Compliance of the COMPANY with the General Data Protection Regulation (GDPR)
The COMPANY created this website with the sole purpose of serving its customers. The website www___________________ is simple and friendly to use and has been designed to meet the specific needs of each user/customer. In order to achieve the best service for users/customers, it is important for the user/customer to understand that they must provide specific information regarding the processing of the order, which is kept by the COMPANY.
This Privacy Statement and the attached Terms and Conditions of Use of this website describe the method of data collection from the website www________________, the use of this data and the terms and conditions of use of this website. This Privacy Statement refers exclusively to the personal data of users/customers, which are provided during orders on this website.
The COMPANY guarantees that it has taken the necessary technical measures to protect the data of www______________ users.
General information
The information that has been voluntarily provided by the users/customers of the website is used by the COMPANY, in order for them to have direct and meaningful communication with the COMPANY, to be provided with answers to specific questions they ask and finally to be served and their orders executed . The information collected by the COMPANY through the website www_______________ is intended to measure its traffic, determine customer requirements for more products and to facilitate transactions and communication with the COMPANY. This data is processed by the COMPANY in accordance with the provisions of the General Regulation on the Protection of Personal Data (GDPR 2016/679), and other specific national and European legislation for certain sectors, the currently applicable Greek legislation on the protection of personal data, as well as on the personal data protection and protection of private life in the sector of electronic communications (Law 3471/2006, as applicable) and the decisions of the Personal Data Protection Authority (PDPA). The COMPANY has adapted to the GDPR framework.
With regard to the credit or debit card details, these are registered directly in a secure environment of the cooperating financial institution that has undertaken the routing of the cards and are deleted from the COMPANY’s database, immediately after the completion of the order, thus ensuring an even greater security level.
Data collection
The COMPANY has designed its website so that its users/customers can visit it without having to reveal their identity unless they wish to do so. Visitors to the website www_______________ are requested to provide their personal data only if they want to order product(s), to register on the website and/or send an email to the COMPANY. By registring their personal data, the users/customers consent to this data to be used by COMPANY employees for the reasons mentioned above. The COMPANY requires its employees and the maintainers of its website to provide its users/customers with the level of security referred to in this Privacy Statement.
In order to process orders and to participate in any promotional activity of the COMPANY the collection of personal information is required, for the delivery or reservation of an order. Any supporting document and document that certifies and declares the customer’s identity remains strictly confidential and is checked only by the responsible department of www________________. The submission of personal data by users/customers assumes consent that such data will be used by the COMPANY’s employees for the reasons mentioned above. Under no circumstances may the COMPANY share personal information with others without the prior consent of their representatives, unless this is required through legal means.
Information Usage. www________________ collects five (5) types of information about users: (1) information that the user provides us with when registering as a customer, (2) information that the user provides us with in order to carry out his order from www________________ , (3) data that the user provides us with in order to enter contests that take place from time to time, (4) data that the user provides us with for the activation of telephone and internet services, (5) data that the user provides us with when connecting through another platform (ios applications, android, Facebook, Google etc). When filling any order form on our website, you will be asked for your full name, address, postal code of your area, email address, telephone number, credit/debit card details, payment method. In addition, you may be asked for more specific information, such as shipping and delivery information for an order, billing information or details about an offer you have requested. www________________ makes use of the information you provide us with during the electronic submission of the form, in order to contact you regarding (i) the delivery of the order to your location, (ii) for confirmation and identification of the customer when necessary, (iii) for new or alternative products offered by www________________ (iv) special offers and promotional activties of www________________ (v) activation of telephone or internet services, (vi) receipt of gifts after a competition. You may choose whether or not to receive such communications by sending your request via e-mail to ___________________.
Access to Information. Each order processing requires the collection of personal information, to deliver or reserve an order. Also, the use of a credit card, for the charge of which identification documents of the legal owner are required the first and only time, is ensured in every case. Any supporting document that certifies and declares the customer’s identity remains strictly confidential and is checked only by the responsible department of www________________. Your submission of your personal data means that you consent to the use of this data by the employees of www________________ for the reasons mentioned above.
It is expressly clarified that under specific conditions permitted or imposed by law or based on a court decision, the COMPANY may share with third parties personal data that has been collected online without the prior consent of their entity. (from a court decision, prosecutor’s order, etc.)
Use of personal data
We will use your personal data for the reasons described above. We do not collect or process more or other types of personal data than is necessary to fulfill the respective purpose. We will only use personal data as set out in this privacy policy, unless you have specifically given your consent to another use of your personal data. If we intend to use your personal data that we process with your consent, for purposes other than those disclosed in that consent, we will inform you in advance and, in cases where the processing is based on your consent, we will use your personal data for a different purpose only with your permission.
Use of customer data for advertising purposes. To continually improve and enhance our services, we may send you COMPANY related email marketing messages that may be of interest to you. You can choose the types of communications you want to receive at any time by updating your email preferences. You can also unsubscribe at any time. The sending of sms to the mobile phone number, which you have provided us with during your order, is done in order to inform you about the progress of your order. From the account you have created on our website, you can choose whether or not you want to receive advertising/promotional material via sms.
Consent: We will not use your data for advertising purposes unless you have given your prior consent. However, for existing customers, we may use the email address we have received from you as part of our existing customer relationship to provide you with marketing materials related to similar products or services that you have previously requested, used or may be interested in. You may, however, object to this when the information is collected and every time a message is sent. In order to stop receiving marketing e-mails, please follow the instructions in the e-mail you receive.
Legal obligations and legal defense. We may need to use and retain personal data for legal and compliance reasons, such as preventing, detecting, or investigating a crime, preventing loss, fraud or any other misuse of our services and IT systems. We may also use your personal data for internal and external audit requirements, information security purposes, or to protect or exercise our rights, privacy, security, property, or those of others.
Processing of children’s personal data
The COMPANY will not collect or process personal data of children under the age of 18 unless parental consent has been provided, in accordance with applicable law. If we become aware that a child’s personal data has been collected by mistake, we will delete that data without delay. We expressly inform you that the use of the website is prohibited for users under the age of 18, as the products and services provided through www________________ mainly concern products whose consumption is prohibited for minors.
Processing of sensitive data
We may, in certain circumstances, process special categories of personal data about you (“sensitive data”). Sensitive data is defined as personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, membership in trade unions, genetic data, biometric data for the purpose of identifying a person, health or sex life or sexual orientation . For example, we may process sensitive data that you have made public. We may also process sensitive data, where applicable, to support, exercise or defend legal claims. We may also process your sensitive data if you have freely given your prior express consent, in a specific context for a specific purpose.
Correcting, Modifying or Deleting Information
www________________ allows its users to correct, change, complete or delete data and information submitted to www________________. If you choose to delete information, www________________ will act in order to delete that information from its records immediately. For the protection and security of the user www________________ will try to make sure that the person making the changes is indeed the same person as the user. To access, change or delete your personal data, to report problems regarding the operation of the website or to ask any question contact the COMPANY by e-mail at the email address ______________. Please note that we will do our best to protect your personal data, but protecting your password on our website depends on you.
Cookies
www________________ has the ability to use cookies as part of the facilitation and operation of its services. Cookies are small files (text files), which are sent and stored on the user’s computer, allowing websites such as www________________ to function seamlessly and without technical issues, to collect the multiple selections of the user, to recognize frequent users, to facilitate their access to it, and to collect data to improve the content of the website. Cookies do not cause damage to users’ computers or to the files stored on them. We use cookies to provide you with information and to process your orders, while they are automatically deleted each time you leave the website. Cookies are absolutely necessary for the website www________________ to function properly and seamlessly.
Your legal rights
As a data subject you have specific legal rights regarding the personal data we collect from you. The COMPANY will respect your rights and adequately address your concerns.
The following list contains information about your legal rights under applicable data protection laws:
Right to withdraw consent: Where the processing of personal data is based on your consent, you may withdraw this consent at any time.
Right to rectification: You can ask us to correct your personal data. We make reasonable efforts to keep your personal data in our possession or our control that are used on an ongoing basis, accurate, complete, current and relevant, based on the most recent information available to us. You also have the possibility to check and correct your personal data by logging into the personal account you have at www________________.
Right to restriction: You can request from us to restrict the processing of your personal data if:
– You dispute the accuracy of your personal data for the period it takes us to verify the accuracy,
– The processing is illegal and you request restriction of processing instead of deletion of your personal data,
– We no longer need your personal data, but you need it to support, exercise or defend legal claims,
– You object to processing for the period we verify whether our legitimate interests override yours.
Right of access: You can ask us for information about personal data we hold about you, including information about the categories of personal data we hold or control, what it is used for, where it was collected from, if not from you directly, and to whom they have been shared with, as the case may be. You can obtain from us free of charge a copy of the personal data we hold about you. We reserve the right to charge a reasonable fee for any further copies you may request from us.
Right to portability: Upon your request, we will transfer your data to another data controller, where this is technically possible, provided that the processing is based on your consent or is necessary for the implementation of a contract. Instead of receiving a copy of your personal data, you can ask us to transfer the data to another data controller, which you indicate to us, directly.
Right to erasure: You can request from us to erase your personal data where – your personal data is no longer necessary in relation to the purposes for which it was collected or processed – you have the right to object to further processing of your personal data and exercise this right – the processing is based on your consent, you withdraw your consent and there is no other legal basis for processing – your personal data has been processed unlawfully unless the processing is necessary – to comply with a legal obligation, which requires processing by us – in particular for legal duty commitments – to support, exercise or defend legal claims.
Right to object: You can object – at any time – to the processing of your personal data due in a particular situation, provided that the processing is not based on your consent but on our legitimate interest or on the legitimate interests of third parties. In this case we will no longer process your personal data, unless we can provide compelling legitimate reasons and an great interest to process or to support, exercise or defend legal claims. If you object to the processing, please specify whether you wish to delete your personal data or restrict the processing by us.
Right to file a complaint: In the event of an alleged violation of applicable privacy law, you may file a complaint with the data protection supervisory authority in the country where you live or in which the alleged violation occurred.
Please note:
Time period: We will try to fulfill your request within 30 days. However, the deadline may be extended for reasons related to a specific legal right or the complexity of your request.
Access limitation: In some cases we may not be able to provide access to all or some of your personal data based on statutory provisions. If we deny your request for access, we will inform you of the reason for this denial.
Non-identification: In some cases, we may not be able to retrieve your personal data because of the identifiers you provide in your application. Two examples of personal data that we cannot retrieve when you provide your name and email address are: data collected through browser cookies, data collected by social networks if you have posted a comment under a alias that is not known to us.
In such cases, where we cannot identify you as a data subject, we are unable to comply with your request to exercise your legal rights as described in this article, unless you provide us with additional information that allows you to be identified.
Exercising your legal rights: In order to exercise your legal rights, please contact us via email. You can also directly contact our Data Protection Officer at the email: ________________
Preservation of your personal data
In general, we will delete the personal data we collect from you if they are no longer necessary to achieve the purposes for which they were originally collected. However, we may be required to store your personal data for a longer period due to legal provisions.
In addition, we will not delete all of your personal data, if you have asked us not to contact you in the future. For this purpose, the COMPANY maintains records containing information about individuals who do not wish to be contacted in the future (e.g. via group e-mails). We categorize your requests as consent to store your personal data for the purposes of maintaining that particular record unless you instruct us otherwise.
Please direct any questions on the subject of data protection and any requests to exercise your legal rights to the data controller at www________________.
