Terms of Useand Personal Data Protection

1. General information

Welcome to the personal website of Orfeas Georgiou, President of the Youth Organisation of New Democracy (ONNED).

This website, which operates under the domain name www.orfeasgeorgiou.gr (the “Website”), was created to inform the public about the public presence, political positions, initiatives, activities and work of Orfeas Georgiou, and to support communication and public dialogue.

The Website is operated and managed under the responsibility of Orfeas Georgiou, through his authorised associates as the case may be (the “Administrator”).

Access to and use of the Website are governed by these Terms of Use, which include information on personal data protection, the use of cookies and the technologies applied, and by the Greek and European Union law in force from time to time.

Visitors are asked to read these Terms carefully before using the features and services provided.

Use of the Website requires compliance with these Terms, without this replacing any specific consent required by law for the processing of personal data.

2. Purpose and nature of the Website

The Website is a personal medium for political information, public communication and the presentation of activities.

Its content may include, for example, biographical details, public statements, political positions, articles, announcements, interviews, speeches, photographic and audiovisual material, event information and links to other online sources.

References to Orfeas Georgiou’s role as President of ONNED serve to present his public and organisational activity.

This personal website does not replace the official online platforms of ONNED or New Democracy, unless a specific service or publication is expressly described as official.

The views and positions presented on the Website express those of their respective author or speaker. Their publication does not necessarily mean that they are an official decision or binding position of any other political or organisational body.

3. Access and use

Access to the Website is, as a rule, provided freely and at no cost.

Visitors must use the Website lawfully, in good faith and in a manner consistent with its informational and communication purpose.

Any use that obstructs or disrupts its normal operation, endangers the security of its information systems or infringes the rights of the Administrator or of third parties is prohibited.

The Administrator may take necessary and proportionate measures to protect the Website from malicious, unlawful or abusive activity, in accordance with applicable law.

4. Intellectual property

The content of the Website, including for example texts, articles, photographs, videos, graphics, designs, audio files, logos, distinctive marks and original design and presentation elements, is protected by the applicable provisions on intellectual property, in particular Law 2121/1993, as in force.

The related rights belong, as the case may be, to their lawful holder, to the Administrator, or to third-party creators and organisations that have granted a licence for their use.

The publication of content on the Website does not grant visitors any right of ownership, exploitation or further use of that content.

Unless expressly permitted by law or by the rights holder, the unauthorised reproduction, modification, distribution, commercial exploitation or other use of protected material is prohibited.

Copyright protection also extends to third-party content, whether or not the rights holder is specifically credited in each individual publication.

5. Republication and use of content

Content may be accessed, read and saved for lawful personal use, without prejudice to the rights of its creators and other rights holders.

Referring to publications on the Website, quoting short extracts and linking to its content are permitted to the extent provided by applicable law, with appropriate credit to the source and the creator where required.

Reproduction or extensive use of protected content beyond the lawful exceptions requires the prior permission of the relevant rights holder.

Content may not be presented in a way that is misleading as to its origin, original meaning, context of publication or the identity of its creator.

Systematic automated extraction or mass collection of content by means that breach applicable law, the rights of third parties or the legitimate technical restrictions of the Website is not permitted.

6. Photographic and audiovisual material

The Website may host photographs, speeches, interviews, videos, extracts from public events and other audiovisual material relating to the public activity of Orfeas Georgiou.

This material may come from a personal archive, associates, photographers, news organisations, public bodies and other lawful sources.

The rights of the respective creators and rights holders remain in force.

Third parties may reproduce photographic or audiovisual content only where there is a lawful basis or a relevant licence.

Anyone who believes that their appearance in published material infringes their rights may submit a request through the Website’s contact details, so that it can be examined in accordance with applicable law.

7. Distinctive marks and logos

The use of the name, image and distinctive features of Orfeas Georgiou, as well as any symbols or logos of political organisations, is governed by applicable law and the rights of the respective holders.

The appearance of the names or distinctive marks of ONNED, New Democracy or third parties on the Website does not grant any visitor a right to use or exploit them.

The unauthorised use of such features in a way that creates a false impression of official representation, cooperation, authorisation or endorsement is prohibited.

8. Accuracy and timeliness of information

Reasonable efforts are made to keep the content of the Website accurate, reliable and up to date.

However, the Administrator does not guarantee that all published information is always complete or current, particularly where it concerns events, data, legislation, public decisions or activities that may change after publication.

Content reflects, as the case may be, the situation or view that applied at the time of its publication.

The Administrator reserves the right to correct inaccuracies, add information and update or remove content, with due respect for applicable law.

The information on the Website is for general information and does not replace official administrative announcements, regulatory acts or specialised professional advice.

9. User obligations and prohibited actions

Visitors must refrain from any action that could harm the Website or the rights of third parties.

In particular, the following are prohibited:

• Transmitting malicious software or attempting to breach security systems.
• Unauthorised access to data, accounts or infrastructure.
• Obstructing the operation of the Website through automated or other attacks.
• Using a false identity or misleadingly presenting oneself as representing another natural or legal person.
• Sending unlawful, threatening, defamatory or other content that unlawfully infringes the rights of third parties.
• Using communication features for unsolicited bulk messages, fraud or other unlawful activity.
• Unauthorised exploitation of protected content.

Expressing a political opinion or lawful criticism does not in itself breach these Terms.

Where a breach is established, the Administrator may, where permitted, take the necessary steps to protect the Website, limit abuse or refer the matter to the competent authorities.

10. Communication through the Website

The Website offers a way to get in touch through a dedicated online form.

To send a message, visitors may enter their full name, email address, telephone number and the content of their message.

Providing the details marked as required on the form is necessary to submit or handle the request.

Visitors must provide accurate information and avoid sending data about third parties without a lawful reason, or information that is not needed for the purpose of the message.

Submitting a message does not automatically create an obligation to accept a request, take any specific action or reply within a set time.

The Administrator makes reasonable efforts to review the messages received, according to their nature, content and subject.

The collection, use and retention of the details submitted through the form follow the detailed provisions of section 18 of these Terms.

11. Newsletters and taking part in activities

The contact form is used solely to receive and handle the message the visitor submits.

Sending a message does not automatically sign anyone up to a newsletter, a political communications list or any other database for future news or promotional material.

If services for subscribing to newsletters, expressing interest in activities or taking part in events are added in future, their use will be subject to the specific conditions required by applicable law.

The sending of news or political communication material is subject to the relevant rules on personal data protection and electronic communications.

Where consent is required, it is given separately, for a specific purpose, and can be withdrawn.

12. Political activity and organisational participation

The Website may publish information about political initiatives, organisational activities, events and activities related to ONNED, New Democracy or other institutional and civil society bodies.

Visiting the Website, contacting the Administrator or taking part in an information activity does not, in itself, constitute membership registration, a declaration of political support or the acceptance of any political or organisational role.

Registration with a political organisation, participation in an official organisational process or any request concerning a third-party body is subject to the official rules and procedures of the body concerned.

13. Protection of minors

The Website is informational in nature and its publicly available content may be accessed by visitors of different age groups.

Particular care is taken to protect the rights and personal data of minors.

Where the processing of a minor’s personal data is based on consent and falls under Article 8 of the GDPR and Article 21 of Law 4624/2019, the specific conditions laid down by law apply.

In particular, in the cases covered by these provisions, minors under fifteen (15) years of age need the consent or approval of the person with parental responsibility.

Any specific age limits for taking part in events, organisational processes or other activities are announced separately.

14. Links to third-party websites

The Website may include links to the websites of public authorities, political organisations, news organisations, educational institutions, civil society bodies and other third parties.

These links are provided to help visitors find information and navigate.

The Administrator does not necessarily control the content, technical infrastructure, services or personal data protection practices of external websites and accepts no responsibility for matters that fall within the responsibility of their respective operators.

The presence of a link does not automatically imply cooperation, agreement, approval or adoption of all the views and information of the linked website.

Visiting and using third-party websites is governed by their own terms and policies.

15. Social media and embedded content

The Website may include links to official social media accounts, as well as embedded audiovisual content from external platforms, in particular YouTube.

The use of external services is subject to the terms of service and personal data protection practices of their respective providers.

Activating embedded content may involve the transfer of technical information to third-party providers, such as the IP address, technical characteristics of the device and information about interaction with the content.

Where prior consent is required for storing or accessing information on the device, the related technologies are only activated in accordance with the procedures laid down by law.

More detailed information about the use of YouTube and the related technical features is given in sections 18 and 19 of these Terms.

16. Availability and security

The Administrator makes reasonable efforts to keep the Website running smoothly, securely and without interruption.

However, no absolute guarantee is given that all of its content and services will be continuously available.

The operation of the Website may be interrupted or temporarily limited due to technical maintenance, upgrades, the handling of security incidents, failures of third-party providers or events beyond the Administrator’s reasonable control.

The Administrator reserves the right to take the technical and organisational steps necessary to maintain, upgrade or protect the Website.

17. Limitation of liability

The content and information on the Website are provided for the purposes of information and public communication.

The Administrator is not liable for damage arising solely from circumstances outside the lawful scope of their responsibility, such as unauthorised actions by third parties or technical failures of external services beyond their control.

Likewise, no responsibility is accepted for decisions by visitors based on a partial, mistaken or out-of-context reading of informational content.

Nothing in these Terms is intended to exclude or limit any liability that may not be excluded or limited under applicable law.

18. Personal data protection and information for visitors

18.1. General principles

Protecting the privacy and personal data of visitors is a core principle in the operation of the personal website of Orfeas Georgiou.

Personal data is collected and processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Law 4624/2019, Law 3471/2006 and the other provisions of applicable Greek and European Union law.

This section gives visitors detailed information about the categories of personal data processed when using the Website, the purposes and legal bases of processing, the recipients, the retention period, any international transfers and the rights of the people concerned.

Processing is limited to the data needed for specific, clear and lawful purposes.

18.2. Categories of personal data

When the Website is used, the following data is or may be processed.

A. Contact form data

When a visitor chooses to send a message through the contact form, the details they enter are collected:

• Full name.
• Email address.
• Telephone number.
• Message content.

This data is used to receive, review, handle and reply to that specific request.

B. Technical browsing and security data

When the Website is accessed, technical data may be processed, such as:

• The IP address of the device.
• The date and time of access.
• The type of browser and operating system.
• Technical information about requests to the server.
• Information needed to secure the connection and deal with malicious or automated requests.

This processing takes place to the extent needed for the technical operation and protection of the Website’s information systems.

C. Data from interaction with third-party content

If a visitor activates embedded third-party content, such as a YouTube video, information about the connection, the device and the playback of the content may be transferred to the relevant provider.

D. Language preference data

The Website uses a functional cookie to remember the display language the visitor has chosen.

This information is used to remember that preference and is not intended for traffic analysis or advertising tracking.

18.3. Purposes and legal bases of processing

A. Handling contact requests

Data submitted through the contact form is used to receive, assess and reply to the visitor’s message.

Processing is based on the visitor’s consent, under Article 6(1)(a) GDPR, given through a specific, unticked box on the contact form.

This consent covers only the handling of that specific request and does not allow processing for other, unrelated purposes.

B. Security and smooth operation

The legitimate interest lies in protecting the availability, integrity and security of the website and its communication systems, subject to the required balancing against the rights of visitors.

C. Keeping a limited record of correspondence

A limited record of correspondence may be kept to manage the history of requests, document how they were handled and meet the principle of accountability.

This processing is based on Article 6(1)(f) GDPR, where there is a specific and documented legitimate interest and retention is necessary and proportionate.

Where a specific legal obligation applies, the related processing may be based on Article 6(1)(c) GDPR.

D. Displaying embedded third-party content

Optional third-party technologies that require prior consent are only activated after the visitor has given valid consent.

That consent does not automatically extend to other processing purposes.

E. Remembering the language choice

The language preference is stored to provide the display of the Website that the visitor has chosen.

Where this feature involves processing personal data, the appropriate legal basis under the GDPR applies, regardless of any specific exemption from prior consent for setting the cookie.

18.4. Optional nature of communication

Using the contact form is optional and is not a condition for accessing the publicly available content of the Website.

The details marked as required are needed to submit the request and handle it effectively.

Not providing the necessary information may make it impossible to send the message or reply to it.

Submitting data through the form does not mean signing up to a mailing list, joining a political organisation, declaring political beliefs or agreeing to receive future political or promotional material.

18.5. Recipients of personal data

Personal data is not sold, rented out or passed to third parties for advertising or promotional purposes.

To the extent needed for the purposes described above, the data may be received by:

• Orfeas Georgiou and his authorised associates who handle the messages, who are bound by a duty of confidentiality.
• The providers of the Website’s hosting and email services, who act as processors on behalf of the Data Controller.
• Cloudflare, for the contact form security services described in section 19.
• Google, when a visitor activates embedded YouTube content.
• Public, supervisory or judicial authorities, only where required by applicable law.

18.6. Retention period

Personal data is kept only for as long as needed for the purposes for which it was collected.

The content of messages submitted through the contact form is automatically deleted from the Website’s systems thirty (30) days after it is received.

Once the content has been deleted, a limited technical record of the submission, with the date it was received and the email address the confirmation was sent to, is kept for up to one (1) year for security and abuse prevention. It is then deleted.

Messages forwarded to the Administrator’s email are kept for as long as needed to handle the request and keep the limited record of correspondence, and are deleted once they are no longer needed.

The language choice cookie stays on the visitor’s device for up to one (1) year, or until they delete it.

Data may be kept for longer only where required by law or needed to establish, exercise or defend legal claims.

18.7. Data transfers outside the European Economic Area

When the services of Cloudflare and Google/YouTube are used, personal data may be transferred to countries outside the European Economic Area, including the United States of America.

International transfers take place in accordance with Chapter V of the GDPR.

For transfers to United States companies certified under the EU-US Data Privacy Framework, the European Commission’s adequacy decision may apply, under Article 45 GDPR.

Where a transfer is not covered by an applicable adequacy decision, other appropriate safeguards are required, such as the European Commission’s Standard Contractual Clauses under Article 46 GDPR, together with any necessary supplementary measures.

The transfer mechanisms used are determined by the actual providers, the services concerned, the contractual terms and the law in force at the time.

Those concerned may ask for information about the safeguards applied, and about obtaining a copy or related information, using the contact details of the Data Controller.

18.8. Rights of data subjects

Every natural person whose personal data is processed has, under the conditions of applicable law, the following rights:

• Right to information and access: To receive information about the processing of their personal data and a copy of it.
• Right to rectification: To ask for inaccurate data to be corrected or incomplete information to be completed.
• Right to erasure: To ask for personal data to be erased where the legal conditions are met.
• Right to restriction of processing: To ask for processing to be restricted in the cases provided for by the GDPR.
• Right to data portability: To receive the data they have provided in a structured, commonly used and machine-readable format, where the relevant conditions apply.
• Right to object: To object to the processing of personal data based on legitimate interest, under Article 21 GDPR.
• Right to withdraw consent: To withdraw at any time consent they have given for a specific processing purpose.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

After withdrawal, processing based solely on that consent stops, unless another applicable legal basis exists for specific further processing.

To exercise any of the above rights, the person concerned may send a request to .

Where there are reasonable doubts about the identity of the person making the request, the additional information needed to confirm it may be requested.

Rights are, as a rule, exercised free of charge, subject to the exceptions provided for by the GDPR.

Requests are answered without undue delay and in any event within one (1) month of receipt. This period may be extended by two (2) further months where necessary, given the complexity or number of requests, in which case the person concerned is told of the extension and the reasons for it within the first month, under Article 12(3) GDPR.

18.9. Right to lodge a complaint

Anyone who believes that the processing of their personal data infringes applicable law has the right to lodge a complaint with the competent supervisory authority.

In Greece, the competent supervisory authority is the:

Lodging a complaint does not limit the possibility of bringing proceedings before the competent courts or using any other legal remedy available.

18.10. Special categories of personal data

Given the public political role of Orfeas Georgiou and the informational nature of the Website, particular importance is placed on protecting information that may reveal political opinions or beliefs.

Simply visiting the Website or using the contact form does not in itself amount to a declaration of political preference, party affiliation or organisational involvement.

Visitors are asked to limit the content of their messages to the information needed for the purpose of the communication.

If special categories of data, within the meaning of Article 9 GDPR, are submitted in messages, they are processed only where there is an appropriate legal basis under Article 6 and one of the specific conditions of Article 9 GDPR applies.

Submitting a message does not automatically amount to explicit consent for any processing of special categories of data, nor to consent for creating a political profile, being added to a political communications list or personalised political ad targeting.

18.11. Security of personal data

The Data Controller takes appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, unlawful disclosure or other forms of unauthorised processing.

These measures include, as the case may be:

• Using secure connections to transmit information.
• Restricting access to personal data.
• Protecting the technical infrastructure and electronic communication systems.
• Using appropriate mechanisms to prevent malicious or automated requests.
• Applying procedures for the retention, deletion and access control of data.

These measures are assessed according to the nature of the processing, the technologies used and the possible risks to the rights and freedoms of natural persons.

18.12. Automated decision-making

In the operation of the contact form described above, no automated decision-making takes place that produces legal effects or similarly significant effects for visitors, within the meaning of Article 22 GDPR.

Automated technical security mechanisms used to deal with spam and malicious requests are intended to protect the website, not to assess the political beliefs of visitors or create political profiles of them.

19. Use of cookies and similar technologies

19.1. General information

Cookies are small files stored on a visitor’s computer, mobile phone or other device and used for specific functions of a website.

Under the technical setup described, the Website uses a functional cookie to remember the visitor’s language choice.

Within this setup, the Website does not use traffic analytics or advertising tracking services through cookies.

The language storage feature is not intended to identify visitors, build profiles or track their browsing for advertising purposes.

19.2. Language choice cookie

The language choice cookie is used solely to store the display language the visitor has chosen.

In this way, the Website can remember their preference without the language having to be chosen again on every visit.

This cookie is used to remember a preference expressed by the visitor themselves.

As long as it is limited strictly to this function and meets the legal conditions, it falls within the exemption from the prior consent requirement provided by the law on electronic communications services.

19.3. Cloudflare security technologies

Cloudflare security services are used to protect the contact form, with the aim of telling legitimate requests apart from automated or malicious activity.

These functions may involve processing technical information about the browser and the connection, regardless of whether a cookie is set.

Depending on the active settings, some security mechanisms may also use cookies or other technical identifiers.

Where such technologies are activated, they are assessed according to their actual purpose and the conditions for exemption from consent or other lawful use.

The existence and characteristics of any additional security cookies will be disclosed once they have been technically recorded.

19.4. YouTube videos and third-party services

The Website may include embedded videos from the YouTube platform.

Loading and playing YouTube content may involve the processing of technical data by Google and the use of cookies or similar technologies.

Using privacy-enhanced mode, where applied, is intended to limit certain data collection and use practices, but does not automatically mean that no processing takes place.

Where prior consent is required, the related content is only activated after that consent is given.

Visitors may also go to the external platform through a simple link, in which case the provider’s own terms and policies apply.

19.5. Managing cookies

Visitors can delete stored cookies or limit their use through their browser settings.

Deleting the language cookie may reset the display language to the default.

Disabling certain technically necessary functions may affect the proper operation of some of the Website’s services.

19.6. Future changes

If new cookies or other technologies for storing or accessing information on the device are added, this section will be updated accordingly.

For technologies that require prior consent, the required mechanisms for informing visitors and for giving, refusing and withdrawing consent will apply.

20. Political advertising

Informational content, political positions, public statements and announcements are published on the Website as part of public communication and information.

If activities take place that fall within the scope of Regulation (EU) 2024/900 on the transparency and targeting of political advertising, the obligations and restrictions it sets out apply.

These obligations concern, as the case may be, the transparency of political advertising, the identification of the sponsor, specific notices and the restrictions on targeting techniques based on the processing of personal data.

The mere publication of political views or informational content is not automatically considered political advertising.

Each activity is assessed on the basis of its actual content and the applicable legal framework.

21. Requests for correction and reporting infringements

Anyone who believes that specific content on the Website infringes intellectual property, personality or data protection rights, or contains a material factual inaccuracy, may submit a request to the Administrator.

To help the request be examined effectively, it is recommended to state the specific web address, the content in question, the nature of the issue and any necessary supporting evidence.

The Administrator examines each such request in accordance with applicable law and, where there is a lawful reason, takes the necessary action.

For requests specifically about exercising data protection rights, the procedures and time limits of section 18.8 apply.

This procedure does not limit the exercise of any right before a competent supervisory, administrative or judicial authority.

22. Changes to the Terms of Use

The Administrator reserves the right to revise, supplement or amend these Terms of Use, in particular where the law changes, the Website’s services change or its operating framework needs to be improved.

Updated Terms are posted on the Website with the date of the latest update.

Changes apply from their publication, unless applicable law provides otherwise or specific notice or consent is required.

If there are material changes to personal data processing activities, the information given to visitors will be updated as required.

Changing the Terms does not in itself provide a legal basis for new purposes of processing personal data.

23. Governing law and dispute resolution

These Terms of Use are governed by Greek law, together with the directly applicable provisions of European Union law.

For any dispute arising in relation to the interpretation, application or use of the Website, a good-faith, out-of-court resolution is sought where possible.

If judicial resolution is required, the Greek courts with jurisdiction by law are competent, subject to mandatory provisions that provide for a different jurisdiction or venue.

If any provision of these Terms is found to be invalid or unenforceable, this does not affect the validity of the remaining provisions, to the extent that they can stand on their own.

24. Contact details

For any matter relating to the operation, use or content of the Website, or to these Terms of Use, you can get in touch using the following details:

For matters relating to the processing of personal data and the exercise of the related rights, the specific procedures described in section 18 of these Terms apply.