Privacy & Personal Data Policy (GDPR)

Last updated: [PUBLICATION DATE] · Ελληνικά — in case of any discrepancy, the Greek text prevails.

1. Who we are

"We The Greeks" (we-the-greeks.world) is a participatory-democracy platform connecting Greeks in Greece and across the diaspora: submitting ideas and proposals, structured deliberation, votes, and events. The data controller is: [LEGAL ENTITY / CONTROLLER]. Contact: [CONTACT EMAIL].

2. What data we collect

a. Account data. Authentication is handled by the Zitadel identity system: email address, username and encrypted credentials. We do not store passwords in the platform's database.

b. Profile data. What you declare at registration or in settings: name, nickname, date of birth, citizenships, occupation, places of interest (e.g. place of origin, residence, voting rights) and thematic categories. Your places determine which communities (Pnyxes) you belong to and which votes concern you.

c. Content you publish. Ideas, deliberation posts, proposals, suggestions, events — together with the publication time and their link to your profile.

d. Voting data. We record THAT you participated in a vote (for one-person-one-vote integrity and turnout figures) — never WHAT you voted. Votes requiring stronger guarantees run on Belenios (end-to-end verifiable encryption): no one, including the platform's operators, can see or alter your ballot.

e. Moderation data. Content reports you submit or that concern you, personal user blocks, and moderator actions (kept as a transparency/ accountability record).

f. Technical data. Data necessary for the operation and security of the service (server logs: IP, request time). The app uses no advertising trackers.

3. Why we process it (legal bases)

• Performance of the service (GDPR art. 6.1b): account, profile, places, participation in deliberations/votes/events.
• Legitimate interest (6.1f): security, abuse prevention (posting limits, moderation), voting integrity (one participation per citizen).
• Consent (6.1a): optional profile fields; can be withdrawn.

4. Who we share data with

We do not sell or hand over data to third parties for commercial purposes. We use technical providers strictly to operate the platform: server hosting [PROVIDER/LOCATION], the Zitadel identity system [WHERE HOSTED], the Belenios voting system (elections.we-the-greeks.world). Only what you publish yourselves (ideas, posts, proposals, events) is publicly visible, under your nickname/name.

5. How long we keep it

• Account/profile: for as long as you keep your account.
• Content: while published; content hidden by moderation is retained (not visible) as evidence.
• Vote-participation records: retained for the verifiability of results.
• Server logs: [PERIOD — proposed: 90 days].

6. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to the Hellenic Data Protection Authority (dpa.gr). Requests: [EMAIL]. Note: deleting your account does not undo anonymous/ aggregate results of votes already completed (your ballot is never linked to you in the first place).

7. Security

Encrypted transport (TLS), separation of the identity system from platform data, end-to-end verifiable ballot encryption (Belenios), controlled administrator access, moderation action log.

8. Minors

The service is intended for users over 18.

9. Changes

Any material change to this policy will be announced in the app before it takes effect.