```html
Privacy Policy
This Privacy Policy concerns the processing of personal data in connection with this specific online signature collection campaign.
1. Data Controller
The Data Controller responsible for the personal data collected through the campaign form is:
Address: 13 Petrou Syndika Street, Thessaloniki, Greece
Contact email for personal data matters:
For any questions regarding the processing of your personal data or for exercising your rights, you may contact us at the above email address.
2. What Personal Data We Collect
For participation in the signature collection campaign, we collect only:
- Full name
- Email address
The form does not request information concerning health status, diagnosis, patient care, or other special categories of personal data.
The Federation does not ask participants to disclose whether they or another person has dementia.
3. How We Use Your Data
Personal data are used exclusively for the purposes of this specific campaign, and in particular:
- to register the signature;
- to verify the signature by email;
- to manage participation in the campaign;
- to prevent duplicate or evidently abusive submissions;
- to record and document the signatures collected;
- to support the Federation’s requests to the State.
The email address is used to verify and manage the specific signature.
It is not used to send newsletters, promotional messages, or other updates.
4. Legal Basis for Processing
The processing of personal data for the above purposes is based on the participant’s consent, in accordance with Article 6(1)(a) of the GDPR.
Consent is provided through a clear affirmative action by selecting the relevant checkbox on the campaign form.
The checkbox is not pre-selected.
Participation in the campaign and submission of the signature take place only after the participant has actively selected the checkbox.
Consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
5. Signature Verification
After the form is submitted, a message is sent to the email address provided for the purpose of verifying the signature.
This verification is part of the participation process in the campaign.
The email address will not be used for any purpose other than those described in this Privacy Policy.
6. Publication of Signatures
The full names of participants will not be published publicly.
No public list containing the names or email addresses of signatories will be created.
The Federation may publish the total number of signatures collected without disclosing information that could identify individual signatories.
7. Possible Submission of Signatures to the Ministry of Health
As part of this specific campaign, the signatures may, if requested or if deemed necessary to support the Federation’s requests, be submitted to the Ministry of Health.
This possibility will be disclosed to the participant before the signature is submitted.
If the signatures are submitted, the Federation will transfer only the data necessary for this specific purpose.
The email address will not be transferred to the Ministry of Health unless it is required for the purpose of submitting the signatures.
8. Data Retention Period
The personal data of signatories will be retained for as long as necessary to complete and document the specific campaign, including any submission of the signatures to the Ministry of Health.
After the completion of the campaign, personal data will be retained only for as long as necessary to fulfil any legal obligations of the Federation or to establish, exercise, or defend legal claims, in accordance with applicable legislation.
After the necessary retention period has elapsed, personal data will be deleted or, where feasible, anonymised. In the event that consent is withdrawn, personal data will be deleted unless their retention is permitted or required on another lawful basis.
Personal data will not be retained for the purpose of sending newsletters or other informational messages.
9. Online Form and Joomla
The signature collection form operates through the Federation’s website, which uses the Joomla content management system and RSForm!Pro for the collection and management of submissions.
Data submitted through the form are stored within the technical infrastructure of the website and are accessible only to authorised persons who need access for the management of the campaign.
The Federation implements appropriate technical and organisational measures to protect personal data.
10. Proof of Consent
The Federation may retain the information strictly necessary to demonstrate that consent was provided.
Depending on the technical operation of the form, the following may be recorded:
- the date and time of submission;
- the information submitted;
- the selection of the consent checkbox;
- confirmation of the signature by email.
The data retained for the purpose of demonstrating consent are limited to what is strictly necessary.
11. Data Security
The Federation implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised access, or other unlawful processing.
Access to the data is restricted to authorised persons who need access for the management of the campaign.
12. Data Recipients
Personal data may be accessed by authorised persons of the Federation and, where necessary for the technical operation of the campaign, by hosting providers, technical support providers, or other relevant service providers acting on behalf of the Federation.
If the signatures are submitted to the Ministry of Health, only the data necessary for the specific purpose will be transferred.
13. Transfers of Data Outside the European Economic Area
The Federation seeks to ensure that personal data are not transferred outside the European Economic Area.
If the use of a particular service provider involves the transfer of or access to personal data outside the European Economic Area, the Federation will implement the measures and appropriate safeguards required under the GDPR.
14. Your Rights
In accordance with the GDPR and subject to the conditions provided by applicable law, you have, among others, the following rights:
- the right of access to your personal data;
- the right to rectification of inaccurate or incomplete data;
- the right to erasure of your personal data;
- the right to restriction of processing;
- the right to data portability, where applicable;
- the right to withdraw your consent at any time.
These rights may be exercised subject to the conditions and limitations provided by the GDPR. The Hellenic Data Protection Authority (HDPA) confirms, among others, the rights of access, rectification, erasure, restriction of processing, and data portability.
To exercise your rights or for any questions regarding the processing of your personal data, you may contact:
The Federation will examine your request in accordance with the time limits provided by the GDPR.
15. Right to Lodge a Complaint
If you believe that the processing of your personal data violates the GDPR or applicable legislation, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).
The HDPA is the competent supervisory authority in Greece for the protection of personal data and provides a procedure for submitting complaints.
16. Amendments to this Privacy Policy
The Federation may amend this Privacy Policy when necessary due to changes in the operation of the campaign, applicable legislation, or the way personal data are processed.
The current version of this Privacy Policy will be available on the Federation’s website.
Last updated: 21/08/2026
```