AMS Privacy Policy
Controller details
Α public limited company (societe anonyme) under the corporate name "National Infrastructures for Technology and Research S.A." and the distinctive title "GRNET S.A."
Controller's Contact Details
dpo at grnet.gr
Processor Details
ARGO Support Team
Processor's Contact Details
argo at grnet.gr
Scope of this Privacy Statement
The National Infrastructures for research and technology SA (GRNET) is bound by the European Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR).
This Privacy Statement describes the policies and procedures in place by GRNET to protect the privacy of Messaging Service in particular the ARGO MESSAGING Users.
This Privacy Statement sets out the criteria and the conditions under which GRNET collects, processes, uses, stores and transfers the personal data of the service Users, how the confidentiality of such information is ensured as well as any law and/or regulation implemented or enacted in accordance with the GDPR and the legislation on the protection of electronic privacy, or any law which modifies, replaces, adopts or codifies any of the above laws, as well as any other applicable national laws on the processing of personal data and privacy, as they may exist under applicable law
GRNET reserves the right to modify and update the present Policy whenever deemed necessary, whereas any changes shall become effective after they are posted on the https://argoeu.github.io/argo-messaging/
For the purposes of this Privacy Statement, the terms "data controller", "data processor", "third party", "supervisory authority", "personal data", "processing", "data subject" shall have the meaning ascribed to them by the applicable law on the protection of personal data. Moreover, for the purposes of the present, the following terms shall also apply:
"Website" – the website accessible through the domain names https://argoeu.github.io/argo-messaging/, including all of the web pages thereof.
"User" - the internet user of the "Website", whom the data refer to and whose identity is known or who may be, directly or indirectly, identified.
A. Purpose/s for processing the data collected:
GRNET collects and processes the personal data of its Clients-Users, referred to herebelow, for the following purposes:
- Technical capability for a smooth and uninterrupted operation of the "Website".
- Troubleshooting messaging connection problems
- Metric Collection
- Service Provisioning
Creating statistics reports and graphics. Information contained in statistics reports and graphics statistics do not comprise any Users personal data.
GRNET collects and processes Users-clients’ personal data solely and exclusively for the purposes mentioned above and only to the extent strictly necessary to effectively satisfy such purposes. These data are always relevant, reasonable and not more than those required to meet the purposes set out above. Moreover they are accurate and, where appropriate, subject to updates. Furthermore, such data are retained only during the period required for collection and processing purposes as aforementioned, and are deleted at the end of that period..
B. Categories of personal data processed:
(a) When entering and using the Website, either through a user account or anonymously
- IP address
- Navigation data within the Website through the installation of cookies (see Cookies policy)
(b) When creating a personal account for ARGO MESSAGING
- E-mail address
- Name
- Surname
- Organization
- Token
GRNET does not collect or have access in any way, to sensitive User-client data (racial or ethnic origin, religion, etc.).
C. Lawfulness of the processing operation
The personal data of "Users" are processed in the context of the provision of ARGO MESSAGING Services and for the purposes described in this Privacy Statement, in line with the need (technical and organizational) to best perform ARGO MESSAGING Services as well as to respond to "Users" requests concerning the ARGO MESSAGING Service.
D. Access to personal data:
GRNET may provide access to, or provide data related to, or necessary for supporting the Website, to the following natural persons or legal entities:
The ARGO MESSAGING Support Team, personnel under an employment relationship with GRNET
The processing of the Users personal data by the aforementioned natural persons and/or legal entities, in their capacity as GRNET’s partners, may be conducted only under the control and upon authorization issued by GRNET. Finally, such partners should comply with the same privacy requirements as GRNET in accordance with the present Privacy Statement.
E. Recipients of collected personal data:
GRNET SA does not, in any way, transfer/transmit or disclose the personal data of the "Users" to any third party business organizations, natural persons or legal entities, public authorities or agencies or any other organizations, other than those specifically referred to herein.
The personal data of the"Users" may be communicated or transferred to government authorities and/or law enforcement officers, if that is required for the above purposes, or within the scope of enforcing a court decision or order, or for complying with a provision of law, or if so required in order to serve the legitimate interests of GRNET as Data Controller, in accordance with applicable law.
F. Rights of Data Subjects:
GRNET performs all necessary actions both during collection and at each subsequent processing stage of the ARGO MESSAGING Users personal data, so that each User is fully enabled to exercise the rights guaranteed by applicable data protection laws, namely the rights to access, rectify, erase and restrict processing, as well as the right to data portability, which are described below:
- Right of Access: The data subject has the right to request and obtain from the Controller, within a time-period of one (1) month, confirmation as to whether or not personal data concerning him or her, are being processed, and, where that is the case, access to the personal data and to certain information, as laid out by applicable law. It may also request a copy of the personal data undergoing processing as described herein by sending an email message to the address: argo@grnet.gr
- Right to rectification: The data subject has the right to require the Controller to rectify inaccurate personal data concerning him/her. Taking into account the purposes of the processing, the data subject is entitled to have incomplete personal data completed, including by means of providing a supplementary statement in accordance with the applicable law.
- Right to erasure: The data subject has the right to obtain from the Controller the erasure of all personal data collected and processed within the scope of the ARGO MESSAGING Service, in accordance with the applicable law.
- Right to restriction of processing: The data subject is entitled to obtain from the Controller the restriction of processing of his/her data where the accuracy of the data is questioned or where any of the other conditions set out by the applicable law, is met.
- Right to data portability: The data subject shall have the right to receive any personal data relating to him/her and which he/she has provided to the Controller in a structured, commonly used and machine readable format, as well as the right to transmit such data to another controller without objection by the controller to whom such personal data were provided in accordance with the law.
These rights are subject to various restrictions pursuant to applicable law, including for example if the fulfillment of the data subject's request may disclose personal data of another person or in the event that GRNET is required by law to retain such data.
To exercise any of the aforementioned rights, the "User" may contact the ARGO MESSAGING Support Team at the email address referred to hereinabove.
G. Personal data retention periods
The personal data of ARGO MESSAGING "Users" shall not be retained for a period of time longer than is necessary for the operations of the Service and the audits that it undergoes to that effect.
| Categories of personal data collected | Time and place of retention of personal data |
|---|---|
| 18 months (log retention) |
| User Name, Name, Surname, Organization, e-mail address, will be deleted on user request |
Email, Name will deleted from db on user request
H. Privacy and Security of Information:
The processing of personal data by GRNET SA is performed in a manner that ensures both confidentiality and security thereof. All appropriate organisational and technical measures shall be taken to safeguard data against any accidental or unlawful destruction, accidental loss, alteration, prohibited dissemination or access or any other form of unfair processing. The services provided by GRNET SA are constantly evaluated to be in line with the safety requirements of international standards. GRNET's Information Security Management System (ISMS) has been certified by the accredited certification body, EUROCERT SA In particular:
- Access to technical log data is restricted and can only be accessed in a secure way by the Argo Messaging Service service staff.
- When accessing the Argo Messaging service adequate security controls are in place to keep your personal data safe in accordance with the classification of the personal data we have collected from you.
- We use encryption (HTTPS) to keep data private while in transit. Data sent using HTTPS is secured via Transport Layer Security protocol (TLS), which provides:
- Encryption---encrypting the exchanged data to keep it secure from droppers.
- Data integrity---data cannot be modified or corrupted during transfer, intentionally or otherwise, without being detected.
- Authentication---proves that your users communicate with the intended website.
- We review our information collection, storage, and processing practices, including physical security measures, to prevent unauthorized access to our systems
Although we follow best security practices to ensure your personal data remains secure, there is no absolute guarantee of security when using services online. While we strive to protect your personal data, you acknowledge that:
- There are security and privacy limitations on the internet which are beyond our control and can have a negative impact on the confidentiality, integrity and availability of the information.
- We cannot be held accountable for activity that results from your own neglect to safeguard the security of your login credentials and equipment which results in a loss of your personal data. If you feel this not enough, then please do not provide any personal data.
Your personal data will be protected according to the Code of Conduct for Service Providers , a common standard for the research and higher education sector to protect your privacy.
I. Contact:
For any questions or clarifications regarding this Privacy Statement and as well as in the event of any issues related to violation of personal data, "Users" may contact the ARGO MESSAGING Support team at the e-mail address mentioned above. They may also contact the GRNET Data Protection Officer (DPO), Vasiliki Konstantinopoulou, at the e-mail address: gdprteam@grnet.gr
K. Recourse/Complaint:
In case a request of an ARGO MESSAGING "User" is not satisfied by the Data Controller or by the Data Protection Officer, the User may at any time file a complaint with the Competent Supervisory Authority, namely the Data Protection Authority http://www.dpa.gr.