Last updated: 13 September 2026
Protecting the privacy and personal data of visitors, members, supporters and individuals who communicate with us is an important priority for Hellenic Association for the Support of Children with Rett Syndrome – REVERSE RETT GREECE
This Privacy Policy explains what personal data we may process through reverserettgreece.gr, for what purposes, on what legal basis, for how long, and what rights you have under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Greek legislation.
1. Data Controller
The data controller for personal data collected through the website is:
Hellenic Association for the Support of Children with Rett Syndrome – REVERSE RETT GREECE
(official registered name in Greek: Ελληνική Εταιρεία Υποστήριξης Παιδιών με Σύνδρομο Rett)
Website: https://reverserettgreece.gr
Email for personal data matters: info@reverserettgreece.gr
2. Personal data we may process
Simply browsing the website does not require the creation of an account or the provision of personal information.
Depending on how you use the website, however, we may process identification and contact information such as your first and last name, email address and telephone number; information entered in contact forms, membership applications or participation forms for activities; information relating to donations or transactions; as well as technical data necessary for the secure operation of the website.
We do not request more personal data than is necessary for the relevant purpose.
3. Contact form and email
When you contact us through the contact form or by email, we process the information you provide, such as your name, email address, the subject and the content of your message.
This data is used to receive, manage and respond to your request or message and to provide any necessary follow-up communication.
We do not use information submitted through the contact form to send advertising or informational newsletters without a separate lawful basis and, where required, without your prior consent.
4. Membership applications
The website may provide an electronic facility for submitting an application to become a member of REVERSE RETT GREECE.
The information collected through the relevant form is limited to what is necessary to assess the application, communicate with the applicant and, where the application is accepted, manage membership in accordance with the organisation’s statutes and legal obligations.
Submitting an application electronically does not in itself result in automatic acceptance or acquisition of membership status. Applications are reviewed in accordance with the organisation’s applicable procedures.
5. Health data and personal data of minors
Due to the activities of REVERSE RETT GREECE, certain communications may concern individuals living with Rett syndrome and may therefore include information relating to their health.
Health data constitutes a special category of personal data and is subject to enhanced protection.
For this reason, please do not send medical reports, genetic test results, complete medical records or other sensitive data through the general contact form unless this is strictly necessary and prior arrangements have been made with us.
The general membership application is not intended for the collection of medical records or genetic test results.
Where the processing of health data or personal data of a minor is required for a specific and lawful purpose, specific information will be provided and the appropriate legal basis and necessary safeguards will be applied.
6. Participation in activities and events
For certain activities, events, races, conferences or other initiatives, an online participation form may be made available.
In such cases, only the information necessary for organising and managing the specific activity is collected, such as, by way of example, name, contact details and any other information required for its proper organisation.
This data is not automatically used for other purposes such as newsletter subscriptions or commercial promotion.
If a particular initiative requires the collection of more specific information, additional information will be provided through the relevant form.
7. Donations and financial support
The website may provide the possibility of financially supporting REVERSE RETT GREECE through donations.
To manage a donation, we may process information such as the donor’s name, contact details, donation amount and date, transaction identifier or information, and any other information required for the accounting, tax or administrative management of the donation.
Where payment is made through an external payment service provider, card details or other payment information are submitted to and processed directly by that provider in accordance with its own privacy policy and applicable security standards.
REVERSE RETT GREECE does not seek to store payment card details on its website servers.
This section will be updated with the details of the specific payment service provider before the online donation functionality is activated.
8. Purposes of processing
Depending on the circumstances, the personal data we collect is used to respond to communication requests, assess and manage membership applications, manage relationships with members, organise activities and participation, process and administratively manage donations, comply with legal accounting or other obligations, and ensure the secure and proper operation of the website.
9. Legal basis for processing
The applicable legal basis depends on the purpose and nature of the processing.
Depending on the circumstances, processing may be based on the need to respond to a request from the data subject, management of the relationship with a member or prospective member, the legitimate interests of REVERSE RETT GREECE in its lawful and secure operation and communications, compliance with legal or regulatory obligations, or your consent where the law specifically requires consent as the appropriate legal basis.
Where special categories of personal data are involved, such as health data, the additional requirements of Article 9 GDPR also apply.
10. Cookies
The website may use strictly necessary cookies or similar technologies for its technically proper and secure operation.
Strictly necessary cookies are not used for advertising purposes.
At present, we do not use optional cookies for Google Analytics or any similar website traffic analytics service.
If analytics or other non-essential tracking technologies are activated in the future, they will only be enabled in accordance with applicable law and, where required, following the visitor’s prior choice and consent. This Privacy Policy and the relevant cookie settings will be updated before such technologies are activated.
11. Newsletter and informational communications
At the time of the latest update to this Privacy Policy, the website does not provide a newsletter subscription service.
Submitting a contact form, membership application, participation form or donation does not result in automatic subscription to an electronic mailing list.
If a newsletter service is introduced in the future, a separate subscription procedure will be implemented and this Privacy Policy will be updated beforehand.
12. External links and social media
The website contains links to external services and social media platforms, including Facebook, Instagram, LinkedIn and Linktree.
The presence of a simple link does not mean that those services receive personal data from us merely because you visit reverserettgreece.gr.
When you select an external link and are transferred to the relevant platform, any subsequent processing of your personal data is governed by the terms and privacy policy of the relevant provider.
13. Embedded third-party content
Certain pages may include embedded third-party content, such as videos, maps or posts from other platforms.
Where such content is used, the external provider may process technical data or use cookies in accordance with its own policy.
Where prior consent is required before such content can be loaded, an appropriate consent mechanism will be applied before it is activated.
14. Who may receive personal data
REVERSE RETT GREECE does not sell personal data and does not make it available to third parties for their independent commercial purposes.
To the extent strictly necessary, access may be granted to authorised persons within the organisation and to service providers supporting the operation of the website, hosting, email, online forms, technical support, security or, once activated, the processing of online payments.
Personal data may also be disclosed where required by applicable law or by a competent public, administrative or judicial authority.
15. Transfers of personal data outside the European Economic Area
If the use of a particular service or provider involves the transfer of personal data outside the European Economic Area in connection with processing for which REVERSE RETT GREECE is responsible, such transfer will only take place in accordance with the requirements and appropriate safeguards provided for by the GDPR.
16. Data retention
Personal data is not retained for longer than is necessary for the purpose for which it was collected.
Contact data is retained for as long as necessary to manage and reasonably follow up the relevant request.
Membership application data is retained for as long as necessary to assess the application and, where it is accepted, for as long as necessary to manage the membership relationship and comply with the organisation’s legal obligations.
Data relating to participation in activities is retained for as long as necessary to organise and complete the relevant activity and for a reasonable period thereafter where required.
Information relating to financial transactions or donations is retained for the periods required under applicable accounting, tax or other legislation.
17. Data security
We implement appropriate technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration, destruction or unlawful disclosure.
We restrict access to personal data to those persons and service providers who require it for a specific and lawful purpose.
Although reasonable safeguards are applied, no method of transmission or electronic storage can guarantee absolute security.
18. Your rights
Under the GDPR and subject to the conditions provided by law, you have the right to request information about and access to your personal data, rectification of inaccurate or incomplete data, erasure, restriction of processing, objection to processing and, where applicable, data portability.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights or for any question relating to the protection of your personal data, you may contact us at:
We will review relevant requests in accordance with the time limits and procedures provided by law.
19. Right to lodge a complaint
If you believe that the processing of your personal data infringes applicable law, you have the right to lodge a complaint with the competent supervisory authority:
Hellenic Data Protection Authority
Information on exercising your rights and lodging a complaint is available on the Authority’s official website. The Hellenic Authority states that complaints may concern, among other matters, infringement of the rights provided for in Articles 15–22 GDPR or, more generally, unlawful processing of personal data.
20. Changes to this Privacy Policy
This Privacy Policy may be updated where the functionality of the website, the services we use, our processing activities or the applicable legal framework change.
The version currently in force will be published on this page and will state the date of its latest update.