Privacy policy

The present Privacy policy applies to all Users of the Platform (hereinafter referred to as the “Users” or the “User” and “Platform” respectively) and forms an integral part of the Platform's Website Terms and Conditions. The present Privacy Policy provides the User with general information regarding how the Data Controller uses your personal data and other information required by data protection legislation. In case of future amendment, the User will be provided with necessary updates and information through the update of the present Privacy Policy, uploaded in the Platform.

1. Who is the Data Controller?

1.1. The Company with the company name “SCIENCE FOR YOU”, address: TEPA Lefkippos - NCSR Demokritos 27, Neapoleos, 153 41 Ag. Paraskevi, Greece , Telephone: +302114004192, email: info@scify.org, is the Data Controller for the processing of the User’s Personal Data (hereinafter referred to as "Data Controller").

1.2. Data Controller's Contact details: For any issue or concern with regards to the present Privacy Policy and to the processing of User's personal data or data uploaded by the User to use the Platform, the User can communicate with the Data Controller, by using one of the following alternatives:

By calling at +302114004192, from Monday to Friday from 10.00 a.m. to 18.00 p.m. EET (Eastern European Time)
By sending an email at the following email address: info@scify.org
By sending correspondence to the following address: TEPA Lefkippos - NCSR Demokritos 27, Neapoleos, 153 41 Ag. Paraskevi, Greece

2. What is the purpose and the legal basis for User’s data processing?

2.1. Platform's operational purpose is to collect opinions of users via questionnaires. The opinions are processed in order to gain insights, gather and present valuable ideas and suggestions on the topics addressed in the questionnaires.Users can respond anonymously (without providing any personal information) or can voluntarily register in order to submit eponymous answers, by providing an email and a nickname. User's answers are translated into English and are presented in Reports. For the specific purpose of processing, the legal basis is User's prior consent.

2.2. To send User informative emails with the purpose to inform him about new activities, projects and other issues of interest of the Platform. For this purpose of processing the legal basis is the User's prior consent.

2.3. Processing of data for reasons related to Data Controller's compliance with legal obligations. In such cases processing of data takes place for only the necessary time period in order for Data Controller to comply with obligations imposed by various legal provisions.

In case of the above provisions where the legal basis is User's prior consent, the User can always withdraw his consent at any time without affecting the legitimacy of the data based on consent prior to its withdrawal.

3. Types of data collected

3.1 Personal data

3.1.1 Registration- account creation:
In order for a User to voluntarily create an account in the Platform, the User should fill in the necessary data: his nickname, email address, and a password.

3.1.2 Submitted questionnaire responses
The Platform collects user answers (that is opinions on various subjects) on questions made via Platform's questionnaires. These answers are analyzed and presented in a questionnaire results page. The User is strictly advised to conform the platform's "code of conduct for successful participation" and avoid posting publicly any personal data that do not wish to be publicly available on the Platform.

3.1.3. Platform's communication for reasons related to User's permitted use of the Platform.
In order for the Platform to communicate with the User for the above purposes, Data Controller can process all data relating to User's account, uploaded content and data related to the User's use of the Platform.

3.2 Usage data
We may also collect information how the webpage is accessed and used ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our webpage that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

4. How the Platform collects data

4.1 The information can be collected by the following ways:
4.1.1 When the User registers and creates an account on the Platform.
4.1.2 When the User submits answer's on the Platform's questionnaires
4.1.3 When the User visits the Platform and agrees to the installation of cookies (as per the Platform's Cookie Policy in article 11 below) and the collection of the User’s personal data such as the IP address, operation system, type and browser edition etc.

5. How long are User's data stored and when are they deleted?

5.1. User's account data:
Without prejudice to User's deletion/erasure right mentioned below, the Data registered and stored in the User's account will be stored as long as the User wishes to make use of the Platform for the purpose mentioned above. In case a User wishes to delete his account, he can delete his account through account's settings or contact Data Controller at the above mentioned contact details.

5.2. Platform's communication for reasons related to User's permitted use of the Platform.
Data related to such communication will be stored only as long as the User wishes to use the Platform and maintains his account. In case a User wishes to delete his account he can delete his account through account's settings or contact Data Controller at the above mentioned contact details.

5.3. Statistical analysis for the optimization of the Website
Regardless of the above mentioned provisions of article 5, Data Controller will store and process only necessary data for the period required in order to comply with its obligations imposed by law each time (compliance with fiscal obligations etc).

5.4. Processing of personal data for the purposes of conducting statistical analysis.
Please see cookies policy (article 11 ) below.

6. What are User's rights ιn relation to the processing of his data and how can he exercise these rights?

6.1 The Data Controller respects User's right in relation to data processing.
6.2 The User can exercise his rights by contacting the Data Controller at the following contact details: Telephone: +302114004192, email: info@scify.org
For User's facilitation, User's rights are included in the following table along with a short explanation of each right (reference to articles corresponds to article of GDPR 2016/679):

7.How is data security safeguarded?
7.1 The Data Controller implements all appropriate security measures to ensure protection and confidentiality of personal data among which the following are included:

1. Strong password policies in all servers
2. HTTPS protocol for interacting with APIs and Web clients
3. SSH protocol for server connection
4. Periodical server updates with latest security fixes

7.2 Please note that only specifically authorized employees of the Data Controller, acting under the authority of the Data Controller and only on his instructions as well as recipients, where necessary, handle the data submitted by the User. For the processing, the Data Controller chooses persons with appropriate qualifications that have sufficient safeguards as to technical knowledge and personal integrity to protect confidentiality. The Data Controller takes all necessary security measures for the protection and safeguard of secrecy, confidentiality and integrity of personal data also through relevant contractual commitments of his associates. In any case the security of the Website may be infringed due to reasons that reside outside of the Data Controller control sphere as well as due to technical or other problem of the net or force majeure or accidental facts. In that case, the security of personal data cannot be guaranteed.

8. Who are the recipients of data?
8.1. The recipients of User's personal data are associate companies that provide technical infrastructure for the operation of the Website, hosting provider as well as the company that undertakes to send electronic communication related to the operation of the Platform to Users. Where necessary as per applicable laws, the Data Controller will sign agreements with such companies, which refer to the implementation and regular monitoring of security measures. In case data are transferred outside ΕU all necessary guarantees are in place.

8.2. In case the Data Controller receives a request to notify or transfer data following a request by the appropriate Administrative Authority, Attorney, Court or other Authority, he may notify / transfer those data in order to fulfill his duty executed in favor of the public interest towards these authorities (with or without User's previous notification) in accordance with the appropriate legal provisions. If the User should be previously notified in accordance with the legal provisions, then the User has the right to object to this processing as provided in article 7 above.

8.3. Αs to the professional details of each User, they are available to all register Users of the Platform for the purposes mentioned above.

9. Communication with the Data Controller

9.1. For any issue related to the present privacy policy, User's data processing as well as exercise of User's rights, the User can contact the Data Controller using one of the following ways:
Telephone: +302114004192,
Email: info@scify.org
In case the User becomes aware of any data breach incident, he is kindly requested to notify the Data Controller immediately.

9.2. The present terms are governed and supplemented by the Terms and Conditions and consist along with them a uniform text.

10. Connection to other Websites/social media

This Website connects with other websites through hyperlinks. These websites are not related to Data Controller's Website and their content is neither checked nor recommended by the Data Controller. Thus, the accuracy, legitimacy, completeness or quality of their content and legitimacy of the processing of User’s personal data cannot be checked and no guarantee is provided for them. The Data Controller cannot be held liable for them or any damage that may be caused to the User due to or following their use. The Data Controller cannot check the processing of the User's personal data by those linked Websites and thus does not bear any liability. When the User accesses those websites he should take under consideration that terms and conditions of each website apply. For any issue that may occur as to the content or the use of the linked website, the User should directly contact the operator or administrator of each website. The Data Controller does not approve or embrace the Content or the services of the linked websites, which the User accesses through the Website.

The Website gives the User the possibility to connect and interact with social media following his own initiative and will. In that case the Data Controller is not liable for the processing of User's data taking place through or by the social media. The User should directly address each specific social media in order to exercise his legitimate rights.

11. Cookies

11.1. The Platform uses cookies to be operational or more efficient in its operation, to improve User's navigation, to provide User with the full potential of the Platform, to ensure the correct display of the content as well as for analytical and statistical purposes.

11.2. Cookies are small text files stored on User's computer when he visits a digital platform, which are used as a means of identifying his computer.

11.3. Cookies apart from absolutely necessary cookies are only installed if the User accepts their installation when he visits this Platform. By accepting cookies when entering this Platform, the User expressly states that he has read and understood the specific terms and conditions regarding the installation, function and purpose of the cookies and that he provides his consent for their use.

11.4. Alternatively, the User may not accept cookies. In this case, only cookies that are technically and functionally necessary for the operation of the Platform will be installed.

11.5. The User can manage the use and installation of cookies at any time through a panel, where he can choose which category of cookies he wants to accept and which ones not (or request to install only the technically necessary cookies).

11.6. In particular, the cookies used by the Platform are the following:

12. Children's Privacy

Our project does not address anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

13. Amendments to this Privacy Policy

The Data Controller reserves the right to amend this present Privacy Policy, for example when this is necessary to comply with new requirements imposed by applicable laws, guidelines or technical requirements, or in the course of a revision of the Data Controller's processes and practices. The User will be notified of any amendment to this Privacy Policy through the Platform. The User should regularly check this Privacy Policy for any amendments.