Personal Data Protection Policy – Stavros Niarchos Foundation (SNF)


The present Policy describes the way in which we process your Personal Data, collected through the electronic application, within the framework of the provisions of the applicable legislation. This Policy is complemented and completed by all other policies that are in effect, according to our individual relationships with you.


Who is responsible for processing your Personal Data?


The entity responsible for processing your Personal Data is the Office of the Stavros Niarchos Foundation in Athens (hereinafter referred to as the “SNF”), located on 86A Vasilissis Sofias Ave., Athens, GR -115 28


Which categories of Personal Data do we process?


Although only nonprofit legal entities are eligible to apply for a grant, during the registration process we may collect and process the Personal Data of individuals, e.g. legal representatives, contact persons, etc. The Personal Data we may collect and process include the following data categories: First and last name, address, email address and telephone number, profession, and other information concerning the Organization.


For what purposes do we collect your Personal Data?


Your Personal Data is collected for specified, explicit, and legitimate purposes, and is not further processed in a manner incompatible with these purposes. We collect and process your Personal Data in order to:


1. Process your request and communicate with you when assessing your request


2. Establish and exercise our legitimate rights, the managing of our operations and information systems infrastructures, in accordance with our internal policies and procedures, including those relating to the operation of information systems, data and application hosting, data analysis, file management and internal control procedures in the context of satisfying the legitimate interests of the SNF


With whom do we share your Personal Data?


With respect to the purposes outlined above, we may share your Personal Data with third parties, including: third-party service providers, such as legal and other consultants, security and facility management providers, and other third parties with whom we partner to perform our activities. We may disclose your Personal Data to public and judicial authorities if such action is required by legal authorities.


How do we protect your Personal Data?


The SNF, based in Bermuda, has offices in Monaco and New York, in addition to Athens. Thus, in the context of its activities, data may be transmitted, including Personal Data, outside the European Economic Area. Such transmission will only take place subject to the availability of appropriate guarantees. You may request more information about the above Data transmissions, the guarantees under which they are performed, and ask for a copy by sending a letter request to info@snf.org. The SNF uses the appropriate technical and organizational measures to comply with data protection laws and uses malware protection systems, firewalls, and data encryption technologies. However, no data transmission over the Internet or electronic data storage system can guarantee absolute safety. If you have any indication that your communication with us in no longer safe, please inform us at info@snf.org.


What are your rights regarding your Personal Data?


At any time, you may submit a request to SNF for access to your Personal Data. You have the right to request the correction of your Personal Data, and, subject to the conditions of the Law, to exercise the right of deletion, the right to limit processing, the right to data portability, and the right to object to processing. You have the right to withdraw this consent, without prejudicing the legitimacy of the processing based on it, prior to its revocation. Finally, you have the right to file a complaint with the Personal Data Protection Authority, 1-3 Kifissias Ave., Athens, GR-11523


How long do we keep your Personal Data?


We ensure that the Personal Data we collect is processed for no longer than is necessary to meet the specific purpose of processing and/or as required to comply with any recordkeeping obligation provided for by applicable laws.