Regarding the posting of the communication media of the Chamber members on our website According to Article 4(1) of the General Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the GDPR), personal data are any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person. In this context, the e-mail address and contact telephone number of a natural person constitute personal data, since it can function as an element of indirect identification of its owner, allowing communication with him, while in several cases the e-mail address even carries details of the owner’s name, directly identifying him. In article 4, item 7 of the GDPR, the controller is defined as “the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data” and in this case the Chamber of Imathia. In article 5, paragraph 1 of the GDPR, the Principles governing the processing of personal data are defined. These include the principles of accuracy (paragraph d), according to which data must be accurate in relation to the purposes of the processing, and integrity and confidentiality (paragraph f), according to which data are processed in a manner that guarantees the appropriate security of personal data, including their protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by using appropriate technical or organizational measures. According to Article 6(1) of the GDPR, “processing is lawful only if and to the extent that at least one of the following conditions applies: (…) a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes, (…) f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.” Regarding the posting of the contact details of the members of the Imathia Chamber in particular, the processing of these details by the Chamber, as data controller, for the purpose of communication between third parties and its members is lawful as this processing is necessary for the fulfillment of the Chamber’s statutory obligation as a public authority in the exercise of its duties and for the execution of a public interest project assigned to it by the State, namely the strengthening of entrepreneurship and the strengthening of the local economy, which is also a statutory purpose of the Chamber (Article 6, paragraph 1, f of the GDPR). Based on article 32 of the GDPR, the use of the means of communication and the electronic addresses of the members of the Chamber on the website it maintains for the purpose of processing, namely the promotion and the possibility of communication of third parties, must be done in a manner that ensures the lowest possible risk and this is ensured by posting the contact details of the members for commercial promotion purposes. Following the above and addressing our members, we inform you that in the event that you do not accept the publication of your professional contact details on the Chamber’s website, please inform us in writing so that we can proceed with their removal.