Last updated: 30 October 2026
This policy explains which personal data the website of the School of Architecture of the Aristotle University of Thessaloniki processes, why, and what rights you have, under the General Data Protection Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019 and Greek Law 3471/2006.
1. Data controller
The controller is the Aristotle University of Thessaloniki (AUTh), University Campus, 541 24 Thessaloniki, Greece, acting through the School of Architecture of the Faculty of Engineering.
- Contact the School: info@arch.auth.gr, tel. +30 2310 995597
- AUTh Data Protection Officer (DPO): data.protection@auth.gr, tel. +30 2310 996200
Processing carried out at university level is also covered by the AUTh Data Protection Policy (opens in a new tab) (in Greek).
2. What data we process
This is an information website. It has no forms, visitor accounts or comments, and it does not currently use analytics or advertising tools. We only process the following:
- Technical visit data. The server automatically logs your IP address, browser type, the page requested and the time of the request. We use this only for security and to keep the site working.
- Your cookie and language choices. These are stored on your device. See the Cookie Policy.
- Your messages to us. When you email or call us, we use the details you give us only to reply.
- Information about School staff. The website publishes names, roles, work contact details, biographies and, where available, photos of staff members, to inform the public about the School.
3. Purposes and legal basis
- Running and securing the website and informing the public about the School’s work are tasks carried out in the public interest (Article 6(1)(e) GDPR).
- Strictly necessary cookies do not require consent (Article 4(5) of Law 3471/2006).
- All other cookies and external content (such as YouTube videos) load only with your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
4. Recipients and third-party services
- Hosting provider. Hosts the website and processes the technical data on our behalf, as a processor.
- YouTube (Google Ireland Ltd). Some pages contain videos. A video loads only if you ask for it or have accepted “External media”, and then through YouTube’s privacy-enhanced mode (youtube-nocookie.com).
- GitHub (pdf.js). Pages with an embedded PDF viewer load the pdf.js library from mozilla.github.io, so GitHub sees your IP address. No cookies are set.
- Links to other websites (such as auth.gr, Facebook or Google Maps). When you follow them, those sites’ privacy policies apply.
Google and GitHub may transfer data to the United States. Both are certified under the EU-U.S. Data Privacy Framework. We do not sell data or share it for advertising.
5. How long we keep data
- Server logs are kept for a limited period and then deleted automatically.
- Your cookie choice is kept for 6 months, after which we ask again.
- Correspondence is kept as long as needed to handle your request and to meet the University’s record-keeping obligations.
6. Your rights
You have the right to access, correct and erase your data, to restrict or object to processing, and to withdraw your consent at any time. Withdrawing consent does not affect processing that took place before. To exercise your rights, write to info@arch.auth.gr or to the AUTh Data Protection Officer (data.protection@auth.gr).
You can also lodge a complaint with the Hellenic Data Protection Authority (opens in a new tab) (1-3 Kifisias Ave., 115 23 Athens).
7. Security
The website is served only over an encrypted connection (HTTPS). Access to its administration is limited to authorised people.
8. Changes
If the way the website works changes, for example if an analytics tool is added, we will update this page and ask for your consent again where needed.