Privacy and Privacy Policy

Last updated: September 13, 2026

1. Introduction

The protection of your personal data is important to Hermeion Online School.

This Privacy Policy explains what personal data is collected when you use the website https://hermeion.gr, for what purposes they are used, how long they are kept and what rights you have.

The processing is carried out in accordance with the General Data Protection Regulation, Regulation (EU) 2016/679 («GDPR»), Law 4624/2019, Law 3471/2006 and any other relevant provision of Greek and European legislation.

2. Controller

Responsible for the processing of personal data is:

Distinctive title: «Hermione» Online School»
Responsible for: Angeliki Antzoulatou
Website: https://hermeion.gr
Electronic mail: contact@hermeion.gr
Phone: 697 346 9004
Headquarters: 53 Momferatou Iosif Str., 11474 Athens, Greece

For any matter related to this Policy or the exercise of your rights, you can contact contact@hermeion.gr.

3. What data we collect

Depending on the way in which the website is used, the following categories of data may be collected:

Data you provide

When you fill in the contact form or contact us by telephone or e-mail, the following may be collected:

name,
e-mail address,
telephone number,
the content and subject of the message,
information relevant to your request;,
details of a parent or guardian,
age or school class of the child, if these are necessary for the provision of information about the subjects.

Please do not send health, special learning needs or other sensitive personal data, unless absolutely necessary and have been consulted beforehand.

Technical data

During your tour, the following may be recorded automatically:

IP address,
type of browser and device,
operating system,
date and time of access,
pages you have visited,
technical recording records,
information related to errors, malicious attempts or security issues;,
preferences related to cookies.

4. Purposes and legal bases of processing

Personal data is used only for specific and legitimate purposes:

Reply to contact requests: to respond to a message, a phone call or a request for information.
Information about the courses: to provide information about the program, the timetable, the content and the possibility of participation.
Preparation or execution of cooperation: when the parent or guardian requests the registration of a child or the provision of an educational service.
Compliance with legal and tax obligations: where this is required by law.
Website Security: to prevent malicious actions, fraud, violations and technical problems.
Publication of children's works, photographs or testimonies: only after a prior, specific and free consent.
Use of optional cookies: only when the necessary consent has been given.

The legal bases of the processing may be:

Your consent,
the adoption of measures prior to the conclusion of an agreement or the execution of an agreement;,
compliance with a legal obligation,
the legitimate interest in safety, the proper functioning and the defense of legal rights.

5. Data of minors

The «Hermeion» school is aimed at primary and secondary school children. For this reason, increased measures are taken to protect their personal data.

Communication regarding registrations, courses and partnerships must be carried out by a parent or legal guardian.

For children under the age of 15, where processing is based on consent, the consent of the parent or legal guardian is required.

Only the data that is absolutely necessary for the child's participation and the organization of the lessons are collected.

6. Publication of children's works and photographs

The publication of a child's work, name, photograph, recording or video takes place only after the prior, explicit and specific consent of the parent or legal guardian.

Where possible, only the first name, initial, or other limited reference is used, in order to reduce the possibility of identifying the child.

Consent may be revoked at any time by sending a message to the contact@hermeion.gr. After the revocation, the relevant content will be removed from the website within a reasonable period of time. It may remain temporarily in backup copies or in the cache of search engines, without further use by «Hermeion».

7. Cookies

Cookies are small text files that are stored on the visitor's device while browsing.

The website may use:

Absolutely necessary cookies, for the operation, safety and maintenance of your preferences,
preference cookies, for the storage of specific choices,
Statistical analysis cookies, as long as they have been activated,
Third-Party Services Cookies, such as embedded videos, maps or social networks, if used.

Optional cookies are not activated before your consent. You can accept them, reject them or change your preferences at any time by selecting «Cookie settings» at the bottom of the website.

Refusing optional cookies does not restrict basic access to the website.

8. Data Recipients

Access to personal data can only be granted to:

the responsibility for the operation of the School,
authorized associates, where necessary,
the hosting provider of the website,
electronic mail providers,
providers of technical support, maintenance and safety;,
accounting or legal associates, where required,
public, judicial or supervisory authorities, where there is a legal obligation to do so.

The data is not sold, rented or given away for irrelevant advertising purposes.

External partners undertake to use the data only in accordance with the relevant guidelines and applicable legislation.

9. Transfer of data outside the European Economic Area

Some technical providers may process data outside the European Economic Area.

In such a case, the transfer takes place only when there is a legal protection mechanism, such as a decision of the European Commission on the adequacy of the European Commission, Standard Contractual Clauses or other approved guarantee.

10. Shelf-life

Personal data is retained only for as long as necessary:

Messages and requests for communication are generally retained for up to twelve months after the last relevant communication, unless there is cooperation or a legitimate reason for longer retention.
Parents' and pupils' data are retained for the duration of the cooperation and then for as long as required by tax, contractual or other legal obligations.
The published content is retained until the withdrawal of consent or the expiry of the purpose of the publication.
The technical recording files are kept for as long as necessary for security and technical support reasons.
The duration of each cookie is displayed in the cookie management tool.

After the expiry of the relevant time, the data is deleted or anonymized in a secure manner.

11. Safety

Appropriate technical and organizational measures are taken to protect the data from loss, unauthorized access, alteration, disclosure or destruction.

The measures include, as appropriate, encryption of the connection, controlled access, software updates, security copies and protection mechanisms against malicious actions.

No method of transmitting or storing data can be considered completely secure. However, every reasonable effort is made to maintain a high level of protection.

12. Your rights

According to the GDPR, you have the right, where the legal conditions are met, to:

information and access to your data,
correction of inaccurate or incomplete data,
deletion,
restriction of processing,
data portability;,
opposition to a specific processing,
withdraw your consent at any time,
not to be subjected to a decision that is taken exclusively by automated means and produces significant results.

The withdrawal of consent does not affect the lawfulness of the processing carried out prior to it.

To exercise your right you can send a message to contact@hermeion.gr. The request will normally be answered within one month. Additional information may be requested only to securely confirm your identity.

13. Right to terminate

If you consider that the processing of your data violates the law, you can lodge a complaint with:

Personal Data Protection Authority
Website: https://www.dpa.gr

It is recommended that you contact Hermeion beforehand, so that the issue can be examined and dealt with immediately.

14. Third Party Links and Services

The website may contain links or embedded content of third parties, such as videos, maps or social networks.

Third-party providers operate in accordance with their own privacy policies. Hermione is not responsible for the content or practices of third-party websites.

15. Automated decision-making

Hermione does not use personal data for automated decision-making or profiling that produces legal or correspondingly significant results.

16. Changes in Policy

This Policy may be modified when the functions of the website, the services used or the relevant legislation change.

The latest edition will be published on this page, with reference to the date of the last update.

17. Communication

For questions regarding the protection of personal data:

Angeliki Antzoulatou – «Hermione» Online School»
Email: contact@hermeion.gr
Phone: 697 346 9004

Hermione