This Privacy Policy explains how personal data is collected, used, stored and protected when you visit and use the Greek Space Ecosystem Catalogue (the “Portal”), available at https://www.space-ecosystem.gr/.
The Portal is an initiative of the Ministry of Digital Governance and Artificial Intelligence, the Hellenic Space Center, the Hellenic Space Technologies and Applications Cluster (si-Cluster), the Hellenic Association of Space Industries (HASI) and the European Space Agency Business Incubator Centre in Greece (ESA BIC Greece). It provides a structured catalogue of organizations, technologies, products, services and applications active in the Greek space sector.
We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”), Greek Law 4624/2019 implementing the GDPR, Law 3471/2006 on the protection of personal data in the electronic communications sector (which transposes the ePrivacy Directive 2002/58/EC), and the relevant guidance of the Hellenic Data Protection Authority (“HDPA”).
The data controller responsible for the processing of personal data through the Portal is:
| Controller | |
| Registered address | |
| Telephone | |
| Data Protection Officer (DPO) |
The Portal is implemented and technically maintained by JNP (https://www.jnp.gr/), which acts as a data processor on behalf of and under the documented instructions of the controller, pursuant to Article 28 GDPR.
Depending on how you interact with the Portal, we may process the following categories of personal data:
Your name;
Your email address;
The content of any message you choose to send us.
If you create an account or sign in to submit or manage a listing in the catalogue, we process the account and profile information you provide, which may include your name, professional email address, the organization you represent, your role, and the credentials associated with your account.
Where you submit an organization, product or service to the catalogue, the information published relates primarily to organizations rather than individuals. However, contact details of natural persons (e.g. a named contact person, email or phone number) may constitute personal data and will be published as part of the listing where you provide them.
The Portal includes a location-based search feature (“Find listings near you”). If you choose to use it, your approximate location may be processed to display nearby listings. This feature operates only where you actively use it or grant the relevant browser permission.
IP address and approximate location derived from it;
Browser type and version, device and operating system information;
Date and time of access, pages visited and referring URL;
Information collected through cookies and similar technologies (see Cookie Policy).
We process personal data for the purposes set out below, each relying on a legal basis under Article 6(1) GDPR:
| Purpose | Data involved | Legal basis |
| Responding to enquiries submitted via the contact form | Name, email, message content | Consent (Art. 6(1)(a)); and/or our legitimate interest in responding to enquiries (Art. 6(1)(f)) |
| Creating and administering user accounts and managing catalogue listings | Account, profile and listing data | Performance of a service requested by you / steps at your request (Art. 6(1)(b)); for the public-interest catalogue, Art. 6(1)(e) |
| Operating, securing and maintaining the Portal | Technical and usage data, strictly necessary cookies | Legitimate interest in network and information security (Art. 6(1)(f)); legal obligation where applicable (Art. 6(1)(c)) |
| Publishing the catalogue of the Greek space ecosystem (a task in the public interest) | Listing data, including any contact details of natural persons | Performance of a task carried out in the public interest (Art. 6(1)(e)) |
| Analytics and audience measurement (if enabled) | Usage data via analytics cookies | Consent (Art. 6(1)(a)) – obtained via the cookie banner |
Personal data may be disclosed to or accessed by the following categories of recipients, strictly to the extent necessary for the purposes described above:
Authorized personnel of the controller and of the co-operating bodies involved in the initiative;
JNP, acting as data processor for the development and technical maintenance of the Portal;
Hosting, infrastructure and IT service providers engaged by the controller or processor;
Providers of any analytics or content-delivery services used by the Portal (e.g. Google Analytics);
Public authorities and courts, where disclosure is required by law or to defend legal claims.
Listing information you submit for publication will, by its nature, be publicly accessible to all visitors of the Portal.
Personal data is processed within the European Economic Area (EEA). Where any processor or sub-processor (for example a cloud or analytics provider) processes data outside the EEA, such transfers take place only where an adequate level of protection is ensured – for instance on the basis of an adequacy decision of the European Commission, or appropriate safeguards under Article 46 GDPR such as the Standard Contractual Clauses. [Confirm whether any third-party tool transfers data outside the EEA – e.g. Google – and reference the safeguard relied upon.]
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with legal obligations:
Contact form enquiries: retained for as long as needed to handle your request and for [e.g. 12 months] thereafter, unless a longer period is required to defend a legal claim;
Account and listing data: retained for the duration of the account / listing and deleted or anonymised within a reasonable period after the account is closed or the listing is removed;
Technical logs: retained for a limited period for security purposes;
Cookie data: retained for the periods stated in the Cookie Policy.
Subject to the conditions set out in the GDPR, you have the right to:
Right of information – You can request to be informed about the categories of your personal data that we store and process, where they come from, the purposes of their processing, the categories of their recipients, the period of their storage as well as about your relevant rights (right of access).
Right to withdraw consent – You can withdraw consent that you have previously given to one or more specified purposes to process your personal data. This will not affect the lawfulness of any processing conducted before you withdraw your consent.
Right of access – You can ask us to verify whether we are processing personal data about you and if so, to have access to a copy of such data.
Right to rectification – You can ask us to correct our records if you believe they contain incorrect or incomplete information about you or ask us to erase your personal data after you withdraw your consent to processing by providing any necessary supplementary documentation that justifies the need for rectification or completion.
Right to erasure – You can demand the erasure of your personal data from the Data Controller’ records under certain circumstances, such as in case these data are no longer necessary or you have withdrawn your consent, or in case the data have been unlawfully processed etc.
Right to restriction of processing – You can ask us to temporarily restrict our processing of your personal data if you contest the accuracy of your personal data, prefer to restrict its use rather than having us erase it, or need us to preserve it for you to establish, exercise or defend a legal claim. A temporary restriction may apply while verifying whether we have overriding legitimate grounds to process it. You can ask us to inform you before we lift that temporary processing restriction.
Right to data portability – In some circumstances, where you have provided personal data to us, you can ask us to transmit that personal data (in a structured, commonly used, and machine-readable format) directly to another entity.
Right to object – You can object to our use of your personal data. However, we may need to keep some minimal information (e.g., e-mail address) to comply with your request.
To exercise any of these rights, please contact us using the details in Section 2.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Authority for the Protection of Personal Data), 1–3 Kifissias Avenue, 115 23 Athens, tel. +30 210 6475600, email contact@dpa.gr, www.dpa.gr
We do not knowingly collect, use, or disclose information from children under the age of sixteen (16). If we learn that we have collected the personal information of a child under sixteen (16) we will take steps to delete the information as soon as possible. Please immediately contact us if you become aware that a child under sixteen (16) has provided us with personal information.
The Portal uses cookies and similar technologies. Strictly necessary cookies are used on the basis of our legitimate interest in operating the site; all other cookies (analytics, functional, marketing) are set only with your prior consent, obtained through the cookie banner, in accordance with Article 4(5) of Greek Law 3471/2006 and the GDPR. Full details are provided in our separate Cookie Policy.
We implement appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction or damage, in accordance with Article 32 GDPR. These include, where appropriate, encryption in transit (HTTPS), access controls, and contractual security obligations imposed on our processors.
We may update this Privacy Policy from time to time. The version in force is the one published on this page, bearing the “Last updated” date above. Material changes will be communicated through the Portal where appropriate.
For any questions about this Privacy Policy or about how your personal data is processed, please contact [controller email / DPO email].