Information policy for the processing of personal data of website visitors

The www. csii. gr is the website of the non-profit CSI Institute (“International Institute for Cyber Security”), whose main objective is to promote educational and public benefit, including the prevention and treatment of online security issues, as well as education, active engagement and scientific research in the field of new technologies and the internet. In addition, through its website, the Institute aims at informing and engaging citizens in general on Internet issues, computer systems and infrastructures security, safe internet use, and Internet manipulation.


Your personal information is important to us, so we are committed to protecting and respecting your privacy. Our Institute, as the Personal Data Processor, under General Data Protection Regulation (EU) 2016/679, effective from 25 May 2018 (hereinafter referred to as “the GATT”), the national laws and relevant Directives of the Data Protection Authority (hereinafter referred to as “ASCP”), as applicable at any time, undertakes to protect your personal data for reasons arising out of our related business relationships, legal obligations, legal interest of our Institute or yours.

Through this Policy, our Institute provides you with the following information about the processing of your personal data (the type of personal information collected, how it is processed, the means of protection) and your rights as a data subject given these.

The term “personal data” refers to any information relating to an identified or identifiable natural person, that is to say a natural person whose identity can be verified, directly or indirectly, in particular by reference to an identifier such as your name, email address, phone number or any other information may be used as your identifier. Also the “processing of personal data” consists of the collection, registration, organization, structure, storage, modification, retrieval, retrieval of information, use, transmission, limitation or deletion of personal data that has been entered or will become aware of the Institute, either in the context of your dealings with it or in the context of information received by the Institute from a natural or legal person or public sector body in the exercise of its legal right or of the Institute itself.

The CSIi, in compliance with the applicable legal framework for the protection of personal data, has taken all necessary steps by implementing appropriate technical and organizational measures to legally maintain, process and safeguard the personal data file is committed to safeguarding and protecting in any way the processing of your personal data from loss or leakage, alteration, transmission or any other unauthorized processing.

In order to be transparent about the way we collect, use and store your personal data, our Institute encourages visitors to its website and any interested person to read this Policy in order to obtain the following information:

  1. What personal data we process and how we use it

Our Institute informs you that, through our website www. csii. gr, may collect information about you and your personal data if you provide it yourself. In more detail, the Institute collects and processes the following personal data:

a) Your email address, your name, your surname and any information you would like us to provide

b) In addition, our Institute, for the purpose of organizing and promoting its activities and actions, has at its disposal an electronic archive of photographic material, the collection and posting of which is available on its website and its disclosure is subject to the condition that the natural persons (subjects) depicted have provided in advance their free and explicit consent for the above purposes.

c) Finally, we receive your IP address whenever and wherever you browse our site.

Live chat program “”

On our website, there is a live chat program provided by tawk. to »(www. tawk. to). The tawk. was created with the aim of providing immediate support to children. It is the official web site of the CSIi Institute for Youth and specifically targeted at ages 13 to 18. Understanding the prompt and timely communication of young people for counseling support and quick access to mental health professionals, we decided, as a non-profit association, to embed in our actions a technology platform accessible to young people, where anonymously and always focused the ethical rules of science  and technology, they will find solutions and responses to everyday issues that concern them. Specifically, in a simple way, by visiting the website www. csii. gr and by simply registering in chat, posting only one nickname, the experts will answer young peoples questions and concerns daily and hours from 15.00 to 17.00. Counseling services are provided free of charge and access is quick and easy to handle as many requests as possible on a daily basis. The program is structured in such a way that the experts are well trained to motivate young people to speak, communicate their need and ultimately make the changes they want to avoid situations of emotional vulnerability, with the ultimate goal of making their daily lives more functional.

It is noted that, during the above communication, no personal information or personal data may be required which may identify the natural person providing it.

The data collected is not used for the personal identification of the visitor and is not linked to the alias owners personal data unless personal data are voluntarily provided during the live chat.

If you would like to find out more about tawk. to and data protection you can visit:

  1. Processing of special categories of personal data (sensitive personal data)

Our Institute does not process your sensitive personal data such as data related to your racial or ethnic origin, your political beliefs, your religious or philosophical beliefs or your affiliation with a trade union, genetic or biometric data to identify you as a processor, and health or data about your sex life.

In the case that you provide them at your own initiative and voluntarily, any processing thereof will be perfectly consistent with the applicable legal framework for the protection of personal data (in particular Article 9 of the CPC) and is in line with the official purposes of the Institute, as reflected in its Statute ( contribution to the protection of the public, children etc.)

  1. Adolescents and personal data

The CSI Institutes main purpose is to support and raise the awareness of the younger generation and, inter alia, to help inform and educate children on new technologies and the safe use of the Internet, as well as to solve problems through the support line and and pages on social networking platforms.

So, while we do not encourage adolescents to contribute to their identification, they may, in particular where required by the current legal framework, process personal data of adolescents, with our priority being always to protect their privacy.

In these cases, based on complete transparency, acting with absolute confidentiality and taking into account the best interests of the child, we take appropriate measures to protect the privacy of children, including by not collecting sensitive personal data, the absence of direct marketing. to children and abstinence from automated individual decision making.

  1. Legality of processing

Our Institute treats your personal data legally and when necessary for any purpose. Therefore, we process your personal data in the light of one of the following legal bases:

  1. a) when you have previously given us your consent, such as when you are pictured on.

(b) where processing is necessary to serve the contract between us.

(c) the compliance of the Institute with obligations under the law, such as the fulfillment of its statutory purposes.

(d) where processing is necessary to safeguard your vital interest.

(e) where the processing is necessary for the performance of the task of the Institute in the public interest.

(f) as required to pursue the legitimate interests of the Institute (or third parties), including our interests in providing innovative, personalized and secure services to you.

  1. Recipients of your personal data

Our Institute does not disclose your personal data to third parties. Therefore, our staff and volunteers (psychologists, criminologists) who provide their services to the Institute have access to your personal data as part of the proper execution and fulfillment of volunteering and in a state of complete confidentiality and confidentiality. Subsequently, CSIi may disclose to third parties (internal and external, but nonetheless within the EU) that it has partially or wholly entrusted with the task of processing your personal data (Performers of Processing) , for specific purpose.

In all cases, our Institute legally ensures the processing of your personal data, with contractual clauses limiting the purpose of the processing, providing adequate guarantees for the implementation of appropriate technical and organizational measures, and in a state of complete confidentiality and confidentiality, in order to process your personal data correctly and securely.