[DRAFT – DO NOT PUBLISH] Placeholders must be completed and legally reviewed before launch.
Privacy Policy
Last updated: [DATE]. This notice explains how personal data is processed on melanydros.com under the General Data Protection Regulation (GDPR).
1. Controller
[FULL NAME OF ASSOCIATION]
[ADDRESS]
[POSTCODE] Neohori, Lefkada, Greece
Email: info@melanydros.com
Data protection officer: [IF APPOINTED, name and contact — otherwise delete this line.]
2. Hosting
This website is hosted by [HOSTING PROVIDER, NAME AND ADDRESS]. Server location: [COUNTRY]. A data processing agreement under Art. 28 GDPR is in place. [CONFIRM]
Server log data is processed automatically: IP address, date and time, page requested, browser type and operating system. Legal basis: legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Retention: [ASK HOST].
3. Cookies and consent
Strictly necessary cookies are set without consent. All others only after explicit consent via our consent tool [BORLABS COOKIE – CONFIRM VERSION AND STATUS]. Consent can be withdrawn at any time via [LINK OR BUTTON].
4. Analytics
We use Burst Statistics, which runs entirely on our own server. No data is transferred to third parties. [CONFIRM: cookieless mode active? IP anonymisation? Retention period?]
Legal basis: [legitimate interest OR consent — depending on configuration].
5. Contact form and email
Data you provide: name, email address, [OTHER FIELDS] and your message. Processed to handle your enquiry on the basis of your consent (Art. 6(1)(a) GDPR). Retention: [DEFINE PERIOD].
6. Membership and donations
Data processed: [LIST — name, address, bank details, amount]. Legal basis: performance of the membership relationship and compliance with legal obligations (Art. 6(1)(b) and (c) GDPR). Retention follows [GREEK TAX AND ASSOCIATION LAW — confirm with your accountant].
7. Event photographs
We publish photographs of our events in which individuals may be identifiable. Legal basis: [CONSENT OR LEGITIMATE INTEREST — please decide and justify].
To request removal of a photograph, write to info@melanydros.com.
8. Third-party content
[CHECK AND LIST: YouTube videos, maps, fonts, social media elements. For each: provider, purpose, legal basis, transfers outside the EU — or delete this section.]
9. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection, and may withdraw consent at any time with future effect.
You may lodge a complaint with the Hellenic Data Protection Authority: Kifissias 1-3, 115 23 Athens, www.dpa.gr
10. Changes
We update this notice when our processing changes. The version published on this page applies.