Privacy Policy

Privacy Policy

Last updated: June 2026

1. Who we are

This website is operated by the Skoufas Association (Σύλλογος Σκουφάς), located at Αποκαύκου 1, 47100 Άρτα, Greece. For privacy-related enquiries, contact us at info@skoufas.gr.

2. What data we collect and why

2a. Site visit analytics

We collect anonymised information about which pages of this site are visited, with the legitimate purpose of understanding how the site is used and improving it. No personally identifiable information is stored as part of this process. This data is processed by a third-party analytics service operated on our behalf; it is not used for advertising and is not sold to any third party.

2b. Library member data

If you are a registered library member, we store the personal data necessary to manage your membership and loans, including your name and loan history. This data is used solely for the operation of the library service and is not disclosed to third parties. We do not use your data for automated decision-making or profiling.

2c. Data location

Data may be stored and processed in the European Union and the United Kingdom.

3. Legal basis for processing

Site visit analytics are processed on the basis of our legitimate interest in operating and improving this website (Article 6(1)(f) GDPR). Personal data of library members is processed on the basis of our legitimate interest in operating the library service (Article 6(1)(f) GDPR) and, where applicable, your consent given at the time of registration (Article 6(1)(a) GDPR).

4. Data retention

Member and loan records are retained for as long as your membership is active and for up to 3 years thereafter for administrative purposes, after which they are deleted or anonymised. Anonymised visit analytics data is retained in aggregate form indefinitely.

5. Your rights

Under applicable data protection law (GDPR), you have the right to:

To exercise any of these rights, contact us at info@skoufas.gr.

6. Right to lodge a complaint

You have the right to lodge a complaint with the competent supervisory authority. In Greece, this is the Hellenic Data Protection Authority (HDPA): www.dpa.gr.

7. Changes to this policy

We may update this policy from time to time. The date at the top of this page indicates when it was last revised.