The sole proprietorship under the name “NEKTARIA SAITI”, located in Ioulida, Municipality of Kea Cyclades, P.O.C. 84002, with VAT number 301118532, D.O.Y. Koropiou (G.E.M.I. no.: 162784038000), tel. 6984383293, email: [email protected] (hereinafter the “Company”, “We”), as the controller, respects the confidentiality and the rights of its Clients arising from the Law No. 4624/2019 and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “Law” or the “Regulation”).
- To whom is the information provided through this Policy relevant?
The Merchant hereby wishes to bring to your attention the Privacy and Personal Data Protection Policy that it applies when collecting, using, storing and generally processing your personal data when you visit, register or use the Merchant’s website wwww. amarado.gr (hereinafter, the “Online Shop”), and/or its mobile applications (apps) in any way, and to inform you about the nature of the personal data that the Merchant may process, as well as about your rights under the Law and the Regulation.
- What constitutes processing of personal data?
“Personal Data” is defined as any information relating to an identified or identifiable natural person (“data subject”). An identifiable person is a natural person whose identity can be verified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors that approximate the physical, physiological, genetic, psychological, economic, cultural or social identity of that person.
‘Processing of personal data’ means any individual operation or set of operations carried out, whether or not by automated means, on personal data contained in an organised filing system. The concept of processing includes collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure and destruction.
The Merchant may collect, store and use in the above ways personal data of its Customers, including those who carry out a transaction with the Merchant, either without having registered and created an account, or having registered and created an account, as well as those who visit the Online Shop without carrying out a transaction.
- What kind of personal data do we process?
Our Business collects and processes the absolutely necessary data of its Customers in order to fulfill its purpose and effectively provide its services.
Indicatively, we collect and process the following categories of personal data:
a. Identification data, i.e. first name, surname, email address, username and password to the Online Shop, in case you create a user account.
b. Contact Data for the completion of your order, i.e. telephone (landline or mobile), email address, address for sending the order.
c. Any submitted ratings and/or reviews.
d. Data entered in relevant forms and/or in free fields of the Online Shop, such as through a special form for contacting the Company to submit questions or complaints.
e. Data from your transactions with the Merchant, such as the bank account number with which you make a bank deposit for the payment of your order or the IBAN number.
f. Customer history, if you have created a user account, including your orders, returns and preferences on Merchant products.
g. Technical information regarding your connection to the Online Shop, such as the Internet Protocol (IP) address of your computer, the type of browser you use, your operating system, the speed of your connection, basic information about your connection to the server
h. Data relating to your consumer behavior and which are collected using cookie technology, such as your preferences in products, your response to promotional actions of the Company, your search history, links from which you have been redirected to the Online Shop.Data in this category are collected if you have chosen to give your explicit consent in the special fields, posted on our website and intended for this purpose.
j. Data that you provide us when you subscribe to the Firm’s newsletter.
k. Any other information about you that you provide to us.
Your personal data may be kept in written or electronic form.
Special Provisions:
a. We undertake not to collect and process personal data of minors, who are prohibited from disclosing their personal data to us without the prior consent of their guardian. For this purpose, we ensure that these persons do not disclose their data to us and we explicitly specify that the Company’s website is addressed to persons 18 years of age and older. In any case, if we become aware of the disclosure of data of minors, we immediately proceed to their deletion.
b. We undertake not to process sensitive personal data
c. If you choose to pay for your order by credit or debit card, you will automatically be directed to a secure website of the cooperating bank ALPHA BANK for the registration of your credit or debit card details, and transactions are completed in the secure online environment of the Bank.Your data are collected directly by the Bank without the intervention of the Merchant, which never gains access to them. The credit or debit card is charged after the data and validity of the card have been checked and certified by the Bank.You are solely responsible for the correct entry, truth and validity of the details of the credit or debit card you use. In the event of incorrect entry of the data or their misuse, the Merchant shall not be held responsible. For any dispute or question regarding charges on your credit or debit card, you should contact directly the Bank that issued the card.
- How are personal data collected?
Personal data may be obtained directly from you with your consent or during the period of any contracts between you and the Merchant.The Merchant may additionally secure and process personal data from publicly available sources (including, but not limited to, the internet, electronic databases) which are lawfully secured and for which processing is permitted.
Personal data are collected in accordance with the law every time you contact the Merchant in any way, such as, but not limited to, by telephone, e-mail or a special online platform, you interact with the Merchant, you fill in applications/order forms, you purchase/supply products and receive services from the Merchant, you visit the Merchant’s website, you subscribe to the Merchant’s newsletter to receive informative material and you share any information concerning you with the Merchant.
- For what purposes do we process your data?
The processing of your personal data is necessary for the performance of the Merchant’s obligations when using the services of the Online Shop, especially those provided after your registration on the website, as well as for the Merchant’s compliance with its legal obligations.More specifically, we process your data:
a. For the registration and creation of your account on the Website and the sending of new login codes to your personal account.
b. To process, monitor, track and complete your order that you have submitted through the Online Shop, to correct it in case of abnormal evolution, to send it to the address that you have indicated and, in general, to execute your contract with the Company.
c. To facilitate your proper communication with the Merchant in all the ways offered, the submission of questions or complaints, the management of your requests and their satisfaction by the Merchant.
d. To monitor, improve and adapt to your preferences and choices in the provision of our services to you.
e. To send you newsletters, inform you of promotions and/or commercial or other information of a commercial or other nature for the provision of our services, if you have expressly given your consent or have entered into a commercial transaction with the Merchant.
f.To protect and safeguard the legitimate interests of the Company, including the preservation of your personal data, in the event of legal claims or legal proceedings.
g. For internal management purposes, fraud prevention, use by administrative, billing, accounting, invoicing and control information systems.
h. For the compliance of the Business with the obligations imposed by the applicable legal framework and the relevant decisions of authorities or courts.
Please note that you are not obliged to provide the Merchant with your personal data or to allow their collection. However, in case you do not wish to provide the Merchant with your consent to process your personal data, we will not be able to implement our business relationship and provide you with our services.
- Legal bases for processing personal data
The Merchant uses personal data:
a. where the Customer as the data subject has consented to the processing of his/her personal data; or
b. when the processing is necessary for the performance of a contract between the Customer and the Merchant; or b. when the processing is necessary for the performance of a contract between the Customer and the Merchant; or
c. for the fulfilment of a legal obligation; or
d. for the fulfilment of a duty of the Merchant, performed in the public interest or in the exercise of public authority; or
e. for the purpose of safeguarding the legitimate interests of the Firm.
- Period of retention of personal data
Your personal data are kept for the time strictly necessary for the fulfilment of the above mentioned processing purposes, unless their retention for a longer period is required by the applicable legislation or in the context of litigation of any dispute, judicial or extrajudicial, between the Merchant and the Customer or for the exercise of claims or the defence of the rights and legitimate interests of the Merchant. After the expiry of the aforementioned periods, your personal data will be destroyed.
- Protection of Personal Data
The Merchant has established appropriate procedures and policies that comply with the Regulation, and takes appropriate technical and organisational measures in order to ensure that the personal data it processes are afforded the necessary protection, in particular to prevent loss, accidental destruction, diversification, unintended use or disclosure and access by unauthorised persons.
- Disclosure of Personal Data to Third Parties
In the performance of its contractual and legal obligations, the Merchant may be obliged to disclose your personal data or part of it to competent employees and management members of the Merchant in the context of their duties, as well as to third parties performing processing on behalf of the Merchant (hereinafter, the “Recipients”), such as third party service providers to the Merchant on outsourcing (including, but not limited to, the bulk emailing platform mailchimp. com), public authorities (national or foreign), government agencies, banks, legal advisors, auditors, affiliated companies and other trusted professional partners of the Company.In compliance with the relevant legal provisions, the Company shall inform the data subjects in the event that all or part of the data will be disclosed to third parties. All partners of the Merchant who will receive or have access to the personal data shall strictly observe the terms of the Regulation.
In case the recipients reside, are located or operate in a country outside the European Economic Area, to which the Regulation and Greek law do not apply, the Merchant undertakes to take all necessary measures to provide an adequate level of data protection, by virtue of a relevant adequacy decision or by concluding any required cross-border or transatlantic data transfer agreements, based on standard contractual clauses approved by the European Commission and in full compliance with the legal framework in force, the relevant bilateral agreements and the guidelines of the institutions of the European Union.
- Send newsletter
The newsletter is sent to you for marketing purposes via the mass emailing platform mailchimp.com (hereinafter, “MailChimp”), which has joined the legal framework for secure data exchange between the European Union and the United States of America and is subject to compliance with the Regulation. MailChimp is a processor on behalf of the Merchant. When you opt in to receive our newsletter, your email address is forwarded to MailChimp and held in its database for as long as it provides its services to the Business or until you opt out of having your email removed from the newsletter mailing list. You may unsubscribe from the newsletter mailing service by selecting the unsubscribe hyperlink, which will be in every email you receive from us.
- Use of Cookies
The Online Shop uses cookie technology to improve and facilitate the Customer’s visit. Cookies are small text files, which are stored by the browser (e.g. Microsoft Edge, Mozilla Firefox, Google Chrome, Safari) on the Customer’s computer or mobile phone, while navigating the website and the internet in general. Cookies make web browsing faster and easier, as the website stores the visitor’s preferences without the need to enter them each time. Cookies do not collect information individually, nor do they contain or reveal any personal information of the website visitor. Upon entering the website, the Customer is asked to accept or reject the use of cookies when navigating the website.
You have the option to prevent your browser from accepting cookies from www.amarado.gr. All modern browsers allow you to change your cookie settings at any time. However, by disabling cookies, you may not be able to use all the services on our website and you may not be able to see more pop-ups or other types of advertisements. This is because we will not be able to limit what you see using cookies. In any case, you will still have access to our editorial content. For more information, please refer to our website’s Cookies Policy.
- What are your rights as a data subject?
In relation to the personal data we process, you have the following rights:
(a) Right to information and transparency: your right to know who is processing the data, what the data are, for what purpose, the period of processing and retention of the data or the criteria that determine it, as well as information on the origin of the data when collected by a third party.
(b) Right of access: your right of access to your personal data when it is processed.
(c) The right to rectify inaccurate or incomplete data.
(c) The right to rectify inaccurate or incomplete data.
(e) Right to erasure (“right to be forgotten”) of your personal data when they are no longer necessary to the Company or in compliance with applicable law, unless compelling and legitimate reasons for processing arise. Excepted is the retention of data for scientific research or statistical purposes, subject to the principle of minimisation, provided that the Merchant takes appropriate technical and organisational measures.
(f) The right to object to and withdraw your consent to the processing of personal data, if your rights outweigh the legitimate interests of the Merchant on which we rely when processing the data.You can exercise this right either by sending us a request in the ways indicated herein, or by choosing to delete your account in the Online Shop or by unsubscribing from the newsletter service, by selecting the relevant unsubscribe hyperlink from this service, which will be provided at the end of each email you receive from us. The withdrawal of consent does not affect the lawfulness of the processing prior to its withdrawal.
(g) Right to data portability: your right to request that your data be transferred to another controller.
(h) Right to non-automated decision-making, including automated profiling.
In case you wish to exercise any of the above rights, you may send a request in writing by post to “Ioulida Kea 0 – Nektaria Saiti” or to [email protected].
You have the right to appeal to the competent Personal Data Protection Authority (DPAA – 1-3 Kifissias Street, P.C. 115 23, Athens, tel. 2106475628, email: [email protected]), if you believe that your rights are being violated in any way.
The Merchant reserves the right to amend this Policy at any time, at its sole discretion. Any alteration, modification or addition shall take effect immediately upon notification thereof, which shall be effected by any appropriate means, in particular by means of an announcement on the home page of the Online Store. Any continued use of the Online Store by the Visitor after such notice of modification shall constitute unconditional acceptance of such changes and use of the website under the new terms and conditions. To this end, please check this Policy periodically to keep up to date with its contents.