protects any personal and sensitive data.

6. With whom we share the information

Site Visitor Information may be accessed by third parties pursuant to the Purposes herein described. Any such transfer is subject to the provisions established in this Privacy Policy and the purposes herein determined.

In particular, Site Visitor Information may be accessed by the following categories of recipients:

Our team

Your data may be transferred to members of our organization who are in charge of assessing your requests and communicating with you. All of our members have a sufficient and significant level of awareness to protect your personal data and are bound by a confidentiality clause.

Authorities

We may share your personal data with the competent authorities, as long as this is permitted by law, in order to comply with a legal obligation, court order or other legal process as well as to identify or prevent criminal acts and other unlawful activities.

External partners

We may transfer information to external partners for the purpose of providing our services (e.g for organizing our events). We always ensure that any processors we engage with fulfill the requirements and provide sufficient guarantees to implement appropriate technical and organizational measures in such a manner that processing will ensure the protection of your rights.

Furthermore, in the course of managing court proceedings and for the purposes of investigating, preventing, or taking action regarding illegal activities, suspected fraud, violations of our policies we may transfer your data to external partners in the event that their assistance is considered necessary for the management of the case and the defense of our rights.

7. Your rights

The GDPR awards to Data Subjects the following rights, which you may exercise by contacting us.

Right to withdraw consent: You may withdraw your consent of processing your personal data at any time.

Right of correction: You may ask us to correct your personal data.

Right of limitation: You may ask us to restrict the processing of your personal data if:

• You question the accuracy of your personal data for the time it will take to verify the accuracy of the personal data;
• Processing is illegal and you request the restriction of processing instead of the deletion of your personal data;
• We no longer need your personal data, but you need it to support, exercise or defend legal claims.

Right of access: You may request from us information about the personal data of yours that we retain, including information about the categories of such personal data, the purpose of their use, where it was collected from, to whom they have been made known. You can obtain from us free of charge a copy of the personal data we keep for you. We reserve the right to charge a reasonable fee for any further copy you may request.

Right of data portability: At your request, we will transfer your data to another controller, where technically feasible, provided that the processing is based on your consent or is necessary for the performance of a contract. Instead of receiving a copy of your personal data, you may ask us to transfer the data to another controller.

Right to delete: You may ask us to delete your personal data if:

• they are no longer necessary in relation to the purposes for which they were collected or processed,
• you wish to exercise your right to object to any further processing of your personal data,
• you withdraw your consent and there is no other legal basis for processing, your personal data has been unlawfully processed unless the processing is necessary (a) to comply with a legal obligation, which requires processing by us or (b) to support, pursue or defend legal claims.

Right to object: You may object – at any time – to the processing of your personal data due to your particular situation, provided that the processing is not based on your consent but on our legitimate interest or on legitimate interests of third parties. In such case, we shall no more process your personal data unless we can prove that such use is justified by a legal reason and a legal right of ours superseding your right to object. If you object to us processing your data you are kindly requested to clarify whether you wish that such data is deleted or limited.

Right to lodge a complaint: In the event of an alleged breach of applicable privacy law, you may lodge a complaint with the competent data protection supervisory authority. You may contact the Greek Supervisory authority through the following website (dpa.gr).

Limitation of access: In some cases, we may not be able to provide access to all or some of your personal data under legislation. If we refuse your request for access, we will inform you of the reason for this refusal. Also, in some cases we may not be able to search for your personal data because the information you provide is inadequate. In such cases, where we cannot identify you as a data subject, we are unable to comply with your request to enforce your legal rights as described in this article, unless you provide us with additional information that allows you to be identified.

8. Governing Law

This Privacy Policy is subject to Greek law, the General Regulation on the Protection of Personal Data 2016/679/EU, and in general the applicable national and European legislative and regulatory framework for the protection of personal data.

9. Updates

This Privacy Policy is current as of the Effective Date set forth above.

We may update this policy from time to time in order to reflect changes to the functionalities or services provided by our website or for other legal and regulatory reasons. Please check the website regularly for any changes to this Policy.

10. Contact Us

If you have questions about the privacy aspects of our website, please contact us at info@tedxpatras.com.