The Hellenic Development Bank S.A., headquartered in Athens (80 Michalakopoulou Street, Postal Code 115 28, Tel. 210 74 50 400, e-mail: info@hdb.gr), (hereinafter “HDB SA” or “we”), in its capacity as Data Controller, collects and processes your personal data through the NEFI High-Level Meeting 2026 website (hereinafter the “Website” or the “Platform”) in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation — hereinafter the “GDPR”), Law 4624/2019, and Law 3471/2006, as amended and currently in force, as well as the Decisions, Opinions, Guidelines, and Instructions of the European Data Protection Board (hereinafter the “EDPB”) and the Hellenic Data Protection Authority (hereinafter the “HDPA”) (hereinafter collectively referred to as the “Data Protection Legislation”).
This privacy notice is intended to inform users of the Website (hereinafter “Users” or “you,” respectively) regarding the processing of their personal data (hereinafter the “Notice”) in connection with the organization of the NEFI High-Level Meeting 2026.
01 — Personal data, purposes of processing, legal basis, retention period, recipients
When you browse and use the Website, we collect and process the following data that you provide to us:
- Personal data
- Identification data (e.g. full name). Contact information (e.g. email). Professional information (e.g. title, position). Information regarding participation in the event.
- Purpose
- Registration — participation in the event
- Legal basis
- Performance of a contract — Article 6(1)(b) of the GDPR
- Retention period
- 1 year after the end of the event
- Recipients
- EAT S.A., NEFI, HAST (as the contractor responsible for implementing the Website)
- Personal data
- Special categories of data (information regarding allergies, dietary restrictions, or accessibility/mobility needs)
- Purpose
- To facilitate participation in the event
- Legal basis
- Participant’s consent — Article 6(1)(a) and Article 9(2)(a) of the GDPR
- Retention period
- 1 year after the end of the event, and 1 month after the end of the event with regard to special categories of personal data
- Recipients
- EAT S.A., NEFI, HAST (as the contractor responsible for implementing the Website)
Please note that no data processing is carried out through automated decision-making, including profiling.
NEFI acts as an independent Data Controller. For information regarding the processing of personal data by NEFI, see the NEFI Privacy Notice.
Data we collect automatically
Technical information collected during your visit to the Website, such as IP address, date and time of visit, browser and operating system type, and device model. The collection of the above data is based on EAT S.A.’s legitimate interest in maintaining the security and proper functioning of the Website (Article 6(1)(f) of the GDPR). This data is retained for up to six (6) months for the purposes described above. Access to this data is limited to authorized EAT S.A. personnel and technical partners or hosting providers who support the operation of the Website.
Information is also collected through cookies and similar technologies. For details, see the HDB Cookies Policy.
Personal data of minors
As a general rule, EAT S.A. does not collect or process data from minors (i.e. individuals under the age of 18) through the Website. However, since it is not possible to verify the age of individuals using the Website, parents and guardians of minors are advised to contact EAT S.A. immediately if they become aware of any unauthorized disclosure of data by the minors for whom they are responsible, in order to exercise the rights granted to them, such as, for example, the deletion of their data. In the event that EAT S.A. becomes aware that it has collected a minor’s personal data, it undertakes to delete such data immediately and to take all necessary measures to protect such data.
02 — Transfer of personal data outside the EEA
As a general rule, EAT S.A. does not transfer your personal data to countries outside the European Economic Area (EEA) and/or to international organizations. In the event that we transfer your data to a country outside the EEA or to an international organization, the transfer will take place only if there is an adequacy decision by the European Commission, or if appropriate safeguards are agreed upon to ensure a high level of security regarding the processing of your personal data.
03 — Your rights as a data subject
EAT S.A. ensures that it is able to respond promptly to your requests to exercise your rights in accordance with data protection legislation.
- Right of access
- to receive confirmation as to whether your data is being processed, to be informed about what data is being stored, for what purpose, and other details of the processing, and to receive a copy of your data
- Right to rectification
- to request the correction or completion of inaccurate or incomplete data concerning you
- Right to erasure
- to request the erasure of your data
- Right to restriction of processing
- to request that the processing of your data be restricted
- Right to data portability
- to receive your data in a structured, commonly used, and machine-readable format or to request that it be transferred to another data controller
- Right to withdraw consent
- to withdraw any consent you may have given us, without such withdrawal affecting the lawfulness of the processing that took place prior to the withdrawal
The rights to erasure, restriction, portability and withdrawal apply provided the legal requirements are met.
If you exercise any of the above rights, EAT S.A. will respond without undue delay and, in any case, within one (1) month of the submission of the request, informing you in writing of the progress and outcome of its review.
This deadline may, if necessary due to complexity or a large number of requests, be extended by two (2) additional months, provided that you are notified in advance of the extension and the reasons for the delay. If a request is deemed manifestly unfounded or excessive, particularly due to its repetitive nature, EAT S.A. may either impose a reasonable fee or refuse to comply with it, in accordance with data protection legislation.
04 — Right to file a complaint
If you are not satisfied with our response to your request or believe that EAT S.A.’s processing of your personal data violates data protection laws, you have the right to file a complaint with the Hellenic Data Protection Authority (HDPA).
Complaints can be filed at dpa.gr.
05 — Contact information
To exercise all of the above rights, as well as for any issue regarding the processing of your personal data by EAT S.A., you may contact EAT S.A.’s Data Protection Officer.
- Data Protection Officer
- dpo@hdb.gr
- Hellenic Development Bank
- info@hdb.gr
80 Michalakopoulou Street, 115 28 Athens · Tel. 210 74 50 400
06 — Third-party websites
The Website may contain links, hyperlinks, banners, or tabs that, when clicked, will direct you to third-party websites. Please review the respective privacy notices and policies of third parties regarding the processing of personal data, as EAT S.A. is not responsible for the processing of personal data carried out by third-party websites or providers.
EAT S.A. does not control, nor is it responsible for, any subsequent processing carried out by third-party providers after the data has been transferred to them.
Last updated: 7 August 2026