POLICY ON THE PROTECTION OF PERSONAL DATA
1. In general
In compliance with the provisions of the European Regulation on the Protection of Personal Data and the relevant Greek legislation (as amended and in force), the COMPANY manages the personal data which are submitted by the USER with the utmost care, ensuring in any case their protection and privacy.
The USER may browse into the website without being asked of any personal information from the COMPANY, unless expressly otherwise informed by the COMPANY. The COMPANY collects personal data that are disclosed only when the USER is registered at its services, as well as when they proceed to an order as an unregistered USER. In any case, these information are considered as necessary to perform the online purchase and the relevant USER’s update on the proceedings.
2. In which cases are the data collected
The COMPANY collects five types of information about the users: (1) data provided by the USER when registered as an REGISTERED USER, (2) data provided by the USER in order for the COMPANY to execute their order, (3) data provided by the USER in order to participate in competitions (4) data provided by the USER for telephone and Internet service’s activations, (5) data that the user gives when connecting through another platform (ios, android, Facebook, Google). When completing any order form on the website, the USER will be asked for their name, address, postal code of their area, e-mail address, telephone, credit card details and payment method. In addition, more specific information may be required, such as an order's delivery or delivery details, pricing details, or details on an offer. The COMPANY makes use of those data provided by the USER while completing their e-order’s form, in order to contact him/her regarding (i) the order’s delivery in their place, (ii) for customer’s confirmation and identification in every necessary case, (iii) for COMPANY’s new or alternative products offered (iv) COMPANY’s special offers (v) receipt of gifts after a competition.
3. Data’s Use
4. Data’s use for advertising purposes
In order to continuously improve and enhance the COMPANY’s services, e-mail marketing messages related to the COMPANY may be sent to the USER, which may be of their interest. The USER can choose the types of notifications they want to receive at any time by updating their email preferences. Sending sms to the mobile phone number which was declared during the USER’s order, is only to inform them about the progress of their order.
The COMPANY will not use the USER's data for advertising purposes unless the USER has given their explicit and free consent. With regard to existing customers, COMPANY may use the email address received from the USER with an existing customer relationship to provide them with marketing materials related to similar products or services that they have previously requested, used or you may be interested.
The USER can be deleted at any time or alternatively, they may choose through their account whether or not to receive promotional / promotional material via email or sms. It may also oppose this use at the time of collection and every time they send a message. In order to stop receiving emails for marketing purposes, the USER is proposed to follow the instructions in the e-mail received.
5. Legal obligations
THE COMPANY may need to use and maintain personal data for legal and compliance purposes such as the prevention, detection, or investigation of a crime, prevention of loss, fraud or any other misuse of its services and IT systems. The USER's personal data may also be used by the COMPANY for internal and external audit requirements, information security purposes, or to protect or enforce its rights, privacy, security, property or other persons.
The COMPANY may collect USER'S identification data using certain technologies such as cookies. Cookies are small text files that are sent and stored on the USER's hard disk, allowing websites [such as the present] to operate seamlessly and without technical abnormalities, to collect multiple USER options, to identify frequent users, to facilitate their access, and to collect data for the purpose of improving the content of the site. Cookies do not cause damage to users' computers or to files stored on them. Cookies are used by the COMPANY to provide information to the USER, to process orders, and to allow advertising and educational content related to his / her interests and needs. They are absolutely necessary for the site to function properly and without interference, while it is explicitly stated that no access is gained to any document or file from the USER's computer.
The Cookies’s categories are the following:
- Necessary Cookies, which are necessary for the proper website’s operation and the execution of its basic functions; without their use, the COMPANY can not offer the proper functioning of the website.
- Function Cookies, which remember the USER's preferences while browsing, so that the COMPANY can propose the appropriate products based on the USER’s needs.
- Performance cookies. Performance cookies collect information about the way the visitors use the website. They allow the COMPANY to see which pages are the most visited, inform the COMPANY in case they encounter a problem while navigating, etc. These cookies do not collect information that identifies the visitor as the information is aggregated and therefore anonymous. They are only used to improve the way the site works.
- Advertising Cookies. These cookies are used to provide ads related to the USER and their interests. They are also used to send ads or offers that meet their needs best, thus limiting unwanted and meaningless promotional messages. They also help the COMPANY to measure the effectiveness of its advertising campaigns.
- Cookies Analytics. It is a subset of the Function Cookies and provides the COMPANY the ability to evaluate the effectiveness of the website’s various functions, thereby continuously improving the experience offered to USERS.
The site may use Google Analytics features for display ads (e.g., remarketing, Google Display Network display reports, etc.). Using Ad Settings, USERS can opt out of Google Analytics for display ads and also adjust ads from Google Display Network.
Third-party advertisers and other companies cooperating with the COMPANY cooperates may use their own Cookies to collect information relating to the USER's activities on this site. These cookies are not controlled by the COMPANY.
This website may contain links or websites’ hyperlinks non related to the COMPANY. These websites may have their own privacy terms and conditions for which the COMPANY has no responsibility.
7. Processing of children's personal data
The COMPANY will not collect or process personal data of children under the age of 16 unless a parental consent has been given in accordance with applicable local law. If the COMPANY realizes that a child's personal data was collected in error, they will be deleted without undue delay.
8. Processing sensitive data
In some cases, COMPANY may process special categories of personal data relating to the USER ("sensitive data"). Sensitive data defines personal data that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, participation in trade unions, genetic data, biometric data to identify a natural person, health or sexual life, or sexual orientation. For example, the COMPANY may process sensitive data that the USER has made public. The COMPANY may also process sensitive data, where appropriate, to support, exercise or defend legal claims. The COMPANY may also process the USER’s sensitive data if they has freely given their explicit and separate consent in a specific context for a particular purpose.
9. Correction, Modification or Deletion of Information/Data
10. USER'S rights
As a data subject, the USER has specific legal rights regarding the personal data collected by him/her. THE COMPANY will respect its rights and deal adequately with their concerns. The following list contains information about the USER’s legal rights of arising from applicable data protection laws:
Right to withdraw the consent: Where processing of personal data is based on the USER’s consent, they may withdraw its consent at any time.
Right of rectification: The USER may request the Company to correct the inaccurate personal data concerning him or her. THE COMPANY makes reasonable efforts to maintain the personal data held or controlled by her and are used on a continuous basis, accurate, complete, current and related, based on the most up-to-date information available. The USER also has the ability to check and correct their personal data by entering his /her personal account.
Right of limitation/restriction: The USER hall have the right to obtain from the controller restriction of processing where one of the following applies:
(i) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
(ii) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
(iii) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
(iv) If the USER has objected to the processing for the period the COMPANY verifies whether its legitimate interests override their own.
Right of access: The USER may request information about the personal data the Company holds, including information about the categories of personal data in its possession, process or control, for the purpose they are used, from who they were collected (if not directly by the USER) and to whom they have been disclosed etc. The USER may receive from the COMPANY without charge a copy of their personal data. THE COMPANY reserves the right to charge a reasonable fee for any further copies that may be requested.
Right of data portability: Based on a USER’s request, the COMPANY will transfer their data to another controller if technically feasible, provided that the processing is based on the consent of the USER or is necessary for the performance of a contract. The USER, instead of receiving a copy of his or her personal data, he/she may request the COMPANY to transfer the data to another controller, which will be directed to it directly by the USER.
Right to erasure: The USER shall have the right to obtain from the COMPANY the erasure of personal data concerning him or her without undue delay in the following cases:
(i) personal data are no longer necessary in relation to the purposes for which they were collected or processed,
(ii) the USER has the right to object to further processing of his or her personal data and exercises it,
(iii) the processing is based on the consent of the USER, withdraws its consent and there is no other legal basis for processing,
(iv) the personal data has been illegally processed unless processing is necessary,
(v) Compliance with a legal obligation that requires processing by the COMPANY,
(vi) in particular for legal obligations to perform a task; and
(vii) for the support, exercise or defense of legal claims.
Right to οbject: The USER may at any time object to the processing of his/hers personal data because of their particular situation, provided that the processing is not based on their own consent but in the Company's legitimate interest or in the legitimate interest of third parties. In this case, the COMPANY will no longer process the personal data of the USER unless overriding legitimate reasons can demonstrated and a superior interest in processing or supporting, exercising or defending legal claims. If the USER opposes the processing, kindly specify whether the deletion of their personal data or limit the processing by the COMPANY is desired.
Right to lodge a Complaint with a supervisory authority: In the event of a suspected violation of applicable privacy laws, the USER may lodge a complaint with the Data Protection Supervisory Authority in particular in the place of his or her habitual residence, place of work or place of the alleged infringement.
11. Special highlights
Timeframe: The COMPANY will attempt to satisfy any relevant USER’s request within 30 days. However, the time limit may be extended for specific reasons relating to the specific legal entitlement or complexity of the request.
Restriction of access: In some cases the COMPANY may not be able to provide access to all or some of the USER's personal data due to legal provisions. If the COMPANY refuses the USER's request for access, he/she will be informed on the reasons of this refusal.
Non-recognition: In some cases, COMPANY may not be able to search for the USER's personal data due to the identifiers they provide in their application. In such cases, where the COMPANY cannot identify the USER as the data subject, he is unable to comply with his request to perform his / her legal rights as described in this article unless provided by the USER for additional information which allow it to be identified.
Exercise of the USER’s legal rights: In order for the USER to exercise their legal rights, please contact us in writing by e-mail. You can also contact the COMPANY Data Protection Officer (DPO) directly at 211-7707055.
12. Personal data retention
Generally, the COMPANY will delete the personal data collected from the USER if it is no longer necessary to achieve the purposes for which they were originally collected. However, we may be asked to store personal data for a certain time period because of legal provisions.
The USER may address questions on data protection and any relevant requests for the exercise of their legitimate rights to the COMPANY’s Data Protection Officer (DPO) at 211-7707055.