Version details

In a minute

This section is the concise (first level) update. For more details, please refer to the following sections or contact your Data Protection Officer.

1. Data Controller

The Ministry of Justice (hereinafter referred to as "Ministry. Di.") based in Athens, Leof. Mesogeion 96, P.C. 11527, tel. +30 213 130 7000, website www.ministryofjustice.gr, informs you in its capacity as Data Controller that it processes personal data within the scope of its responsibilities, in accordance with Reg. (EU) 2016/679 (General Data Protection Regulation - hereinafter "GDPR") and Law 4624/2019, taking all appropriate technical and organizational measures for their secure processing.

2. Purpose and legal basis of processing

The Ministry. Dik. processes personal data within the framework of the responsibilities assigned to it by its Organization (Presidential Decree 30/2025, A' 52) and any other applicable general or special provision. The main legal bases for processing are:

• Article 6 par. 1 par. c' GDPR - the processing is necessary for compliance with a legal obligation of the Ministry. Dik.,
• Article 6 par. 1 case e' GDPR - the processing is necessary for the performance of a task performed in the public interest or in the exercise of public authority assigned to the Ministry of Education. Dik.,
• Article 6 (1) (b) GDPR - when the processing is necessary for the performance of a contract (e.g. recruitment acts after selection),
• Article 6 (1) (a) GDPR - when the subject has given explicit consent (e.g. use of non-essential cookies).

Where special categories of data (art. 9 GDPR - e.g. health data of trainees with disabilities) or data of criminal convictions (art. 10 GDPR - e.g. criminal record) are processed, the more specific conditions of the respective provisions of the GDPR and cap. B & C of Law 4624/2019.

In addition, the Ministry. Dik. processes personal data for archiving purposes in the public interest, scientific/historical research and statistical purposes, with the guarantees of art. 89 GDPR.

3. Categories of data we process

The Ministry. Dik. collects and processes the following categories of data, as appropriate:

• Identification data (full name, father's name/mother's name, ID card, VAT number, social security number, passport number)
• Legalization data (authorizations, powers of attorney, attorneys' certificates)
• Contact data (postal and e-mail address, landline/mobile phone)
• Financial, property and family status data (occupation, income, real estate, marital status, dependents)
• Professional activity data (CV, qualifications, work experience)
• Bank data (IBAN — where required for fees/compensation)
• Electronic identification data (IP address, cookies, account details gov.gr / Plenary Session of Bar Associations)
• Image data from video surveillance systems of the premises of the Ministry. Dik.
• Special categories of data (Art. 9 GDPR): health/disability data (where required for subsidized programs or work adjustments)
• Data on criminal convictions and offences (art. 10 GDPR): in the context of maintaining a National Criminal Record and managing pardon requests

4. How and sources of data extraction

The Ministry. Dik. collects data:

• Directly by you, when submitting any statement, application or question (formed, electronic, postal, through DPO form, through KEP, when using the Ministry's electronic services).
• From third party sources, indicatively: other bodies of the General Government (GGSPSD, ASEP, EFKA, GAO, AADE), judicial and prosecutorial authorities, prosecuting authorities, foreign central authorities in the context of international judicial cooperation, European organizations (Eurojust, EJN, EUROJUST CMS), international organizations (UNODC, GRECO).
• From video surveillance systems, for the protection of persons and goods on the premises of the Ministry.

5. Table of main processing activities

The following table briefly presents the main processing activities of the Ministry. Dik., together with the corresponding categories of data, legal bases, recipients and retention times.

6. Retention time

The retention time of each category of data varies depending on the nature of the processing. Indicatively:

• Criminal Record Data: according to Article 573 CCP (destruction of cards on death, at the age of 80, with amnesty/pardon/annulment, or 5 years after the end of the suspension of execution of a sentence)
• ASEP/non-successful recruitment data: 5 years after the finalization of the tables
• Staff/employee data: on a term of service + 50 years (record-keeping)
• Data from video surveillance: 15 days
• Data from citizen communication: 1 year, unless a case arises
• International judicial cooperation data: 10 years after final closure

For a specific retention time per processing category, you can contact the DPO.

7. Data Recipients

Personal data shall be transferred to the following recipients, to the extent necessary and on the basis of a legal obligation:

• Other General Government bodies (GGSPSD, ASEP, EFKA, GAO, AADE, Court of Auditors)
• Judicial, public prosecutor's offices, prosecuting authorities
• Bar associations and their Plenary Session
• Processors (IT service providers, digital infrastructure, NSRF project contractors), who are bound by contracts of art. 28 GDPR
• European and international organisations in the framework of international judicial cooperation (Eurojust, EJN, ECRIS-TCN)
• Public authorities that receive data in the context of an individual investigation, which are not considered "recipients" within the meaning of art. 4 par. 9 GDPR

8. Automated decision-making and profiling

The Ministry. Dik. it does not make decisions solely on the basis of automated processing, which produces legal effects vis-à-vis the data subjects or significantly affects them (art. 22 GDPR). The evaluation/scoring of candidates is based on objective criteria that are examined by competent committees with human intervention in all phases.

9. Transfers to third countries and international organisations

The Ministry. Dik. transfers personal data to foreign prosecuting, judicial and central authorities in the context of mutual legal assistance, in accordance with EU regulations (e.g. Regulation 2018/1727 on Eurojust, Regulation 2019/816 on ECRIS-TCN), international treaties (e.g. Council of Europe Convention on Assistance in Criminal Matters) and Cap. E & F' of Law 4624/2019. Transfers to third countries (outside the EEA) are carried out only when provided for by the above provisions and under the guarantees of art. 44–49 GDPR or the corresponding provisions of Law Enforcement Directive 2016/680.

10. Your rights

As a data subject, you have the following rights vis-à-vis the Ministry. Dik., which you can exercise by submitting a relevant request (see Section 12):

10.1 Right to information (art. 13-14 GDPR)

You have the right to be informed about which categories of data we hold about you, their source, the purposes of the processing, the legal basis, the recipients, the retention period and your rights. This Statement serves exactly this purpose.

10.2 Right of access (Art. 15 GDPR)

You are entitled to free access to your data and receive a copy of it. At the same time, the provisions of article 5 of Law 2690/1999 (Code of Administrative Procedure) regarding the right of access to public documents apply, in conjunction with art. 42 par. 1 of Law 4624/2019.

10.3 Right to rectification (Art. 16 GDPR)

You have the right to request the correction of inaccurate data or the completion of incomplete information.

10.4 Right to erasure / "right to be forgotten" (Art. 17 GDPR)

You are entitled to request the deletion of your data under the terms and restrictions of art. 17 par. 3 GDPR and art. 34 of Law 4624/2019.

10.5 Right to restriction of processing (Art. 18 GDPR)

You are entitled to request the restriction of processing under the conditions of art. 18 GDPR.

10.6 Right to data portability (Art. 20 GDPR)

You have the right to receive the data you have provided in a structured, commonly used and machine-readable format, as well as to transmit it to another controller. It is noted that, due to the nature of the Ministry. Dik. as a public authority, the application of this right is limited (Art. 20 (3) GDPR).

10.7 Right to object (Art. 21 GDPR)

You have the right to object at any time to the processing of your data. According to art. 35 of Law 4624/2019, the right does not apply when there is an overriding public interest in the processing or a provision of law requiring the processing.

10.8 Right not to submit to an automated decision (Art. 22 GDPR)

As mentioned in Section 8, the Ministry. Dik. It does not make automated decisions.

10.9 Restrictions on the exercise of rights

The above rights are exercised in the context of the restrictions of art. 31-35 of Law 4624/2019, especially when their satisfaction would endanger national or public security, the proper performance of the duties of the Ministry. or when the data is protected by professional secrecy. In case of non-satisfaction of the request, the Ministry. Dik. reply within one month of receipt.

11. Data Protection Officer (DPO)

The Ministry. Dik. has appointed a Data Protection Officer in accordance with art. 37-39 GDPR and art. 6 of Law 4624/2019. You can contact him:

• E-mail: dpo@justice.gov.gr
• Online form: https://www.ministryofjustice.gr/?page_id=2509
• Post : Ministry of Justice, Data Protection Officer, Leof. Mesogeion 96, P.C. 11527, Athens (in the file note "For the Data Protection Officer")

12. Exercise of rights - Procedure

To exercise your rights, submit a request through one of the above channels. The request is processed within one month of receipt, with the possibility of an extension of two additional months if this is required due to complexity or number of requests (art. 12 par. 3 GDPR).

For identification purposes, the Ministry. Dik. may request additional information from you (Art. 12 para. 6 GDPR). Postal requests must bear an authentic signature certificate; Electronic requests must have an approved digital signature or be sent from a verified e-mail account.

The Ministry. Dik. has established an internal Procedure for the Management of Subjects' Requests (SC 346/20-01-2022), which ensures a timely and documented response to each request.

13. Right to lodge a complaint with the Data Protection Authority

In any case, you reserve the right to lodge a complaint with the Personal Data Protection Authority:

• Website: www.dpa.gr
• Address: 1-3 Kifisias Avenue, P.C. 11523, Athens
• Telephone: +30 210 6475600
• E-mail: contact@dpa.gr

14. Vulnerable persons

The Ministry. Dik. acknowledges that some data subjects may face difficulties in accessing information (children, the elderly, people with disabilities, foreigners with limited knowledge of Greek, prisoners). The following special adjustments are provided:

• Possibility of paper delivery of this Statement upon request
• Availability of the Statement in English via ministryofjustice.gr/English
• Compatibility of the website with WCAG 2.0 (Level AA)
• Possibility of oral explanation through the call center or the relevant services
• For trainees with disabilities in the Internship Act: special facilities for access to the information system upon request

15. Update of the Statement

The Ministry. Dik. may update this Statement when material changes occur (e.g. new processing purposes, new recipients, new legislation). In each update: (a) the publication number and date on the cover of the document are updated, (b) the new edition is posted on the website www.ministryofjustice.gr in a prominent place, (c) the subjects are informed through an announcement on the website. We encourage you to review this Statement periodically.