ELAO Privacy Policy
Basic principles
The Hellenic Aeronautical and Air Sports Federation (ELAO) recognizes as fundamental the right to protection of personal data of every natural person.
In this context, ELAO, as the 'Processor', is in line with the requirements of the European General Data Protection Regulation EU 2016/679 (known as 'GDPR') and the current Legislation, respecting the rights and freedoms of data subjects and ensuring that their personal data:
- are collected for specific, clear and lawful purposes, as recorded in the processing activity file maintained by ELAO
- are processed lawfully, lawfully and transparently, on the basis of consent, the exercise of a legitimate interest, the fulfillment of legal obligations or the performance of a contract
- are stored securely to protect their confidentiality, integrity and availability.
It is important to know that keeping records of race results and athletes' performance, for historical, statistical and fan information purposes, falls within the scope of the legal interest of ELAO, which is the official institutional body for the cultivation of Air Sports in our country. since 1928.
Subject Categories
Categories of individuals whose personal data are processed by ELAO include:
(1) athletes (registered in sports clubs-members of the Federation),
(2) volunteers,
(3) judges,
(4) suppliers / partners (freelancers and sole proprietors),
(5) business executives (suppliers, sponsors, etc.),
(6) members of the Board of Directors of the Federation and the other Administrative Bodies,
(7) members of the Air Sports Committees,
(8) agents of sports clubs and institutions.
Categories of Personal Data
ELAO processes, depending on the capacity of each natural person, the following categories of personal data:
(1) Unique IDs (eg ID / passport number, AMKA, TIN),
(2) Basic data (eg name, gender, age),
(3) Name of sports club,
(4) Athletic performance data,
(5) Contact details (eg Email, telephone number),
(6) Financial data (eg IBAN, registration fee)
(7) Image data (eg photo, video)
Rights
According to the General Data Protection Regulation, you have the following rights in relation to the protection of your personal data:
- access to your data,
- correction of your data, in cases where the information kept by the Federation is incorrect or incomplete,
- a request to delete your data (‘right to be forgotten’), unless there is a related legal obligation or claim on the part of the Federation, and this data is not related to the official results of matches,
- revocation of your consent, in cases where consent is the legal basis for the processing of your data. Please note that in the event that you participate in freestyle races for the public, your request must be submitted within specific time limits as stated in the respective registration application which must be read carefully,
- opposition to processing for a specific reason,
- processing limitation,
- request to transfer your data to another Processor. In order to exercise any of your rights, please send the relevant request to the Data Protection Officer of ELAO, at the e-mail address you will find at the end of this text (see Contact). Our response will be provided within one (1) month of receiving the request, except where an extension of up to two (2) additional months may be required due to the complexity and number of such requests, at which time you will be informed in a timely manner. If you do not receive a response to any of your requests, you have the right to file a complaint to the Personal Data Protection Authority (www.dpa.gr).
Confidentiality agreement
ELAO has signed a confidentiality agreement with the respective companies for all applications that use third party servers. Modifications to this ELAO will update this text on Personal Data Protection on a case-by-case basis so that it reflects possible changes that have occurred in its functions, or in the legal and regulatory framework, and / or in the way it communicates with data subjects. Reviewing this text at regular intervals is a useful practice that will allow you to have the most up-to-date information on the Personal Data management procedures applied in the Federation.
Contact
ELAO welcomes questions and comments regarding the Protection of Personal Data. For this purpose, you can contact the certified Data Protection Officer (DPO) at the e-mail address: dpo@elao.gr