Last updated: 28/9/2026
The Hellenic Society of Haematology (HSH) respects the privacy of the visitors and users of its website and is committed to protecting the personal data it collects and processes.
This Privacy Policy describes how HSH collects, uses, stores and protects personal data when you visit and use the website www.eae.gr, and when you use the online services and features provided through it.
Personal data are processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Greek Law 4624/2019 and the Greek and European legislation in force at any given time.
1. Data Controller
The controller of personal data is:
Hellenic Society of Haematology (HSH)
Legal entity governed by private law
Address: 27 Kifisias Avenue, 11523 Athens, Greece
Telephone: +30 210 7211806
E-mail:
Website: www.eae.gr
For matters concerning the protection of personal data, you can contact the Hellenic Society of Haematology at .
2. What data we collect
HSH collects only the personal data that are necessary to provide its services and to operate the website.
Depending on how you use the website, the following may be collected:
A. Contact data
When you use the “Contact us” form, the following may be collected:
- First name
- Last name
- E-mail address
- Telephone
- The content of your message or request
These data are used to handle and answer your request and for the related communication that this requires.
B. Member account data
To create and manage an account in the members’ area of the website, details such as the following may be collected:
- Full name
- Username and/or e-mail address
- Password
- Professional or other details necessary for membership
- Details concerning the use of the account
The password is used solely to authenticate the user and to give access to the account.
C. Technical data
When you visit the website, technical data such as the following may be collected:
- IP address,
- date and time of access,
- browser type and version,
- operating system and device type,
- technical data concerning the operation and security of the website.
Where a field of a form is marked as mandatory, completing it is necessary in order to handle the request concerned or to use the corresponding service. If you do not complete it, it may not be possible to provide the service or to answer the request.
3. Purposes of processing
HSH processes personal data for specific and lawful purposes, such as:
- to answer questions and requests submitted through the contact form,
- to create and manage user and member accounts,
- to provide online services to HSH members,
- to inform members about the activities and services of HSH,
- to manage participation in congresses, meetings, educational activities and other events, where a related online service is provided,
- to operate and secure the website,
- to prevent malicious or unlawful actions,
- to improve the functionality and the user experience of the website,
- to comply with the legal obligations of HSH,
- to establish, exercise or defend legal claims, where required.
4. Legal bases for processing
For each purpose, the corresponding legal basis of Article 6(1) GDPR applies:
- Account management and the provision of services to members are based, where applicable, on the performance of a contract or on taking steps prior to entering into one (point (b)).
- Keeping records required by tax or other binding provisions is based on compliance with a legal obligation (point (c)).
- Answering general questions, the security of information systems and, where required, the establishment or defence of claims may be based on the legitimate interests of HSH (point (f)), after these have been balanced against your rights and freedoms. Where a request concerns entering into or performing a contract, point (b) may apply.
- Processing for optional cookies and for informational communications, where prior consent is required, is based on your consent (point (a)). You can withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal.
5. Special categories of personal data
HSH is active in the field of Haematology and therefore recognises the special protection that the GDPR gives to health data.
The website’s general contact form is not intended for submitting health data or other special categories of personal data.
For this reason, users are asked not to include in the contact form any information about diagnosis, treatment, medical history or any other information concerning their state of health.
Should specific services that require the processing of health data be provided through the website in the future, HSH will apply the special protection framework laid down by law and will provide the required specific information.
6. Login data and account security
The members’ area of the website allows users to sign in with a username and/or e-mail address and a password.
Login data are used to identify the user securely and to give access to the services available to members.
The “Keep me signed in” option may use technical identifiers or cookies that are necessary to keep the user’s session. This feature is described in more detail in the HSH Cookie Policy.
Users are responsible for keeping their login details confidential and must inform HSH immediately if they suspect any unauthorised use of their account.
7. Cookies and similar technologies
The HSH website uses cookies and similar technologies:
- for the correct and secure operation of the website,
- to keep signed-in users’ sessions,
- to store choices and preferences,
- and, where applicable, to analyse traffic and improve its services.
Strictly necessary cookies are used without prior consent only in the cases provided for in Article 4(5) of Greek Law 3471/2006. Optional cookies, such as traffic analysis cookies, are activated only once prior consent has been given, where such consent is required.
Users can reject or select optional categories of cookies and change their choices through the cookie management mechanism.
For detailed information about cookies, their purposes, how long they are stored and the third-party providers that may be used, please refer to the HSH Cookie Policy.
8. Who may have access to the data
HSH may give access to personal data, to the extent necessary for the purposes above, to:
- authorised officers and associates of HSH,
- the website’s hosting provider,
- the provider of technical support and development of the website,
- information system providers,
- e-mail service providers,
- providers of services that support the organisation of congresses and events,
- public authorities or bodies, where required by law.
Where third parties process personal data on behalf of HSH, this is governed by a contract or another binding legal act in accordance with the requirements of Article 28 GDPR.
9. Transfers outside the European Economic Area
Where a service provider of the website processes personal data outside the European Economic Area, HSH ensures that the transfer takes place in accordance with the requirements of the GDPR and with the safeguards provided for in each case.
10. Retention period
HSH keeps personal data only for as long as is necessary to fulfil the purpose for which they were collected, or for as long as required by the legislation in force.
For each category of data, a specific retention period is set or, where this is not possible, a clear criterion for determining it.
For example:
- contact data: for as long as is required to handle and complete the request and, where necessary, for a specific, defined period afterwards,
- member account data: until membership ends or the account is deleted, with any further retention required by law determined separately,
- technical data and security logs: for a specific period determined by the purpose of security and of investigating incidents.
Once the retention period has passed, the data are deleted or anonymised, unless there is a legal reason to keep them longer.
11. Your rights
Under the GDPR, and subject to the conditions laid down by the legislation in force, you have the right:
- of access to your personal data,
- to rectification of inaccurate or incomplete data,
- to erasure of your data,
- to restriction of processing,
- to object to processing,
- to data portability, where applicable,
- to withdraw your consent, where processing is based on consent, without affecting the lawfulness of processing before its withdrawal.
These rights are not absolute and are subject to the conditions and exceptions laid down by the GDPR and the legislation in force.
To exercise your rights, you can contact HSH at:
HSH responds to requests to exercise rights without undue delay and, as a rule, within one month of receiving them. Where necessary because of the complexity or number of requests, this period may be extended by two further months, in which case you will be informed within the first month.
12. Right to lodge a complaint
You have the right to lodge a complaint with the competent supervisory authority if you consider that the processing of your personal data infringes the legislation in force.
In Greece, the competent supervisory authority is the:
Hellenic Data Protection Authority (HDPA)
www.dpa.gr
13. Security
HSH applies appropriate technical and organisational measures to protect personal data against loss, destruction, alteration, unauthorised access, disclosure or any other unlawful processing.
Access to the data is restricted to persons who are authorised and need access in order to perform their duties.
Despite appropriate security measures, no information system or means of electronic data transmission can be considered completely secure.
14. Links to third-party websites
The HSH website may contain links to third-party websites, such as scientific organisations, partners, social networks or other online services.
HSH is not responsible for the personal data protection practices of those websites. The processing of data on those websites is governed by the privacy policies of their respective providers.
15. Informational communications
Where the website offers the option to subscribe to a newsletter or other electronic updates, HSH processes the contact details in accordance with the legislation in force.
Where prior consent is required, it is requested in an appropriate manner.
Users can stop receiving informational communications at any time through the relevant unsubscribe link or by contacting HSH.
16. Changes to this Privacy Policy
HSH may amend this Privacy Policy when the operation of the website, the way personal data are processed or the applicable legal framework changes.
The version in force will be published on the website, stating the date of the last update.
17. Contact
For any question concerning the protection of your personal data, you can contact:
Hellenic Society of Haematology
27 Kifisias Avenue, 11523 Athens, Greece
Tel.: +30 210 7211 806
E-mail:
This English version is a translation; in case of any discrepancy, the Greek text prevails.