Last updated: 30 October 2026
This Privacy Policy explains how ELSA Greece processes the personal data of people who visit elsa-greece.org, contact us or apply for membership. It follows the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Greek Law 4624/2019.
1. Data controller
The controller is ELSA Greece, the Greek national group of the European Law Students’ Association (ELSA).
Registered office: [TO COMPLETE: registered address]
Email: [TO COMPLETE: contact email for data protection matters]
Membership applications go to, and are processed by, the local group you choose: ELSA Athens (athens@gr.elsa.org), ELSA Thessaloniki (thessaloniki@gr.elsa.org) or ELSA Komotini (komotini@gr.elsa.org). That group also acts as a controller for managing your membership.
Data Protection Officer (DPO): [TO COMPLETE if one has been appointed, otherwise remove]
2. What data we collect and why
a) Contact form
We collect your full name, email, phone number, the local group you are writing to and your message. We use them only to reply to you.
Legal basis: our legitimate interest in replying to people who contact us and, where it concerns future membership, steps taken before entering into a relationship (Art. 6(1)(f) and (b) GDPR).
b) Membership application or renewal
We collect:
- your local group
- your first and last name, email and phone number
- your status (e.g. undergraduate student, trainee lawyer)
- your student or registration number
- your law school or bar association
- your date of birth
- your gender (optional)
- proof of the membership fee payment
We use these to assess your application, to manage your membership and fees, and to keep you informed about the network’s activities.
Legal basis: performance of the membership relationship under our statute (Art. 6(1)(b)), and compliance with tax and accounting obligations for fees (Art. 6(1)(c)).
c) Newsletter
We collect your email address, only if you tick “Subscribe to the newsletter”. Legal basis: consent (Art. 6(1)(a)). You can withdraw it at any time through the link in every email or by writing to us.
d) Browsing the website
Our server records technical data (IP address, browser type, date and time, page visited) for security and operation. Legal basis: legitimate interest (Art. 6(1)(f)). For cookies, see our Cookie Policy.
3. Recipients
- The ELSA local group you choose, and the responsible members of its Board.
- Providers that process data on our behalf (processors): the website hosting and email delivery provider [TO COMPLETE: name of the production hosting/email provider], and the newsletter provider if one is used [TO COMPLETE].
- Public authorities, only where the law requires it.
We do not sell your data or share it for advertising. We do not transfer data outside the European Economic Area. The only exception is a service you enable with your consent, as stated in the Cookie Policy.
4. How long we keep data
- Contact messages: up to 12 months after our last exchange.
- Member data: for the duration of your membership and up to 2 years after it ends. Fee records are kept for as long as tax and accounting law requires [CONFIRM these periods].
- Newsletter: until you withdraw your consent.
- Server logs: up to 6 months.
5. Your rights
You have the right to:
- access your data
- have it corrected
- have it erased
- restrict its processing
- receive it in a portable format
- object to processing based on legitimate interest
- withdraw any consent at any time (this does not affect processing carried out before you withdrew)
How to make a request: email [TO COMPLETE: email] or your local group. We will reply within one month. For complex requests this can be extended by two months. We may ask you to confirm your identity.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens, tel. +30 210 6475600, www.dpa.gr).
6. Security
The website runs only over HTTPS. Access to its administration is limited to authorised members, and regular backups are kept.
7. Children
Our services are aimed at students and young lawyers aged 16 and over. We do not knowingly collect children’s data.
8. Changes
We may update this Policy. The date at the top of the page shows the last change.