PERSONAL DATA PROTECTION POLICY
1 Introduction
This privacy policy includes the ways in which the «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ». processes information that can be used to directly or indirectly identify an individual ("Personal Data") collected through the use of its website «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» and its contact form or order form. In any case, «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ». reserves the right to change the terms of protection of personal data after informing the visitors/users and within the existing or potential legal framework. If a visitor/user does not agree with the personal data protection conditions provided for in this section, he/she must not use the services of ellinikinostimia.com. You can browse our online store without providing any of your personal information. Your personal information will only be requested when you wish to contact us «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» or to order.
Our website is in compliance with the General Regulation 2016/679 of the European Parliament and of the Council, of April 27, 2016, for the protection of natural persons against the Processing of personal data and for the free movement of such data ("GDPR Regulation "), which is a directly binding legislative act.The GDPR Regulation creates some new rights for natural persons and strengthens some of the rights that already existed under Directive 95/46/EC. Directive 95/46/EC will be repealed on May 25, 2018, when the GDPR comes into effect. In addition, our website is in absolute compliance with Law 4624/2019 (Government Gazette A 137/29-8-2019), which has entered into force in Greece for the Protection of Personal Data.
In the text of this policy, "User" means the person who uses the services of its website «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ», "Visitor" means the person who visits our website (www.ellinikinostimia.com), as "Customer" the persons who contract with the «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» for the purchase of its products.
Any processing of personal data carried out by «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» is conducted in such a way as to ensure its confidentiality. All information is stored securely and access to it is allowed only to authorized personnel. THE «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» implements and develops the necessary technical and organizational measures to protect the Personal Data of Users, Visitors and Customers (all of them understood as "Subjects" of personal data) from unauthorized or illegal processing and use, as well as against possible loss , destruction, damage, theft or illegal access.
2. Collection and Use of Personal Data
2.1. The legal basis for the use of your personal data
The «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» collects only those personal data that are necessary in order to satisfy your requests. Whenever additional, optional information is sought, you will be informed thereof at the time of collection of such data, and your prior consent to processing will be required. The current legal framework allows us to process personal data, only if we have the legal basis to do so. Therefore, when we process your personal data, we rely on one of the following processing cases:
Giving consent: Your consent may occasionally be requested in order for us to process some of your personal data. The processing of your data will be carried out in this way only if you expressly agree to this (Article 6, Paragraph 1a of the GDPR Regulation).
Execution of contract: In cases where the processing of your personal data is necessary for the fulfillment of our obligations arising from the contract concluded between us (Article 6 paragraph 1b of the GDPR Regulation).
Legal obligation: This happens in cases where we are required to process your personal data in order to comply with a legal obligation, such as indicatively: a) to keep records for tax purposes, b) to provide information to a public body, c) to comply with checks of some legislative or regulatory provision a court decision (Article 6 paragraph 1c of the GDPR Regulation).
Protection of your vital interests: This happens in cases where the processing of your personal data is necessary to protect your vital interests (Article 6 paragraph 1d of the GDPR Regulation).
Fulfillment of a duty performed in the public interest or in the exercise of public authority: This happens in cases where the processing of your personal data is necessary for the fulfillment of a task performed in the public interest (Article 6 paragraph 1e of the GDPR Regulation).
Legal interest: We may process your personal data in cases where this processing is a legitimate interest of our company during the execution of a legal activity, in order to ensure the continuity of this activity. This processing, of course, will not exceed your interests, freedoms and fundamental rights (Article 6 paragraph 1 f of the GDPR Regulation).
The «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» δεν επεξεργάζεται δεδομένα σας προσωπικού χαρακτήρα, όπως δεδομένα προσωπικού χαρακτήρα που αφορούν την φυλή ενός προσώπου, την εθνικότητά του, τις πολιτικές του πεποιθήσεις, την συμμετοχή του σε συνδικαλιστικές οργανώσεις, τις θρησκευτικές του πεποιθήσεις, τις φιλοσοφικές του πεποιθήσεις την φυσική ή πνευματική του υγεία, την σεξουαλική του ζωή και προσανατολισμό, δεδομένα σχετικά με ποινικές καταδίκες και αξιόποινες πράξεις. Οι ακόλουθες ενότητες καλύπτουν τις ιδιαιτερότητες καθεμιάς από τις προαναφερθείσες ομάδες από τις οποίες συλλέγονται τα προσωπικά δεδομένα.
2.2. Collection of Data Subjects
The «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» collects the personal data of the Subjects, through the Customer service call center, its External Partners, as well as through its website. The following sections cover the Subjects whose personal data is collected. THE «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» may collect and process personal data for Users through the contact form, Website Visitors, Customers through the order form and its External Partners. In case required by the applicable legal framework, we will ask for your express consent to process your personal data, as it is collected by «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ».
Your personal data processed by «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» are the following:
- User Personal Data: Name, landline number, mobile phone number, residential address, IP address, email address.
- Personal Data of Visitors: IP address, cookies
- Customer Personal Data: Name, home address, billing address, Passport Number, landline phone number, mobile phone number and email address.
3. Transmission of Data
The «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» does not disclose your personal data to third parties outside the European Union in countries where there is no adequate data protection regime. However, in the event that such a data transfer needs to take place, the «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» will take all reasonable steps to ensure that your data is treated as securely as it is within the EU/EEA and in accordance with this Policy and applicable law. Furthermore, the «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» will update the current Policy to cover cross-border data transfer and related safeguards for the privacy of Users of its platform.
4. Data retention period
The «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» will not retain Subjects' data beyond the time necessary to fulfill the purposes for which they were collected or as required by applicable law. In case of entering into a sales contract with «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» the latter keeps its client's personal data until the expiry of the statutory general limitation period for claims, i.e. for a period of up to twenty (20) years from the expiry of the relevant contracts in any way. If, by the end of the above-mentioned time, legal proceedings are in progress with the «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» that directly or indirectly concern the Clients, the above data retention period will be extended until the issuance of an irrevocable court decision. In some cases, specific personal information may be retained beyond this period of time, due to possible legal obligations, legitimate interests of «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» etc. Such cases are, indicatively, those related to each branch of law (tax, civil, criminal, etc. In the event that the transaction relationship is not established, the personal data of the User or Customer will be kept for a period of up to five (5) years from collection thereof. In the event that a shorter or longer data retention period is provided for by law, the above data retention period will be reduced or increased accordingly. «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» may collect, record and process the data of its website Visitors. We may record your IP address and use cookies.
5. Use of the Website
According to the specific provisions of article 8 of the Regulation, minors under the age of fifteen (15) are prohibited from informing the «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» through its website their personal data, without the prior consent of their guardian. We ask these persons not to submit information to us. In the event that the Users of the website fall into the above category and continue to communicate their personal data to us through our website, it will be considered by the «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» that these persons have obtained the prior consent of their guardian.
6. The Rights of Subjects
The new GDPR Regulation provides you with the following rights regarding the processing of your personal data:
Access Right: You can request access to your personal data. Thus you are provided with the possibility to receive a copy/s of your personal data held by «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ».
Right of Correction: You can request correction of your personal data. In this way, you are provided with the possibility to correct any incomplete or inaccurate data of yours that the «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ». In this case we will need to verify the accuracy of the new data you will provide us.
Right to Erasure: You can request the deletion of your personal data. This enables you to request that we delete or remove personal data where there is no reason for us to continue processing it.
Right to Restriction of Processing: You can request restriction of the processing of your personal data.
Right to Object: You can object to the processing of your personal data, at any time, in cases where the processing of your data is based on the fulfillment of a duty performed in the public interest or in the exercise of public authority (case e of paragraph 1 of article 6 of the Regulation) , or if the processing fulfills the purposes of its legitimate interests «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» or a third party (case f of paragraph 1 of article 6 of the Regulation).
Portability Right: You can request the transfer of your personal data to you or to a third party. We will provide you or your chosen third party with your personal data in a commonly used, machine-readable format. Please note that this right of yours only applies to automated information that you initially gave us your consent to use, or whenever we used that information to perform a contract with you.
Right to Withdraw Consent: You can withdraw your consent at any time, in cases where you have already provided your consent for the processing of your personal data. However, this will not affect the lawfulness of any processing that took place prior to the withdrawal of your consent. If you withdraw your consent, we may «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» not be able to offer you some of its products or services. You will be informed about this at the time of submitting your request.
Manual decision making: Automated decision making occurs when an electronic system uses personal data to make a decision without human intervention. In this case you have the right not to be subject to decisions made solely through automated processing including profiling which produces legal effects concerning you or which significantly affect you in a similar way, unless you provide us with your consent, or it is necessary to enter into or perform a contract between you or as otherwise permitted by law. You also have the right to challenge decisions made about you through the above process.
The «ΣΥΜΑΝΤΙΔΟΥ ΑΓΑΠΗ» respects the rights you have in your personal data and facilitates your exercise of them. You can direct any request, query or complaint regarding your personal data in writing by contacting 2391053961 or by email at ellinikinostimia@hotmail.gr.
In any case, if you feel that the protection of your personal data has been violated in any way, you have the right to submit a written complaint to the Hellenic Personal Data Protection Authority (Kifisias 1-3, P.O. 11523, Athens) or electronically (www.dpa.gr).