Terms of Use

To access the service, it is necessary to indicate that you have read the Privacy Notice by clicking on the link at the bottom of this page.

The National Geological Museum informs you that the processing of your personal data, which is carried out through the website ("Website") or collected through this contact form ("Form") is carried out in accordance with the applicable data protection legislation (Regulation (EU) 2016/679 - hereinafter "GDPR") and the Website's Privacy Policy.

1. Data Controller and DPO
The Data Controller is the National Geological Museum, based in Athens with offices in Athens, Spyrou Louis, 1, 3rd Entrance, Acharnes 136 72 ("Data Controller"). You can contact the Data Protection Officer ("DPO") at the following address ????????? Email Μουσείου

2. The Data we process
With your consent, we process the following ordinary personal data that you provide when you interact with the Website and use the services and features it provides. This data includes in particular your full name, the content of your specific requests or reports, as well as additional data that the Data Controller may obtain, including from third parties, in the course of conducting its business activity ("Data"). In order to enable us to fulfil the requests you submit via the contact form and/or to provide updates on adverse actions, it is necessary for you to consent to the processing of the data I note In any case, even without your prior consent, the Data Controller may process your data to comply with legal obligations under laws, regulations and EU law, to exercise rights in legal proceedings, to pursue its own legitimate interests and in all cases provided for, as the case may be, in Articles 6 and 9 of the General Data Protection Regulation (2016/679 EU). The processing is carried out both using computers and in paper form and always entails the application of the security measures provided for in Article 6(1) and (2) of the General Data Protection Regulation.

3. Why and how we process your data
The data are processed for the following purposes
(i) to handle requests you make to provide information through the Website and the Form. The legal basis for processing personal data for this purpose is your consent (Article 6(1)(a) and Article 9(2)(a) of the GDPR); in addition, but only with your optional consent which is the legal basis for processing under Article 6(1)(a) of the GDPR,
(ii) to receive promotional material (direct marketing) from our Museum.
By checking the appropriate boxes you agree to the processing of your data for these purposes.

Your data may in any case be processed, even without your consent, in order to comply with laws, regulations, EU law (Article 6(1)(c) of the General Data Protection Regulation for the purpose of obtaining statistics on the use of the Website and its proper functioning (Article 6(1)(f) of the Regulation).

Personal data is entered into the Museum's IT system in full compliance with data protection legislation, including security and confidentiality profiles and based on principles of good practice, lawfulness and transparency of processing.
Data is stored for as long as it is strictly necessary to achieve the purposes for which it was collected. In any case, the criterion used to determine this period shall be based on compliance with the time limits laid down by law and the principles of data minimisation, storage limitation and rational management of records.

All your data will be processed in paper or automated means, ensuring in each case the appropriate level of security and confidentiality.

4. People who have access to the data

The Data shall be processed by electronic and manual means in accordance with the procedures and practices related to the aforementioned purposes and shall be accessible to the Controller's staff authorised to process the Personal Data and supervisors and in particular to employees belonging to the following categories: technical staff, information and network security staff, facility security staff, administrative staff, as well as other members of staff belonging to the following categories

The Data may also be disclosed to countries outside the European Union ("Third Countries"): i) to institutions, authorities, public bodies for institutional purposes; ii) to professionals, independent consultants - whether working individually or collectively - and other third parties and providers who provide the Data Controller with commercial, professional or technical services required for the operation of the Website (e.g. provision of IT and Cloud Computing services) for the purposes mentioned above and in support of the Foundation; iii) to the Data Controller; iv) to the Data Controller for the purposes mentioned above. The listed recipients receive only the data necessary for their respective functions and duly undertake to process them only for the purposes listed above and in accordance with data protection laws. With the exception of the above, the Data will not be disclosed to third parties, natural or legal persons, who do not perform tasks of a commercial, professional or technical nature for the Controller and will not be disseminated. The persons receiving the Data will process it, as the case may be, as Data Controllers, Processors or persons authorised to process the personal data for the purposes indicated above and in accordance with the applicable data protection legislation. With regard to the transfer of data outside the EU, even to countries whose laws do not guarantee the same level of protection of personal data privacy as provided by EU law, the Controller informs that the transfer will in any case be carried out in accordance with the methods allowed by the GDPR, such as on the basis of the user's consent, on the basis of standard contractual clauses approved by the European Commission, by selecting parties participating in international programmes for the protection of personal data, and by using the standard contractual clauses approved by the European Commission.

5. Your rights
You may contact the Controller at the addresses shown above at any time to exercise your rights under Articles 15-22 of the GDPR, such as, for example, to obtain an updated list of persons who have access to your data, to obtain confirmation of the existence or otherwise of your personal data, to obtain information about the existence ornon-personal data relating to you, check their content, origin, accuracy and location (also in relation to any third country), request a copy, request their rectification and, in the cases provided for in the GDPR, request the restriction of their processing, their erasure, object to direct communication activities (including restriction to certain means of communication). Similarly, you can always raise comments on specific uses of data in relation to specific personal situations that are considered incorrect or unjustified by the existing relationship with the DPO or lodge complaints with the Data Protection Authority.You may withdraw your consent at any time, without prejudice to the lawfulness of the processing carried out before the withdrawal of consent.