Privacy Policy

At Showusmeaclipcompss Mediterranean Flora Institute (accessible via showusmeaclipcompss.pics), we take data ethics and the privacy of our website visitors, academic collaborators, botanists, and conservation researchers with absolute seriousness. This detailed Privacy Policy explains what personal information we collect, how it is managed, the legal bases governing its processing, and your rights under applicable data protection laws.

1. Data Controller Identity

The legal data controller responsible for personal information processed through this portal is:
Showusmeaclipcompss Mediterranean Flora Institute
Akti Koundourou 14, 721 00 Agios Nikolaos, Crete, Greece.
Company Registration No.: GR-982145-HER.
Data Protection Officer (DPO) Contact: [email protected]

2. Categories of Data Collected

We collect personal information through two main mechanisms:

• Information You Voluntarily Provide: When you complete our research liaison form, request field coordinates, or report pest sightings, we collect your full name, academic/institutional affiliation, email address, telephone contact (if provided), and the specific text of your message.
• Automated Telemetry & System Log Data: When you access our pages, our servers automatically log technical parameters including your anonymized Internet Protocol (IP) address, browser family, operating system, referring URL, time and duration of visit, and pages inspected.

3. Legal Bases for Processing (GDPR Art. 6)

We process your data strictly under lawful conditions recognized by European data regulations:

• Consent (Art. 6(1)(a)): For optional cookies, subscription updates, and non-essential telemetry.
• Contractual / Pre-Contractual Performance (Art. 6(1)(b)): To respond to research permit inquiries, scientific data exchange, or collaborative field study requests initiated by you.
• Legitimate Interests (Art. 6(1)(f)): Maintaining the integrity, performance, and cybersecurity of our botanical servers, and protecting endangered habitat coordinates from malicious scrapers.

4. Cookie Architecture & Analytics

Our portal utilizes essential technical session tokens and privacy-preserving anonymous analytical cookies. Detailed disclosures, cookie duration periods, and manual browser configuration procedures are fully documented in our dedicated Cookie Policy.

5. Third-Party Processors & Data Transfers

We do not sell, rent, or trade your personal information to commercial advertising brokers. We only share data with vetted third-party technical vendors who process infrastructure under rigorous European Data Processing Agreements (DPAs):

• Cloud Hosting and CDN Infrastructure providers situated within the European Economic Area (EEA).
• Open-source mapping and botanical GIS visualization libraries executing client-side without permanent identifier tracking.
• Statutory law enforcement or environmental regulatory authorities (such as the Hellenic Ministry of Environment) solely when mandated by binding judicial orders.

6. Data Retention Period

Field liaison records and contact communications are retained for a maximum duration of thirty-six (36) months from the date of last correspondence, after which records are irreversibly anonymized or securely deleted, unless ongoing scientific permits require extended retention under Greek archive legislation.

7. Your Statutory Rights Under GDPR & CCPA

Subject to statutory limits, you possess comprehensive rights over your personal data:

• Right of Access: Request a complete electronic copy of all personal records we hold regarding your identity.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete botanical records.
• Right to Erasure ("Right to Be Forgotten"): Demand immediate deletion of your personal data where continued retention lacks lawful justification.
• Right to Restriction of Processing: Freeze processing activities during pending disputes regarding accuracy or lawful grounds.
• Right to Data Portability: Receive your records in an interoperable, structured, machine-readable JSON or CSV format.
• Right to Object: Oppose data processing grounded upon legitimate interest justifications.

To exercise any of these statutory rights, please submit a written request to our Data Protection Officer at [email protected]. You also hold the legal right to lodge a formal complaint with the Hellenic Data Protection Authority (HDPA, www.dpa.gr) or your domestic EU supervisory authority.