This privacy notice explains what personal information the Athens Open collects when you visit our website, buy a ticket, attend the tournament, or apply for accreditation — and what we do with it. We process your data lawfully and only where there is a clear purpose. Where we rely on consent, you can withdraw it at any time.
- 01
What we collect
We collect three categories of information: information you give us (name, email, phone, payment data when buying a ticket); information about your visit to our website (cookies, device identifiers, pages visited); and information from third parties only when necessary (e.g. payment confirmation from Stripe).
We never buy personal data about you from data brokers. We do not collect special-category data (health, religion, political opinion) unless you give it to us directly — for example when requesting accessibility accommodations.
- 02
Why we process it
Tickets and accreditation: to fulfil our contract with you, to comply with venue safety obligations, and to send tournament updates relevant to your booking. Marketing: only with your opt-in consent, and you can unsubscribe from every email we send.
We process website analytics under our legitimate interest in improving the site. Analytics data is aggregated and we cannot use it to identify you.
- 03
Who sees it
Inside the tournament: only the staff who need to (ticketing operations, accessibility desk, communications). We require everyone with access to follow strict confidentiality rules.
Outside the tournament: payment processors (Stripe), email service providers (the platform that sends our newsletter), and our cloud hosts. Each is bound by a data-processing agreement and processes data only on our instructions.
We do not sell your data. We do not share it with advertising platforms unless you explicitly opt in.
- 04
How long we keep it
Booking records: 7 years (Greek tax law). Accreditation files: 2 years. Marketing list: until you unsubscribe. Website analytics: 14 months in our analytics tool, indefinitely in aggregated form.
If you ask us to delete your data we do so within 30 days, except where law requires us to retain it (financial records, accreditation records during a security review).
- 05
Your rights
Under GDPR you have the right to access your data, correct it, delete it, restrict our processing, port it elsewhere, and object to processing based on legitimate interest. We respond to requests within 30 days.
If you are not satisfied with our response you have the right to complain to the Hellenic Data Protection Authority (dpa.gr).
- 06
Contact
Data protection officer: office@athens-open.com. Postal address: Athens Open, Amarisias Artemidos & Pittara, 151 23 Marousi, Greece.