Privacy Policy

The University of Thessaly (hereinafter “the University”) places great importance on the protection of personal data and ensures that all processing is carried out in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).

This Privacy Policy applies to the website of the Joint Master’s Programme: “Humanitarian Action and Inclusive Management of Public and One Health Challenges (HERO-HEALTH)”

Data Controller

The Data Controller for the processing of personal data is the University of Thessaly.

Data Protection Officer (DPO): Priority Quality Consultants S.A.

  • Argonafton & Filellinon, Volos, P.C. 38221, Greece

  • +30 24210 74000

The Website

The HERO-HEALTH website provides information about the Joint Master’s Programme and is addressed to prospective students, academic staff, researchers, and the general public.

It also includes communication and contact features.

What personal data do we collect?

Through this website, we collect only the personal data that you voluntarily provide via forms. Specifically:

Contact Form

  • Name
  • Surname
  • Phone number
  • Email address
  • Subject of message
  • Message content

“Stay in touch” Form

  • Email address

Purpose of processing

The University processes personal data for the following purposes:

  • to respond to user inquiries
  • to provide information about the programme
  • to facilitate communication with interested users
  • to send updates (only where applicable)
  • to ensure the proper functioning and security of the website

Legal basis for processing

The processing of personal data is based on:

  • Performance of a task carried out in the public interest (Article 6(1)(e) GDPR), as the website supports the educational and informational role of the University
  • Consent (Article 6(1)(a) GDPR), where applicable (e.g. submission of forms)

Who has access to your data

Access to your personal data is limited to:

  • authorized personnel of the University
  • technical service providers (e.g. hosting providers), acting as data processors

All processing is carried out under strict confidentiality and appropriate security measures.

Transfer of data outside the EEA

Personal data collected through this website are not transferred outside the European Economic Area (EEA).

Data retention period

Personal data are retained only for as long as necessary to fulfill the purposes described above, unless a longer retention period is required by law.

Cookies

This website uses only strictly necessary cookies for its proper operation.

For more information, please refer to the Cookie Policy.

Security of personal data

The University implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

Links to third-party websites

The website may contain links to external websites. The University is not responsible for the privacy practices of such websites.

Users are encouraged to review the privacy policies of those websites.

Your rights

As a data subject, you have the right to:

  • access your personal data
  • request correction of inaccurate data
  • request deletion of your data
  • restrict processing
  • object to processing
  • withdraw consent (where applicable)
  • lodge a complaint with the Hellenic Data Protection Authority

How to exercise your rights

You may contact the Data Protection Officer: dpo@uth.gr

or by post: University of Thessaly, Argonafton & Filellinon, Volos, P.C. 38221, “To the attention of the Data Protection Officer”

Changes to this Policy

This Privacy Policy may be updated to reflect changes in legal or operational requirements.

The latest version will always be available on this page.

April 27, 2026