Privacy Policy
Last updated: 16 October 2026
1. Introduction
REM Heritage is committed to protecting the privacy and personal data of visitors to its website, https://remheritageproject.eu/.
This Privacy Policy explains how personal data is collected, used, stored and protected when you visit the website, contact us or interact with its content and resources.
The website is operated by KMOP – Social Action and Innovation Centre as part of the REM HERITAGE project, an initiative dedicated to Holocaust education, remembrance and intergenerational exchange.
Personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek data protection legislation.
2. Data Controller and Contact Information
The organisation responsible for processing personal data in connection with the website is:
KMOP – Social Action and Innovation Centre
4 Sourpi Street, 14562 Kifisia, Athens, Greece
Website: https://remheritageproject.eu/
General enquiries: info@remheritageproject.eu
Data Protection Contact
KMOP's Data Protection Officer (DPO) Team
Email: dpo@kmop.org
For questions about this Privacy Policy or requests concerning your personal data, you may contact the DPO Team directly.
3. Personal Data We Process
Depending on how you use the website, the following categories of information may be processed.
3.1 Technical and Browsing Information
When you access the website, technical information may be processed by the web server and supporting services, including:
- IP address;
- Date and time of access;
- Requested pages and resources;
- Browser and device information;
- Operating system and referring website, where available;
- Technical and security-related logs.
This information supports the operation, security, maintenance and performance of the website.
3.2 Email Communications
The website provides email links through which visitors may contact the REM Heritage team.
If you contact us by email, we may process your email address, name, message and any other information you voluntarily provide.
This information is used exclusively for handling your enquiry, providing relevant information and maintaining any necessary correspondence.
The website does not currently provide account registration, newsletter subscriptions or online contact forms.
3.3 Analytics Information
With your consent, we may use Google Analytics 4 (GA4) to understand how visitors interact with the website.
Analytics information may include pages visited, interaction events, approximate geographical information, technical device characteristics and browsing patterns.
Analytics services may use cookies or similar technologies. Optional analytics tracking is intended to operate only after the visitor has given the relevant consent.
3.4 Photographs and Audiovisual Material
The website may publish photographs, videos and other audiovisual materials documenting REM Heritage activities, including workshops, conferences, educational events and project meetings.
Such material may include identifiable images of participants, educators, speakers and other individuals involved in project activities.
Photographs and audiovisual materials are published for legitimate project communication, educational and dissemination purposes, subject to an appropriate legal basis and the permissions required by applicable law.
Where consent is relied upon, it may be withdrawn in accordance with applicable data protection legislation.
Where images involve minors, the project takes account of the additional safeguards and permissions applicable to their participation and publication.
The website does not intentionally publish sensitive personal information about event participants.
4. Purposes and Legal Bases of Processing
Personal data may be processed for the following purposes:
Website operation and security: To maintain the website, respond to technical incidents, protect against misuse and ensure reliable access to information. The legal basis is KMOP's legitimate interests under Article 6(1)(f) GDPR, where applicable.
Responding to enquiries: To receive and respond to communications initiated by visitors. The legal basis is KMOP's legitimate interests in managing project communications under Article 6(1)(f) GDPR.
Website analytics: To understand website usage and improve content and performance. Where consent is required, the legal basis is Article 6(1)(a) GDPR.
Publication of project activities: To communicate and document project activities through photographs, videos and educational content, using the applicable legal basis for the specific publication, including consent under Article 6(1)(a) GDPR where required or relied upon.
Compliance and accountability: To fulfil legal, regulatory and project-related recordkeeping obligations. Where processing is necessary to comply with a legal obligation, the legal basis is Article 6(1)(c) GDPR.
5. Cookies and Similar Technologies
The website uses necessary technologies for its operation and cookie-preference management.
Optional cookies and technologies, including those related to analytics and certain third-party services, are subject to visitor preferences and any required prior consent.
Visitors can accept, reject or customise optional cookies through the website's cookie consent system.
For additional information, please consult our Cookie Policy, which is available through the website's legal information menu.
6. Third-Party Services
The website may integrate services provided by third parties, including:
- Google Analytics 4 for website analytics;
- YouTube and Vimeo for embedded video content;
- Google Fonts for website typography;
- Facebook, Instagram and other social media platforms for embedded content;
- Website hosting, security and content delivery services.
Depending on how these services are configured, their providers may receive technical information, including IP addresses and browser or device data.
Embedded services may process personal data according to their own privacy policies when activated or accessed.
Where legally required, optional third-party content and tracking technologies must not be activated before the visitor provides consent.
Visitors are encouraged to consult the privacy policies of the relevant third-party providers for additional information.
7. Hosting and Data Security
The REM Heritage website is hosted on server infrastructure located in Greece.
KMOP takes appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.
These measures may include secure website connections, restricted administrative access, software maintenance, backups and appropriate server security controls.
Although reasonable precautions are taken, no system connected to the internet can be guaranteed to be completely secure.
8. Data Sharing and International Transfers
Personal data may be accessible to authorised KMOP personnel, relevant project partners and contracted service providers where access is necessary for the website's operation, communications or project activities.
Service providers may process information on KMOP's behalf under appropriate contractual and confidentiality arrangements.
Certain third-party services may involve processing or transfers of personal data outside the European Economic Area.
Where such transfers occur, KMOP will ensure that an applicable transfer mechanism and required safeguards are in place, such as an adequacy decision, the EU–US Data Privacy Framework for eligible certified recipients, or Standard Contractual Clauses, as appropriate.
Personal data is not sold to advertisers.
9. Data Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected.
Where information forms part of REM Heritage project documentation, it is retained in accordance with the applicable project agreement, funding requirements and any relevant legal obligations.
Email correspondence is retained for as long as reasonably necessary to handle the enquiry and fulfil related accountability requirements.
Technical and security logs are retained according to the website's operational and security requirements and the applicable hosting arrangements.
Where personal data is no longer required and no legal obligation justifies further retention, it is deleted or anonymised where appropriate.
10. Your Rights
Under the GDPR, and subject to applicable conditions, you have the right to:
- Request access to your personal data;
- Request correction of inaccurate or incomplete information;
- Request deletion of your personal data;
- Request restriction of processing;
- Object to processing based on legitimate interests;
- Request data portability where applicable;
- Withdraw consent at any time where processing is based on consent;
- Lodge a complaint with a competent supervisory authority.
Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.
To exercise your rights, contact KMOP's DPO Team at dpo@kmop.org.
You also have the right to submit a complaint to the Hellenic Data Protection Authority (HDPA):
Website: https://www.dpa.gr/en/
11. External Links and Resources
The website may provide links to third-party websites, external educational materials, archives, publications and downloadable resources.
When you access an external website, its own privacy practices and terms may apply.
The REM Heritage website may also record aggregate numbers of clicks on its resource links for statistical purposes, without creating individual visitor profiles through the resource click counter.
12. Changes to This Privacy Policy
KMOP may update this Privacy Policy to reflect changes in the website's functionality, applicable legislation, project activities or personal data processing practices.
The latest version will always be available through the website.
13. Contact
For questions about privacy or personal data protection:
KMOP – Social Action and Innovation Centre
General email: info@remheritageproject.eu
Data Protection Officer Team: dpo@kmop.org