The DESTE Foundation for Contemporary Art, established in Geneva, having a branch in Athens, Greece, at Filellinon 11 & Em. Pappa Street, N.Ionia 142 34, (hereinafter referred to as “DESTE”, “we”, “us”, “our”), recognizes the importance of the privacy of all visitors and users of www.deste.gr (hereinafter the/this/our “Website”) and is committed to protect your personal data in compliance with applicable data protection laws.
To this end, the present Privacy Policy is intended to inform you on our privacy practices and in particular on the ways DESTE, in its capacity as Data Controller of your personal data, handles information collected about you when visiting our Website, our exhibitions or when participating in any of our activities and projects.
Personal Data We Collect
DESTE may collect the following categories of personal data about you:
- Personal contact information, such as name, surname, telephone number, e-mail address, that you provide us with, when you subscribe to our mailing list at our Website, when you visit us in person or participate in a project, event or activity organized by us, when you provide us with your business cards, when you collaborate with us or simply communicate with us via e-mail,
- Information about your profession and our business transactions, as an associate, sponsor, service provider or artist,
- Personal data that may be included in the receipt or invoice issued by us, when you may visit our offices and make a purchase,
Information about your usage of the Website, such as visiting preferences.
Use of your Personal Data
Any and all such personal data collected by us is processed, depending on the case, for any of the following purposes:
- To communicate with you, respond to inquiries and fulfill your requests, when for example you ask for information regarding an exhibition as a visitor via e-mail, wish to cooperate with us as an artist or wish to participate in any of our projects and activities,
- To promote our exhibitions and activities by sending you relevant e-mail communications informing you on and inviting you to our exhibitions and events, we believe may be of interest to you, given that you have provided us your consent by subscribing to our newsletter via our Website or when visiting us/through our previous business contact with you,
- To provide our services to you and generally run our foundation in the best possible way,
- To evaluate and improve our provided services and our Website,
- To comply with applicable legal requirements, relevant standards and our policies,
- To send you administrative information, such as updates to our Policies, in order to keep you informed.
We process the personal data we collect about you for the aforementioned purposes always by relying on a lawful basis that allows us to conduct a certain processing activity. Therefore, we will use your personal information, depending on the case, only if:
- You have provided us your consent;
- It is necessary to perform a contract to which you are party;
- It is necessary to comply with a legal obligation to which we are subject;
We have a legitimate interest to do so (including a legitimate interest in performing our services, conducting our business, internal administration functions, defending legal claims etc.).
Recipients of your Personal Data
We do not allow personal information collected about you to be sold, traded, disclosed to or viewed by any third party. Your personal data is mainly processed exclusively by DESTE and its authorized personnel. We may, however, disclose your personal data in limited circumstances to certain categories of recipients, always ensuring that they provide the appropriate level of security and confidentiality of your personal data in compliance with Data Protection Laws. In particular, we may disclose your personal data to:
- Service providers, who may perform services on our behalf based on our instructions, such as e-mail managing and advertising service providers, e.g. use of Mailchimp in order to send you invites to our exhibitions, IT service providers etc., only to the extent necessary in order for these service providers to perform the required services;
- Business partners of DESTE that jointly sponsor or co-organize events and exhibitions with us;
- Other third parties, after obtaining your consent to disclose certain information;
- Law enforcement authorities, government officials, regulatory agencies or other parties, when we are required to do so by applicable law, regulation or legal process in connection, for instance, with an investigation conducted by judicial authorities regarding suspected and/or actual illegal activity or with a court order served on us, or when such disclosure is necessary upon our legitimate interests.
The processing of your personal data is taking place only within the EU/EEA, where an adequate level of data protection is ensured. All potential data recipients are also located within the EU/EEA. Should the case arise, where we need to transfer your personal data to a third country, DESTE will promptly inform you thereof and will implement appropriate safeguards in accordance with applicable data protection laws, in order to conduct such data transfer and ensure that your personal information remains protected and secure, such as Adequacy Decisions and Standard Contractual Clauses adopted by the European Commission.
Information Collected Automatically
This Website uses “cookies” to store and sometimes track information about your on-line visits automatically. For more information regarding the use of Cookies, please read our Cookies Policy, available at the following link.
Retention Period of your Personal Data
Our general approach is to retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, as outlined in this Privacy Policy, and in any case as required or permitted under applicable law and the corresponding statute of limitations. The criteria used to determine our retention periods include: (i) the time period we have an ongoing relationship with you; (ii) whether there is a legal retention obligation to which we are subject, such as legal, tax or accounting requirements; or (iii) whether retention is advisable in light of our legitimate interest to have an accurate record of your dealings with us in the event of any complaint or challenge, litigation or regulatory investigation.
Your Rights
You have certain rights in connection with the processing of your personal data. You may always exercise the right to information, as well as the right to access your personal data and request its rectification. Additionally, provided that the respective legal requirements are met, you have the following rights:
- Right to erasure,
- Right to restriction of processing,
- Right to object to the processing,
- Right to withdraw your provided consent, without affecting the lawfulness of the processing based on your consent before its withdrawal,
- Right to data portability.
The aforementioned rights may be exercised at any time by submitting your request pertaining to a specific demand, in writing at the following e-mail address: info@deste.gr. DESTE will respond to your request in writing within the deadlines provided by applicable law, taking into account the nature and type of the request.
Finally, you have the right to lodge a complaint with the competent Hellenic Data Protection Authority, located at 1-3 Kifissias Avenue, PC 115 23, Athens, at the e-mail address: complaints@dpa.gr.
How We Protect your Personal Data
DESTE places great importance on the security of your personal data. Therefore, we implement appropriate technical and organizational measures to protect adequately your personal data, in particular against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. However, no personal data transmitted over the Internet are guaranteed to be secure. Thus, we cannot ensure or warrant the 100% security of the personal data you disclose to us under all circumstances.
Links to Other Websites
As a resource of information and convenience to our on-line visitors, our Website may provide links to other websites owned or operated by third parties, other than DESTE. Please be aware that we do not control other websites, nor have any liability for their content, security safeguards or privacy practices and that, in any case, the present Privacy Policy does not apply to these websites. Therefore, we strongly encourage you to get informed on the privacy policy of any linked website you visit.
Updates to our Privacy Policy
We may periodically update the present Privacy Policy, in order for instance to comply with new legal requirements. Any changes to this Privacy Policy will be posted on our Website in order to keep you informed, while we may personally notify you in case of any material changes, including but not limited to, by sending you an e-mail. Accordingly, we encourage you to consult this Website frequently, so that you are aware of our latest Privacy Notice and/or any updates.
Contact Us
If you have any queries, comments or requests regarding the processing of your personal data and our privacy practices, please do not hesitate to contact us by e-mail at info@deste.gr or by phone at +30 210 27 58 490.
Effective Date: 3 April 2019
