Privacy policy

1. Identity of the data controller

The data controller responsible for your personal data is Sappho Community Organization, a non-profit organization registered in Greece.

Registered address:
Sappho Community Centre
Skala Eressou 81105
Lesvos Island, Greece

Email contact: [email protected]

2. Types of data we collect, purpose, and legal basis

We only collect personal data that is necessary to fulfil our non-profit mission.

Donations

Data collected. Full name, billing address, email address, phone number, and financial transaction details. We do not store full credit card numbers; these are handled securely by our payment processor.

Purpose. To process your donation, issue legal tax receipts under Greek law, and maintain financial records.

Legal basis. Performance of a contract, and compliance with legal and tax obligations in Greece.

Member sign-ups

Data collected. Full name, contact information, date of birth, and any skills or interests you voluntarily share to support our cause.

Purpose. To manage your membership, invite you to general assemblies, vote on organization matters, and keep you informed of organizational updates.

Legal basis. Performance of a contract, and our legitimate interest in administering the non-profit.

Newsletter subscriptions

Data collected. Name and email address.

Purpose. To send you updates about our campaigns, events, and fundraising efforts.

Legal basis. Explicit, freely given consent. You can withdraw this consent at any time by clicking the unsubscribe link in any email.

3. Data recipients and third-party sharing

We never sell or rent your data. We only share your data with trusted third-party service providers necessary to operate our website and services: payment gateways to securely process donations, email platforms to distribute our newsletters, and the Greek Tax Authority and judicial authorities where required by applicable law.

4. Data retention period

• Financial and donation records: 5 years, to comply with Greek statutory tax retention periods.
• Membership data: for the duration of your active membership and up to 2 years after termination, for administrative purposes.
• Newsletter data: until you withdraw your consent.

5. Your data protection rights

• Access. You can request a copy of the data we hold about you.
• Rectification. You can ask us to correct inaccurate or incomplete data.
• Erasure. You can ask us to delete your data, subject to Greek tax retention laws.
• Restriction. You can request that we limit how we use your data.
• Portability. You can request your data in a structured, machine-readable format.
• Objection. You can object to us processing your data for direct marketing or newsletter purposes.

To exercise any of these rights, please contact us at [email protected].

6. Right to lodge a complaint

If you believe your data protection rights have been violated, you have the right to lodge a formal complaint with the Hellenic Data Protection Authority.

Kifissias 1-3, 115 23 Athens, Greece
www.dpa.gr
[email protected]