The Training and Lifelong Learning Center (Center) of the Athens University of Economics and Business (AUEB) offers, as part of its mission, training, and lifelong learning programs in the fields covered by its departments. For your participation in these programs and the awarding of a training certificate, it is necessary to submit some of your personal data to the Center. Also, to express interest in the Center’s programs, it is necessary to submit your personal email address.

Data Controller

AUEB is the Data Controller, responsible for processing the data, in accordance with the provisions of the General Data Protection Regulation -GDPR (EU) 2016/679 of the European Parliament and Council of April 27, 2016, and Law 4624/2019 as amended and applied.  The Center is committed to protecting your personal data and maintaining a transparent way of processing it.

Types of Data

The personal data that we process comes from the information that you provide, by any means of communication (in particular, submission using the Center’s website or via an email message) as follows:

• In the context of completing your participation application for a program or during your participation in the program (the relevant data is hereinafter referred to as "participation data").
• With the expression of interest either for individual or for all Center programs (the relevant data is called henceforth, in both cases, "expression of interest data").

Participation data falls into the following categories (it is not mandatory to provide all the following data):

• Program details: the program you are requesting to attend, where you found out about it, and how to attend it.
• Personal information: name, surname, father’s name, gender, date of birth, Tax Registration Number.
• Contact information: country of residence, municipality, mailing address, postal code, phone number and mobile phone number, email, LinkedIn profile, Skype name, comments regarding contact information.
• Details of undergraduate, postgraduate, or other studies (title, university & department, year of obtaining the degree, GPA) and level of English language competence.
• Work details: name of organization/company and work subject/field
• Billing details: name, occupation, country, address-number, municipality, postal code, Tax Registration Number, purchase order number, payer, e-mail address for mailing invoice, phone number.
• Digital copies of resume (CV), recommendation letters, degree transcripts, degree, professional license, or professional ID, supporting documents for the granting of a discount, proof of personal information and any other documents.

Expression of interest data is solely considered the email address you submit with your expression of interest.

Purposes of Processing your data

The Center processes your participation data for the purpose of evaluating you and your participation in the program for which you applied.

The Center processes the expression of interest data for a specific program to update you about this program. For example, the information includes:

• availability of the program or related Center programs,
• employment opportunities for the graduates or trainees of the program or related Center programs, and
• events related to the program.

The Center processes the expression of interest data for all programs to update you about all Center programs. For example, the information includes:

• availability of all or some of the Center’s programs,
• employment opportunities for the graduates or trainees in the Center’s programs, and
• events regarding the Center’s mission.

Legal basis of processing

The processing of your participation data is carried out in accordance with the provision of art. 6 par. 1 subclause b. of GDPR (EU) 2016/679, in which the processing is necessary for a contractual agreement to which the data subject is a party or to take measures at the request of the data subject prior to the agreement.

The processing of the expression of interest data is based on consent in accordance with the provision of art. 6 par. 1 subclause a of the GDPR (EU) 2016/679. This consent is free, as the trainees may not consent without the consequences of their refusal.

Your rights

• You have the right to access the personal data you have entered.
• You have the right to correct inaccurate or untrue information about you.
• You have the right to restrict the processing of your personal data when the accuracy of the data is disputed or illegal or the Center no longer needs the personal data for processing purposes.
• You have the right to object, and you can object at any time for reasons related to your situation, to the processing of your personal data. You can object to decision making by automated means and request that decisions be made by individuals and not just computers.
• You have the right to withdraw your consent to the processing of the expression of interest data at any time. Withdrawal of consent does not affect the lawfulness of processing based on that consent in the past.

Recipients of your data

For the personal data collected in this context, there is no need for transmission. However, the recipients of the data may be the competent Services of the Ministry of Education, the National Statistical Service, the National Authority for Higher Education (NAHE), for which the University is obliged to publish and send statistics. In these cases, the data will be anonymous.

Public Authorities that may receive personal data in the context of a specific investigation are not considered recipients as defined in art. 4 par. 9 of EU 2016/679.

Processing time

Participation data is kept for as long as the services are provided to you and for as long as its retention is required by law in the context of the mission and activities of the Center. It is pointed out that data related to the control of public expenditure is kept for 20 years.

Expression of interest data is retained until you withdraw your expression of interest by replying to any of the relevant emails sent to you.

Data protection from third parties

If it is deemed necessary a third party to process your data (e.g., support of the website by a technical company), we ensure that the obligation of confidentiality and protection on the part of the third party is contractually recorded. No data is sold or shared with third parties for any reason.

Policy Review

We may amend this policy from time to time. If we make any important changes in the way we use your personal data we will notify you by sending you an email to all the email addresses you have provided or by posting a prominent notice on our webpage. However, you should check this policy periodically for any amendments.

Supervising Authority

In Greece, the Competent Supervisory Authority you can contact to submit questions or complaints regarding issues of personal data processing that fall within its competences provided for by the provisions of GDPR, is the Personal Data Protection Authority (www.dpa.gr).

Data Controller

Athens University of Economics & Business

Patision 76, 104 34 Athens

Competent Office at AUEB

Training and Lifelong Learning Center (Center)

Kefallinias 46, 11251, Athens

Tel.: 210 8203912

Email: kedivim-opa@aueb.gr

Data Protection Officer

Maria Antonopoulou (Ms)

Tel. : 210 8203135

Email: dpo@aueb.gr