First, we clarify again that we are not providing legal advice but information on how to determine if your privacy was breached in 2020 at COSMOTE. After receiving the information, if COSMOTE confirms the breach of your privacy in 2020, you should speak to a lawyer you trust. We do not recommend lawyers.
On this page you will find the details of the COSMOTE GDPR policy
https://www.cosmote.gr/cs/cosmote/gr/data_privacy_notice.html
CASE ONE – COSMOTE SUBSCRIBER IN 2020
The COSMOTE subscriber should send an email to customerprivacy@cosmote.gr and inform that he was a COSMOTE customer from 1/9/2020 to 5/9/2020 (if he was a subscriber during that period) when the call leak was detected based on decisions 225/2022 of ADAE and 4/2022 of APDPCH.
To inform with which mobile phone number he was a customer at that time (if it has changed) and to ask the COSMOTE data controller which telephone communications files concerning him were leaked during the specific period of time, which subscriber information was leaked with the stolen file (such as phone number, day and time of the call and its duration, device type, IMSI, age, gender, ARPU, base station coordinates and mobile plan of COSMOTE subscribers).
ATTENTION: It is mandatory to send his identity with the email.
CASE TWO – SUBSCRIBER OF OTHER NETWORKS IN 2020
In the event that during the period 1/9/2020-5/9/2020 you were a subscriber to a different network than COSMOTE, then you should do the following:
- Apply to COSMOTE as mentioned above, informing that during the period in question you were a subscriber to another company. COSMOTE will ask you for a certificate of ownership, that is, that during the period in question the specific number was in your name.
- To receive the CONFIRMATION OF OWNERSHIP, you will request it from the telephone company to which you were a subscriber during the period in question and you will request that they give you a CONFIRMATION OF OWNERSHIP for the period 1/9/2020-5/9/2020 (at least). The company is obliged to give you the certificate of ownership. In case it refuses you (it will be illegal) you will file a complaint with EETT (here https://www.eett.gr/ypovoli-kataggelias/ ) and inform them that they are not giving you the CERTIFICATE OF OWNERSHIP. We estimate that they will give it to you.
Alternatively, COSMOTE may accept the first page of your account between 1/9/2020-5/9/2020 stating that the account was in your name.
GENERAL
According to the current legislation on personal data, COSMOTE will be required to respond within 30 or 60 days.
If the response confirms that the subscriber’s phone number was included in the stolen file, then the email will be accompanied by an Excel file with all the outgoing and incoming phone calls that were leaked.
In this case, you should consult the lawyer you trust to inform you about the next steps he or she believes you should take.