GDPR Compliance Statement
Last updated: 06.04.2025
JS Gallery, as part of the Institute of Mediterranean Culture (IMC) — a non-profit organization based in Greece — fully complies with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
We respect your rights to privacy and are committed to protecting the personal data you share with us. This statement outlines our key commitments regarding your data under GDPR.
1. Lawful Basis for Data ProcessingWe collect and process your personal data only when:
2. Data Subjects’ Rights Under GDPR, you have the right to:
3. Data Security and Confidentiality We implement appropriate technical and organizational measures to ensure:
4. Data Transfers Outside the EU Your data may be transferred to partners or platforms outside the European Economic Area (EEA), such as to the United States, but only under conditions that meet GDPR adequacy and safeguarding requirements, such as:
5. Data Retention We retain your personal data only as long as necessary for the purposes stated, or as required by law.
6. Contact Information Data Controller:
JS Gallery / Institute of Mediterranean Culture (IMC)
Email: info@js-gallery.com
Last updated: 06.04.2025
JS Gallery, as part of the Institute of Mediterranean Culture (IMC) — a non-profit organization based in Greece — fully complies with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
We respect your rights to privacy and are committed to protecting the personal data you share with us. This statement outlines our key commitments regarding your data under GDPR.
1. Lawful Basis for Data ProcessingWe collect and process your personal data only when:
- You give explicit consent (e.g., for newsletters or event registration)
- It is necessary for the performance of a contract or service
- We have a legitimate interest, such as cultural outreach or security
- It is required for compliance with legal obligations
2. Data Subjects’ Rights Under GDPR, you have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Delete your data (“right to be forgotten”)
- Restrict or object to processing
- Port your data to another controller
- Withdraw consent at any time
- File a complaint with your local Data Protection Authority (DPA)
3. Data Security and Confidentiality We implement appropriate technical and organizational measures to ensure:
- Data encryption during transfer and storage
- Secure access control
- Risk minimization and regular audits
4. Data Transfers Outside the EU Your data may be transferred to partners or platforms outside the European Economic Area (EEA), such as to the United States, but only under conditions that meet GDPR adequacy and safeguarding requirements, such as:
- Standard Contractual Clauses (SCCs)
- Data Processing Agreements (DPAs)
- Platforms with GDPR-compliant certifications
5. Data Retention We retain your personal data only as long as necessary for the purposes stated, or as required by law.
6. Contact Information Data Controller:
JS Gallery / Institute of Mediterranean Culture (IMC)
Email: info@js-gallery.com