Welcome to the website www.xoratoupantou.gr, which is the official online store of the company with the name "I Chora tou Pandou", with VAT number 058870364 D.O.Y. Volos and Registration Number: 050401944000 (hereinafter Company). The headquarters of our Company is located in Volos, at Koutarelia Street 58, TK 38333. For the company, the privacy and security of the personal data of the user / visitor is very important, that is why we collect and manage personal data with the utmost care and we take special measures to keep them safe. Our company has fully complied with the requirements of the General Regulation (EU) 2016/679 of the European Parliament and the Council.
This privacy policy describes the personal data collected or generated (processed) when you use the website of www.xoratoupantou.gr. It also describes how we use, share and protect your personal data, the choices you have regarding your personal data, and how you can contact us. (υποβάλλονται σε επεξεργασία) όταν χρησιμοποιείτε τους δικτυακούς τόπους του www.xoratoupantou.gr. Περιγράφει επίσης τον τρόπο χρήσης, κοινοποίησης και προστασίας των προσωπικών δεδομένων σας, τις επιλογές που διαθέτετε αναφορικά με τα προσωπικά δεδομένα σας, καθώς και πώς μπορείτε να επικοινωνείτε μαζί μας.
The processing of personal data is carried out in accordance with the provisions of the General Regulation on the Protection of Personal Data (GDPR 2016/679), any more specific national and European legislation for certain sectors, the currently applicable Greek legislation for the protection of personal data, as well as for the protection personal data and privacy in the field of electronic communications (Law 3471/2006, as applicable) and the decisions of the Personal Data Protection Authority (PDPA).
Ο Κανονισμός ΕΕ 2016/679 The EU Regulation 2016/679 of the European Parliament and the Council of April 27, 2016, that is, General Data Protection Regulation or GDPR (General Data Protection Regulation), is the new regulatory framework of the European Union in the field under consideration. The object of the law is to establish the conditions for the processing of personal data, to protect the rights and freedoms of natural persons and in particular the right to the protection of personal data. The Regulation entered into force on 25 May 2018 and repeals Directive 95/46/EC (General Data Protection Regulation)
1. WHAT PERSONAL DATA WE COLLECT
The categories of personal data that xoratoupantou.gr collects and processes during your browsing or shopping at xoratoupantou.gr are the following:
- a) we collect the necessary personal data to complete and execute your purchase on xoratoupantou.gr, such as name and surname, age, e-mail address, shipping address, billing address, telephone. In any case, we inform you that xoratoupantou.gr does not collect payment details nor does it keep users' credit card details,
- b) we collect your e-mail address when you subscribe to the newsletter service,
- c) we process your personal data that you provide to us when you contact our Telephone Customer Service to assist you,
- d) with your consent, we collect and use your personal data for marketing purposes,
- e) to register your account, we collect your first and last name, gender, age, e-mail address, password and date of birth. If you are a registered user, we collect information about your access to the pre-registered area of the Website. With your consent, through the analysis of your personal data we can process information about your interests and preferences regarding our products and services, so that we can present you with suggestions and offers in line with your tastes. In case of authorization of your account on xoratoupantou.gr via external social networks, we collect from third parties the information required for registration/authorization via Facebook and Google. We also collect information about you from third parties and, in particular, from Facebook and Google+. This information includes the following categories of data: e-mail address, name, date of birth and gender,
- f) we collect information about your browsing on xoratoupantou.gr, such as the pages you visit and store this information on our servers,
- g) In case you provide personal data of third parties to xoratoupantou.gr, for example in cases where you decide to buy a product to be delivered to a friend or give a gift, xoratoupantou.gr will take care to inform the third party about the policy personal data protection at the time of first contact. We remind you that the use of personal data of third parties is subject to personal data protection legislation.
We inform you that xoratoupantou.gr does not process personal data of minors. When registering on xoratoupantou.gr and using its services, you must state that you are over or under 18 years of age, in order to complete the account creation process. Minors under the age of 18 can use the services of xoratoupantou.gr as ordinary visitors, while xoratoupantou.gr reserves the right to contact the minor's parents in order to confirm their consent.
2. PURPOSES OF PERSONAL DATA PROCESSING.
xoratoupantou.gr collects and processes your personal data for the following purposes:
- a) to complete and execute the purchase contract for the products offered on xoratoupantou.gr. When you complete your purchase, we ask you for the necessary personal data for the execution of the contract, such as payment, anti-fraud checks whenever you choose to pay by credit or debit card, billing, product shipment and possible return management . Registration at xoratoupantou.gr is possible by entering certain personal information, necessary for the verification of your identity and the development of the services offered to registered users. For this purpose xoratoupantou.gr needs to collect, regarding each service and its characteristics, the necessary personal data for the development of the service requested by you.
- b) for analysis and statistical research. We use some information about how you use xoratoupantou.gr to carry out analyzes and statistical surveys in order to improve our offer and our services,
- c) to send commercial communication and product promotion pursuant to the purchase of one of our products, i.e. soft electronic mail. After the purchase of one of our products at xoratoupantou.gr, we send you to the e-mail address you have provided us, communication material with our commercial offers in products and services.
- d) with your consent, we may use the addresses you have given us for commercial communication about our products and services, so that you are informed about our innovations, new arrivals, exclusive products and offers. Also, always with your consent, we may use your contacts in the context of conducting market research and satisfaction surveys in order to improve our services and the relationship with our users. These communications will be made exclusively in a way pre-selected by you (via e-mail, SMS, telephone, registered mail, Viber, Whatsapp, etc.).
- e) only with your consent, xoratoupantou.gr can personalize your experience as a registered user on xoratoupantou.gr, suggest developments and offers according to your preferences and send you personalized commercial communications that match your interests . The method of communication will be chosen by you again. Personalization will be done through analysis of your own past purchases and other information described in the previous paragraph.
We make it clear to you that, at any time, you have the possibility to change, limit or even stop the ways of communication with xoratoupantou.gr. In the case of newsletters, following the special procedure through your profile, while if you wish to be completely removed from the company's lists, you should send a special request to the company and to the contact email, in order to process your request.
Please note that you may receive further communication from us even after you have submitted your deletion request, as some submissions may already be scheduled and our systems may therefore take some time to process your request.
Regarding all the activities mentioned above, we will process your personal data mainly through IT and electronic tools which guarantee high security standards, in full compliance with the applicable legislation.
3. LEGAL BASIS OF PROCESSING
We process your personal data only in the presence of one of the conditions provided by the applicable legislation, namely:
- a) for the completion and execution of a contract of which it is a part. When we process the data for the completion of the purchase contract to which you are a party, it would be advisable to use only the minimum information necessary to complete it. This basis legitimizes the processing of personal data carried out in the following activities:
- – to complete and execute the purchase contract for the products offered by xoratoupantou.gr,
- – to offer you xoratoupantou.gr services when you subscribe to the newsletter,
- – to allow registration on xoratoupantou.gr and the use of services intended for registered users.
- – manage your requests together with our Telephone Customer Service.
Providing your personal data for these activities is a contractual obligation. You have the possibility to choose whether to share your data, but in the absence of the required data, it will not be possible to conclude or execute the contract and your requests. This means that you could possibly buy the products but you would not be able to benefit from the additional services of xoratoupantou.gr, e.g. information about additional offers,
- b) to fulfill a legal obligation. In case of entering into a contract for the purchase of goods on xoratoupantou.gr, the processing of the User's data will be carried out to fulfill the legal obligations to which xoratoupantou.gr is obliged based on tax provisions and other regulations. You are free to decide whether to enter into this contract and whether or not to share your data. However, in the event that you proceed to enter into the contract, then your data is necessary and will be processed for the fulfillment of the said legal obligations concerning xoratoupantou.gr.
- c) for our legitimate interest. Some of your personal data, in case of purchase of products on xoratoupantou.gr via credit or debit card, may be processed to carry out anti-fraud activities: we have every legitimate interest to carry out this activity for the prevention and prosecution of any illegal activity.
- d) based on your consent. We carry out the following processing exclusively in the case where you have given your express consent:
- conducting marketing activity, polls and market research;
- analysis of browsing and consumption habits in the context of the use of your profile on xoratoupantou.gr, in order to personalize your experience on our website.
Providing your personal data for such activities is completely optional. You are free to provide or not your personal data for this purpose, but in the absence of this xoratoupantou.gr will not be able to carry out marketing activities, polls, market research and analysis of your habits.
4. WHO WILL PROCESS YOUR PERSONAL DATA
Your personal data will be processed by xoratoupantou.gr staff properly trained and authorized to process.
Your personal data will be transferred to third parties whom we benefit from in order to provide our services. Such persons have been properly selected and have the guarantees in accordance with the law in the processing of personal data. These individuals have been designated processors and carry out their activity in accordance with the instructions set by xoratoupantou.gr and under its control.
The said third parties belong to the following categories indicatively: bank operators, internet provider, company specialized in IT and telematics services, courier, company that performs marketing activities, company specialized in market research and data processing, seo company. εταιρία seo.
Your personal data may be transferred with the assistance of the police and judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crimes, prevention and protection against threats to public security.
5. DATA PROCESSOR
The company with the name "I Xora tou Pandou", with VAT number 058870364 D.O.Y. Volos and G.E.M. Number: 050401944000 (hereinafter Company) is the Data Controller, i.e. the entity that determines the purposes and manner of personal data processing.
6. DATA STORAGE PERIOD.
We keep your personal data for a specific period of time, which varies depending on the type of activity for which the processing of your personal data is intended. After this period expires, your personal data is permanently canceled or anonymized. Your personal data is kept for the periods and according to the following criteria:
- a) data collected for the completion and execution of contracts for the purchase of goods on xoratoupantou.gr: until the completion of the administrative-accounting formalities. Billing data will be retained for ten years from the date of billing
- b) the data of the registered user: the data will be stored until you request the cancellation of the profile on xoratoupantou.gr.
- c) the data related to the payment: until the certification of the payment and the conclusion of the relevant administrative and accounting formalities resulting from the expiry of the right of withdrawal and the conditions applicable to dispute the payment
- d) data collected in the context of the use of the services offered on xoratoupantou.gr at the service of the user: this data is kept until the end of the service or the cancellation of the subscription to the service by the User
- e) data related to user requests to the Telephone Customer Service: data that is useful to assist you will be retained until your request is satisfied
- f) data used for commercial communication activities to users who purchase products on xoratoupantou.gr (mild spam): this data is kept until the end of the subscription or the exercise of the right of deletion by the user
- g) data provided for commercial communications activities, polls and market research: until the user's request to stop the activity and in any case within 2 years from the last interaction of any user with xoratoupantou.gr.
- h) data used to personalize the website and display customized commercial offers: as long as the user does not request the cessation of the activity and in any case within two years of the last interaction of any user with xoratoupantou.gr.
- i) data used to conduct market research and surveys to detect satisfaction: as long as the User does not request the interruption of the activity
In any case, for technical reasons, the cessation of processing and the subsequent final cancellation or anonymization of the relevant personal data will be final within thirty days of the aforementioned deadlines.
7. RIGHTS OF USERS
We are committed to maintaining the confidentiality of your personal data and ensuring that you can exercise your rights. Taking you into account, we inform you that you can exercise your rights free of charge by writing us an email to a unique email address (info@xoratoupantou.gr), or in the special contact form, simply telling us the reason for your request and the right you want to exercise. In the event that we deem it necessary to confirm your identity, we may request a copy of a document proving your identity. In particular, regardless of the purpose or legal basis on which we process your data, you have the following rights:
- Ask us to access the data we hold about you. We remind you that if you are a registered user, you can also check this information in the section corresponding to your personal data.
- Ask us to correct the data we have. Remember that if you are a registered user, you can also access the section corresponding to your personal data to modify or update your personal data. In any case, please note that by actively providing your personal data to us in any way, you warrant that it is true and accurate and agree to notify us of any change or modification thereof. The sole responsibility for any losses or damages caused to the Platform or to the person responsible for the Platform or to any third party, due to filling in incorrect, inaccurate or incomplete information in the registration forms, is borne by the user. Please remember that as a general rule you should only provide your own personal data, and not third party data, except to the extent permitted under this Privacy and Cookies Policy.
- Ask us to delete your data to the extent that it is no longer necessary for the purpose for which we must continue to process it as we have already told you above or when we are no longer lawful to process it.
- Ask us to cancel or restrict the processing of your personal data, which means that in some cases you can ask us to temporarily suspend the processing of the data or to keep it beyond the required time when you need it.
- If you have given us your consent to process your data for any purpose, you also have the right to withdraw it at any time. In addition, where the processing of your data is based on our legitimate interest, you will also have the right to object to the processing of your data.
Finally, we inform you of your right to file a complaint with the competent regulatory authority, in particular before: Greek Authority for the Protection of Personal Data Ελληνικής Αρχής Προστασίας Προσωπικών Δεδομένων
8. SAFETY MEASURES
We protect your personal data with specific technical and organizational security measures to prevent your personal data from being used illegally or fraudulently. Specifically, we use security measures that guarantee: pseudonymization or encryption of your data, confidentiality, integrity,the availability of your data as well as the resilience of the systems and services that process it, the ability to restore data in the event of a data breach. Also, xoratoupantou.gr regularly tests, verifies and evaluates the performance of technical and organizational security measures in order to ensure continuous improvement in processing security.
9. MODIFICATIONS OF CURRENT INFORMATION
The continuous development of our services may bring about modifications to the characteristics of the processing of your personal data as described. Therefore this privacy notice may undergo modifications and changes in the course of time, which could be necessary regarding the new nominal interventions of personal data protection.
It is therefore considered appropriate to verify the content from time to time: where possible, while we will try to inform you immediately about the modifications that will be made and their consequences.
The updated version of the privacy notice, in any case, will be published on this page, with an indication of the details of the last update.