Imprint & Privacy Policy for Social Media

Imprint

Nikolaos Papagrigoriou
Höchster Str. 11
65835 Liederbach am Taunus
Germany

Contact

Phone: +49 69 2083 2497
E-mail: info@papagrigoriou.com

Editorial Responsibility

Person responsible for content pursuant to § 18(2) MStV:
Nikolaos Papagrigoriou (address as above)

VAT ID

VAT identification number pursuant to § 27 a of the German VAT Act (UStG):
DE364843581

Regarding Professional Liability Insurance

Name and registered office of the insurer:

Markel Insurance SE
Niederlassung für Deutschland
Sophienstr. 26
80333 München
Germany

Scope of insurance: worldwide*

* For claims asserted before the courts of the USA or Canada or based on the violation of the law of these countries, insurance cover is only provided for direct exports for financial losses. This restriction does not apply to liability claims due to:

participation in or the execution of business trips;
participation in trade fairs, exhibitions or events;
indirect exports of products or services to the USA or Canada.

Consumer Dispute Resolution

I am neither obliged nor willing to participate in dispute resolution proceedings before a consumer arbitration board pursuant to § 36 VSBG.

Objection to Unsolicited Communications

I hereby object to the use of the contact details published on this website for the purpose of sending unsolicited advertising and information materials. I expressly reserve the right to take legal action in the event of unsolicited promotional communications, particularly spam emails.

About This Privacy Policy

This privacy policy applies to my presence on social networks, including LinkedIn, Xing, and GitHub. It is separate from the privacy policy of my website at papagrigoriou.com.

As the operator of social media profiles, I process personal data of visitors and followers in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Joint Controller / Shared Responsibility

According to Art. 26 GDPR, the respective platform operators and I are jointly responsible for data processing on my social media profiles. This shared responsibility relates primarily to the processing of data for statistical purposes (e.g., page insights) and advertising.

The platform operators are primarily responsible for:

Providing the technical infrastructure
Processing data for their own purposes
Responding to data subject requests regarding platform functionality

I am responsible for:

The content I publish on my profiles
Processing of data when you contact me directly
Any data I collect independently of the platform

Platform-Specific Information

My LinkedIn profile is operated on the platform of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

When you visit my LinkedIn profile, LinkedIn processes your data, including for the provision of Page Insights (anonymized statistics about visitors and their interactions). LinkedIn and I have concluded a Joint Controller Addendum regarding Page Insights.

For more information about LinkedIn’s data processing:

Xing

My Xing profile is operated on the platform of New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

When you visit my Xing profile, New Work SE processes your data. This may include profile visits, interactions with my content, and messaging.

For more information about Xing’s data processing:

Xing Privacy Policy

At the time of this writing, New Work SE does not offer a formal joint controller agreement for profile operators. The shared responsibility as described above under “Joint Controller / Shared Responsibility” applies.

GitHub

My GitHub profile is operated on the platform of GitHub, Inc., 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA (a subsidiary of Microsoft Corporation).

When you visit my GitHub profile or interact with my repositories, GitHub processes your data. This may include profile visits and other interactions with my content.

For more information about GitHub’s data processing:

GitHub Privacy Statement

GitHub does not currently offer a joint controller agreement for profile pages. The general shared responsibility framework described above applies.

Data Transfer to Third Countries

When you interact with my GitHub profile, your personal data may be transferred to the United States, where GitHub, Inc. is based. The European Commission has adopted an adequacy decision for the EU-U.S. Data Privacy Framework (DPF). GitHub LLC is certified under the DPF, which means that an adequate level of data protection is ensured for transfers under this framework.

Additionally, GitHub relies on Standard Contractual Clauses (SCCs) approved by the European Commission as a supplementary transfer mechanism.

For more information, see the GitHub Privacy Statement and the EU-U.S. Data Privacy Framework.

LinkedIn may also process data in the United States. LinkedIn Ireland Unlimited Company transfers data to LinkedIn Corporation in the US relying on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.

Legal Basis for Processing

The legal basis for data processing on social media profiles is:

Art. 6(1)(f) GDPR (legitimate interest) — for maintaining a professional online presence, communicating with interested parties, and processing data arising from your interactions with my profiles (e.g., likes, comments, follows, profile visits). My legitimate interest lies in professional communication and the presentation of my services.
Art. 6(1)(b) GDPR (contract performance) — when processing is necessary in the context of initiating or performing a business relationship.
Art. 6(1)(a) GDPR (consent) — only where you have given explicit consent for a specific processing activity. You may withdraw such consent at any time (see Your Rights below).

Data Retention

I do not independently store personal data collected through the social media platforms beyond what the platforms themselves retain.

If you contact me directly via a platform’s messaging function, I retain the message content for the duration of our communication and for up to 6 months after the last exchange, unless a longer retention period is required by law (e.g., tax or commercial law obligations under § 147 AO or § 257 HGB, which may require retention for up to 6 or 10 years).

The platform operators retain data according to their own retention policies. Please refer to the respective platform’s privacy policy linked above for details.

You have the following rights regarding your personal data:

Right of access (Art. 15 GDPR): You can request information about whether and what personal data I process about you.
Right to rectification (Art. 16 GDPR): You can request correction of inaccurate personal data.
Right to erasure (Art. 17 GDPR): You can request deletion of your personal data under certain conditions.
Right to restriction of processing (Art. 18 GDPR): You can request restriction of processing under certain conditions.
Right to data portability (Art. 20 GDPR): You can request to receive your personal data in a structured, commonly used, and machine-readable format.
Right to object (Art. 21 GDPR): You can object to processing based on legitimate interests at any time.
Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on your consent, you have the right to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of an alleged infringement. The supervisory authority responsible for me is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI)
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
Website: https://datenschutz.hessen.de

For data processed by the platform operators, please contact them directly using the links provided above.

Contact for Data Protection Matters

For questions regarding data protection on my social media profiles, please contact: