Personal Data Protection Policy — Eventive
Regulatory Framework & Compliance
• Applicable Legislation: This Policy is fully aligned with the General Data Protection Regulation (GDPR - Regulation EU 2016/679), the supplementary Greek Law 4624/2019, Law 3471/2006 (protection of personal data in electronic communications), and Law 3917/2011.
• Binding Agreement: Browsing the Website or registering for Eventive’s events constitutes full and unconditional acceptance of these terms. This policy forms a unified legal agreement alongside our Terms of Use.Categories of Data Collected
• Identity & Profile Data: Full name, professional capacity, event attendance history, or project assignments.
• Communication Data: Mandatory information (email address, telephone number) to deliver our services, and optional information (Opt-in) to receive newsletters and promotional material.
• Financial & Billing Data: Tax Identification Number (TIN), tax office details, billing address, and encrypted/tokenized payment data required to execute transactions.
• Electronic Identification Data: IP addresses, MAC addresses, operating systems, browser types (web log files), and technical data collected through Cookies.Legal Bases for Processing (GDPR Art. 6)
Eventive processes your personal data strictly under the following lawful bases:Contractual Necessity: To perform principal or subordinate obligations arising from a contract or pre-contractual relationship (e.g., event registration, customer updates).
Explicit Consent: For the deployment of non-essential cookies, newsletter distribution, and targeted advertising (marketing). Consent can be revoked in writing at any time.
Legitimate Interests: To ensure smooth website operation, perform traffic analysis, and prevent cybercrime or fraud (provided these interests do not override your fundamental rights).
Legal Obligation: To transfer data when strictly required by judicial, tax, law enforcement, or supervisory authorities.
Data Subject Rights
Eventive guarantees the necessary infrastructure for users to fully exercise their 8 rights under the GDPR:
• Right to Information & Access: To know what data is retained and the specific terms of its processing.
• Right to Rectification & Erasure ("Right to be Forgotten"): To immediately update inaccurate data or request deletion (provided the data is not legally bound by tax retention laws or other binding contracts).
• Right to Data Portability: To receive retained data in a structured, commonly used, and machine-readable format, or request its direct transmission to another controller.
• Right to Restriction & Objection: To restrict processing or object to data use at any time, particularly for direct marketing and profiling purposes.
• Automated Individual Decision-Making: The right to object to decisions based solely on automated profiling that produces legal or significant effects.Data Security, Retention & Third-Party Transfers
• Security Measures: Strict application of Privacy by Design and Privacy by Default principles. We utilize firewalls, intrusion detection systems, tokenization, pseudonymization, and encryption.
• Retention Period: Data is kept only for the duration required by the contract terms or applicable law. (Note: Greek tax legislation requires billing and transactional financial data to be retained for at least 10 years). Afterward, data is securely anonymized or destroyed.
• Third-Party Transfers: Data remains strictly confidential. It is shared only with authorized partners acting as Data Processors (e.g., email marketing platforms, payment gateways, cloud infrastructure) who are bound by confidentiality clauses, or with public authorities under legal mandates.Right to Lodge a Complaint
Data subjects reserve the absolute right to appeal or lodge a complaint with the Hellenic Data Protection Authority (HDPA) if they believe their privacy rights have been violated, via the official website: www.dpa.gr.
Data Controller Contact Information
For any clarifications, queries, or to exercise your legal rights (such as revoking consent), please contact the designated Data Controller directly:
Name / Representative: Mrs Tatiana Zombola
Postal Address: 20, Alexandroupoleos Str., 115 27 Athens, Greece
Telephone: +30 6937 052259
Email: tzombola@eventive.gr
Personal Data Protection Policy — Eventive
Regulatory Framework & Compliance
• Applicable Legislation: This Policy is fully aligned with the General Data Protection Regulation (GDPR - Regulation EU 2016/679), the supplementary Greek Law 4624/2019, Law 3471/2006 (protection of personal data in electronic communications), and Law 3917/2011.
• Binding Agreement: Browsing the Website or registering for Eventive’s events constitutes full and unconditional acceptance of these terms. This policy forms a unified legal agreement alongside our Terms of Use.Categories of Data Collected
• Identity & Profile Data: Full name, professional capacity, event attendance history, or project assignments.
• Communication Data: Mandatory information (email address, telephone number) to deliver our services, and optional information (Opt-in) to receive newsletters and promotional material.
• Financial & Billing Data: Tax Identification Number (TIN), tax office details, billing address, and encrypted/tokenized payment data required to execute transactions.
• Electronic Identification Data: IP addresses, MAC addresses, operating systems, browser types (web log files), and technical data collected through Cookies.Legal Bases for Processing (GDPR Art. 6)
Eventive processes your personal data strictly under the following lawful bases:Contractual Necessity: To perform principal or subordinate obligations arising from a contract or pre-contractual relationship (e.g., event registration, customer updates).
Explicit Consent: For the deployment of non-essential cookies, newsletter distribution, and targeted advertising (marketing). Consent can be revoked in writing at any time.
Legitimate Interests: To ensure smooth website operation, perform traffic analysis, and prevent cybercrime or fraud (provided these interests do not override your fundamental rights).
Legal Obligation: To transfer data when strictly required by judicial, tax, law enforcement, or supervisory authorities.
Data Subject Rights
Eventive guarantees the necessary infrastructure for users to fully exercise their 8 rights under the GDPR:
• Right to Information & Access: To know what data is retained and the specific terms of its processing.
• Right to Rectification & Erasure ("Right to be Forgotten"): To immediately update inaccurate data or request deletion (provided the data is not legally bound by tax retention laws or other binding contracts).
• Right to Data Portability: To receive retained data in a structured, commonly used, and machine-readable format, or request its direct transmission to another controller.
• Right to Restriction & Objection: To restrict processing or object to data use at any time, particularly for direct marketing and profiling purposes.
• Automated Individual Decision-Making: The right to object to decisions based solely on automated profiling that produces legal or significant effects.Data Security, Retention & Third-Party Transfers
• Security Measures: Strict application of Privacy by Design and Privacy by Default principles. We utilize firewalls, intrusion detection systems, tokenization, pseudonymization, and encryption.
• Retention Period: Data is kept only for the duration required by the contract terms or applicable law. (Note: Greek tax legislation requires billing and transactional financial data to be retained for at least 10 years). Afterward, data is securely anonymized or destroyed.
• Third-Party Transfers: Data remains strictly confidential. It is shared only with authorized partners acting as Data Processors (e.g., email marketing platforms, payment gateways, cloud infrastructure) who are bound by confidentiality clauses, or with public authorities under legal mandates.Right to Lodge a Complaint
Data subjects reserve the absolute right to appeal or lodge a complaint with the Hellenic Data Protection Authority (HDPA) if they believe their privacy rights have been violated, via the official website: www.dpa.gr.
Data Controller Contact Information
For any clarifications, queries, or to exercise your legal rights (such as revoking consent), please contact the designated Data Controller directly:
Name / Representative: Mrs Tatiana Zombola
Postal Address: 20, Alexandroupoleos Str., 115 27 Athens, Greece
Telephone: +30 6937 052259
Email: tzombola@eventive.gr