Privacy Policy
The University of Thessaly (hereinafter “the University”) places great importance on the protection of personal data and ensures that all processing is carried out in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).
This Privacy Policy applies to the website of the Joint Master’s Programme: “Humanitarian Action and Inclusive Management of Public and One Health Challenges (HERO-HEALTH)”
Data Controller
The Data Controller for the processing of personal data is the University of Thessaly.
Data Protection Officer (DPO): Priority Quality Consultants S.A.
The Website
The HERO-HEALTH website provides information about the Joint Master’s Programme and is addressed to prospective students, academic staff, researchers, and the general public.
It also includes communication and contact features.
What personal data do we collect?
Through this website, we collect only the personal data that you voluntarily provide via forms. Specifically:
Contact Form
- Name
- Surname
- Phone number
- Email address
- Subject of message
- Message content
“Stay in touch” Form
- Email address
Purpose of processing
The University processes personal data for the following purposes:
- to respond to user inquiries
- to provide information about the programme
- to facilitate communication with interested users
- to send updates (only where applicable)
- to ensure the proper functioning and security of the website
Legal basis for processing
The processing of personal data is based on:
- Performance of a task carried out in the public interest (Article 6(1)(e) GDPR), as the website supports the educational and informational role of the University
- Consent (Article 6(1)(a) GDPR), where applicable (e.g. submission of forms)
Who has access to your data
Access to your personal data is limited to:
- authorized personnel of the University
- technical service providers (e.g. hosting providers), acting as data processors
All processing is carried out under strict confidentiality and appropriate security measures.
Transfer of data outside the EEA
Personal data collected through this website are not transferred outside the European Economic Area (EEA).
Data retention period
Personal data are retained only for as long as necessary to fulfill the purposes described above, unless a longer retention period is required by law.
Cookies
This website uses only strictly necessary cookies for its proper operation.
For more information, please refer to the Cookie Policy.
Security of personal data
The University implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.
Links to third-party websites
The website may contain links to external websites. The University is not responsible for the privacy practices of such websites.
Users are encouraged to review the privacy policies of those websites.
Your rights
As a data subject, you have the right to:
- access your personal data
- request correction of inaccurate data
- request deletion of your data
- restrict processing
- object to processing
- withdraw consent (where applicable)
- lodge a complaint with the Hellenic Data Protection Authority
How to exercise your rights
You may contact the Data Protection Officer: dpo@uth.gr
or by post: University of Thessaly, Argonafton & Filellinon, Volos, P.C. 38221, “To the attention of the Data Protection Officer”
Changes to this Policy
This Privacy Policy may be updated to reflect changes in legal or operational requirements.
The latest version will always be available on this page.
April 27, 2026




