PERSONAL DATA INFORMATION CLAUSE

This information on privacy rights describes the processing of the personal data uploaded to or collected on the website www.paokfc.gr (“Website”) and any other site on which it is published. This information provides also information on the processing of the personal data which were uploaded to or collected through Applications which are made available by PAOK F.C. on third-party platforms or websites.

1. Definitions
2. Type of personal data collected
3. Method of collection of the personal data
4. Purpose of the processing
5. Soft Spamming
6. Disclosure and diffusion of the data
7. Method of data processing
8. Possible disclosure by the interested party of third party personal data
9. International transfer, storing and processing of the personal data
10. The privacy rights of minors
11. Data Controller and Data Processor
12. Rights of the interested party
13. Amendments to this privacy information

Definitions

Aggregate Data. Aggregate data means the information on groups or categories of users, which do not identify and cannot be reasonably used to identify an individual user.

Anonymous data. Anonymous data means the information which do not identify and cannot be reasonably employed to identify an individual user.

Application. Application means a program or a service managed by PAOK F.C. (or on behalf of PAOK F.C.) which can be displayed in different environments and on-line platforms, mobile or otherwise, including those managed by third parties which allows us to directly interact with our users.

Minors. Minors mean the individuals identified by us as minors who are not able, according to the Law, to grant their consent to the collection and the processing of personal data.

Data Controller. Means the personal data controller responsible for the personal information collected by the Website and the Applications, i.e. PAOK F.C., with registered office at Mikras Asias Str., Toumba Stadium. P.C. 54351, Thessaloniki, Greece.

Data Processor. The personal data processor is an individual or entity which carries out the processing of personal data on behalf of one or more data controllers, authorized to carry out the data processing only according to the instructions of the controller.

IP Address. The IP address is associated to the access point through which the internet connection is carried out and it is usually controlled by the Internet Service Provider (ISP) of the user.

Notice. A notice may be sent by e-mail to the user at the last e-mail address indicated, through the publishing of amendment notices on the Website or the Application or using other means according to the current laws.

Parents. The parents term refers to a parent or a legal guardian.

Personal data. Personal data means the information which identify (directly or indirectly) a specific individual, for example the name, the postal address, the e-mail address, the telephone number, the navigation data, the IP address. When they are directly or indirectly associated to personal data, the anonymous data are also processed as personal data.

Website. the website www.paokfc.gr

Type of personal data collected

We collect two basic types of information: personal data and anonymous data; furthermore, we may use either personal or anonymous data for the creation of a third type of information: aggregate data. We collect the following categories of personal data:

registration data uploaded when the user creates an account, which include name and surname, home address, sex, date of birth, state of birth, e-mail address, username and password;

data of the transaction uploaded when one of our products or services is purchased on our Website or through our Applications, which include information on the purchased products/services, the postal address, the telephone number and the payment information;

data uploaded in public forums on the Website and Applications;

personal data sent by a user to another one within a close group, through messaging, chat, message publication or similar functions, provided that the service is active AND allowed by the applicable legislation;

personal data uploaded while using the Website, our Applications, our Applications on third party platforms or websites, such as social networking sites or when the user links his profile on one third party website or platform through his registration account;

information on the location of the user at the moment of the visit to our Website or the use of our Application, including the location information provided by a mobile device which interacts with our Website or Applications, or related do the IP address of the user, provided that the processing of such data is allowed by the applicable legislation;

use, display and technical data, including the device identification code or the IP address of the user, the moment in which the user visits the Website, uses our Applications on third-party websites and platforms, or opens our e-mail messages.

Method of collection of the personal data

We collect the personal data uploaded by the user when products, services or information are requested or when the user signs up on the Website, takes part in public forums or other activities on our Website and Applications, contacts our customer care, replies to questionnaires or surveys, takes part in a promotion, a game or a competition or otherwise interacts with us. Please acknowledge that when the user provides personal data to third party platforms or websites (for example, through our Applications), the data sent may be collected separately by the third-party website or platform. We collect personal data complying with the provisions of the current legislation on personal data; furthermore, the personal data collected by third party websites and platforms are subject to the directives on privacy of such third-party websites and platforms. The decisions concerning privacy made by the user on third party websites and platforms shall not apply to the use by us of the personal data directly collected by use through our Applications.

The IT systems and the software procedures employed for running the Website collect, during their normal course of operation, some personal data whose transmission is implied by the use of the Internet communication protocols. Such information is not collected to be associated to identified concerned persons, but, due to their own nature, may, through processing and the association with data held by third parties, allow the identification of the users. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI addresses (Uniform Resource Identifier) of requested resources, the time of the request, the method utilized to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters related to the operating system and the IT environment of the user. Such data are used only to obtain anonymous statistical information on the Site and to check its correct functioning and are stored for the time defined by the relevant legislation. The data may be used to ascertain responsibility in case of hypothetical computer crimes against the Website.

We collect personal data also by technological means such as cookies, when the user visits our Website and Applications or when he uses our Applications on third-party websites and platforms. For any additional information, including the procedure for disabling cookies, please read the Cookie Policy.

Purpose of the processing

Access to and browsing the site are free, but the possibility to receive certain online services offered by the Website is allowed only subject to registration by the user. The registration process consists of the filling of an on-line form in which the user is requested to state his personal data – some of them are required – for activating the authentication credentials (email + password) through which, then, the interested party person will access to all the areas and the services of the Website which are reserved to the registered users. Thus, firstly, the primary purpose of the processing is the need to allow that the requested procedures of prior online registration and for the creation of an account are carried out and to enable the operators of the Website the generation and the subsequent technical and administrative management (including the provision of technical support and assistance upon request) of the account, of the activation codes, of the passwords and similar authentication credentials to be employed on the Website as created by the users within the registration process.

Thus the processing of the personal data (including their recording in the PAOK F.C. database) seeks to achieve the following primary purposes:

1. a) guarantee the registration to the Website, enable the user to access to the web pages of the Website where it is possible to receive the online services, guarantee the correct provisions of the services requested from PAOK F.C. through the Website, and, therefore, perform in a correct and a timely manner all the obligations arising from the contractual relationship established, and also the obligations provided for the current legislation or regulations, in particular obligation related to tax or public security purposes;

1. b) for administrative and accounting purposes, including the transmission, if any, by e-mail of business invoices by PAOK FC and/or any company connected thereto during the supply of the service, for the delivery of notices to the user which regard the account or the transactions carried out with PAOK F.C.;

1. c) Lastly, the primary purposes include also certain technical processing carried out employing the so-called «technical cookies» based on what is detailed in the Cookie Policy. In such specific cases, the technical treatments seek solely to carry out the transmission of a communication on an electronic communication network to the extent strictly required for supplying the services expressly required by the users.

In all the cases under points a), b) and c) above, PAOK F.C. shall not be obliged to procure any specific consent from the user. All the processing detailed above seek, actually, primary purposes for which art. 5 of the Law 2472/1997 (Protection of the persons from the personal data processing, hereinafter referred to as the “Personal Data Law”) excludes the need to procure a specific consent from the interested party, either because the processing is required for complying with an obligation set by the Law, by a regulation or by the EC legislation, or because the processing is required for carrying out any duty arising from an agreement in which the concerned person is one of the parties, or for meeting, before the execution of the agreement, specific requests of the concerned person.

In the case where the user does not intent to provide in any case the requested personal data, which are required based on the above, this would lead to the impossibility to complete the registration to the Website and to receive all the services for which the registration and the provision of the data are in any case required based on technical and contractual reasons.

It would remain in any case possible to browse the Website as a non-registered and anonymous user and to display only the contents and the materials available without registration.

Complying with the Personal Data Law and the user’s choices, the data may be also processed for the following secondary purposes:

1. d) for registering to the mailing lists held by our Company, for carrying out market surveys and polls (also by telephone, online, and using forms), the delivery of advertising and information material on the products and services offered by PAOK F.C. by the PAOK F.C. partners, solicitations of purchase, through automated systems, such as e-mail, fax, sms or MMS, or traditional methods (for example: traditional post letters), or by telephone with an operator (hereinafter, globally “Processing for Marketing purposes”);

1. e) for the processing of the user’s market profile (by sampling the consumption patterns), seeking, both to monitor the satisfaction degree of customers for ensuring the best satisfaction of their needs, both to send customer specific information and/or advertising material, using automated systems, such as e-mail, fax, SMS or MMS or by ordinary post.

In all the cases detailed under points d) and e) above, the data may be processed only if a specific consent is granted. The lack of any declaration of consent shall be held as a denial.

Then, by granting the optional consent, the interested party specifically acknowledges and authorizes such further possible processing. In any case, even if the concerned person granted his consent to seek the purposes listed under points d) and e), he shall remain in any case free to cancel it in any moment, by sending a clear notice on the matter to PAOK F.C. at the following e-mail and postal addresses: e-mail: [email protected], postal address: Mikras Asias Str., Toumba Stadium, P.C. 54351, Thessaloniki, Greece.

The denial will not involve any consequence, except for the impossibility of being included in statistical analysis and/or profiling and to receive promotions, discounts and focused communications, based on the provided data, or to be informed on any marketing and promotional/advertisement initiatives. Therefore, for such further purposes, the processing shall be carried out only according to the purposes and based on the specific consent granted by the concerned person upon registration to the Website.

Soft Spamming

Limited to the e-mail address provided by the user while purchasing a service through the Website, the provided data may be employed for allowing the direct offer by PAOK FC of similar products and services (so-called soft spamming), without prejudice for the right of the user to oppose such processing.

Disclosure and diffusion of the data

Any collected data may be disclosed to:

– The officers of PAOK F.C. who are entrusted with certain task or parts thereof, that are required for supplying or distributing the services offered through the Website, or whose activity is connected, instrumental or supportive of that performed by PAOK F.C. The full list of Data Processors is available upon request of the interested party.

– Any entity (Public Authorities includes) which may access to the personal data based on statutory and administrative provisions.

– To any public and/or private subject, individuals and/or entities (legal, administrative and tax consultancy firms, Judicial Authorities, Chamber of Commerce, Labour Authorities, etc.), if the disclosure is required or functional for the correct performance of the contractual obligations, and also of the statutory obligations.

In any case, the personal data shall not be disclosed.

Method of data processing

The processing of the personal data shall be mainly carried out using electronic or in any case automated means, according to the modes and with the appropriate means for ensuring the safety and the confidentiality of the data themselves, according to the provisions of the Personal Data Law 2472/1997 and the Directives of the Greek Authority for the Protection of Personal Data. In particular, all the technical, IT, organizational, logistic and procedural safety measures, as envisaged by the Law and the above Directives, shall be adopted in order to ensure the minimum level of protection provided for by the law, allowing the access only to the persons appointed for the processing by PAOK F.C.

Possible disclosure by the interested party of third party personal data

The user acknowledges that the possible indication of personal and contact data of any third party different from the interested person shall be held as a personal data processing, with regards to which he shall act as independent controller, undertaking all the obligations and responsibilities provided for by the Personal Data Law. To that effect, the user guarantees to PAOK F.C. that any third party data which shall be indicated in such way by the user (and which shall be accordingly handled as if the third party granted his informed consent to the processing and the disclosure of the data to PAOK F.C.) was collected by the user himself in full compliance with the Personal Data Law. To this regards, the user grants the widest indemnification with regards to any objection, claim, request for compensation of any damage arising from the processing, etc. which may be received by PAOK F.C. from any third party interested based on the provision of the data indicated by the user violating the applicable provisions on personal data protection.

International transfer, storing and processing of the personal data

The data are stored on servers located in Greece. There is the possibility that PAOK F.C. stores personal data on a cloud, which means that the data may be managed by a provider of cloud services on behalf of PAOK F.C. and stored in different locations worldwide. If our activity implies the transfer of personal data to third parties located in different places worldwide, for the purposes described in this privacy information, wherever the personal data are transferred, stored or processed by us, we shall adopt suitable organizational and contractual measures for safeguarding the personal data and we shall impose similar requirements, which are not less restrictive, to the providers of the cloud services, including the obligation to process the personal data only for the purposes listed above. Furthermore, when we use or disclose personal data transferred from countries which entered into Safe Harbor Agreements with the USA, we comply with the Safe Harbor principles as defined by the US Department of Commerce, we use standard contractual clauses approved by the European Commission, we adopt other measures under the legislation of the European Union for ensuring an appropriate protection, or we obtain the consent of the user.

The privacy rights of Minors

With regards to the functionalities of the Website, we do not intentionally collect personal data of Minors. According to the applicable Laws, the Parent must grant his consent to the collection of the personal data of the Minor; the registration to the Website by the Minor shall therefore be authorized by the Parent and carried out under the supervision of the Parent himself, for that reason, the e-mail address supplied must be the e-mail address of the Parent. The parent has the right to review and to request the removal of the personal data.

The products/services on the Website can be purchased only by persons over 18 years of age using a valid credit card.

Data Controller and Data Processor

The Data Controller is PAOK F.C., with registered office at Mikras Asias Str., Toumba Stadium. P.C. 54351, Thessaloniki, Greece. The designated Data Processors are the officers appointed by PAOK F.C. according to Article 6 of the present. The interested party may consult the Data Processor to the following e-mail and postal addresses: e-mail: [email protected], postal address: Mikras Asias Str., Toumba Stadium, P.C. 54351, Thessaloniki, Greece.

Rights of the interested party

It should be noted that the Personal Data Law establishes the interested party has specific rights, among which is the right to get confirmation on the existence of his or her personal data, even if not registered yet, to receive clear communications on such data, its origin, the purposes and modes whereby it shall be processed, as well as on the logic applied in case of data processing performed with the support of electronic means. Furthermore, the interested party can receive updates, amend the data, or, if necessary, integrate it with other data, as well as deleting, making anonymous, or blocking access to said data following legal violations. The interested party may also oppose, in full or in part and for legitimate reasons, the processing of his/her personal data even if pertinent to the purpose of the collection, i.e. for commercial communications, for the mailing of advertisement materials, or for direct selling.

Amendments to this privacy information

Occasionally, we may amend this privacy information in order to include new technologies, industry practices and statutory requirements, or other purposes. We shall inform the user through a relevant Notice in the case where such amendments are significant and we shall obtain the consent from the user if so provided by the current laws.

What are Cookies and do We use them?

Like other Websites, information and data on the «PAOK FC app» may be automatically collected through «Cookies». «Cookies are small text files which a web site can use to recognize repeat users. «Cookies» allow Us to observe how Our visitors navigate the «PAOK FC app» on each visit and enable Us to improve the «PAOK FC app» by reflecting interests and targeting appropriate advertising.

Cookies do not attach to Your system or damage Your files. Most browsers automatically accept cookies, but if You do not want information collected through the use of cookies, there is a simple procedure in most browsers that allows You to deny or accept the cookie feature. Please note however, that if You turn cookies off, then this will limit the service that We are able to provide to You and may affect Your visitor experience.

On this website, We use the following types of cookies:

Strictly necessary cookies: These cookies are essential to enable You to navigate around the site securely and to provide You with services You have specifically requested. For instance, they help ensure that payments are processed securely.

Functionality cookies: These cookies enhance the functionality of the website by storing Your preferences. For instance, they can remember Your name and location, if You provide this information.

Performance cookies: These cookies improve the performance of the website. For instance, they help pages load quicker.

Online behavioral cookies: These cookies store information about your online behavior, such as your browsing history. For instance, they help us tailor the advertising We show You to Your interests.

For more information about cookies, including details as to what they are and how to refuse them, please visit www.allaboutcookies.org