Privacy Policy

General Information

The protection of natural persons in relation to the processing of personal data is a fundamental right, enshrined in Article 8, paragraph 1, of the Charter of Fundamental Rights of the European Union and Article 16, paragraph 1, of the Treaty on the Functioning of the European Union (TFEU).

Additionally, as of May 25, 2018, Regulation (EU) 2016/679 “General Data Protection Regulation (GDPR)” has been in force, establishing a strict framework for the protection of individuals in relation to the processing of personal data and the free movement of such data (hereafter referred to as “the GDPR”). In August 2019, Law 4624/2019 came into effect, further updating the implementation measures of the GDPR and incorporating Directive (EU) 2016/680 of the European Parliament and the Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data.

The protection of individuals in relation to the processing of personal data is of utmost importance and a top priority for the non-profit civil company under the name “HELLENIC ASSOCIATION OF INDEPENDENT POWER PRODUCERS” (hereafter referred to as “HAIPP”). HAIPP collects and processes personal data in full compliance with the GDPR and applicable legislation. HAIPP grants access only to authorized personnel and takes enhanced measures to safeguard personal data from loss, mismanagement, unauthorized access, alteration, or disclosure.

Categories of Personal Data Processed

During your visit to HAIPP’s website, HAIPP may process:

  • Data automatically collected during your browsing on the website (IP address, device type, browser, referring website, pages visited, date and time of visit).
  •  Data you have provided to submit requests, comments, and questions, which are necessary for HAIPP to respond to requests, comments, and inquiries for further information (e.g., full name, contact number, email address). 
  • Information collected through cookies in your browser. For more information, please see our cookie policy [here].

Data of Minors

HAIPP’s website is intended for persons over the age of eighteen (18). HAIPP is not responsible if minors visit the website on their own. If during data collection it is identified that a user is under eighteen (18), HAIPP will not process their personal data.

Purposes of Processing

HAIPP processes personal data exclusively for the following purposes:

  1. To establish any legal claim or defense of HAIPP against attempts at fraud, potential cyber-attacks, or other unlawful activities. 
  2. To ensure HAIPP’s compliance with legal obligations (e.g., tax, insurance, customs, accounting) or court orders, and to safeguard HAIPP’s overriding legitimate interests, such as by transferring data to legal firms or competent authorities. 
  3. To create anonymized statistics, allowing necessary actions to improve the browsing experience. 
  4. To protect the integrity of the website. 
  5. To send legally required updates or information on changes to the services we provide through the website.

Legal Basis for Processing

The processing of visitors’/users’ personal data is necessary to fulfill the above purposes. Unless otherwise stated during data collection, the legal basis for processing includes:

  1. HAIPP’s legitimate interests [Article 6(1)(f) of the GDPR]. 
  2. Explicit consent provided by you [Article 6(1)(a) of the GDPR].

    Data Transfers

    HAIPP may transfer personal data to third-party partners only to the extent required to fulfill the purposes outlined above. Additionally, third-party IT companies (processors) may manage HAIPP’s website.

    In such cases, partners are bound by confidentiality and security agreements with HAIPP, specifically to: (a) maintain absolute confidentiality, (b) refrain from transferring your data to third parties without HAIPP’s prior authorization, and (c) take appropriate technical and organizational security measures, fully complying with applicable data protection laws, particularly the GDPR.

    HAIPP may transfer personal data to judicial, administrative, tax, customs, regulatory bodies, and legal advisors if required by law or to establish, exercise, or defend legal claims. In such cases, HAIPP ensures compliance with data protection legislation through binding contractual terms and regular audits.

    Data Retention Period

    HAIPP will retain your personal data as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. The required retention period is defined as follows: (a) as long as HAIPP needs to comply with a legal obligation, or (b) as long as HAIPP needs to defend its legal rights before competent courts and authorities.

    Technical and Organizational Measures

    HAIPP implements appropriate technical and organizational measures, including anonymization, data minimization, and embedding necessary safeguards in data processing to comply with legal requirements and protect individuals’ rights.

    Users’ Rights Regarding Data Processing

    Under applicable data protection law, and provided the relevant legal conditions are met, you have the following rights:

    • Right of Access: You have the right to be informed by HAIPP if we process your personal data. In the affirmative, you can request details about the data we hold, the purpose of processing, any recipients, and the retention period.
    • Right to Rectification: You can request an update, correction, or completion of your personal data (e.g., name correction or address change).
    • Right to Erasure (Right to Be Forgotten): You may request the deletion of your personal data, which will be promptly fulfilled unless other legal processing grounds exist (e.g., legal obligation for data processing).
    • Right to Data Portability: You can request to receive your data in a readable format or request it to be transferred to another data controller.
    • Right to Restrict Processing: You may request to restrict the processing of your data while your objections to processing are being reviewed.
    • Right to Object and Withdraw Consent: You can object to the processing of your data, and HAIPP will cease processing unless there are other compelling legitimate grounds. If you have given your consent for data collection, processing, and use, you may withdraw it at any time. Withdrawal does not affect the legality of prior processing. In such cases, HAIPP may process your data only if there are other legal grounds.
    • Right to File a Complaint: If you consider that the processing of your data violates applicable data protection law, you also have the right to file a complaint with the Hellenic Data Protection Authority (HDPA). You should first attempt to exercise your rights with HAIPP before approaching the HDPA. For information on HDPA’s jurisdiction and how to file a complaint, please visit its website at https://www.dpa.gr/en/individuals/complaint, where detailed information is available.

    Applicable Law

    The applicable law is Greek law, specifically the GDPR, Law 4624/2019, and other relevant national and European legislative and regulatory frameworks on data protection.

    For further information, please contact HAIPP at the following email […].