Data Advocacy for Greece
Greece implemented the EU Data Protection Directive 95/46/EC in October 1997 by Law 2472/1997 on the Protection of Individuals with regard to the Processing of Personal Data, as amended (‘Law’). Such law is currently in force as amended by Laws 3471/2006, 3783/2009, 3917/2011, 4024/2011 and 4070/2012, and 4139/2013.
Law 2472/1997 on the Protection of Individuals with regard to the Processing of Personal Data (“PIPPD”), as amended and in force today, implementing the Data Protection Directive (95/46/EC).
Law 3471/2006 on the Protection of Personal Data and privacy in the electronic communications sector and amendment of PIPPD, as amended and in force today, implementing the E-Privacy Directive (2002/58/EC).
Enforcement is through the Data Protection Authority (‘DPA’).
Data Protection Authority
1-3 Kifissias Avenue, Athens, Greece.
T 2106475600
F 2106475628
The DPA is responsible for overseeing the Data Protection Law
There is no requirement in Greece for organisations to appoint a data protection officer.
There is no mandatory requirement in the Law to report data security breaches or losses to the DPA or to data subjects.
Information/Notice Requirements:
- The Data Controller must inform the Data Subject of the following when Personal Data is collected:
- the identity (name, precise address and telephone number) of the Data Controller and, if applicable, of its representative in Greece;
- the address where the file or the main equipment supporting the Processing is located;
- the purposes of the Processing, in a manner that is unambiguous and easy to understand;
- the Personal Data or categories of Personal Data being processed by the Data Controller;
- the duration of Processing;
- the recipients or categories of recipients of the Personal Data;
- any transfer of Personal Data to third countries and the purpose of such transfer;
- the basic characteristics of the system and the security measures applicable; and
- the Data Subject’s right of access to the Personal Data and the right to object to the Processing of Personal Data relating to the Data Subject.
The Data Subject must be informed of any change in the above information promptly and in any event prior to any further use or Processing of the changed Personal Data.
If Personal Data is disclosed to a third party, the Data Subject must be informed in writing prior to such disclosure.
When Personal Data is collected directly from the Data Subject, the Data Controller must provide the information at the time of collection. If Personal Data is collected from other sources, the Data Subject should be informed promptly and in any case prior to any further use or Processing of the Personal Data.
If the Data Subject gives his/her required Consent or assistance to the Data Controller for the collection of Personal Data, then the Data Subject must receive the above information in writing.
If the Data Subject’s Consent is not required for the collection and Processing of Personal Data, the Data Subject must be informed about the Processing in the most appropriate and unambiguous way, so that the Data Subject is freely and adequately informed, e.g., by hanging a notice in the place of business or by delivering printed material.
The above obligation of the Data Controller to provide information to the Data Subject may be lifted by a decision of the HDPA if the Processing of the Personal Data is carried out for purposes of national security or for the investigation of particularly serious crimes or if the registration, purpose of the Processing, the recipients and the right of access constitute common knowledge of any diligent citizen.
Without prejudice to the right of access and to the right to object to the Processing of Personal Data, the above obligation to inform the Data Subject does not exist if the Processing takes place exclusively for journalistic purposes and refers to public figures.
No language requirements are stipulated in PIPPD, however, the relevant information should be given to the Data Subject in the language spoken, or at least clearly understood, by the Data Subject.
Opt-in regime: no direct marketing electronic mail can be legally sent without the express consent of the receiver, unless a pre-existing business or commercial relationship exists. (Consent is however not mandated for marketing to legal persons.)
Also, a specific opt out must be offered with each message. Disguised sender identities are prohibited, and a valid return address must be provided.
The term “Opt-Out Rule” means that the sending of e-marketing to the recipient is permitted on an opt-out basis if:
the recipient’s details were originally collected “in the context of a sale”.
the entity sending the marketing is the same legal entity that collected the recipient’s details initially.
the marketing relates to “similar” products and/or services for which the recipient’s details were originally obtained.
the recipient is given the opportunity free of charge to object to the e-marketing, both at the time their details were collected and in each subsequent communication.
Applicable Legislation:
Article 11, paras. 1, 3 and 7 of Law 3471/2006 as amended and in force today.
First party e-marketing
(entity that collects the data will send the e-marketing itself)
B2C: Opt-in. Opt-out permitted where Opt-Out Rule applies.
B2B: Opt-in. Opt-out permitted where Opt-Out Rule applies
Third party e-marketing
(entity that collects the data will share with third party partner for e-marketing)
B2C: Opt-in
B2B: Opt-in.
yahoo.gr 442494
hotmail.gr 76683
otenet.gr 70767
in.gr 31518
mail.gr 29680
freemail.gr 13874
hol.gr 10222
pathfinder.gr 8314
ath.forthnet.gr 7549
mailbox.gr 4700
tellas.gr 3432
mycosmos.gr 3170
sch.gr 2383
tee.gr 2123
gmail.gr 1707
panafonet.gr 1184
ontelecoms.gr 1143
vivodinet.gr 1115
kafounis.gr 952
vodafone.net.gr 852
cyta.gr 851
vip.gr 805
teemail.gr 768
the.forthnet.gr 717
uom.gr 614
eurobank.gr 590
auth.gr 540
aegean.gr 522
central.ntua.gr 521
upatras.gr 512
acci.gr 501
outlook.com.gr 473
ote.gr 468
forthnet.gr 448
intracom.gr 416
aueb.gr 406
altecnet.gr 404
nbg.gr 402
ceid.upatras.gr 398
acn.gr 396
upnet.gr 388
uth.gr 378
cosmote.gr 376
mail.ntua.gr 373
on.gr 363
yahho.gr 356
cc.uoi.gr 348
alpha.gr 331
piraeusbank.gr 327
internet.gr 320
netone.gr 316
unipi.gr 307
med.uoa.gr 301
ebox.gr 267
wind.com.gr 247
yaho.gr 243
yoo.gr 233
oktabit.gr 230
windowslive.gr 227
mou.gr 223
di.uoa.gr 221
hotmai.gr 220
ccc.gr 219
dsa.gr 217
millenniumbank.gr 215
aia.gr 210
uop.gr 205
marfinbank.gr 205
csd.auth.gr 203
antenna.gr 203
myspace.gr 200
dolnet.gr 200
her.forthnet.gr 194
med.auth.gr 188
1net.gr 173
aua.gr 172
rho.forthnet.gr 169
ate.gr 169
mfa.gr 165
csd.uoc.gr 165
emporiki.gr 164
hua.gr 159
yah.gr 157
pegasus.gr 155
teiath.gr 151
dei.com.gr 147
live.gr 146
ee.duth.gr 140
physics.auth.gr 133
yhoo.gr 130
icsd.aegean.gr 130
bankofcyprus.gr 130
titan.gr 129
msn.gr 123
agro.auth.gr 123
teilam.gr 121
ionio.gr 121
parliament.gr 120
helpe.gr 119
mnec.gr 116
ct.aegean.gr 116
cha.forthnet.gr 116
kpmg.gr 115
hayoo.gr 114
ert.gr 114
civil.auth.gr 114
ametro.gr 113
hahoo.gr 112
bankofgreece.gr 112
acgmail.gr 112
yaoo.gr 111
hellasnet.gr 111
deloitte.gr 111
yahou.gr 110
it.teithe.gr 109
enet.gr 108
unisystems.gr 107
yahooo.gr 104
med.uoc.gr 104
germanos.gr 104
city.academic.gr 104
vodafone.gr 103
teilar.gr 103
email.gr 103
aias.gr 100
bio.auth.gr 98
liberis.gr 97
teiser.gr 96
rhodes.aegean.gr 95
atticamedia.gr 95
pat.forthnet.gr 94
lar.forthnet.gr 94
vol.forthnet.gr 93
mech.upatras.gr 93
uowm.gr 92
ics.forth.gr 92
google.gr 92
inf.uth.gr 91
cti.gr 91
sound.gr 90
isc.tuc.gr 90
thelo.gr 89
jp-avax.gr 89
eap.gr 89
phys.uoa.gr 88
geniki.gr 87
env.aegean.gr 87
alter.gr 87
phed.auth.gr 86
firstdata.gr 84
tim.gr 83
bioacademy.gr 82
altec.gr 82
star.gr 81
space.gr 80
phyed.duth.gr 79
ab.gr 79
spark.net.gr 78
epu.ntua.gr 78
eng.auth.gr 78
teipir.gr 77
chem.auth.gr 77
x-treme.gr 75
eie.gr 75
phed.uoa.gr 74
panteion.gr 73
oneway.gr 73
hotmeil.gr 73
geo.auth.gr 73
acs.gr 73
pme.duth.gr 72
geol.uoa.gr 72
badoo.gr 72
pasok.gr 71
madmail.gr 71
iti.gr 71
icap.gr 71
ece.upatras.gr 71
com.gr 71
ymail.gr 70
imako.gr 70
econ.auth.gr 70
vet.auth.gr 68
interamerican.gr 68
first.gr 68
info.quest.gr 67
yaxoo.gr 66
yahoomail.gr 66
viva.gr 66
telecom.ntua.gr 66
geo.aegean.gr 66
med.upatras.gr 64
eydap.gr 64
dmst.aueb.gr 64
civil.duth.gr 64
yao.gr 63
iesl.forth.gr 63
hellenic-petroleum.gr 63
edc.uoc.gr 63
chemeng.upatras.gr 63
arch.auth.gr 63
tahoo.gr 62
med.duth.gr 62
chemeng.ntua.gr 62
intranet.gr 61
egnatia.gr 61
compulink.gr 61
chi.forthnet.gr 61
uoi.gr 60
staff.teicrete.gr 60
ret.forthnet.gr 60
proton.gr 60
mred.tuc.gr 60
liv.forthnet.gr 60
biol.uoa.gr 60
ahoo.gr 60
yahoo.com.gr 59
super3.gr 59
mland.gr 59
kathimerini.gr 58
ibg.gr 58
000.gr 58
cres.gr 57
alphatv.gr 57
ait.edu.gr 57
windtools.gr 56
ker.forthnet.gr 56
eled.auth.gr 56
econ.uoa.gr 56
chem.uoa.gr 56
grecotel.gr 55
aget.gr 55
helex.gr 54
chania-cci.gr 54
athenspress.gr 54
vianex.gr 53
syros.aegean.gr 53
sarantis.gr 53
hot.gr 53
eurobank-cards.gr 53
dias.aueb.gr 53
chemistry.uoc.gr 52
acsmi.gr 52
yhaoo.gr 51
yahhoo.gr 51
med.uth.gr 51
law.auth.gr 51
kav.forthnet.gr 51
kat.forthnet.gr 51
hq.otenet.gr 51
haef.gr 51
plaisio.gr 50
imbb.forth.gr 50
fortune.gr 50
electronet.gr 50
byte.gr 50
ttbank.gr 49
teihal.gr 49
oteglobe.gr 49
nova.gr 49
megaeuronics.gr 49
makro.gr 49
ipta.demokritos.gr 49
ath.hcmr.gr 49
arg.forthnet.gr 49
uom.edu.gr 48
netonline.gr 48
intersys.gr 48
homail.gr 48
hau.gr 48
for.auth.gr 48
alba.edu.gr 48
.yahoo.gr 47
terna.gr 47
teikav.edu.gr 47
mellon.com.gr 47
cperi.certh.gr 47
atc.gr 47
yagoo.gr 46
metal.ntua.gr 46
kos.forthnet.gr 46
imode.gr 46
b-online.gr 46
teledomenet.gr 45
teimes.gr 45
saniresort.gr 45
epp.teiher.gr 45
eko.gr 45
dpem.tuc.gr 45
cs.uoi.gr 45
teipat.gr 44
saracakis.gr 44
omd.gr 44
mail.otenet.gr 44
mai.gr 44
ing.gr 44
fleming.gr 44
enl.auth.gr 44
syr.forthnet.gr 43
skai.gr 43
pharm.uoa.gr 43
lit.auth.gr 43
fr.famar.gr 43
eurolife.gr 43
eett.gr 43
tui.gr 42
topo.auth.gr 42
orange.gr 42
leoburnett.gr 42
edu.biology.uoc.gr 42
delta.gr 42
certh.gr 42
cbs.gr 42
realconsulting.gr 41
newsphone.gr 41
metka.gr 41
iit.demokritos.gr 41
hotmal.gr 41
gerolymatos.gr 41
elpen.gr 41
eexi.gr 41
eas.gr 41
desfa.gr 41
ktpae.gr 40
iceht.forth.gr 40
cs.ntua.gr 40
anatolia.edu.gr 40
vivodi.gr 39
net.gr 39
leroymerlin.gr 39
kosmocar.gr 39
ilsp.gr 39
eurobanksec.gr 39
elval.vionet.gr 39
dent.uoa.gr 39
aix.meng.auth.gr 39
softlab.ntua.gr 38
relational.gr 38
naftemporiki.gr 38
mindshare.gr 38
me.gr 38
math.aegean.gr 38
mad.gr 38
hal.forthnet.gr 38
attikesdiadromes.gr 38
aplha.gr 38
sunlight.gr 37
statistics.gr 37
minagric.gr 37
media.uoa.gr 37
math.auth.gr 37
kz.ccc.gr 37
kleemann.gr 37
e-free.gr 37
cretafarm.gr 37
afs.edu.gr 37
xan.forthnet.gr 36
techlink.gr 36
ktimatologio.gr 36
ier.forthnet.gr 36
ekdd.gr 36
cream.gr 36
windnet.gr 35
survey.ntua.gr 35
pe.uth.gr 35
naf.forthnet.gr 35
mie.uth.gr 35
math.upatras.gr 35
insurance.nbg.gr 35
imel.demokritos.gr 35
hotmail.com.gr 35
germanosnet.gr 35
famar.gr 35
ergose.gr 35
ekdotiki.gr 35
ea.gr 35
daphne.gr 35
tem.uoc.gr 34
planet.gr 34
ims.demokritos.gr 34
ikea.gr 34
hoo.gr 34
gnet.gr 34
bgmomd.gr 34
apivita.gr 34
agn.forthnet.gr 34
yayoo.gr 33
www.gsis.gr 33
theweb.gr 33
temes.gr 33
marine.aegean.gr 33
ihu.edu.gr 33
filmnet.gr 33
ee.teiath.gr 33
desmie.gr 33
culture.gr 33
avaxdeco.gr 33
algosystems.gr 33
softone.gr 32
phs.uoa.gr 32
pharm.auth.gr 32
pcsystems.gr 32
pasteur.gr 32
info.gr 32
hlk.forthnet.gr 32
hcmr.gr 32
fme.aegean.gr 32
civitas.gr 32
ceg.gr 32
atticabank.gr 32
aerioattikis.gr 32
acscourier.gr 32
toyota.gr 31
sidenor.vionet.gr 31
ppp.uoa.gr 31
pksec.gr 31
physics.uoc.gr 31
pel.forthnet.gr 31
multirama.gr 31
koz.forthnet.gr 31
halcor.vionet.gr 31
gahoo.gr 31
elta-net.gr 31
ee.upatras.gr 31
ba.bbdogroup.gr 31
akmi-social.gr 31
12net.gr 31
tph.gr 30
soc.aegean.gr 30
maich.gr 30
les.forthnet.gr 30
kal.forthnet.gr 30
hotmil.gr 30
her.hcmr.gr 30
generali.gr 30
econ.soc.uoc.gr 30
dra.forthnet.gr 30
dent.auth.gr 30
axiom.gr 30
alphafinance.gr 30
zoo.gr 29
yohoo.gr 29
wwf.gr 29
tiresias.gr 29
teiep.gr 29
minerva.com.gr 29
megaron.gr 29
math.uoa.gr 29
jour.auth.gr 29
hsy.gr 29
ekt.gr 29
dionic.gr 29
beinoglou.gr 29
adel.gr 29
trk.forthnet.gr 28
travelplan.gr 28
teleperformance.gr 28
notoscom.gr 28
kotsovolos.gr 28
gsrt.gr 28
edlit.auth.gr 28
cmc.gov.gr 28
cc.uoa.gr 28
boldogilvy.gr 28
axd.forthnet.gr 28
axa-insurance.gr 28
antisel.gr 28
amphitrion.gr 28
alico.gr 28
aktor.gr 28
sit.forthnet.gr 27
mytilineos.gr 27
math.ntua.gr 27
lrworld.com.gr 27
lafarge.gr 27
klm.forthnet.gr 27
inlife.gr 27
hotmaill.gr 27
gvsystems.gr 27
eliamep.gr 27
depa.gr 27
central.tee.gr 27
audiovisual.gr 27
yellowpages.gr 26
vet.uth.gr 26
specifar.gr 26
rae.gr 26
psy.auth.gr 26
novabank.gr 26
neoset.gr 26
neochimiki-sa.gr 26
motorpress.gr 26
moi.gr 26
itserv.gr 26
hrmag.gr 26
goldair.gr 26
gats.gr 26
fremail.gr 26
free.gr 26
facebook.gr 26