Privacy Policy
Update on the processing of personal data through the official website of the Regional Development Fund of Western Macedonia.
1. Controller
The controller is the Regional Development Fund of Western Macedonia (RDF of Western Macedonia), ZEP Kozani, 50100, Greece.
- General contact: info@pta.pdm.gr
- Telephone: 24613 50992, 24613 50971
- Data Protection Officer (DPO): dpo@pta.pdm.gr
2. Scope
This policy covers visiting the website, using the contact form, subscribing to updates when offered, requests to exercise rights and technical security and operational data.
Special actions, invitations, programs or online services may be accompanied by additional, more specific information, which prevails for the specific processing.
3. Data we process
Contact form
Name, email address, subject and message content are collected. The submission is made via WordPress to the institutional mailbox info@pta.pdm.gr. The form is not used for automated decision-making or profiling.
Technical data
For website operation and security, IP address, date and time, requested address, browser and device type, response code and security events may be logged. This data is not used for advertising tracking.
Updates and rights requests
When the user explicitly subscribes to updates, the email address is used until revoked. For a right request we process the data required for identification, handling and documentation of the response.
4. Purposes and Legal Basis
| Purpose | Legal basis |
|---|---|
| Receiving, routing and responding to requests from citizens and agencies | Article 6(1)(e) GDPR — task in the public interest; where required, Article 6(1)(c) — legal obligation |
| Management of a request linked to a contract or pre-contractual measures | Article 6(1)(b) GDPR |
| Security, availability, abuse prevention and technical support | Article 6(1)(c) and (e) GDPR, together with the security obligations under Article 32 |
| Optional electronic updates and non-essential cookies, if enabled in the future | Article 6(1)(a) GDPR — consent, which may be withdrawn at any time |
5. Recipients and Processors
Only authorized RDF staff who need the data for the respective official purpose have access. Data may be technically supported by hosting, maintenance, security, backup and email service providers, subject to appropriate contractual and organizational guarantees.
Transmission to a public authority or other body is carried out only when provided for by law or necessary for the processing of the request. Any transfer outside the EEA is made only with the guarantees of Chapter V of the GDPR.
6. Retention times
| Category | Time |
|---|---|
| Contact form messages and related correspondence | Up to 12 months from the completion of handling. If included in an administrative or financial file, they are retained in accordance with the applicable record and legal deadlines. |
| Technical logs and security files | Up to 12 months, unless a longer period is required for an incident investigation or legal claim. |
| Details of optional updates | Until the revocation or deletion of the registration. |
| Requests to exercise rights | For as long as required to comply with and demonstrate RDF responsiveness. |
7. Security
RDF implements risk-based measures such as encrypted data transfer, access control, strong authentication where supported, software updates, event logging, backups, access restriction, and incident management procedures.
Do not send special categories of data, identity numbers, financial data or other data that is not absolutely necessary via the general form.
8. Rights
Depending on the legal basis and the conditions of the GDPR, you can request access, rectification, erasure, restriction, portability, object to processing or withdraw consent without affecting the lawfulness of previous processing.
Submit a request to dpo@pta.pdm.gr. RDF may request additional information only when it is necessary for secure identification.
You also have the right to complain to Hellenic Data Protection Authority.
9. Cookies and external links
The applicable categories and durations are described in Cookies Policy. RDF does not enable analytics, advertising or profiling cookies. External links open third-party services, which operate under their own terms and policies.
10. Update
The policy is revised when the operation of the website, the law or the providers change. The current version is always published at this address.