4. Disclosure to third parties and recipients

For the purposes described in paragraph 3, your personal data may be available to outsourcing services providers, managing our website and, where applicable, to third countries or international organizations and companies that are responsible for the analysis of the data they receive (indicatively Google Analytics in the U.S.) and where and when it is deemed appropriate. In any case and regardless of the country to which your personal data are disclosed, the Company discloses them only in those cases where there is a strict need to do so and always in accordance with appropriate security safeguards, but also complies with the requirements of the GDPR (art. 28) for the compliance of third parties / processors, whom it commits to the protection of personal data disclosed to them, as defined by the GDPR and its respective policies and procedures.

5. Security

The Company shall process your personal data in a manner that ensures its protection by taking all appropriate organizational and technical measures for data security and its protection against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access and any other form of illicit processing.

6. Subjects’ rights

This section presents your rights with respect to your personal data. These rights are subject to certain exceptions, reservations or limitations. Please submit your requests responsibly. The Company will respond as soon as possible and in any case within one (1) month of receipt of the request. If the review of your request is going to take longer, you will receive relevant information. To exercise your rights, you can contact us on the following email-address: daphne@sportshouse.gr.

The Company ensures the exercise of your rights:

6.1. The right to information

You have the right to request and receive clear, transparent and easily understandable information about how we process your personal data in accordance with the Company’s policies and procedures.

6.2. The right to access

You have the right to access your personal data free of charge, in accordance with the relevant policies and procedures of the Company.

6.3. The right to rectification

You have the right to ask for your personal data to be corrected if it is inaccurate or incomplete, in accordance with the relevant policies and procedures of the Company.

6.4. The right to erasure («to be forgotten»)

You have the right to request the deletion or removal of your personal data when it is no longer necessary for the purposes collected or there is no legitimate reason to continue processing it in accordance with the Company’s policies and procedures. The right of deletion is not absolute, to the extent that there is a particular legal obligation or other legitimate reason for the retention of your personal data by the Company.

6.5. The right to restriction of processing

In some cases, you have the right, in accordance with the relevant policies and procedures of the Company, to restrict or remove further processing of your personal data. In cases where processing has been restricted, your personal data remains stored, without further processing.

6.6. The right to data portability

You have the right to request your personal data, which you have provided us with in a structured, commonly used and machine-readable format, and to transfer that data to another controller in accordance with the relevant policies and procedures of the Company.

6.7. The right to object

You have the right to oppose, at any time and for reasons related to your particular situation, to the processing of your personal data based on Article 6 (1) (f) of the GDPR (processing for reasons of lawful interest of the Company), on the basis of that provision. In such a case, the Company as controller will no longer submit the personal data unless it demonstrates imperative and legitimate reasons for processing that override the interests, rights and freedoms of the subject, or the filing, exercise or support legal claims.

6.8. The right to withdraw your consent

You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

6.9. Rights on automated decision-making mechanisms

The Company does not make automated individual decision-making, including profiling.

6.10 How to exercise the right

The exercise of the aforementioned rights takes place with the submission of a written application to the Company in accordance with its policies and procedures. The Company reserves the right to reply no later than one month after receiving the request, in accordance with the terms of the GDPR.

7. Retention period for personal data

For each category of personal data, the Company determines the retention period in accordance with the provisions of the law and its policies and procedures.

8. Contact of the Data Protection Authority

For further information and advice on your rights or to submit a complaint, you may contact the Hellenic Data Protection Authority at 1-3, Kifissias str., P.C. 115 23, Athens, Greece, Tel: +30 210 6475600, Fax: +30 210 6475628, email: contact@dpa.gr .

9. Amendments of the present Notice

We aim to continuously review and update this Notice in order to comply with personal data legislation and new developments. Any updates to this Notice will be communicated to you immediately.