1. Introduction

The Municipality of Alimos, holding the protection of privacy and personal data as its highest principle, observes the General Data Protection Regulation EU/2016/679, hereinafter the GDPR, and complies fully with the applicable personal data legislation.
In the course of our administrative operation and activity, we collect and further process personal data concerning you, in order to perform contracts, exercise our competences and fulfil our legal obligations. The Municipality of Alimos is therefore the controller of your personal data.
Through this policy, the Municipality seeks to inform all Data Subjects in a general and adequate manner about the processing of their personal data by the Organisation, as well as to enable the unimpeded exercise of their rights (article 13).
For any clarification regarding this Policy and/or for the exercise of your rights, you can contact us at the following details:

A. Data Controller: Municipality of Alimos
Postal address: 53 Aristotelous Street, Alimos, 174 55
Contact telephone: 213 2008000
E-mail address: info@alimos.gr

 

B. Data Protection Officer: KaPa Data Consulting
Contact telephone: 210 6855 245
E-mail address: info@kapaconsulting.gr

 

We are at your disposal and we encourage you to contact us so that we can examine any concern or request you may have in relation to the processing of your personal data.
Use of the web pages and services provided to the visitor/user of this website presupposes your unreserved agreement with this Privacy Policy. We advise you to read the content of this page carefully before using our website. If you do not agree, please leave it and do NOT make any use of its services and content.
If you are under 15 years of age, you MUST have your parents’ consent before using the services of this website.

 

2. Data collection and use

The personal data collected by the services of the Municipality are limited to what is necessary for the purposes for which they are processed. More specifically, the need to collect and process the personal data requested in each case arises from every legal obligation of the Organisation and is carried out in the performance of its tasks in the public interest, always within the framework of the exercise of the official authority vested in it.
Information collected automatically from your browsing of the Website:
Simply browsing our Website does not require the visitor to provide or enter personal data. However, merely by visiting and browsing the Website, certain data may be collected automatically that can identify you directly or indirectly, such as: the internet protocol (IP) address of your computer, the type of browser and the operating system, the web pages you visited immediately before and after your visit to the page, the connection speed and information about the software programs installed on the computer, basic server connection information, and information collected through HTML cookies, Flash cookies, web beacons and other similar technologies.
In addition, visitors/users may, if they wish, subscribe to the newsletter of our Website by entering their e-mail address, in order to be included in the contact lists and receive news and updates from the Municipality.
MINORS
When collecting information directly from you, we take appropriate care to ascertain which of the personal information collected concerns minors. In any case, if we find that we have collected any personal information from a minor without verifiable parental consent as provided for in article 8 of the GDPR, we will delete the information from our database as soon as possible. If you believe that we may have collected information from a minor as described above, please contact us.

 

3. Disclosure of data

The Municipality of Alimos does not grant or transmit to unauthorised third parties personal data submitted to its services. By way of exception, disclosure takes place in cases where this is required by an express provision of law, exclusively to the competent authorities.
Where, following the application of the legislation in force on public procurement, a contractor is appointed who, in performing the contract, has access to personal data originally collected by the Municipality, then, under the responsibility of the competent departments, the necessary confidentiality terms are included in the contract to be signed, either incorporated into the main contract or added as a supplementary act to it. In this way it is ensured that contractors also take all appropriate technical and organisational measures, so that the processing they carry out meets the requirements of the GDPR while protecting the rights of the data subject.
Please note that third parties may independently collect data about you, including your IP address and information about the web pages you visit and the links you click, through cookies, link “clicks” or other means during your visit.

 

4. Lawfulness of processing

The diligence that the Municipality of Alimos must show concerns the processing of all personal data that have been or will be collected by all the services of the Organisation, always within the framework of each obligation arising for them from the law. The GDPR does not abolish or replace the regulatory framework of the Organisation’s operations as shaped by the national legislation in force.
In order to act in accordance with the legislative framework in force, as shaped after the adoption of the GDPR, the Municipality has taken a series of required actions, applying the appropriate technical and organisational measures for lawful processing and for the safe keeping and storage of files and documents containing personal data, so as to ensure the protection of personal data from possible breach (indicatively, loss, leakage, alteration, transmission or unlawful processing in any other way).
The Municipality, as controller within the meaning of article 4(7) of the GDPR, collects personal data for the purposes of exercising its competences. The legal basis for this processing is taken to be article 6(1)(a), (b), (c) and (e) of the GDPR, while for the processing of special categories of personal data it is article 9(2)(a), (b), (g) and (j) of the same regulation.

 

5. Principles of data processing

The processing of personal data (both ordinary and special categories) by the Municipality of Alimos is governed by the principles described in article 5 of the GDPR.
In particular, the services of the Organisation process personal data with transparency, in the context of which the aim is for each Data Subject to be informed in a concise, intelligible manner, using clear and plain language (“lawfulness, fairness and transparency”).

The personal data provided to the Municipality are not further processed in a manner incompatible with the purpose for which they are collected. The purpose is specified, explicit and legitimate, always within the framework of the proper operation of the Organisation and the provision of services to citizens (“purpose limitation”).

The Municipality collects only the personal data that are adequate, relevant and limited to what is necessary for the purpose for which they are processed (“data minimisation”).

The aim of the Organisation’s services is for the personal data collected to be accurate and, where necessary, kept up to date, taking every reasonable step to ensure that inaccurate data are corrected or erased without delay, having regard to the purposes of the processing (“accuracy”).

Personal data are kept in physical or digital files for the period required for the purposes of the processing. This period is determined by the legislation in force (“storage limitation”).

The competent services of the Organisation take the appropriate technical and organisational measures so that personal data are processed in a manner that ensures appropriate security of the personal data (“integrity and confidentiality”).

The Municipality is responsible for the processing of personal data and is able to demonstrate its compliance with the principles of the GDPR before the Supervisory Authority and the courts (“accountability»).

 

6. Data retention period

Regardless of the manner of processing, we will process your data for the period that is absolutely necessary to achieve the respective purpose, and will then keep them securely stored and protected for the necessary period, subject to any provisions of the applicable legislation, including the fulfilment of any legal obligation, as well as for archiving purposes in the public interest.

 

7.       Your rights

We are committed to maintaining the confidentiality of your personal data and to ensuring that you can exercise your rights. Requests are examined within thirty (30) days of their receipt, in accordance with article 12 of the GDPR. Specifically, regardless of the purpose or the legal basis on which we process your data, you have the following rights:
To ask us for access to the data we hold about you.
To ask us to correct the data we keep. Please remember that, as a general rule, you should provide only your own personal data and not data of third parties, except to the extent permitted under this Privacy Policy.
To ask us to erase your data to the extent that they are no longer necessary for the purpose for which we must continue to process them, as already explained above, or where we are no longer entitled to process them.
To ask us to restrict the processing of your personal data, which means that in certain cases you may ask us to suspend the processing of the data temporarily, or to keep them beyond the required period when you need them.
If you have given us your consent to process your data for any purpose, you also have the right to withdraw it at any time.
Where we are entitled to process your data on the basis of your consent or for the performance of a contract, you will also have the right to request the portability of your personal data. This means that you will have the right to receive the personal data you gave us in a structured, commonly used and machine-readable format, in order to transmit them directly to another legal entity without hindrance on our part.
In addition, you have the right to object to the processing of your data.
Finally, we inform you of your right to lodge a complaint with the competent Supervisory Authority, following the link below to the Hellenic Data Protection Authority: https://www.dpa.gr/el/syndesi/polites/kataggelia.

 

8. Security

The security of your personal data is important to us. You should be aware that no information transmitted over the internet is completely secure.
We have put in place appropriate organisational and technological protection measures in order to prevent the accidental loss, alteration, disclosure and unauthorised use of or access to your personal data. In addition, we limit access to your personal data to those employees who need to know them in order to perform their duties, who process your data exclusively in accordance with our instructions and are bound by relevant confidentiality terms. We have put in place procedures for handling any possible personal data breach, and we will notify you and any competent authority of any breach where we are required by law to do so.

 

9. Updates to the Privacy Policy

We update our Policy regularly, in line with the legal framework in force at any given time. We do not explicitly notify the users of the website about these changes.
We advise you to read the Privacy Policy at regular intervals for any changes. Changes take effect from the moment they are published on this page. Continued use of this website means your unreserved acceptance of these terms.

Last updated: September 2025