Privacy Policy

This Privacy Policy applies to the eClass e-learning platform of SAEK ALFA and ALFA Studies KDBM and describes how SAEK ALFA and ALFA Studies KDBM, as Joint Data Controllers, collect, use, store and protect the personal data of users of the platform.

The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Greek Law 4624/2019, Law 3471/2006, as well as any other applicable national and European legislation concerning the protection of personal data and privacy.

The eClass platform is intended to support the educational activities of SAEK ALFA and ALFA Studies KDBM and to provide users with access to asynchronous online learning services.

Data Controllers

The Data Controllers responsible for the personal data collected and processed through the platform are SAEK ALFA and ALFA Studies KDBM.

For matters concerning the protection of personal data or for the exercise of your rights, you may contact us through the procedures established by SAEK ALFA and ALFA Studies KDBM.

Personal Data We Collect

When creating and using an account on the eClass platform, we may collect and process information that is necessary for user identification and for the proper operation of the educational process.

Depending on the user's role and use of the platform, such data may include full name, email address, user account details, class, programme or course information, information regarding participation in courses, as well as information relating to the user's educational activity on the platform.

We may also record assignments, responses, educational activities, assessment results or grades, where these form part of the educational process supported by the platform.

We do not collect more personal data than is necessary for the specific and legitimate purposes for which the data are processed.

Technical Data and Usage Information

When accessing and using the platform, technical information necessary for the secure and proper operation of the service may be recorded. Such information may include IP address, browser type and version, device type, operating system, date and time of access, and other information relating to the technical operation and security of the platform.

Such data are used primarily for platform security, the prevention of malicious activities, the diagnosis of technical problems and ensuring the smooth operation of the educational services.

Purposes and Legal Basis of Processing

Users' personal data are processed to the extent necessary for the creation and management of user accounts, the provision of access to educational courses and educational material, the support of the educational process, communication with learners and instructors, the management and monitoring of participation in educational activities, the assessment of educational progress where applicable, as well as the security and technical operation of the platform.

The legal basis for processing depends on the specific purpose and may include the performance of a contract or taking steps prior to entering into a contract, compliance with a legal obligation of the Data Controllers, the legitimate interests of the Data Controllers where permitted by applicable law, or the consent of the data subject where such consent is required.

The provision of certain personal data may be necessary for the creation of an account and access to educational services. If the required data are not provided, it may not be possible to create an account or provide certain functionalities of the platform.

User Accounts and Login Information

Access to the platform is provided through a personal user account. Users are required to keep their login credentials confidential and must not disclose them to third parties.

Login information is used exclusively for user identification and authentication and for maintaining the security of the platform.

Educational Data

As part of the operation of the platform, data relating to users' participation in the educational process may be processed, including course enrolment, access to educational material, assignment submissions, participation in educational activities and, where applicable, assessment results and grades.

Such data are used exclusively for the educational and administrative purposes of SAEK ALFA and ALFA Studies KDBM and are not disclosed to third parties without a lawful basis.

Cookies

The eClass platform may use cookies or similar technologies for the operation, security and improvement of the user experience.

Strictly necessary cookies may be required for logging into a user account, maintaining the user's session and ensuring the secure operation of the platform.

Where non-essential cookies or tracking technologies are used, they will be used in accordance with applicable legislation and, where required, following the user's prior consent.

Users may also manage their cookie settings through their web browser or, where available, through the relevant consent management mechanism provided by the platform.

Disclosure and Transfer of Personal Data

Personal data are not sold, rented or otherwise made available to third parties for commercial exploitation.

Access to personal data may be granted, to the extent necessary, to authorised personnel of SAEK ALFA and ALFA Studies KDBM, instructors or administrative personnel who require access in order to perform their duties, as well as external partners or technical service providers supporting the operation of the platform, provided that they act in accordance with applicable data protection legislation.

Where data processors or service providers process personal data on behalf of the Data Controllers, appropriate contractual and organisational measures are implemented to protect the data.

Where personal data are transferred outside the European Economic Area, such transfers will only take place where the requirements provided for by the GDPR are met.

Security of Personal Data

SAEK ALFA and ALFA Studies KDBM implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, unlawful processing or disclosure.

Access to personal data is restricted to authorised persons and is granted according to their role and responsibilities.

Despite the implementation of appropriate security measures, no online service can guarantee the absolute security of data. In the event of a personal data breach, the procedures required under applicable legislation will be followed.

Data Retention

Personal data are retained for as long as necessary to fulfil the purposes for which they were collected and in accordance with applicable legal, regulatory, contractual and educational obligations.

Account and educational data may be retained for the period required to complete the educational process, fulfil relevant administrative or legal obligations and handle any potential claims.

Technical data and platform logs are retained for the period necessary for security, technical support and monitoring of the proper operation of the service, in accordance with the principle of storage limitation.

Your Rights

Under the GDPR, data subjects have, subject to the conditions provided by applicable law, the right to be informed about and access their personal data, the right to rectify inaccurate or incomplete data, the right to erasure, the right to restriction of processing, the right to data portability, and the right to object to processing, where applicable.

Where processing is based on consent, the user has the right to withdraw their consent at any time, without affecting the lawfulness of processing carried out before the withdrawal of consent.

Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable legislation, you have the right to lodge a complaint with the competent supervisory authority.

In Greece, the competent supervisory authority is the Hellenic Data Protection Authority.

Links to Third-Party Websites

The platform may contain links to third-party websites, applications or services. This Privacy Policy does not apply to such websites or services.

SAEK ALFA and ALFA Studies KDBM are not responsible for the personal data protection practices of third-party websites.

Changes to this Privacy Policy

This Privacy Policy may be amended or updated whenever necessary due to changes in the operation of the platform, applicable legislation or personal data processing practices.

The most recent version of this Privacy Policy will be available on the eClass platform.

Contact

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us through the official communication channels of SAEK ALFA and ALFA Studies KDBM.

Last updated: 21/8/2026