Introduction

At Odyssea (“Odyssea”, “we”, “us”, “our”), we are committed to protecting your personal data and privacy. This Privacy and Data Protection Policy explains how we collect, use, and safeguard your information when you visit our website and register for our learning courses via the online form.

Odyssea strives to always keep your personal data safe and comply with all applicable data protection provisions as each time in force. We shall not at any time, receive from you more personal data than what is necessary for each purpose for which they are collected and we will not use your information for any purpose incompatible with the scope of our services as described in our Terms and Conditions of Use and we will not share your personal data with anyone except as described in this Privacy and Data Protection Policy.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Greek Law 4624/2019 and only do so with your informed consent. By submitting the course registration form, you acknowledge and agree to the practices described in this policy.

Data Controller and Contact Information

The Data Controller responsible for the handling of your personal data is Odyssea, which operates under the legal name ODYSSEA A.M.K.E. (a non-profit civil company). Our registered office is located at 17 Nikiforou Mandilara Str., Ag. Ioannis Rentis, 18233 Athens, Greece. If you have any questions or requests regarding your personal data, you can contact us at info@odyssea.com or by mail at the above address.

Personal Data We Collect

When you fill out the online course registration form, we collect the personal information that you provide. This typically includes:

• Full Name
• Email Address
• Phone Number
• Gender
• Date of Birth
• Country of Origin
• Language Proficiency in Greek and in English (your indicated skill levels)
• Desired Course you wish to enroll in
• How You Heard About Odyssea (e.g., referral, social media, etc.)
• Curriculum Vitae (CV) (which may contain information about your education, work experience, skills, etc.)
• Your Motivations for Joining the course (as described in your responses on the form)
• Your Goals After Completing the Course (as described in your form responses)
• Relevant Experience or background pertinent to the course (as described in your form responses)
• Other Information You Choose to Provide on the registration form (for example, any additional comments or details you submit in open text fields)

We limit our collection to information that is necessary for the registration and administration of our courses. We do not collect any sensitive personal data unless you voluntarily provide such information (which we discourage in the registration process). Please ensure that any personal data you provide is accurate and up-to-date. If you need to update or correct your information, please contact us.

Legal Basis for Processing

We collect and process your personal data based on your explicit consent, in line with the General Data Protection Regulation (GDPR) and Greek Law 4624/2019. We adhere to principles of lawfulness, fairness and transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity/confidentiality, and accountability as set out in these laws.

By completing and submitting the course registration form on our website, you freely provide your consent for Odyssea to use your data for the purposes of reviewing your application, contacting you, and organizing the course. We will not use your data for any other purpose unless you give us separate consent.

In some cases, we may also need to process your data to comply with legal obligations, such as fulfilling reporting requirements to public authorities or regulatory bodies.

You have the right to withdraw your consent at any time, without affecting the lawfulness of any processing that took place before your withdrawal. If you do withdraw your consent, we will stop using your data and unless we are legally required to retain it, we will delete it.

How We Use Your Personal Data

We collect and use your personal data solely for purposes related to your course registration and participation. Specifically:

• To review and process your registration: We assess the information you submit to determine your eligibility and suitability for the course you applied for.
• To contact you: We use your phone number or email to follow up on your registration, share course details, or request any additional information needed.
• To manage your participation: If you are accepted, your data helps us enroll you in the course, track attendance and issue certificates or completion records if applicable.
• To collaborate with training partners: For courses delivered with external partners, we may share only the necessary details (e.g., your name and contact info) so they can coordinate with you directly.
• To improve our services: We may analyze non-identifiable data (such as overall demographics or motivation statements) to improve course design, outreach, and impact reporting.

We do not use your data for unrelated purposes, nor do we send marketing emails unless you’ve explicitly agreed to receive them.

Data Sharing and Disclosure

We treat your personal data with care and confidentiality and we only share it with third parties when necessary and in a secure manner:

• Odyssea staff: Authorized team members (e.g. course coordinators, instructors, administrators) may access your information solely to manage your registration and course participation. All personnel are bound by confidentiality.
• Service Providers: We may use trusted third party providers to support our operations – such as website hosting, cloud storage, email services and communications. These providers receive only the data needed to perform their tasks and are contractually obligated to use it securely and solely for our specified purposes, in line with GDPR.
• Third Party Course Partners: For trainings delivered in collaboration with other organizations, we may share relevant information (e.g. your name, contact details and relevant experience) so they can manage your participation.

We do not sell, rent, or exchange your personal data for marketing purposes. All partners and providers are required to keep your information secure and confidential and to use it strictly for the delivery of the services described. If you have questions about any third party data sharing, feel free to contact us.

Cookies and Analytics

Our website uses cookies and similar technologies to function properly and to help us improve how it performs for visitors. A cookie is a small text file that is stored on your device when you visit a website. Cookies allow us to recognize your browser, remember certain settings (like your language preference) and gather information about how our site is used.

We use cookies for the following purposes:

• Essential site functionality: These cookies help the website work correctly, for example by remembering your cookie preferences or enabling navigation between pages. They are required for the website to operate and cannot be switched off.
• Analytics and performance: We use Google Analytics to collect anonymous information about how visitors use the website – such as how many people visit, which pages are most popular, how long users stay on each page and what type of device or browser they are using. This data helps us understand usage patterns and improve the website’s structure and content.

Google Analytics does not identify you personally. IP addresses are anonymized before being stored, and the data is used only for statistical analysis.

We do not use cookies for

• Advertising or profiling
• Tracking users across different websites
• Selling or sharing your data with third party marketers

Your Choices

When you first visit our website, you will see a cookie notice giving you the option to accept or decline cookies (such as analytics). You can change your preferences at any time by adjusting your browser settings to block or delete cookies. Please note that disabling certain cookies may affect the functionality of some parts of the site. You can also opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-Out Browser Add-on: https://tools.google.com/dlpage/gaoptout

Data Security

Odyssea takes the security of your personal data very seriously. We have implemented appropriate technical and organizational measures to protect your information from unauthorized access, loss, misuse, or alteration. These measures include, for example, using secure servers and encrypted connections for our website, restricting access to personal data only to personnel and service providers who need to use it, and following industry best practices for information security. However, please understand that no website or Internet transmission is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security. We therefore encourage you to also take precautions, such as using secure networks and devices when submitting sensitive information. If we become aware of a data breach that affects your personal data, we will notify you and the relevant authorities as required by law.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy and in accordance with applicable laws.

• If you register for a course but do not ultimately enroll (e.g. if no spots are available or you decide not to proceed), we will keep your data only for a short period to manage your application or inform you of alternative opportunities. After that, it will be deleted from our active systems within a reasonable timeframe.
• If you do enroll and participate, your data will be retained for the duration of the course and for a reasonable period afterward. This allows us to issue certificates, track outcomes, and meet any necessary reporting or auditing obligations. Personal identifiers will be removed or anonymized once they are no longer required. However, some core information (such as attendance or certificate records) may be kept longer as part of our educational archive or to respond to future verification requests.

In some cases, we may be required by law or donor agreements to retain certain data for a longer period – for example, for financial reporting or compliance audits. If you withdraw your consent or request deletion of your data, we will honor your request unless legal obligations or overriding legitimate interests require otherwise.

Your Rights Under GDPR

As a data subject under the GDPR, you have several important rights regarding your personal data. Odyssea is committed to respecting these rights. Subject to certain legal conditions, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your data when it’s no longer needed or if you withdraw consent.
• Restrict processing of your data in certain circumstances.
• Receive a copy of your data in a machine-readable format (data portability).
• Withdraw your consent at any time.
• Lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr)

if you believe your rights have been violated. You can contact the HDPA at 1-3 Kifisias Ave., 115 23, Athens, Greece; Phone: +30 210-6475600; Email: contact@dpa.gr; Website: www.dpa.gr. We kindly ask that you consider raising any concerns with us first, so we can try to address them directly – your satisfaction is very important to us.

Exercising Your Rights: You can exercise any of your rights by contacting us via email at dpo@odyssea.com. Please indicate your request and provide enough information for us to verify your identity (we may need to confirm identity to protect your privacy and ensure we don’t disclose data to an unauthorized person). Exercising your rights is free and we will do our best to respond promptly. Finally we may ask for clarifications if needed to properly fulfill your request, and we will always let you know the outcome in clear terms.

Updates to this Policy

We may update or modify this Privacy and Cookie Policy from time to time, for example to reflect changes in our practices, to clarify information, or to ensure compliance with new legal requirements. When we make changes, we will post the revised Policy on this webpage with an updated effective date. If any material changes are made – we will take additional steps to inform you, such as posting a prominent notice on our site or contacting you directly if feasible.

Your continued use of our website and services after any updates constitutes your acknowledgement of the updated terms.

Contact Us

Your trust is important to us. If you have any questions, concerns, or requests regarding this Privacy and Cookie Policy or how Odyssea handles your personal data, please do not hesitate to reach out. You can contact us by email at info@odyssea.com or by phone at (+30) 210 8839877.

Effective Date: May 28, 2025