DATA CONTROLLER
The company MARKIDOU EVANGELIA with distinctive title “evaaroma” (hereinafter referred to as “The Company”) with registered office at 18 Alexandrou Papanastasiou, Sindos, PO Box 57400, e-mail: [email protected] and legal representative Markidou Evangelia, is responsible for the processing of your data.
The Company has appointed a Personal Data Protection Officer and for any matter concerning your rights you can contact us at the e-mail: [email protected]
GENERAL PRINCIPLES REGARDING GDPR
The information you request from us as well as the information in this document is provided free of charge provided that it is reasonable, not excessive and not repetitive. Otherwise, the company may charge a corresponding cost or refuse to provide the information of your request.
If the company has doubts about your identity when submitting a request to exercise your rights, it may ask for more information to confirm your details and process your request.
The Company will respond to your above rights within a period of one (1) month from the submission of the request or in four (4) months in special cases (e.g. a complex request, a request of a high degree of difficulty, a large number of requests, etc. .). As long as the Company has legitimate reasons as defined in the General Data Protection Regulation (GDPR 2016/679), it has the possibility to refuse the provision of information. In the event of a longer delay than the one provided or if you consider that your right is being violated, you have the right to submit a complaint to the supervisory authority at the following details: Personal Data Authority, Kifisias 1-3, PO Box 115 23, Athens, e-mail: [email protected] , tel. 2106475600. You have the right to withdraw consent by submitting a request to the Personal Data Protection Officer at e-mail: [email protected]
The effective protection of personal data requires strengthening and the detailed definition of the rights of data subjects. The General Regulation on the Protection of Personal Data refers to the way of providing information in a “concise, transparent, comprehensible and easily accessible form” using clear and simple wording. The information can be provided either in writing or electronically.
PURPOSE OF DATA PROCESSING
Partners – Customers – Suppliers – Employees
For current customers, suppliers, partners of our company, the purpose of processing your data is only the execution of the contract between us and compliance with tax legislation. The legal basis is the execution of the contract between us and compliance with the text of the law. The retention period for your data is that defined by tax legislation, after which it will be deleted.
For users who register on our website, we also store the personal data they enter in their user profile. All users can view, edit or delete their personal data at any time (except for being able to change their username). The administrators of this website may also view and edit this information.
Prospective Partners – Customers – Suppliers
Regarding your prospective partners, customers, suppliers, we know that your personal data (name, phone, e-mail, address, etc.) which you have made available to our company through a digital or printed contact form, e-mail , telephone etc. purpose is to investigate the possibility of cooperation or transaction between us. Legal basis is the service of our company’s legal interest to enter into a commercial agreement with you. The data retention period is 12 months, after which it will be deleted.
Prospective Employees
For prospective employees, the purpose of receiving your CV is to evaluate your potential for employment by our company with your consent as a legal basis. The retention period is 6 months, after which they will be deleted.
Data transfer outside the company
Transferring your data outside the company is permitted if this is required by law (Labor Inspection, Insurance agencies, Tax Office, etc.). Also to PC and network technicians, PC software for the purpose of computer support of the company as well as to anyone collaborating with the company for its smooth operation (such as Accountants, Transport companies etc.)
RIGHTS
Right to information
You have the right to request information on the personal data we hold and have collected from you.
Right of access – rectification
Our company has the obligation, as long as it is requested, to give you access to the data we hold and which concern you, as well as to confirm whether or not your data is being processed, the purposes of the processing, the categories of data, the recipients, etc. a. You also have the right to request correction of the data in case they have been changed or entered incorrectly.
You retain the right to complain to the supervisory authority if the available information has not been made available by you yourself and you establish the existence of profiling and automated decision-making.
Right to be forgotten – deletion
It is one of the flags of the regulatory reform effort.
In the event that your personal data is not necessary for the purpose of their collection or you consider them illegal, you have the right to request their complete or partial deletion. The company within a period of one month or in four (4) months in special cases (e.g. a complex request, a request of a high degree of difficulty, a large number of requests, etc.) is obliged to respond to you regarding the progress of your request. In case of impossibility of deletion, you have the right to submit a complaint to the supervisory authority (Personal Data Authority, Kifissias 1-3, PO Box 115 23, Athens, e-mail: [email protected], tel. 2106475600) or to bring legal action.
In the event that you consider the processing of the data illegal but do not wish to delete it due to a possible legal claim, question the accuracy of your data or consider that your rights override the reasons for processing by the Company, you have the right to request the restriction of the processing of personal data you (quantitatively, temporally and in relation to the purpose of processing).
You have the possibility to object to the use of the processed data by the Company for the purposes of commercial promotion and especially the profiling related to commercial promotion.
Right of portability
You have the right to receive and transfer your data to a third party without any objection from the company as well as upon your request the possibility of direct transfer without your own mediation.
Data security guarantees
The Company takes all the necessary technical and organizational measures to protect your data as defined by law and exclusively for the above purposes.
The Company will not forward your personal data except in the cases required by law (Tax, Insurance agencies, etc.) and the support providers of the Company’s information systems.
What personal data do we collect and why?
The COMPANY collects your personal data under the terms of the law and only for the purpose of executing your transaction. Data is stored and kept in a secure location. Data kept in electronic form are kept on a company computer. Unauthorized persons cannot access the above parts. In the event that after the completion of your transaction you wish to delete your data, please send a request to the COMPANY
Making a Purchase
We collect information about you during the process of completing the order in our store.
What we collect and store
- The products you’ve seen: we’ll use this to show, for example, products you’ve seen recently.
- Location, IP address and browser type: we will use these for purposes such as calculating VAT and shipping costs.
- Shipping address: we will ask you to enter this address so that we can, for example, estimate shipping costs before you place an order and also to ship the order to you!
We will also use cookies to track the contents of the basket while you browse our website (see below).
When you purchase from us, we will ask you to provide information such as your name, billing address, shipping address, email address, phone number, credit card/payment information, and optional account information such as username and password. We will use this information for purposes such as:
- To send you information about your account and your order
- Responding to your requests, including returns and complaints
- Payment processing and fraud prevention
- Setting up your account for our store
- Complying with our legal obligations, such as calculating taxes
- Improving our store offerings
- To send you promotional messages if you choose to receive them
If you create an account, we will store your name, address, email and telephone number, which will be used for your future orders.
We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to retain it. For example, we will store order information for XXX years for tax and accounting purposes. This includes your name, email address, and billing and shipping addresses.
We will also store comments or reviews if you choose to leave them.
Who in our group has access
Our team members have access to the information you provide us. For example, both platform admins and store admins have access to:
Order details such as what was purchased, when it was purchased and where it should be shipped, too
Customer information, such as name, email address, and billing and shipping information.
Our team members have access to this information to help fulfill orders, process returns and support you.
Payments
We accept payments via PayPal. When processing payments, some of your data will be transferred to PayPal, including information needed to process or support the payment, such as the total purchase amount and billing information.
We accept payments via Credit and debit cards from Piraeus Bank. Payments are made by transfer to the Bank’s environment. For more information on the use of your personal data by Piraeus Bank, see here.
Who in our group has access
Our team members have access to the information you provide us. For example, both platform admins and store admins have access to:
Order details such as what was purchased, when it was purchased and where it should be shipped, too
Customer information, such as name, email address, and billing and shipping information.
Our team members have access to this information to help fulfill orders, process returns and support you.
Payments
We accept payments via PayPal. When processing payments, some of your data will be transferred to PayPal, including information needed to process or support the payment, such as the total purchase amount and billing information.
We accept payments via Credit and debit cards from Piraeus Bank. Payments are made by transfer to the Bank’s environment. For more information on the use of your personal data by Piraeus Bank, see here.
Comments
When visitors leave comments on the site, we collect the data displayed in the comment form as well as the visitor’s IP address and browser user string to help detect spam.
An anonymized string generated from your email address (also called a “hash”) may be provided to the Gravatar service to see if you are using it. The privacy policy of the Gravatar service is available here: https://automattic.com/privacy/. After your comment is approved, your profile picture is publicly viewable within your comment box.
Multimedia
If you upload images to the site, you should avoid uploading images with embedded location data (EXIF GPS). Site visitors can download and extract any location data from images on the site.
Contact Forms
If you fill in the contact form that you will find on the contact page, then you consent and send your personal data (name, phone, email) to our company. Your personal data will only be used to respond to your request.
Cookies
If you leave a comment on our website, you can choose to save your name, email address and website in cookies. These are for your convenience so that you don’t have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and log in to the site, we will create a temporary cookie to determine if your browser accepts cookies. The cookie does not contain personal information and will be deleted as soon as you close your browser.
When you log in, we will also create various cookies to store your login information and screen preferences. Login cookies last for two days and screen options cookies last for one year. If you select “Remember me”, your connection will remain for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be stored in the browser. This cookie contains no personal data and simply indicates the post ID of the article you just edited. Expires after 1 day.
Disable Cookies
Most internet browsers allow most cookies to be controlled through the browser settings.
Learn how to manage cookies in popular browsers:
To find information about other browsers, visit the browser developer’s website.
To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.
For how Facebook handles and sets cookies please visit https://www.facebook.com/policies/cookies/
You can find more information about how behavioral advertising works and Internet privacy and set your choices by visiting http://www.youronlinechoices.com/gr
Embedded content from other sites
Articles on this website may include embedded content (eg videos, images, articles, etc.). Embedded content from other websites behaves exactly the same as if the visitor visited the other website.
These sites may collect data about you, use cookies, incorporate additional third-party tracking, and track your interaction with that included content, including tracking your interaction with the included content if you have an account and are logged in to that site .
detailed information
We use the Google Analytics service to collect analytics about traffic on our website. More information can be found here.
Updated 21/07/2020