For us, maintaining your privacy online is considered an obvious right and, as a Data Controller, in the context of the General Data Protection Regulation 679/2016 (GDPR), we are committed to ensuring the privacy of your personal data that we collect during our commercial transactions.
The processing and protection of your personal data is subject to the terms of the Privacy Policy, as well as to the provisions of the GDPR, but also to the other provisions of national, Community and international law on the protection of individuals with regard to the processing of personal data, as applicable.
WHAT DOES THE GDPR DEFINE AS PERSONAL DATA?
Any information that can be used to directly or indirectly identify a natural person, such as name, identification number, location data, online identifier or one or more factors related to the physical, genetic, psychological, economic, cultural or social identity of that person.
WHAT DATA DO WE COLLECT FROM YOU AND FOR WHAT PURPOSE?
The personal data we collect when you browse our site, and when you use the features offered by our site, include:
Data that you provide us when registering or filling in the contact form: full name and e-mail account, as well as address and telephone numbers and
Technical data, such as your IP address and the browser you use when visiting our website.
By registering on our site you consent to the general terms of use and modification as described herein.
CONTRIBUTION
In cases where we need to process your personal data on the basis of the consent granted by you, a copy of the granted consent form with all the information contained therein is kept as proof of its granting and for your convenience, in the event of a request to withdraw it. Consent shall be given for clear and distinct processing purposes, which have been made known to you in advance and of which you are fully aware at the time you give it.
YOUR RIGHTS
As data subjects of the data we process, you can access the file of personal data we have collected about you. You can also request the deletion or rectification or limitation of the processing or object to the processing of such data, except in cases where we are obliged to keep your data for administrative, legal or security reasons. In addition, as a data subject of personal data, you have the right to withdraw your consent to the processing of your data.
Briefly, your rights over your personal data, according to the GDPR, are as follows:
Right of access
Right of access to your personal data.Right of rectification
Right of access Right of rectification Right of erasure (“Right to be forgotten”)
Right to erasure (Right to be forgotten) Right to restriction of processing
Right to data portability Right to be deleted (right to be deleted) Right to data portability (right to erasure) Right to restriction of use
Right to object
Right to object to automated individual decision-making, including profiling
SUBMISSION OF APPLICATIONS – EXERCISE OF RIGHTS
In order to exercise your rights as set out below, you may submit a request. We undertake to respond and provide you with the relevant information without delay, within one month of acknowledged receipt of the request.
This period may be extended by a further two months if necessary, taking into account the complexity of the request and the number of requests. In this case, you will be informed within one month of the acknowledged receipt of the request.
In the event of failure to reply within the timeframe foreseen, you will be informed of the reasons for this within one month of the acknowledged receipt of the request.
Requests are checked in terms of their size and repeatability per requester for possible abuse, in order to provide the rights of Art. 12 par. 3 of the GDPR.
HOW DO WE PROCESS YOUR PERSONAL DATA?
In compliance with the requirements of the GDPR, we process your personal data in a fair and transparent manner, ensuring the lawfulness, objectivity and transparency of the processing.
We collect data for specified, explicit and legitimate purposes and do not process it in a way that is incompatible with those purposes.
We collect the data that is necessary and appropriate for the purposes of processing and only the data that we need.
We keep the data up to date and ensure its accuracy or delete and correct it when it is inaccurate in relation to the purpose of the processing.
We keep the data for as long as the purpose of the processing requires and then ensure their safe destruction.
We take care to protect personal data from loss, misuse and abuse, unauthorised access and leakage, ensuring that appropriate technical and organisational measures are in place to protect it.
LEGAL BASIS OF THE PROCESSING
For all of the processing purposes described above, the legal basis for the processing is a legal obligation: the processing of your personal data is necessary for compliance with a legal obligation, i.e. an obligation arising from the law. Failure to process the necessary data will result in a breach of the law and the corresponding sanctions, as well as in an inadequate service to you.
In particular, the purpose and functions performed by the company are determined by the relevant legislation and by individual regulations, provisions and circulars issued, in order to implement it, and the way in which it performs them, with all the necessary actions taken in execution thereof, is determined and performed in application of the relevant legislation.
SHARED USE OF YOUR PERSONAL DATA
Your personal data is treated with complete confidentiality and security and is not shared further, except in cases where it is necessary to share it.
TIME OF KEEPING YOUR DATA
Your personal data is kept for no longer than the reasonable period of time required for the purpose of the individual processing operations carried out on it and there are certain criteria that determine this. In cases where your personal data is processed on the basis of a legal obligation in accordance with the above, the retention period is determined on the basis of the requirements of the law, the period of time during which checks can be carried out by the competent authorities, the statute of limitations, and your legitimate interests.
In cases where your personal data will be processed on the basis of your consent, explicit or implicit, the retention period is determined by the possibility of withdrawing it. As soon as you withdraw your consent, the relevant personal data will also be deleted.
FURTHER TREATMENT
We reserve the right to modify this Privacy Policy whenever there is a change in its content that requires disclosure. If the need arises for us to use your personal data for a new purpose that is not covered by this Privacy Policy, then we will re-notify you of the Privacy Policy prior to the start of processing, which will include the new use and set out the relevant purposes and conditions of processing. Where and when necessary, your consent to the new processing will be sought in advance.
OTHER TERMS
The personal data relating to this, we collect from you, the data subjects.
As the controller of your data, we declare responsibly that we have taken all necessary organisational measures to protect your personal data and maintain a comprehensive security plan in accordance with the requirements of the GDPR.
The collection and processing of personal data under this Privacy Policy is carried out by legitimate means and in a manner that ensures respect for privacy, personality and human dignity.
The observance of the Privacy Policy shall be carried out in good faith and in accordance with commercial morality and with the free will of the parties, with the aim of good and efficient cooperation with the protection of all.
In case of inability to exercise the rights granted to you by the GDPR, and more generally, in case of questions, clarifications and complaints, you have the right to contact the Data Protection Authority for support and assistance.