(This information relates specifically to the processing of personal data of visitors-users of the www.theegg.gr website; to see the information form on processing of personal data of participants and those expressing an interest in participating in the "Acceleration" platform of the “egg-enter grow go” business incubation and acceleration programme (egg Accelerator), click here.)
The public limited bank (société anonyme) under the name "Eurobank SA" (hereinafter referred to as "Eurobank") informs you, the visitors/users of the website www.theegg.gr (hereinafter the "Website"), that the processing of your personal data is governed by the following terms and conditions and by the relevant provisions of Regulation (EU) 2016/679 (hereinafter the "GDPR"), Law 4624/2019 and the other provisions of the relevant Greek and EU legislation on the protection of personal data, as in force.
1. Data Controller
The data controller for the Website is the "Eurobank SA” public limited company, with headquarters in Athens, at 8 Othonos Str., GR-105 57, Athens, General Electronic Commercial Registry (GEMI) No. 154558160000 (hereinafter referred to as the "Data Controller").
2. What personal data does the Data Controller collect and from where?
The personal data the Data Controller collects and processes indicatively fall within the following categories and may not all apply to you, insofar as the type and amount of the necessary personal data collected in each case depends on the nature of the data subject, the type of interaction with the data subject, etc.:
- Personal data collected directly from you when you complete and submit online forms/requests to receive updates via newsletters, such as your email address.
- Personal data collected directly from you when you fill out a form/application to participate as a mentor in the egg business accelerator (hereinafter referred to as "egg"); such date includes full name, contact information (such as email address, phone number, place of residence), data relating to your professional profile and work experience (such as profession, title/qualification, company you work for, LinkedIn profile, areas and years of expertise, qualifications, skills, CV) and any other personal data entered into the open text fields of the application you fill in.
- Data that you provide when you submit a query, request or complaint.
- Personal data automatically collected by the Website. When you visit and interact with the Website, certain data may be automatically collected, such as: the Internet Protocol (IP) address of your computer, your browser type and operating system, your connection speed and information about the software installed on your computer, basic server connection information and information collected through cookies and related technologies.
You should ensure that the personal data you enter into the forms on the Website (e.g. newsletters, application forms for participating as mentors in egg) are correct and accurate and you must undertake to notify the Data Controller as soon as possible of any change or modification to them. You are solely liable for any damage caused to the Data Controller or any third party through the disclosure of incorrect, inaccurate or incomplete data-information provided on the forms for newsletters of the Website.
For more information about the use of cookies and related technologies by the Data Controller please, read the Cookies Policy.
The collection of data from you as described above includes the collection by a third-party natural or legal person acting on your behalf. Additionally, when providing the Data Controller with personal data pertaining to third parties, you must inform them appropriately beforehand (indicatively by reference to this notice) and obtain their consent, where required.
3. Why does the Data Controller collect your data and what is the legal basis for processing them?
The Data Controller collects and processes your personal data whenever necessary for each instance:
Α. With your consent (Article 6(1)(a) of the GDPR)
This processing serves purposes such as communicating with you if you have requested to receive updates via newsletters. To clarify, your completion of the forms to subscribe to newsletters with your personal data constitutes a declaration of consent on your part allowing the Data Controller to communicate with and send newsletters to you. In such cases, you have the right to withdraw your consent at any time without, however, affecting the legality of the processing based on your consent before its withdrawal (for how to withdraw consent, see section 10 "How can you exercise your rights” below; additionally, each newsletter includes an electronic link to withdraw consent/unsubscribe from the list of recipients). It is expressly stated that this notice does not apply to other consents obtained through special notifications, such as in the case of cookies.
Β. For compliance with legal obligations the Data Controller is subject to (Article 6(1)(c) GDPR)
This processing serves purposes such as:
- The Data Controller’s compliance with obligations imposed by the applicable legal, regulatory and supervisory framework in place from time to time, as well as the decisions, requests by any authorities (public/administrative, supervisory, prosecutorial, independent, etc.) or by the courts (regular or arbitration).
- The protection and security of information systems, the prevention, deterrence and suppression of illegal acts (e.g. cyberattacks, etc.), including ensuring the ability to investigate them.
This processing as described in section B also serves the legitimate interests of the Data Controller or a third party (as described below in section C).
C. For the purposes of the legitimate interests of the Data Controller or a third party (Article 6(1)(f) GDPR)
This processing also serves purposes, such as:
- Ensuring the proper and effective function of the Website, improving the services provided, investigating and resolving technical issues, establishing, exercising and supporting legal claims and defending the legal rights and legitimate interests of the Data Controller or third party, the handling of your queries, requests, complaints, etc.
- Specifically relating to personal data collected in accordance with Article 2(2) above (completion of the form for applicants to participate as mentors in egg), properly evaluating the application of mentor candidates and deciding to enter into a collaboration with them, as well as to be able to communicate with them.
For further information on the purposes of the use of cookies by the Data Controller, please read the Cookies Policy.
4. Personal data of minors
The Data Controller understands the importance of protecting the personal data of minors. The Website is neither directed nor intentionally designed to be directed to minors. It is the intention of the Data Controller not to collect or knowingly keep personal data of minors who may have access to the Website. If it is found that any personal data have been collected from a minor without meeting the applicable legal requirements, these data will be deleted immediately.
5. How long will the Data Controller retain your data?
Your personal data are retained for the period of time necessary to fulfil the purposes of their collection and processing, or for the period of time required by the applicable legal and/or regulatory framework or to establish, exercise and support legal claims or defend rights and legitimate interests, taking into account, in addition to and inter alia, the nature, sensitivity and volume of the personal data, the potential risk of harm from a personal data breach, the purposes for which the Data Controller collects your personal data and whether these purposes can be achieved in another way.
In particular, it is noted that:
i) for newsletter recipients, their relevant data are retained for as long as they remain registered on the list of newsletter recipients and are deleted if their consent is withdrawn, and
ii) for applicants who take part as egg mentors, their relevant data are retained for six (6) months after their application has been evaluated and will be securely deleted, unless the Data Controller enters into a collaboration with them, in which case they will be adequately and thoroughly informed about the subsequent processing of their data.
6. Who are indicative of your data?
In fulfilling the Data Controller's legal and regulatory obligations, in serving its legitimate interests, and in cases where the Data Controller is authorised or has obtained your consent, recipients of your data may include:
- The institutions, officers and other stakeholders of the egg Accelerator and egg programmes in general, as well as the Data Controller’s competent employees and management within the framework of their activities and duties.
- Providers of IT products and/or services and/or support for any type of IT and electronic systems and networks, including online systems and platforms, providers of electronic communication services and information society services (for example, providers of telecommunication services, email, web hosting, messaging applications), as well as providers of postal services.
- Companies providing storage, archiving, management and destruction of files and data.
- Providers of event planning services.
- Customer satisfaction or market research companies in general.
- Companies promoting products and/or services; advertising companies.
- Lawyers, law firms, bailiffs, experts, surveyors, consultancy service providers in the framework of their competences.
- Supervisory, independent, judicial, prosecutorial, police, public/administrative authorities, other authorities or bodies, parties entrusted with the control/monitoring of the Data Controller's activities within the scope of their competences, accredited mediators and mediation service centres, arbitration courts and alternative dispute resolution bodies.
For the terms and conditions of processing of your personal data by those recipients acting as independent data controllers, we recommend that you refer to their respective privacy notices. We also recommend that you refer to the Cookies Policy for additional information about the recipients of information derived through cookies.
7. Can the Data Controller transfer your data to third countries (outside the EEA)?
The Data Controller does not in principle intend to transfer your personal data to third countries outside the European Economic Area (EEA). If there is a reason for the transfer (in particular in the context of social media), the transfer will take place with the appropriate or suitable safeguards set out in the applicable legislation (usually, where necessary, using standard data protection clauses issued by the European Commission).
8. Linking to third-party websites
Any possible interconnection of the Website through special hyperlinks (links, hyperlinks, banners) with any other website belonging to third parties does not imply that the Data Controller assumes any responsibility for the policy followed by these websites regarding the protection and management of your personal data. You should ensure that you yourself are informed about the protection and management/processing of your data by the above websites.
9. What are your rights regarding the protection of your data?
You have the right to:
a) Request to be informed about the categories of your personal data that are processed, their origin, the purposes of their processing, the categories of recipients, the length of time they are retained and your rights in this regard (right of access).
b) Request the rectification of and/or supplement to your personal data so they are complete and accurate (right to rectification), by providing any necessary document demonstrating the need for correction or completion.
c) Request the restriction of the processing of your data (right to restriction).
d) Object to the processing of your personal data (right to object).
e) Request the erasure of your personal data (right to be forgotten) under certain conditions, such as when the data is no longer necessary, you have withdrawn your consent, the data has been unlawfully processed, etc.
f) Request the transfer of your data from the Data Controller to another controller (right to data portability).
g) Withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on consent prior to its withdrawal and the re-granting of withdrawn consent is permitted.
h) To appeal to the Hellenic Data Protection Authority (1-3 Kifissias Ave., GR-115 23, Athens, tel. +30 2106475600) if you believe your rights have been infringed in any way (right of recourse to the Authority). To learn about the competence of the Authority and how to submit a complaint, visit its website (www.dpa.gr - Individuals - Complaint to the Hellenic DPA), where detailed information is available.
Please note the following in relation to the above rights:
i. The Data Controller retains the right to refuse your request for restriction of processing, objection or erasure of your personal data if the processing or retention of the data is necessary to establish, exercise or support its legitimate rights or to fulfil its obligations.
ii. The exercise of the right to portability (as above, under f.) does not imply the deletion of your data from the Data Controller's records, as the deletion is subject to the conditions of the immediately preceding paragraph and the law.
iii. The exercise of the above rights is prospective and does not apply to data processing already performed.
10. How can you exercise your rights?
To exercise your rights, you can contact us by email at info@egg.gr. As part of your requests to exercise your rights and to facilitate the Data Controller's examination and response to them, please specify which right(s) you are exercising.
The Data Controller will make every effort to respond to your request within one (1) month of receiving it. This deadline may be extended by two (2) additional months, if deemed necessary at the sole discretion of the Data Controller, taking into account the complexity of the request and the number of requests. In all cases, the Data Controller will inform you of any extension of the deadline within one (1) month of receiving the request.
This service is provided by the Data Controller free of charge. However, if your requests are manifestly unfounded, excessive or repetitive, the Data Controller may either charge a reasonable fee, informing you accordingly, or refuse to respond to your request(s).
11. Data Protection Officer
You can contact Eurobank's Data Protection Officer for issues relating to the processing of your personal data at 6 Siniosoglou Str., GR-14234 Nea Ionia or at the email address dpo@eurobank.gr.
12. Amendments to this notice
This notice may be amended from time to time to keep it in line with legal requirements and the reality of the processing being performed. If there are significant changes to this notice, you will be informed by any suitable means, such as the posting of a notice on the Website www.theegg.gr. To keep up with the latest/updated version of this document, in case of minor changes or improvements, it is recommended that you regularly check the Website www.theegg.gr, where this notice is permanently posted.
This notice was updated on 02/07/2025 and is permanently posted on www.theegg.gr.