We strongly support the Right to Privacy. We will take the protection of your personal data and their confidential treatment very seriously. We will process your personal data exclusively within the legal framework of the data protection provisions of the European Union, particularly the General Data Protection Regulation (hereinafter: “GDPR”).

This data protection policy statement describes when, how and for which purposes we will process your personal data. It also points out the rights that you have regarding the processing of your data. In particular, you will find information on

• who is legally responsible for the data processing (data controller)
• the data collection and logging that we carry out automatically when you visit our website
• the data that we collect and process when you register for our newsletter
• the social plug-ins that we use on our website
• the web analytics tool (e.g. Matomo) that we have chosen to analyse usage of our website and for optimisation
• Your rights as a data subject
• Your right to lodge a complaint

1. Responsible data controller

Responsible controller according to data protection legislation, and especially the GDPR, is:

Centre for Research and Technology Hellas (CERTH)
certh (at) certh (dot) gr

+30 2310 498100
6th km Charilaou-Thermi Rd.
57001 Thermi-Thessaloniki
Greece

You can contact CERTH’s data protection officer and data protection supervision at

Ms. Papastergiou Stella
dpo (at) certh (dot) gr
+30 2310 498237
6th km Charilaou-Thermi Rd.
57001 Thermi-Thessaloniki
Greece

Please explicitly mention “MediaVerse” in the subject line of your communication.

2. Data collection and logging

When you access our website on your device, we process the following data:

• Date and time of access
• Duration of visit
• Your operating system
• The device you have used for access
• Browser type (including version)
• Referrer (name of the website that you accessed immediately before)
• Volume of data sent
• IP address

We process this data on the basis of GDPR Article 6 (1) point f (legitimate interest), as they are required for us to provide the service, to ensure technical operation and to investigate and remove malfunctions. It is in our interest to ensure the use and technical operability of our website. This data is automatically processed when our website is accessed. Unless they are provided, you cannot use our services. We usually erase these data after fourteen days unless, under exceptional circumstances, we need them for a longer period for the above-mentioned purposes. In such a case we erase the data as soon as they are no longer required for the relevant purpose.

3. Social Plug-ins

This website uses plug-ins for the following social networks:

Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA). You can recognize it by the Twitter logo. With the help of Twitter buttons it is possible to a) share content on Twitter and b) follow us on Twitter.

When you click on a social network button, your browser uses this social plug-in to set up a direct connection to the server of the relevant social network. The legal basis for the transfer of data to the previously mentioned social networks is your consent (pursuant to Art. 6 Para. 1 letter a, 49 Para. 1 letter a GDPR). In this respect, your personal data might be transferred to bodies in a third country (outside the European Union), although a level of data protection comparable to that under EU law is not guaranteed. We have no influence on the scope of the data which is collected by the social media operators in this way. The operators process the information that you have called up our website. If you are also logged into one of the social media platforms at that time, the operator can match your account with the relevant social network site. If you then also interact with the social plug-in by clicking “Like” or “Share”, the relevant social media site will process that information.

Please be aware that, even if you are not a member of one of these social networks, it is possible for them to identify your IP address through the social plug-in and they might store and process this information. Further information about the scope and purpose for which data is processed, collected and used by the respective social networks, as well as your rights in this respect and the setting options, can be found in each social network’s data protection policy:

Twitter’s Privacy Policy

If you do not want social networks to collect data via our website, make sure you do not click on the relevant buttons. In addition, you can block social plug-ins via add-ons in your browser. However, there is no guarantee that your data will not be stored and processed by the social networks.

4. Matomo (Web analytics)

This website uses Matomo web analytics (formerly known as Piwik). Matomo uses cookies, i. e. text files which are stored on your computer and allow us to analyse your use of the website. The information generated by the cookies – including your shortened IP address – is transferred to our server and stored for the purpose of usage analysis and website optimisation. Your IP address is immediately anonymised. Information on your usage of this website will not be made available to third parties. Any data which is linked to cookies is automatically erased after 6 months. Any data that has reached the end of its retention period is automatically erased once a month.

The legal basis for the use of Matomo is your consent according to GDPR Article 6 (1) point a. If you want to disable cookies for the future, you can do so by changing your browser settings.

5. Your rights as a data subject

As a data subject you are entitled to the following rights:

• Right to information: You have a right to access the data we have stored about you as a person.

• Right to rectification and erasure: You can require us to correct inaccurate data or – provided that the legal grounds are in place – to erase your data.

• Restriction of processing: Provided that the legal grounds are in place, you can require us to restrict the processing of your data.

• Data portability: If you have provided us with data on the basis of a contract or your consent, and as long as there are legal grounds, you can require us to send you the data you gave us in a structured, commonly used and machine-readable format, or you can require us to send your data to a different controller.

• Objection to data processing on the legal basis of “legitimate interest” under GDPR Article 6 (1) point f: If there are reasons arising from your specific situation, you are entitled to object to our processing of your data at any time, provided that such an objection has its legal basis in a “legitimate interest”. If you make use of your right to object, we shall discontinue the processing of your data, unless we can – within the parameters of the law – demonstrate compelling legitimate grounds for further processing, outweighing your own rights.

• Objection to cookies: You can also object to the use of cookies at any time. You will find the relevant details in our notes on cookies in clause 5.

• Revocation of consent: If you have given us your consent to the processing of your data, you can revoke the same at any time with future effect. This, however, does not affect the legitimacy of processing your data until the date of revocation.

To exercise any of the aforementioned rights, please use the contact details as provided in clause 1 of this data protection policy. When you do so, please make sure that we can clearly identify you

In addition, if you have any questions about the processing of your personal data, your rights as a data subject or any consent you may have given, please feel free to contact us without incurring any charge.

6. Your right to lodge a complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.