Last updated: 4 August 2026
1. Controller and scope
This Privacy Statement explains how personal data are processed when you use ancientolympiamuseum.com, the official website of the Archaeological Site and Museums of Olympia. The website is administered by the Ephorate of Antiquities of Ilia, a Regional Service of the Hellenic Ministry of Culture.
The data controller is the Hellenic Ministry of Culture, 20–22 Bouboulinas Street, 106 82 Athens, Greece, tel. +30 213 132 2100. For website-related enquiries you may contact the Ephorate of Antiquities of Ilia, Ancient Olympia, 27065, Greece, tel. +30 26240 22529, email: efahle@culture.gr. The Ministry’s Data Protection Officer may be contacted at dpo@culture.gr.
2. Data we process
Depending on how you use the website, we may process: technical and security data such as IP address, device and browser information, date and time of access, requested pages and server logs; information stored or read through cookies and similar technologies; and any identification, contact details and message content that you voluntarily provide when communicating with us.
Please do not include special-category or other sensitive personal data in ordinary enquiries unless this is strictly necessary.
3. Purposes and legal bases
We process data to operate, secure, maintain and improve the website; to prevent abuse and investigate technical incidents; to respond to enquiries and carry out the public-interest tasks entrusted to the Ministry and the Ephorate; to comply with legal obligations; and, where you choose optional cookies or third-party services, on the basis of your consent. Processing necessary for the operation of this public cultural information service is carried out in the public interest or in the exercise of official authority. Technical security processing may also be necessary for compliance with legal obligations and the protection of the website.
4. Cookies, statistics and embedded content
Strictly necessary cookies may operate without consent. Optional analytics, multimedia, maps or other third-party technologies are activated only in accordance with the choices available in the cookie banner. You may withdraw or change your consent at any time through the cookie settings. Detailed, current information about cookies, providers, purposes and retention periods is available in the Cookie Policy generated and maintained through Complianz.
Links to external websites are governed by the privacy notices of their respective operators. Where embedded third-party content is enabled, the relevant provider may receive technical data and may process data outside the European Economic Area subject to the safeguards required by applicable law.
5. Recipients and processors
Access is limited to authorised personnel and, where necessary, contracted providers supporting hosting, maintenance, security, analytics or other website functions, acting under appropriate contractual and confidentiality obligations. Data may also be disclosed to competent public, supervisory, judicial or law-enforcement authorities where required by law.
6. Retention
Personal data are retained only for as long as necessary for the relevant purpose and in accordance with applicable public-sector record-keeping, legal and security requirements. Enquiry correspondence is normally retained for up to six months after completion unless a longer period is required for administrative records, legal obligations or the establishment, exercise or defence of legal claims. Technical and security logs are kept for the period reasonably necessary for security and troubleshooting. Cookie-specific retention periods are stated in the Cookie Policy.
7. Your rights
Subject to the conditions and limitations of the General Data Protection Regulation (EU) 2016/679 and Greek Law 4624/2019, you may request access to, rectification or erasure of your data, restriction of processing, data portability where applicable, or object to processing. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.
Requests and questions may be sent to the Ministry’s Data Protection Officer at dpo@culture.gr. You also have the right to lodge a complaint with the Hellenic Data Protection Authority at www.dpa.gr; the Authority recommends first contacting the controller.
8. Security, children and changes
Appropriate technical and organisational measures are used to protect personal data. Nevertheless, no internet transmission or storage system can be guaranteed to be completely secure. This website is intended as a general public cultural-information service and does not knowingly seek to collect personal data from children. Any communication by a child should be made with the involvement of a parent, guardian or responsible educator.
This Statement may be updated when the website, its services or the applicable legal framework changes. The current version and date will always be published on this page.