Privacy Policy
The Ministry of Culture YPPO, with its seat in Athens at 20-22 Bouboulinas Street, tel. +30 213 132 2100, is the data controller for the collection, storage and processing of the personal data of the users of this website, as collected and stored through it. The website is operated by the Ephorate of Antiquities of the Cyclades, a Regional Service of the Ministry.
1. What personal data do we collect, for what purposes, and for how long?
We collect and process your personal data as follows:
Information about your visit to and use of the website
When you visit our website, we collect certain information such as your IP address, device type and web browser. Information about how you use our website and services allows us to group visitors by shared characteristics, such as age group, gender or region. We use these data to promote our services to visitors and to improve the services we provide. We retain these data for a maximum of 12 months.
Legal basis: your consent to the activation of statistics cookies.
Maintenance and optimisation of our website
We also use personal data to maintain and analyse our website, in order to resolve performance issues and improve its availability and user experience. Every use of the website is logged. This processing is necessary in the context of our legitimate interests, and the information is retained for a maximum of 12 months.
Legal basis: this processing ensures the smooth operation of our website and is therefore necessary for the exercise of the official authority and responsibilities entrusted to us.
Compliance with our legal obligations
If we receive relevant orders from courts or public authorities, we may process personal data collected through our website in order to respond to them.
Legal basis: compliance with our legal obligations.
Legal protection of the Ministry
We may process personal data collected through our website in order to enforce our terms of use and protect our legal rights.
Legal basis: the processing is necessary for the exercise of the official authority and responsibilities entrusted to us.
2. Cookies
Part of the information described in this Privacy Policy is collected through cookies and similar technologies. Cookies are small text files containing small amounts of information, which are downloaded and may be stored on your device — for example your computer, smartphone or tablet.
The cookies used on this website fall into the following categories:
Strictly necessary
These enable the website to function properly and remain easy to use, by supporting basic features such as navigation and access to secure areas. The website cannot operate without them, and the law permits their use even without your consent.
Statistics / performance
These cookies collect information about how visitors use the website — for example, which pages they visit most often and whether they encounter error messages. They collect information, such as IP addresses, that does not directly identify individual users, and they are used solely to improve the website’s performance. They are activated only after you have given your consent.
3. Retention of Personal Data
Your personal data are kept only for as long as is necessary to fulfil the purpose for which they were collected, in full compliance with the legislation in force. Once that purpose has been fulfilled, the data are deleted. The specific retention periods for each processing purpose are set out in detail above.
4. How and with whom we share your personal data (recipients)
We may need to share your personal data with third parties who help us manage our website, such as providers of website development, maintenance and monitoring services. We require these service providers to take appropriate measures to protect the confidentiality and security of personal data.
We may also need to provide personal data to law enforcement authorities in order to comply with a legal obligation or a court order.
Where the Ministry, as data controller, transfers your data to third-party processors, it determines the individual parameters of the processing itself (manner, means, retention period, etc.) and signs a specific agreement with each processor. This ensures that the processing is carried out in accordance with the applicable legal framework, that appropriate measures are taken to protect the confidentiality and security of the data, and that every individual can exercise their rights freely and without hindrance.
Please note that anonymised data (e.g. IP addresses) may be transferred to Google in the USA, provided you have consented to the operation of statistics cookies.
5. Data Security
The Ministry assures users that it takes all appropriate technical and organisational measures to protect their personal data, to safeguard the confidentiality of their processing, and to protect them against accidental or unlawful destruction, loss or alteration, unauthorised disclosure or access, and any other form of unlawful processing.
Although every effort is made to protect personal data, the Ministry cannot guarantee the security of data transmitted to its website, as the transmission of information over the Internet can never be completely secure.
Our website may contain links to other websites. We are not responsible for the privacy practices, content or security of other websites, which are not covered by this privacy policy; we therefore advise you to always read the privacy policies of those websites carefully. Likewise, if you choose to share information from our website via social media, we advise you to read the privacy policies of those platforms carefully.
6. Rights of access, rectification, erasure, restriction of processing and data portability
You have the right to request an overview of the personal data processed by us or on our behalf. You also have the right to have your personal data rectified, erased or their processing restricted, as applicable. You can exercise these rights by contacting us at and submitting a relevant request.
Please note that requests which do not meet the requirements of the applicable legislation or the Ministry’s guidelines may need to be resubmitted or may be rejected, and that certain personal data may be exempt from access, rectification and erasure requests under the applicable data protection laws or other legislation.
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and in certain cases we will transfer your data, at your request, to another data controller, where this is technically feasible.
7. Right to object
In certain cases, you also have the right to require that we stop processing your personal data. Where compelling legitimate grounds exist, however, we will continue the processing and will inform you accordingly. In any event, you have the right to object to the use of your personal data for direct marketing purposes, including profiling; if you do so, we will comply with your request.
Where you have given consent to the use of your personal data, you have the right to withdraw it at any time. Withdrawal does not affect the lawfulness of any processing carried out before it.
8. Contact point / Complaints to the Hellenic Data Protection Authority
Requests concerning the exercise of the above rights may be sent to the Ministry’s Data Protection Officer (“DPO”).
You may also lodge a complaint with the Hellenic Data Protection Authority regarding the exercise of your rights (www.dpa.gr). According to the Authority, complainants must first submit their complaint to the data controller.
9. Applicable Law
The Greek courts shall have exclusive jurisdiction over any dispute arising from the use of this website.
10. Amendments
This Privacy Policy has been drawn up in application of the General Data Protection Regulation (EU) 2016/679. Any amendments to it will be posted on this website.