Decisions
 
FAQ
 
Themes
 
 
 
 
Security
Search

Keywords




 

Law 2472/1997 protects citizens' rights vis-a-vis those who keep and process their personal data (Data Controllers). These rights are the following:

The right to information

The Data Controller must inform you about the collection of your personal data. You have the right to know the identity of the Data Controller, the purpose for which your data is being collected and processed, as well as the identity of anyone to whom your data is disclosed.

Read more: article 11, Law 2472/1997

The right to access

You have the right to know whether your personal data are being processed or have been processed. More specifically, you have the right to request and obtain from the Controller, without undue delay and in an intelligible and express manner, information about the nature of your personal data, their origin, the purposes of processing and the recipients, if any, thereof.

In order to exercise the right of access you can send a letter (by registered mail) to the Controller. Keep a copy of the letter, the postal receipt and any response you might receive from the Controller.

The letter must be written in a simple manner:

Dear Sir/Madam,

According to article 12 of Law 2472/1997, I would like to be informed in writing and in an express manner which of my personal data are being held and processed by you…

The Data Controller must answer in writing within fifteen (15) days.

In case the Controller does not answer within 15 days or in case the answer thereof is not satisfying, you may then file a complaint with the Authority requesting your case to be examined.

Read more: article 12, Law 2472/1997

The right to object

You have the right to object to the processing of your personal data by sending a notice to the Controller requiring them to correct or to delete your personal data.

In order to exercise your right to object you may send a letter (by registered mail) to the Controller. Keep a copy of the letter, the postal receipt and any correspondence you may receive from the Controller.

The letter must be written in a simple manner:

Dear Sir/Madam,

According to article 13, Law 2472/1997, please correct as follows (…) or delete my personal data held in your files. …

The Data Controller must answer in writing within fifteen (15) days.

If the Controller does not answer within 15 days or if the answer provided is not satisfying, you may then file a complaint with the Authority requesting your case to be examined.

Read more: article 13, Law 2472/1997