Privacy Policy exypireto.gr

Last updated: January 2026

General Information

This Privacy Policy (the “Policy”) explains how the Municipality of Athens (hereinafter: the “Authority”, “we”) collects and processes personal data through the website www.exypireto.gr.

The Authority acts as Data Controller within the meaning of the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the relevant Greek legislation.

The “EXYPIRETO” website provides information about social programs and services. Access to the content is possible without creating an account or being required to provide personal data.

What Data We Collect

Depending on how you use the Website, we may collect:

2.1. Browsing Data

When you visit the Website, certain technical information is automatically collected, such as:

  • IP address,
  • date and time of access.

2.2. Cookies and Analytics Tools

The Website may use cookies and similar technologies for specific purposes.
Further details are provided in the dedicated Cookies Policy.

Purposes and Legal Basis of Processing

Personal data are processed for the following purposes and on the following legal bases:

Operation and Security of the Website

Monitoring technical operation, detecting malicious activity, and preventing security incidents.
Legal basis: Article 6(1)(e) GDPR – performance of a task carried out in the public interest / exercise of official authority.

To Whom Data Are Disclosed

Data are not transferred to third parties, unless:

  • this is required by law or by a competent judicial/administrative authority,
  • it is necessary for the support of the Website by external partners (e.g., hosting provider, technical support), who act as processors under contracts ensuring compliance with the GDPR.

In any case, such partners have access only to the data strictly necessary and are bound by obligations of confidentiality and security.

Data Retention Period

Browsing data (e.g., logs) are retained for the period deemed necessary for the operation of the system and are then automatically deleted after one hour.

Data Security

The Authority implements appropriate technical and organizational measures to protect personal data against:

  • accidental or unlawful destruction, loss, or alteration,
  • unauthorized access or disclosure.

Despite these measures, no data transmission over the internet can be guaranteed to be absolutely secure. Use of the Website is at the user’s own responsibility, and users are expected, indicatively, to protect their devices against malicious software.

Your Rights as Data Subjects

In accordance with the GDPR, you have – subject to the conditions provided by law – the following rights:

  • Right of access (Article 15 GDPR):
    To obtain confirmation as to whether or not we process data concerning you and, if so, access to such data.
  • Right to rectification (Article 16 GDPR):
    To request the correction of inaccurate or incomplete data.
  • Right to erasure (Article 17 GDPR):
    To request, under certain conditions, the deletion of your data.
  • Right to restriction of processing (Article 18 GDPR).
  • Right to object (Article 21 GDPR):
    To object to processing based on public interest, for reasons relating to your particular situation.
  • Right to data portability (Article 20 GDPR), where applicable.
  • Right to withdraw consent:
    Where processing is based on your consent, you may withdraw it at any time, without retroactive effect.
  • Right to lodge a complaint with the supervisory authority:
    If you believe that your data protection rights are being violated, you have the right to lodge a complaint with:

Hellenic Data Protection Authority
1–3 Kifisias Ave., 115 23 Athens, Greece
Website: www.dpa.gr

 

Data Controller – Contact Details

Municipality of Athens
Directorate of Social Solidarity

159 Patission & Agathoupoleos Street
Amerikis Square
11252 Athens, Greece

Tel.: +30 214 411 7014
Tel.: +30 214 411 7018
Email: exipireto@athens.gr

(If a Data Protection Officer (DPO) has been appointed, a separate contact field with the DPO’s email may be added.)

Amendments to the Policy

The Authority may amend this Policy whenever deemed necessary.
The date of the latest update will be indicated at the top of the page.
Users are encouraged to visit this page periodically to stay informed about any changes.