RiskRadar logo RiskRadar on Android RiskRadar on Apple store
  • Information on Personal Data Protection in accordance with Regulation (EU) 2016/679

    Since 25.5.2018 the General Data Protection Regulation (EU) 2016/679, also known as GDPR, is being implemented, which strengthens the framework for the protection of data subjects with regard to the processing of personal data in the European Union. CERTH with respect to personal data, complies with the GDPR in the context of its activity and scope and takes the respective technical and organizational measures for the effective protection of personal data, in accordance with the GDPR.

    Processor – Contact Details

    CERTH is considered as processor with the following contact details:

    Address: 6th km, Char-Thermis, Thessaloniki 570 01, Greece

    E – mail: ivchal@certh.gr

    Purpose and Lawfulness of processing

    The aim of our research program is to improve awareness regarding STDs, as well as implement integrated activities related to early diagnosis of HIV, viral hepatitis, TB and STIs and linkage to prevention and care in partner countries.

    Personal information is collected in accordance with the GDPR and the applicable legislation, when you visit our website, and are processed on a legal basis:

    Who are the recipients of my personal data?

    The staff of CERTH has access to your personal data, in the course of performing the research program assigned to them by CERTH as a controller.

    CERTH does not share information with other third parties.

    How long is my data retained?

    CERTH retains your personal data for a period defined by the applicable legal and regulatory framework. Particularly:

    Personal Data collected from the evaluation questionnaire

    The answers collected from the evaluation questionnaire will be fully anonymized and will remain in CERTH for the purpose of the research.

    Personal Data collected from the web server

    In order to effectively manage a web server, it is necessary to get feedback about the activity and performance of the server as well as detection and prevention of web attacks. The only personal data activity logs include is the IP address from where the website was accessed. Activity logs are encrypted and will be kept for 1 year for security reasons.


    In order to make sure our site is working properly, we may sometimes put a small piece of data known as cookie on your computer or mobile device. A cookie is a text file that is stored by a web server on a computer or a mobile device. The content of a cookie can only be retrieved or read by the cookie server. Text in a cookie often consists of identifiers, site names and some numbers and characters. Cookies are unique to browsers or mobile apps you use, and allow sites to store data, such as your preferences.

    You can view our Cookies policy here

    Phone numbers for the Partner Notification Service

    The phone numbers that the text messages are being sent, in order to inform one’s former partners will be encrypted and automatically and permanently deleted from the system after the messages are delivered.

    How is my data protected?

    At CERTH we work daily to ensure that the personal data we receive:

    Questions about Data Protection 

    If you have questions about this form, you can email us at ivchal@certh.gr and we will respond to them as soon as possible and not later than one month.

    Personal Data Protection Authority

    You have the right to file a complaint to the Personal Data Protection Authority (www.dpa.gr) which is the competent supervisory authority for the protection of the fundamental rights and freedoms of natural persons with regard to the processing of their personal data if you believe that your rights are being infringed in any way.

    We encourage you to read our Personal Data Protection Policy