DATA PROTECTION POLICY. The European General Data Protection Regulation (GDPR – EU 2016/679) became fully applicable on 25 May 2018. In this context, we would like to inform you that we have renewed the terms and conditions governing the application process for the MSc programme of the Department of Industrial Management and Technology of the University of Piraeus. The main changes relate to the Protection of Personal Data in order to meet the requirements of the European Data Protection Regulation (GDPR – EU 2016/679). 1.Collection and processing of personal data. Personal data of applicants are collected, maintained and processed during the submission of applications to the MSc programmes of the Department of Industrial Management and Technology. The exact data collected are those requested by the above application form. Purpose of processing personal data: The collection and processing of personal data is done exclusively for the following purposes: 2.1. Submission and evaluation of applications: Candidates submit an application for the MSc in Industrial Management and Technology of the University of Piraeus and are evaluated by the Candidate Evaluation Committee to which the application data will be forwarded. 2.2. Transmission of data of successful applicants: For the successful candidates, the data of their applications will be transmitted to the competent academic and financial services of the University of Piraeus, in accordance with the provisions of the current Regulations of the P.M.S. The purpose of the transmission is the academic and financial management of the new postgraduate students in the Department of Industrial Management and Technology collected. 2.3 Processing necessary to safeguard legitimate interests: The data submitted by postgraduate students in the Information System will be retained and processed to the extent necessary for the establishment, exercise or support of legal claims. 3: The personal data of successful postgraduate students are kept indefinitely. The applications of candidates who have not been admitted to an MSc of the Department of Industrial Management and Technology are collected are deleted/destroyed after one (1) academic year.

4. User rights: The Department of Industrial Management and Technology collected by the University of Piraeus ensures the rights of postgraduate students regarding the processing of their personal data and facilitates the exercise of their rights. Candidates have the right to request: 4.1. access to their personal data and information about which data we process, the purposes of processing, the recipients and the duration of processing; 4.2. correction of their personal data if it is inaccurate or incomplete; 4.3. erasure of their personal data if the legal requirements are met, 4.4. limit the processing of their personal data only for specific purposes; 4.5. portability of their data, i.e. to receive the data they have provided in a structured, commonly used format or to request that it be sent directly to a third party, 4.6. withdraw their consent to the processing of their personal data at any time, including their automated processing for profiling. In this case, their processing by us will cease, without this affecting the lawfulness of any processing until their consent is withdrawn.

Finally, if you believe that your rights have been violated, you have the right to appeal to the Data Protection Authority (www.dpa.gr, 2106475600).