PRIVACY NOTICE

1.1 Who is Fainareti

Fainareti was founded in 2006 for the purpose of conducting research and fostering the health of women and families in Greece.

The main objective of Fainareti is the study and the development of programs and actions to promote care and support of pregnant women, new mothers, newborns and families.

Fainareti is staffed with professionals from various scientific disciplines such as:

- midwives, psychologists, psychiatrists, PE teachers, administrative staff,

- as well as a number of volunteers who provide support for its activities, and students of related scientific subjects, who are doing internships.

Part of the scientific activity of the interdisciplinary team of Fainareti is published in reputable and international scientific journals.

Fainareti is registered in the following registers:

- National Register of Private Sector Non-Profit Organizations providing Social Care Services

- and in the Special Register of Voluntary Non-Governmental Organizations / Ministry of Health and Social Solidarity.

The central activity of Fainareti is the Day Centre for Women's Mental Health Care (perinatal mental disorders). The Day Centre is a primary healthcare facility with the main purpose of promoting and caring for women's mental health during pregnancy and postpartum (perinatal period). Its services are not limited to the woman who is experiencing mental health difficulties, but also to the man/father who comes to the Day Centre for support.

1.2 What are our contact details

The processing of your personal data is carried out by Fainareti acting in its capacity as a controller.

For any matter of interest to you, you can contact us directly in any of the following ways:

a. Our postal address is 2 Korai st. & Omirou, 1st. fl., Nea Smyrni, Athens, 11721

b. Our phone number is 210-9319054

c. Our e-mail address is: This email address is being protected from spambots. You need JavaScript enabled to view it.

d. Our Data Protection Officer (DPO) e-mail address is This email address is being protected from spambots. You need JavaScript enabled to view it.

1.3 What are the principles we apply to the processing of your data.

Regardless of the reason why we obtain your personal information and the purpose for which we process your personal data, all our processing operations follow the principles governing the lawfulness of processing.

Please note that by processing operations we primarily mean the collection of your data, its storage in our records, its use (depending on the purpose of each case) and its transfer when strictly necessary.

For all these processing operations we ensure that:

A. Your personal data are processed lawfully and fairly in a transparent manner. ("lawfulness, objectivity and transparency")

Any collection and processing of your personal data is done for explicitly defined purposes and is based on a specific legal basis. This legal basis may in some cases be your consent, but often this processing can be done without it, if the purpose of the processing justifies the use of another legal basis. For example, where you submit your personal data for the purpose of entering into a contract with Fainareti, your consent would not be lawful since the processing would be based on the legal basis of contract performance. Similarly, most processing of your personal data relating to the provision of health services by the Day Centre would also not require your consent, since this processing (which in fact includes health data, and therefore special category personal data) would be based on the legal basis of the provision of health services.

The purpose and legal basis of each processing operation we carry out will be described in more detail and on a case-by-case basis in the relevant section of each case. However, we should inform you from the outset that any lawful basis we are relying upon has been thoroughly analysed and substantiated, therefore we will not mislead you by asking for your consent when such consent is not necessary.

B. Your personal data are collected for specified, explicit and legitimate purposes and are not further processed in a way incompatible with those purposes. ("purpose limitation")

We do not collect your personal data if there is no legitimate purpose that justifies such collection. This purpose will be respected throughout the processing, from collection to the eventual deletion of your personal data, with the sole exception of the case in which there is a need to process it for another purpose, in which case we will follow all the conditions set out by law.

C. Your personal data that we collect and hold are adequate, relevant and limited to what is necessary for the purposes for which they are processed. ("data minimisation")

The fact that the processing of your personal data has an explicitly defined purpose and a clear legal basis does not mean that we are allowed to process your information that is not necessary for the purposes of the processing. For this reason, we ensure that the personal data we process is only what is necessary to meet your request or to fulfil our mission.

D. Your personal data is accurate and, where necessary, updated. ("accuracy")

We take every step to ensure that the information we hold about you is accurate, without violating the previous principle of data minimisation.

For example, when you apply for participation in a Day Centre programme, we may ask you to show an identification document (identity card, residence permit, passport) to ensure that your details are accurately recorded, as well as a document confirming your social security number.

E. Your personal data are kept in a form which allows the identification of the data subjects only for the time necessary for the purposes of processing the personal data. ("storage period limitation")

We do not store your personal data except for the period necessary for the purpose of the processing. For example, when you submit your data for the purpose of concluding an employment contract with our organisation, this data is only retained if this contract is concluded; otherwise, it is deleted within a short period of time.

An exception to this principle is where legislation requires your personal health data to be kept as a medical record. In this case, the data are kept for the period of time provided for by law.

Detailed information on the storage period is provided in the relevant sections of Part B.

F. Your personal data are processed in a way that ensures their adequate security and protection against unauthorised or unlawful processing and accidental loss, destruction or damage. ("integrity and confidentiality")

We take all necessary technical and organisational measures to ensure the security of your personal data.

1.4 What right do you have

From the moment we collect information relating to you, you become a data subject of the data concerning you, therefore you are entitled to all the rights enshrined in and protected be the GDPR.

These rights are:

The right of access

You have the right to obtain, at any time, confirmation as to whether we are processing your personal data and what it is, and to obtain copies of that data.

The right to rectification

You have the right to obtain, at any time, the correction of information that you believe to be inaccurate. You also have the right to request the completion of information that you consider incomplete.

The right to erasure

You have the right to obtain the erasure of your personal data under certain circumstances and conditions.

Please note that the right to erasure cannot be satisfied where your personal data relates to health data held in a medical record. In this case, the national law provides for the mandatory retention of the record for a certain period of time, which means that even if your data is no longer necessary to fulfil the purpose for which it was collected, we are legally obliged to retain it.

The right to restriction of processing

You have the right to obtain restriction of processing of your information under certain circumstances and conditions.

The right to object

You have the right to object to the processing of your personal data.

The right to data portability

This right only applies to the information you have given us. You have the right to request the transfer of the information you have given us to another organisation or to yourself. The right only applies if we process information based on your consent, or a contract and the processing is carried out by automated means.

Further clarification regarding your rights

Your rights are not absolute. Their observance is provided for by law, subject to conditions relating to the characteristics of each request and the legal basis of the processing, and may be prevented by the protection of the rights of other persons, the exercise of our legitimate interests and the adherence to our legal obligations.

In any case, we encourage you to exercise your rights whenever you consider it appropriate or necessary and we are committed to examining your request and to respond (positively or negatively) promptly and within the time limit set out by law.

The processing of your request will be free of charge, however, in the case where your request is manifestly unfounded or excessive, in particular because of its repetitive nature, we may:

(a) impose a reasonable fee, taking into account the administrative costs of providing the information or communicating or performing the requested action; or

(b) refuse to act on the request.

This possibility, which is applicable only in specific cases, with a reasoned reply, and for no reason whatsoever, will be a pretext for not following up your request.

1.5 Where do we transfer your personal data

Under no circumstances do we share your personal data with third parties for the purpose of direct marketing of products or services.

We only use processors who provide sufficient assurances that appropriate technical and organisational measures are in place to meet our obligations and ensure the security of your data. We only use processors who provide sufficient assurances that appropriate technical and organisational measures are in place to meet our obligations and ensure the security of your data. We only use processors who provide sufficient assurances that appropriate technical and organisational measures are in place to meet our obligations and ensure the security of your data. The necessary contracts are concluded for this processing.

Your data is kept securely and retained by the processors only for the period we indicate to them. This means that they will not be able to further process your personal data unless we have expressly instructed them to do so, nor will they be able to pass your personal data on to other third parties.

In some cases, we are legally obliged to transfer your data. For example, following a court order or when requested by third parties to exercise or support legitimate claims. With regard to health data relating to the activities of the Day Centre, your personal data may be transferred to the relevant Mental Health Directorate of the Ministry of Health, which acts as a supervisory authority, or to any other public authority or database required by law.

We do not transfer your personal data to third countries or international organisations for any reason.

1.6 The right to lodge a complaint with the Data Protection Authority.

Your personal data, which we process, belongs to you as the data subject. The processing we carry out is subject to specific conditions and purposes.

In any case you are not content with this processing, its scope, duration, purposes and recipients, or you consider that we are violating your rights to your personal data, you may contact us and/or file a complaint with the competent supervisory authority.

The competent supervisory authority is the Hellenic Data Protection Authority - HDPA (1-3 Kifissias Ave., 115 23 Athens, Greece). At the following link you can find detailed information on how to file a complaint:

https://www.dpa.gr/index.php/en/individuals/complaint-to-the-hellenic-dpa

Please note that, for the best possible handling of any request you may have, it is suggested that you contact Fainareti first, as otherwise, the competent authority may reject your complaint due to non-compliance with the due process.