Personal Data Protection (GDPR)

Γενικά

The BUSINESS has created this website for the sole purpose of serving its customers. The information collected by the BUSINESS relates to the processing of the order through this website.

This Privacy Statement and, in addition, the Terms of Use of this website describe the method of data collection, the use of this data that users provide during the orders through the website. This policy will be modified from time to time without prior notice to users. By using this website, you are deemed to accept and consent to this Privacy Statement and the Terms of Use of the website that have been announced through it.

The BUSINESS is responsible for processing and must manage and protect the personal data of visitors and users of the website in accordance with the General Data Protection Regulation (679/2016), as well as the provisions of national, Community and international law on the protection of the rights and freedoms of individuals with regard to the processing of personal data, as applicable.

Τι είναι προσωπικά δεδομένα;

Personal data is information that directly or indirectly identifies a natural person. Indirectly means in combination with other information, such as, for example, name, postal address, email address and telephone number, or a unique device identification number.

Συγκέντρωση πληροφοριών:

The BUSINESS uses the data of visitors (name, address, postal code, e-mail address, telephone number, credit card details, payment method of the order, shipping – delivery details of an order, etc.), if they have been entered through the contact form of the website for communication.

The BUSINESS uses the data of visitors (email address) if they have subscribed to the newsletter.

Χρήση προσωπικών δεδομένων

The information that has been voluntarily provided by the users of the mentioned website is used in order for its users to have direct and substantial communication with the store, to provide them with answers to specific questions they ask and finally to serve and execute their orders.

The information collected through the website is not distributed to any other organization, but only to direct partners in the ordering process.This data is kept and processed by the company for a reasonable period of time and only for as long as there is a pending sale, delivery, payment of products and any legal claims.

The BUSINESS makes use of the information given during the electronic submission of the form, in order to communicate with its users/customers regarding. (i) the delivery of the order, (ii) to confirm and identify the customer in any necessary case, (iii) for new or alternative products offered and special offers, (iv) advertising/promotional material if the prior express and free consent of the user has been provided.

The user has the possibility to choose whether to receive such communications from the website and can object to this use at the time of collection by following the instructions within the email or SMS message received.

Any document and document certifying and stating the identity of the customer remains strictly confidential and can only be checked by a competent employee. The BUSINESS requires its employees and website maintainers to provide its users/customers with the level of security referred to in this Privacy Statement. By providing personal data, the user consents to the use of such data by the employees of the BUSINESS for the reasons mentioned above. In no other case can the BUSINESS share personal information with others without prior consent,

unless required through legal channels.

Μεταβιβάσεις επιχειρήσεων

In connection with any reorganization, restructuring, merger or sale or other transfer of assets (collectively “Business Transfer”), the BUSINESS will transfer data, including personal data, on a reasonable scale and as necessary for the Business Transfer, and provided that the recipient agrees to respect the personal data in a manner consistent with applicable data protection laws. The BUSINESS will inform the affected subjects before the personal data becomes subject to a different privacy policy.

Επεξεργασία προσωπικών δεδομένων των παιδιών

The BUSINESS will not collect or process personal data of children under the age of 16 unless parental consent has been given, in accordance with applicable law. If it becomes aware that a child’s personal data has been collected in error, it will be deleted immediately, without undue delay.

Επεξεργασία ευαίσθητων δεδομένων

The BUSINESS may, in certain cases, process special categories of personal data (“sensitive data”). Sensitive data are defined as personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of identifying a natural person, health or sex life or sexual orientation. For example, it may process sensitive data which the subjects have made public or freely given their prior explicit and individual consent, in a specific context for a specific purpose.

Ασφάλεια συναλλαγών

The BUSINESS is committed to ensuring the security and integrity of the data it collects about the users of its website. The BUSINESS has adopted procedures, which protect the personal data that users submit to its website or provide by any other means (e.g. by telephone). These procedures protect user data from any unauthorized access or disclosure, loss or misuse, and alteration or destruction. They also help to certify that these data are accurate and used correctly. The BUSINESS shall implement an appropriate level of security to safeguard the data collected against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access to personal data transmitted, stored or otherwise processed. Access to personal data is granted only to staff or direct collaborators who are required to have such information for the processing of orders. In the event of a data breach containing personal data, the BUSINESS will comply with applicable law regarding the notification of the breach.

Δικαιώματα χρηστών/πελατών

As a data subject, users of the BUSINESS website have specific legal rights regarding the personal data collected.

The following list contains information about your legal rights under applicable data protection laws:

Right to withdraw consent: where personal data is processed on the basis of your consent, you may withdraw your consent at any time.

Right of restriction: You can ask us to restrict the processing of your personal data if you dispute the accuracy of your personal data for the period we need to verify the accuracy, if the processing is unlawful and you request restriction of processing instead of deletion of your personal data, if we no longer need your personal data but you need it to support, exercise or defend legal claims, or if you object to processing for the period we are verifying whether your personal data is accurate, or if you have an objection to processing for the period we are verifying whether your personal data is accurate.

Right of access: you can ask us for information about personal data we hold about you, including information about the categories of personal data we hold or control, what it is used for, where it was collected from, if not from you directly, and to whom it has been disclosed, where applicable. You may obtain from us, free of charge, a copy of the personal data we hold about you. We reserve the right to charge a reasonable fee for any further copy you may request from us.Right of portability: At your request, we will transfer your data to another controller where technically feasible, provided that the processing is based on your consent or is necessary for the performance of a contract. Instead of receiving a copy of your personal data, you can ask us to transfer the data to another controller, indicated by you, directly.

Right to erasure: You can ask us to erase your personal data where – the personal data is no longer necessary in relation to the purposes for which it was collected or processed – you have the right to object to further processing of your personal data and you exercise this right – the processing is based on your consent, you withdraw your consent and there is no other legal basis for processing – your personal data has been unlawfully processed unless the processing is unlawful or unlawful; – your personal data is no longer necessary in relation to the purposes for which it was collected or processed; – you have the right to object to further processing of your personal data and you exercise this right; – the processing is based on your consent, you withdraw your consent and there is no other legal basis for processing; – your personal data has been unlawfully processed unless the processing is unlawful or unlawful; – your personal data has been unlawfully processed; – your personal data has been unlawfully processed unless the processing is unlawful or unlawful.

Right to object: you can object – at any time – to the processing of your personal data on the grounds of your particular situation, provided that the processing is not based on your consent but on our legitimate interest or the legitimate interests of third parties. In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds and an overriding interest in the processing or in support, exercise or defence of legal claims. If you object to the processing, please specify whether you wish the deletion of your personal data or the restriction of processing by the BUSINESS.

Right to lodge a complaint: In the case of an alleged breach of applicable privacy laws, you can lodge a complaint with the data protection supervisory authority in the country where you live or where the alleged breach occurred.

The BUSINESS will try to satisfy your request within 30 days. However, the deadline may be extended for specific reasons related to the specific legal right or the complexity of your request.

Restriction of access: in some cases we may not be able to provide access to all or some of your personal data due to legal requirements. If we deny your request for access, we will inform you of the reason for the denial.

Non-identification: in some cases, we may not be able to search for your personal data because of the identifiers you provide in your application. Two examples of personal data that we cannot search for when you provide your name and email address are: – data collected through browser cookies; – data collected by social networks if you have posted a comment under a pseudonym that is not known to us.

In such cases, where we cannot identify you as a data subject, we are unable to comply with your request to exercise your legal rights as described in this article, unless you provide us with additional information that allows us to identify you.

Exercise your legal rights: In order to exercise your legal rights, please contact us in writing, by email.

Διατήρηση των προσωπικών δεδομένων

The BUSINESS will generally delete the personal data it collects if it is no longer necessary to achieve the purposes for which it was originally collected. However, it may be required to store users’ personal data for a longer period of time due to legal requirements.

In addition, it will not delete all personal data if the user has requested not to be contacted in the future, as it keeps a record of people who do not wish to be contacted in the future (e.g. via group emails).