Version 1.0
PAROS INNOVATION CENTER, a trade name of DREAMLAB CYBERTECHNOLOGIES MIKE, respects the privacy of students, parents and guardians and is committed to processing personal data securely and lawfully.
This Policy explains what personal data we collect, why we use it, how long we retain it, who may receive it and what rights parents, guardians and students have.
Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019 and other applicable Greek and European data-protection legislation.
DREAMLAB CYBERTECHNOLOGIES MIKE
Trade name: PAROS INNOVATION CENTER
Registered office: [full address]
Greek Tax ID: [VAT / Tax ID]
GEMI No.: [GEMI number]
Privacy contact email: [privacy email]
Telephone: [telephone]
We may process identification and contact information relating to a parent or guardian, including name, telephone number, email address, postal address, tax information and other details necessary to provide our services.
For students we may keep information such as name, date of birth, school, grade, class enrollment, attendance, educational activities and information related to participation in Center programs.
We also keep financial information relating to charges, payments, credits and balances. For online payments we may store transaction identifiers and status. PAROS INNOVATION CENTER does not store full payment-card details when payment is processed by an external payment provider.
The Parent Portal and our information systems may also record security-related technical data, including access dates and times, technical logs, significant account actions and information necessary to protect our systems.
PAROS INNOVATION CENTER provides educational services to children and teenagers and therefore processes personal data relating to minors. Processing is limited to data necessary for enrollment, attendance, educational support, safety and communication with parents or guardians. Where consent is required, it is requested from the person legally entitled to provide it.
Personal data is used to manage enrollments and classes, operate the Parent Portal, record attendance and participation, communicate with parents and guardians, provide learning material, maintain financial records, process and confirm payments, issue lawful accounting documents, handle requests and protect students, staff and information systems.
Depending on the circumstances, processing is necessary to provide the educational service and perform the relevant agreement, to comply with legal and tax obligations, to pursue legitimate interests such as security and prevention of misuse, or is based on consent where consent is required.
Where processing is based on consent, consent may be withdrawn for the future without affecting the lawfulness of processing carried out before withdrawal.
Taking or publishing photographs or video of students for advertising, promotional or public communications is not part of the mandatory acceptance of this Privacy Policy. Where required, separate and specific consent is requested from the parent or guardian. Refusing promotional image consent does not affect a student’s ability to attend.
The Parent Portal provides access to information concerning the parent and the children linked to the parent record. Users must keep their login details confidential and promptly notify PAROS INNOVATION CENTER if they suspect unauthorized use.
Online payments may be processed by a cooperating payment service provider such as Viva. PAROS INNOVATION CENTER receives only the information necessary to match and confirm the transaction, such as amount, transaction identifier, payment status and transaction time.
Only authorized persons may access personal data to the extent necessary for their duties. Data may also be shared with service providers for hosting, technical support, payment processing, accounting or communications under appropriate contractual and organizational safeguards, and with public or judicial authorities where required by law. We do not sell personal data.
Personal data is retained only for as long as necessary for the purposes for which it was collected and, where applicable, for periods required by tax, accounting or other legal obligations. Afterwards, data is deleted or anonymized unless there is a lawful reason for further retention.
Appropriate technical and organizational measures are used to protect data against loss, unauthorized access, alteration, disclosure or destruction, including access controls, individual accounts, logging of critical actions, backups and technical safeguards.
Under applicable law, data subjects may, depending on the circumstances, exercise rights of information, access, rectification, erasure, restriction, portability and objection, and may withdraw consent where processing is based on consent.
To exercise your rights, contact [privacy email]. You also have the right to lodge a complaint with the Hellenic Data Protection Authority if you believe your rights have been infringed.
This Policy may be updated to reflect changes in law, services or information systems. Where a material change is made, Parent Portal users may be asked to accept the new version.