Privacy and Data Protection Policy

 

By purchasing a product from the online store, the user expresses his will and approval for the processing of his data by the administrator in order to complete the transaction. This data is objectively and legally necessary in order for the service provided to function.

When the user is in the process of ordering a product from the website, he will be asked to fill in the necessary fields in the digital order form. This data will be processed by the administrator in order to complete the purchase. During this process, various operations of processing the Customer data will be performed, such as e.g., collect, register, organize, correct, save, customize, modify, retrieve, retrieve information. 

The website uses automated means to complete the order and provide the service. Through these automated means, the Company can make decisions faster, with greater accuracy, transparency and consistency. However, in these cases, regular relevant inspections are carried out by competent employees of the online store.

For the purpose of completing the order, the website collects data that includes, name, surname, shipping address of the order as well as that of the billing, date of birth, e-mail address and username of each user. It can also collect other communication data such as e.g., IP address which are technically necessary for the user to navigate the website and / or to make purchases.

The online store retains user data for as long as the contractual relationship with the user lasts. For users who have registered on the website, this data is stored for as long as the user has an active account. Some of the user data is stored for a longer period of time when required for legal and / or tax reasons. This information includes the username, the date of purchase, the billing address, and the product or service purchased.

In case the user of the website – consumer chooses to send the products to an address of his choice, it is necessary to disclose the necessary information to the courier company (name, address, phone), in order to complete the execution of the order.

The website operates in strict compliance with all modern data processing methods (encryption, anonymization) as well as organizational measures in order to achieve data security.

User Rights

The User of the website may exercise, as the case may be, the following rights:

  • the right of access (to find out what data the Company processes, for what reason and their recipients),
  • the right of correction (to correct any deficiencies or inaccuracies in the data),
  • the right to delete / the right to be forgotten (deletion from the Company’s files, but if their processing is no longer necessary),
  • the right to restrict processing (in case of questioning the accuracy of the data, etc.),
  • the right of portability (for the Customer to receive his data in a structured and commonly used format).

These rights are exercised free of charge for the Customer, by sending a relevant letter or email to the Data Protection Officer, unless they are repeated frequently and due to volume have administrative costs for the Company, in which case the Customer will be charged with the relevant costs. If the User exercises any of these rights, the Company will take all possible measures to satisfy his request within thirty (30) days of receiving the relevant request, after informing the administrator either of his satisfaction or of the objective reasons that impede his satisfaction.

Third Party Data Processing

The Administrator, as the controller, uses only the processors who provide sufficient assurances for the implementation of appropriate technical and organizational measures, so that the processing meets the requirements of EU Regulation 2016/679 and any other applicable European and national legislation. and to ensure the protection of the data subject’s rights.

The processing by the processing operator, partner of the Administrator, is governed by a contract or other legal act governed by the law of the Union or of the Member State, which binds the processor in relation to the Administrator and determines the object and duration of the processing, the nature and purpose of the processing, the type of personal data and the categories of data subjects and the obligations and rights of the controller. That contract or other legal act provides in particular that the processor:

(a) process personal data only on the basis of registered orders of the Company as controller, including the transfer of personal data to a third country or international organization, unless required to do so by Union law or the law of the Member State in in which case the controller shall inform the controller of that legal requirement prior to processing, unless that law prohibits such information for serious reasons of public interest;

(b) ensure that persons empowered to process personal data have undertaken a commitment of confidentiality or are subject to an appropriate regulatory obligation of confidentiality;

(c) take all necessary measures under Article 32 of EU Regulation 2016/679;

(d) comply with the conditions set out above for the recruitment of another processor;

(e) take into account the nature of the processing and assist the controller with the appropriate technical and organizational measures, as far as possible, in fulfilling the controller’s obligation to respond to requests for the exercise of EU Regulation 2016/679 rights of the data subject,

(f) assist the controller in ensuring compliance with the obligations arising from Articles 32 to 36 of Regulation 2016/679, taking into account the nature of the processing and the information available to the controller;

(g) at the discretion of the controller, delete or return all personal data to the controller after the end of the processing services and delete the existing copies, unless Union or Member State law requires the storage of personal data,

(h) make available to the controller all necessary information to demonstrate compliance with the obligations laid down in this Article and to enable and facilitate controls, including inspections, carried out by the controller or another controller designated by the controller.

With regard to point (h) of the first subparagraph, the controller shall immediately inform the controller if, in his view, any order infringes this Regulation or other Union or national data protection provisions.

When the controller hires another executor to carry out specific processing activities on behalf of the Company as the controller, the same data protection obligations as provided in the contract or other legal act between the Company as the controller and the processor , as provided for in paragraph 3, shall be imposed on the other executor by contract or other legal act in accordance with Union or Member State law, in particular to provide sufficient assurances that appropriate meets the requirements of this Regulation. When the other executor fails to meet his data protection obligations, the original executor remains fully accountable to the Company as the controller for the fulfillment of the other executor’s obligations.

Submission of objections and requests by Users

The user can contact the Data Protection Officer for any issue related to the processing of his data. The contact details of the controller are as follows:

ZYGOGIANNI KONSTANTINA (NTINA)

Contact Phones: 2130401160

Cookies

Cookies are small text files that a website stores on your computer or mobile device when you visit it.

  • Promotional website cookies are cookies placed by the website you are visiting. They can only be read by this site. In addition, the website may use external services, which also place their own cookies, the so-called third-party cookies.
  • Permanent cookies are cookies that are stored on your computer and are not automatically deleted as soon as you close your browser, unlike session cookies, which are deleted as soon as you close your browser.

Every time a user visits the website he will be asked to accept or reject the cookies. By storing a user’s cookies, our website memorizes his preferences in order to be able to make suggestions to the user for new products that he may be interested in, to display ads on social media. Thus, the user is given the opportunity to choose from a new range of products that he may not have known, to be informed about offers, etc.

Cookies may also be used to collect anonymous statistics relating to browsing experience on Commission websites.

The 3 types of cookies of the promoted website that we use have as purpose:

  • storing visitors’ preferences
  • improving the functionality of our sites
  • the collection of analytical data (on user behavior)

Visitor preferences cookies

These are posted by us and can only be read by us. Memorize the following:

  • if you have accepted (or rejected) the website’s cookie policy
  • if you have already responded to the pop-up that asks you to complete our survey (about how useful the site content was) so that you are not asked again

Functional cookies

For the operation of some websites, it is necessary to include certain cookies. In this case, your consent is not required. Particularly:

  • authentication cookies
  • technical cookies required by some IT systems

Identification cookies

These are saved when you link to the website using your membership information. By doing so, you accept the respective privacy policy.

Analysis cookies

We use these purely in the context of internal research into ways to improve the service we provide to all users.

Cookies simply evaluate the way you interact with our website – as an anonymous user (the data collected does not personally identify you).

Also, this data is not disclosed to third parties nor is it used for any other purpose. The anonymous statistics can be disclosed to communication contractors who have entered into a contractual agreement with the Administrator. However, you have the right to refuse this type of cookie.

Promotion or Marketing

Promotion cookies are used to “serve” ads, more relevant to you and your interests. They are also used to send targeted advertising, in order to reduce the mass of unwanted and useless advertising messages.

Third party cookies

Our website displays content from external providers, e.g., YouTube, Facebook and Twitter. In order to view third party content, you must first accept the terms and conditions set by them. Among them is their cookie policy, which is beyond our control. However, if you do not display the specific content, no third-party cookies are placed on your device.

These third-party services are beyond the control of the Administrator. Providers may at any time change the terms of use, purpose and use of cookies, etc.