Ι) You have the following rights:
(a) To know which personal data that concerns you is being processed and retained by the Bank, as well as its source (right of access).
(b) To request the rectification and/or supplementation of your personal data, so that it is complete and accurate by presenting any necessary documents which prove the need for such rectification or supplementation (right to rectification).
(c) To request the restriction of the processing of your personal data (right to restriction).
(d) To refuse and/or object to any additional processing of your personal data kept by the Bank (right to object).
(e) To request the erasure of your personal data, from the Bank’s records (right to erasure).
(f) To request for the transfer of your personal data you have provided to the Bank to another controller (right to data portability).
(g) You have the right to file a complaint with the Hellenic Data Protection Authority (HDPA www.dpa.gr), which is the competent supervisory authority for the protection of the fundamental rights and freedoms of natural persons, for processing which concerns you, if you believe that your rights are being infringed in any way.
The Banks notes the following with respect to your aforementioned rights:
- The fulfillment of your requests under (c), (d) and (e), insofar as they concern data which is necessary for retaining your Bank membership means that you shall cease to be a shareholder of the Bank.
- The Bank has the right in any case to refuse to fulfill your right to restriction of processing or erasure of your personal data if the processing or retention of your personal data is necessary for the establishment or exercise or support of its legitimate interests, lawful rights or its compliance with legal obligations.
- The exercise of the subject’s right to data portability (under point f above) does not imply the erasure of the data from the Bank's records, which erasure takes place under the conditions laid down in the immediately preceding paragraph. The exercise of these rights shall have effect for the future and does not concern already performed data processing.
- The above service is provided by the Bank free of charge. However, if your requests are manifestly unfounded, excessive or repetitive, the Bank may either charge a reasonable fee, informing you thereof or refuse to respond to your request/s.
ΙΙ) For the exercise of your rights referenced under (6) you may contact all branches of the Bank, and fill in the Data Subject Rights Form.
The Bank shall make its best efforts to respond to your request within thirty (30) days from its submission. This deadline may be extended by sixty (60) further days, provided that it is necessary at the Bank’s sole discretion, taking into account the complexity of the request and the number of requests. The Bank shall inform you in any case of the extension of the deadline within thirty (30) days.