Privacy policy

This notice explains how your personal data is processed under the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Greek Law 4624/2019. Last updated: June 2026.

1 · Who is responsible for your data

The data controller is ACFE Greece — the Greek Chapter of the Association of Certified Fraud Examiners, organiser of The Fraud Games 2026. For any question about this notice or your personal data, contact us at office@acfe.gr.

2 · What we collect

When you register, we collect only what we need to enrol you and run the event:

• Attendee details — for each person in your booking: first name, surname, email, job title, and phone number where you choose to provide it.
• Registration details — your attendance type (in person or online), ACFE Greece membership status where it applies to early-bird pricing, the number of seats, and the price/tier of your order.
• Invoice details (only if you request an invoice) — company name, VAT/Tax ID (ΑΦΜ), tax office (ΔΟΥ) and billing address.
• Payment details — payment method, amount, currency, payment status and order reference. For card payments, a Stripe payment reference (we never see or store your full card number).
• Consent & marketing preference — a record that you consented to this notice (with a timestamp) and, if you tick it, your optional opt-in to receive news and updates.
• Technical data — the IP address and browser user-agent of the device used to submit the form, kept solely to prevent abuse and fraudulent submissions.

3 · Why we use it, and our legal basis

• To administer your registration — confirming your booking, issuing tickets and sending event communications. Legal basis: performance of a contract (Art. 6(1)(b)).
• To issue invoices and keep accounting records. Legal basis: compliance with a legal obligation (Art. 6(1)(c)).
• To send you news and updates about ACFE Greece and future events — only if you opt in. Legal basis: consent (Art. 6(1)(a)), which you can withdraw at any time.
• To protect the registration form from abuse and fraud. Legal basis: our legitimate interests (Art. 6(1)(f)).

We use your data only for the purposes above. We do not sell your data or use it for automated decision-making or profiling.

4 · Payments

Card payments are processed by Stripe Payments Europe, Ltd. as a separate data processor. Your card details are entered directly with Stripe and are never seen or stored by us. For bank transfers, we record only the order reference and amount in order to reconcile your payment.

5 · Who we share it with

Your data is handled by ACFE Greece and a small number of service providers acting on our instructions as processors: our payment provider (Stripe), our hosting provider, and our email-delivery provider. We may disclose data where required by law. We do not transfer your data outside the European Economic Area except where a provider offers appropriate safeguards approved under the GDPR.

6 · How long we keep it

We keep registration data for as long as necessary to run the event and afterwards only as required to meet legal and accounting obligations (invoicing records are retained for the period required by Greek tax law). If you opted in to news and updates, we keep your contact details until you unsubscribe. After these periods your data is deleted or anonymised.

7 · Your rights

Under the GDPR you have the right to access your data; to have it corrected or erased; to restrict or object to its processing; to data portability; and, where processing is based on consent, to withdraw that consent at any time (without affecting processing already carried out). To exercise any of these rights, email office@acfe.gr. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

8 · Unsubscribing

If you opted in to news and updates, you can unsubscribe at any time using the link in any email we send, or by emailing office@acfe.gr. Unsubscribing from marketing does not affect the essential emails we must send to administer your registration.

9 · Cookies and analytics

Our site does not use any cookies that are necessary for it to function, and we do not use advertising or tracking cookies. The only non-essential technology we use is Google Analytics 4, provided by Google Ireland Ltd., to measure anonymous, aggregated traffic (such as page views and approximate location) so we can improve the event website.

Google Analytics is not loaded until you give consent through the cookie banner shown on your first visit. If you click “Decline,” no analytics cookies are set and no data is sent to Google. If you click “Accept,” we record your choice in your browser’s local storage so we don’t ask again. Legal basis: consent (Art. 6(1)(a)).

You can withdraw your consent at any time by clearing your browser’s cookies and site data for this website, which will make the banner appear again on your next visit. For more on how Google processes this data, see Google’s privacy policy at policies.google.com/privacy.

10 · Contact

Data controller: ACFE Greece. Email: office@acfe.gr.