Welcome to the website “https://www.athensolympicmuseum.org” (hereinafter referred to as the "Website").
The Website has been created by the Civil Non-Profit Company under the name "Athens Olympic Museum" (hereinafter the "AOM" or the "Company"), with its registered office in Greece, 37A Kifissias, Maroussi, 151 23, in order to provide information and services to its users (hereinafter the "Users").
Data Controller – Data Protection Officer (DPO)
The Company is responsible for the processing of your personal data, which it receives through the use of the Website, in accordance with the General Data Protection Regulation 2016/679 of the European Union (hereinafter referred to as "GDPR") and Law 4624/2019. In the present notice we provide you with information regarding the type of personal data we collect about you, the way and the purposes for which we process it, the third parties with whom we share this data, as well as the rights you have.
For any issue related to the processing of your personal data, you may contact the Company’s Data Protection Officer (DPO) directly, by sending an email to personaldata@lamdadev.com.
What personal data do we process and how do we collect it?
The personal data that we collect and further process while you are browsing the Website and using our services, is the following:
Identification data, such as full name.
Contact details, such as telephone number, email address, postal address (i.g. address, post code, region, city).
Ticket booking details, such as date / time of scheduled visit, category of the ticket (e.g. general entrance, reduced ticket, family ticket), any discount coupon and payment amount.
Information related to the reason you are contacting us, which may be included in the message / request you submit through the contact form.
We collect the above personal data directly from you when you complete any of the entry points available on the Website, for example, when you contact us for any reason through the contact form, when you proceed with a ticket reservation to visit the Athens Olympic Museum (“Museum”), or when you subscribe to the Company’s newsletter through the newsletter form.
We inform you, in particular, that the credit/debit card details required for completing the online ticket purchase are not stored in any of our Company’s databases during the transaction, but are entered directly into a secure environment of a cooperating third-party payment service provider responsible for the confirmation and overall management of the financial transaction.
Why do we process your personal data?
In the context of using the Website, the Company processes your data in accordance with the following purposes:
For the proper handling of and response to any type of communication we receive through the contact form available on the Website.
For conducting promotional communications, e.g. by sending newsletters to those who have subscribed to the Company’s newsletter.
For managing the online reservation of tickets for visiting the Museum, as well as organizing and ensuring the smooth conduct of your visit, including booking confirmation, issuance and delivery of tickets, management of your entry to the Museum and handling of related requests.
To ensure the proper, uninterrupted and secure operation of the Website and the continuous improvement of your experience through its use.
To comply with any legal obligations arising from the operation and management of the Website.
What is the legal basis for processing your personal data?
Α. Contract
In case you purchase tickets online, AOM processes the above personal data as absolutely necessary for issuing your tickets and sending them to your e-mail, as well as for managing your reservation and your visit to the Museum.
B. Legal Obligation
We are required to use your personal data where this is expressly mandated by law or in the context of our Company’s regulatory compliance with obligations arising, among others, from data protection and cybersecurity legislation.
In this context, for example, we are required to process your personal data in order to respond to your requests regarding the protection of your personal data and, more generally, to comply with any requests for personal data we receive from competent law enforcement, judicial, or other regulatory authorities, as well as to comply with our tax and other legal obligations in connection with the online purchase of tickets for visits to the Museum.
C. Legitimate interest
In certain cases, the Company processes your personal data in pursuit of its legitimate interests, provided that these override your rights and interests. In particular, the legitimate interests pursued by the Company may include, among others, the smooth, proper and secure operation of the Website and the electronic transactions carried out for the tickets reservation (excluding electronic payments, for which the user is redirected to a secure environment of a third-party provider), the maintenance of backup copies of the data and the Company’s general business continuity issues the management of any general communication we receive from you, in order to answer your questions about the Museum and the operation of the Website and in general to provide you with any information related to each communication you submit to us. Also, in our legal interest to inform you about the news and activities of the Museum and the special legal framework for electronic communications, we will send informative communication to the e-mail address you have stated to us during the online ticket purchase. You can oppose this processing, either by selecting the relevant option at the time of the online purchase, or by clicking the "unsubscribe" link in our e-mails.
D. Consent
In case you do not use our services, but you wish to receive a newsletter from us, following your consent through a special field on the Website, you can register in the relevant service and we will process the email address you provided to us for informational and promotional purposes regarding the Museum. You can withdraw this consent at any time, either by selecting the "unsubscribe" link in our emails, or by sending us a request to the contact details mentioned in the relevant section below. It is noted that the withdrawal of your consent does not affect the lawfulness of the processing based on consent for the period prior to its withdrawal.
Who do we share your data with?
For the best possible fulfillment of the above processing purposes, the Company discloses your personal data to the following categories of associates or in general third persons:
Website support and management companies.
Online ticketing companies.
Companies that provide us with communication and marketing services, supporting the management and operation of the Website, as well as the Company’s communication channels with the Users (e.g. newsletter, contact form).
Payment service providers when buying tickets online.
Any administrative, judicial or public authority or generally legal or natural person to whom it may, by law or court decision, derive a relevant obligation or right of the Company to disclose such data.
Legal advisors and external partners who undertake the role of the Data Protection Officer.
The Company has taken all necessary measures so that its staff and associates have been specifically authorized for these purposes and be fully bound by the professional secrecy and the obligations provided in the legislation regarding the collection and further processing of your above-mentioned data.
How does the Company protect your data?
Our Company has taken all appropriate organizational and technical measures, in accordance with technological standards and applicable laws and regulations, in order to ensure that the processing of your personal data, either by itself or by third parties on its behalf, is lawful, appropriate and has the appropriate level of security to prevent any unauthorized or accidental access, processing, deletion, alteration or other use thereof.
How long will your data be kept?
The personal data processed by the Company is kept for the entire period that is necessary for the fulfillment of the purpose of each processing. More specifically:
When the processing is based on your consent, your personal data is retained until you withdraw your consent.
When the processing is carried out in the context of providing services to you (e.g. online ticket booking), your personal data is retained for the duration of our relationship and, following its termination, for as long as required for the establishment, exercise, or defense of legal claims that may arise from it.
When the processing is mandatory under applicable law, your personal data will be retained for the period prescribed by the relevant provisions in force in each case.
What are your rights?
In any case, we would like to inform you that, according to the current legislation, you have and may exercise after confirming your identity, the following rights:
The right to access your personal data, as well as information related to the processing.
The right to correct inaccuracies and to supplement any incomplete data.
The right of deletion ("right to be forgotten"), when we process your personal data based on your consent or in order to protect our legitimate interests. In all other cases (such as, indicatively, where there is an obligation to process personal data imposed by law), this right is subject to specific limitations or may not apply, depending on the circumstances.
The right to restrict the processing of your data in cases expressly provided by law, and in particular: (a) when you contest the accuracy of the personal data, for the period until its accuracy is verified; (b) when you object to the erasure of personal data and request the restriction of its use instead of deletion; (c) when the personal data is no longer necessary for the purposes of processing, but is required by you for the establishment, exercise, or defense of legal claims; and (d) when you object to the processing, pending the verification of whether there are legitimate grounds on our part that override your reasons for objecting to the processing.
The right to data portability, that is, the right to receive your personal data free of charge in a format that allows you to access, use, and process it using commonly used processing methods. You also have the right to request that we transmit the data directly to another controller, where this is technically feasible. This right applies to data that you have provided to us and which is processed by automated means on the basis of your consent or for the performance of a relevant contract.
The right to object to processing of personal data in our legitimate interest as mentioned above, as well as to the processing carried out for direct marketing purposes,
the right to withdraw any consent immediately and free of charge.
Contact details
For any queries, clarifications or requests with regards to your personal data, in the context of the operation of the Website, you may contact us at personaldata@lamdadev.com.
Right to lodge a complaint before the Hellenic Data Protection Authority
In any case, if you feel that the protection of your personal data is violated in any way whatsoever, you reserve the right to lodge a complaint with the Hellenic Data Protection Authority, using its dedicated portal (https://eservices.dpa.gr). .
What about third party websites?
The Website provides access to third party websites or other websites of our Company or of other companies of the Lamda Development Group, through appropriate links (e.g. Success Factors platform). These links have been placed solely for the convenience of the Users, while the websites to which they are redirected are subject to the respective terms of use and Privacy Statements. The placement of the links is not an indication of approval or acceptance of the content of the respective websites by the Website controller, who bears no liability for the content of these websites, or for privacy practices applied or the accuracy of the materials contained therein. The Company exercises no control over the websites owned by third parties or their content, which are visited or linked through this website and, therefore, the Company does not endorse, fund, consult or otherwise accept no liability for these websites or their content. In case the User decides to make any use, through the links of the Website, one of the third party websites, s/he shall be solely liable for this action.
Changes to this Privacy Policy
We may make changes to this Privacy Policy at any time, by posting a copy of the amended Policy on the Website, therefore, we encourage you to review it regularly.
Last updated: March 2026