Website: https://tourism-pms.aegean.gr Last updated: 11 September 2026
1. Who processes your data
The data controller is the University of the Aegean. This website operates under the responsibility of the Joint Postgraduate Programme “Strategic Management of Tourism Destinations and Hospitality Businesses”.
Programme contact details 8 Michalon St., 82132 Chios, Greece Secretariat: MScTourism_Gram@aegean.gr · +30 22710 35322 (11:00–13:00)
Data Protection Officer (DPO) of the Institution Nikolaos Chortarias University Hill, Administration Building, Mytilene, 81100 Telephone: +30 22510 36947 · Email: dpo@aegean.gr
This policy concerns this website. The Institution’s wider policy is the Data Protection Policy of the University of the Aegean.
2. What data we collect
The website collects only what you provide voluntarily:
| Source | Data | Purpose | Legal basis |
|---|---|---|---|
| “Get the 2026-2027 Guide” form | Email address | Sending the study guide and information about the Programme | Consent — Article 6(1)(a) GDPR |
| Messages to the Secretariat | Whatever your message contains | Responding to your request | Consent and legitimate interest |
We do not use website analytics tools and we do not build visitor profiles. No automated decision-making takes place.
The server keeps access logs, which include IP addresses, for security and technical support purposes.
3. How long we keep it
Your email address is kept until you withdraw your consent or ask for its deletion, and in any case no longer than the end of the academic year the information relates to. Messages to the Secretariat are kept for as long as handling your request and the related correspondence requires.
4. Third-party services
Three services provided by Google Ireland Limited are used to run this website:
| Service | What it does | What data it receives |
|---|---|---|
| reCAPTCHA v3 | Protects the form against automated abuse | IP address, browser details, on-page behaviour |
| Google Maps | Displays the Department’s location on the Contact page | IP address when the map loads |
| Google Fonts | Loads the website’s typefaces | IP address |
Using these services may involve transferring data outside the European Economic Area, on the basis of the European Commission’s standard contractual clauses and the EU–US Data Privacy Framework. Google’s Privacy Policy and Terms of Service apply.
The website also links to University services (Nautilus, Syndesis Alumni, Erasmus+) and to social media. Once you follow those links, their own policies apply.
5. Who else sees your data
Your data is never sold or passed to third parties for commercial purposes. Access is limited to members of the Programme’s Secretariat and Coordinating Committee, and to the technical partners who maintain the website, all bound by confidentiality obligations.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise these rights, contact the Secretariat (MScTourism_Gram@aegean.gr) or the Data Protection Officer (dpo@aegean.gr). We respond within one month.
If you believe the processing infringes the law, you may lodge a complaint with the Hellenic Data Protection Authority — 1-3 Kifissias Ave., 11523 Athens, tel. +30 210 6475600, www.dpa.gr.
7. Security
The website operates exclusively over an encrypted connection (HTTPS) on University of the Aegean infrastructure, with up-to-date software and restricted administrative access.
8. Changes to this policy
Any material change — in particular the addition of website analytics tools — will be reflected here, with the date at the top of the page updated accordingly.