This personal data processing/protection policy (hereinafter "Policy") provides information regarding the collection, storage, processing and use of your personal data.

The company with the name SECNEWS SINGLE-MEMBER PRIVATE CAPITAL COMPANY (hereinafter "SECNEWS" or "Company" or "we" or "us"), headquartered at 6 Gamveta Street, 10678 Athens Attica, tel. (800) 848 1150, e-mail mng@secnews.gr , acting as Data Controller, processes personal data (hereinafter Data or Personal Data or us).       

1. A few words about SECNEWS.

SECNEWS is the No. 1 online information hub for technology news, Security, Hacking, TV and generally for all developments in the field of security and IT.

2. What is personal data?

The term Personal Datarefers to information about natural persons, such as name, postal address, email address, contact telephone number, etc., which identifies or can identify you.

3. What is Personal Data Processing?

Any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

4. What Data does the Company collect from you and for what purpose?

SECNEWS ensures that only Data that is absolutely necessary and is used exclusively for the purposes for which it was collected.

For example, SECNEWS processes your Data, such as Identity Data (e.g. name, surname), Contact Data (e.g. phone number, email address) and Data collected through Cookies (e.g. IP).

It also processes Data collected through your profile, namely your username, public posts and communication via private chat with us on social media [Facebook, Twitter, YouTube, Instagram, Google], on which the Company has official accounts.

The above Data is collected by the Company for the purpose of:

• The answer to the questions you submit through the contact form.
• Sending newsletters.
• Your registration to participate in the Ethihak.
• Online employee training on cybersecurity issues through the Security Awared platform .

5. What is the lawful basis for processing your Data by SECNEWS?

• The safeguarding of our legitimate interests,
• Compliance with our legal obligations (e.g. tax legislation, etc.),

Specifically for the processing of your social media profiles and activity, SECNEWS is considered a joint controller of your Data together with the respective social media platform.

The legal basis for the processing is your consent, which you provide by liking or following SECNEWS pages and you can withdraw it just as easily, in exactly the same way (unlike, unfollow). Your consent implies acceptance of SECNEWS 's Data Protection Policy, which is listed in a prominent and easily accessible place on its website. If you do not agree with SECNEWS 's policy , you must withdraw your consent in the appropriate way (unlike, unfollow).

SECNEWS is not responsible for the manner or means by which each of the above platforms processes your Data. Please check their policies from the corresponding links on the social media sites on which you maintain a profile .

is considered a joint controller of your Data together with the respective social networking platform.

The legal basis for the processing is your consent, which you provide by liking or following SECNEWS pages and you can withdraw it just as easily, in exactly the same way (unlike, unfollow). Your consent implies acceptance of SECNEWS 's Data Protection Policy, which is listed in a prominent and easily accessible place on its website. If you do not agree with SECNEWS 's policy , you must withdraw your consent in the appropriate way (unlike, unfollow).

SECNEWS is not responsible for the manner or means by which each of the above platforms processes your Data. Please check their policies from the corresponding links on the social media sites on which you maintain a profile .

6. Who are the recipients of your Data?

Access to your Data is limited to the Company's strictly necessary personnel, who are committed to maintaining confidentiality. Your Data may be disclosed to companies collaborating with us for technical support & software maintenance, website management, and accounting services.

7. How do we ensure that Processors & Subprocessors respect your Data?

The Processors used by SECNEWS are committed to:

• to maintain confidentiality,
• not to send your Data to third parties without the Company's permission,
• to take appropriate safety measures,
• to comply with the legal framework for the protection of personal data and in particular Regulation 679/2016/EU (otherwise GDPR) and Law 4624/2019.

8. Does SECNEWS send your Data outside the EU?

Some of the providers mentioned in section 18 (e.g. Cloudflare, Google, Amazon Web Services, Mailchimp, OneSignal) are based in the USA or process Data outside the EU/EEA. In these cases, the transfer takes place only with appropriate safeguards of the General Data Protection Regulation (GDPR), such as the adequacy decision for the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

9. How long does SECNEWS keep your Data and when does it delete it?

SECNEWS retains your Data for as long as necessary to fulfill the purpose for which you communicated it to us .

10. Is your Data secure?

Recognizing the importance of the security of your Personal Data, SECNEWS  has taken all appropriate organizational and technical measures which are constantly improved based on technological developments with the sole purpose of securing and protecting your Data from any form of accidental or unlawful processing.

11. What are your rights?

• Right of access to your personal data.
• Right to correct inaccurate Data about you.
• Right to erasure/right to be forgotten.
• Right to portability of your Data.
• Right to restriction of processing.
• Right to object/withdraw consent to the processing of your Data.

12. How can you exercise your rights?

To exercise your rights, you can submit a relevant request to us by sending a completed Rights Exercise Application, which you will find here, to the email address mng@secnews.gr.

13. When do we respond to your Request?

SECNEWS , it will inform you within the month if it needs to receive an extension of another (2) two months within which to respond.

If you do not receive a response within the specified deadline or the response you received was not satisfactory or your problem has not been resolved, you can contact the Personal Data Protection Authority (www.dpa.gr ).

14. Where can you contact for the progress of your Request?

For more information, you can call 2111984444 or send an email to:  mng@secnews.gr       

15. Do we use automated decision-making/including profiling when processing your Data?

SECNEWS of your Data.

16. What is the applicable law when we process your Data?

Applicable Law is Greek Law, as formulated in accordance with the General Regulation for the Protection of Personal Data 2016/679/EU and Law 4624/2019.  

The competent courts for any disputes concerning your Personal Data are the Courts of Athens.

17. How will you be informed of any amendments to this Policy?

SECNEWS significant changes to the Policy or the way we use your Personal Data, it will publish on its website the update of this Policy before the changes take effect. SECNEWS encourages you to read this Policy periodically to be aware of how your Data is protected.

18. Which providers do we use?

For the operation of the website, SECNEWS collaborates with providers who process Data on its behalf and in accordance with its instructions (Processors):

• Cloudflare: content distribution, protection against attacks and malicious bots, Turnstile verification, cookie-free traffic measurement, managing your cookie consent and powering the "Ask SecNews" digital assistant.
• Hosting provider: hosting the website and keeping technical logs.
• Amazon Web Services: storage and distribution of images and multimedia.
• Google: traffic measurement (Google Analytics), ad serving (Google AdSense), fonts (Google Fonts) and embedded videos (YouTube).
• Hotjar: statistical analysis of website usage.
• Intuit Mailchimp: sending the newsletter.
• OneSignal: push notifications in your browser.
• Basin: contact form functionality.
• Disqus: article comment system.
• Linguise: automatic translation of pages into the English version of the website.
• Social media (Facebook, Instagram, X, LinkedIn, TikTok, YouTube): sharing buttons and embedded content.

SECNEWS enters into or accepts data processing contracts with these providers in accordance with Article 28 of the GDPR. For transfers outside the EU, the provisions of Section 8 apply.

19. The digital assistant "Ask SecNews"

When you use the digital assistant "Ask SecNews" (ask.secnews.gr and the website's chat window), we process the text of your question and the answer given, the article from which the question was submitted, the date and time, as well as your IP address and the approximate location (country, city) and network provider derived from it.

The purposes of the processing are to provide the answer, protect the service from abuse and attacks, and improve the quality of our answers and content. The legal basis is our legitimate interest in the safe operation and improvement of the service. Questions and answers are retained for up to twelve (12) months, while the IP address, location and network provider are deleted after ninety (90) days. Your conversation is also stored locally on your device for up to two (2) hours, so that it continues when you change pages; you can delete it at any time by selecting “New conversation”.

The answers are automatically generated based on SecNews articles and are not used to make decisions about you. Please do not enter personal or sensitive data, such as passwords, card details or health data, into the assistant.

20. Website security and logs

To protect the website from attacks, malicious bots and abuse, SECNEWS and its providers process technical data of each visit, such as the IP address, device and browser type, the page requested and the time of the request. This data is used exclusively for security and smooth operation, with our legitimate interest as the legal basis, is retained for a limited period of time and is not used to identify visitors, unless required by law or by a competent authority.

21. Newsletter and notifications

If you subscribe to the newsletter, we process your email address and statistics on opening and visiting links, with your consent as the legal basis. Subscription is confirmed by email and you can unsubscribe at any time via the link in each newsletter. Push notifications are only sent if you allow them from your browser and you can disable them at any time from its settings.

22. Contact form and comments

Through the contact form we process your name (optional), your email address and the content of your message, solely to respond to you and to investigate the information you send us. Comments on articles operate through the Disqus service, which is also subject to its own privacy policy.

23. Minors

The website is not directed at children under fifteen (15) years of age and SECNEWS does not knowingly collect Data from minors. If you find that a minor has provided us with Data, please contact us so that we can delete it.

24. Data Breach Incidents

In the event of a Personal Data breach, SECNEWS acts in accordance with articles 33 and 34 of the GDPR, informing, where required, the Personal Data Protection Authority and the persons affected.