1. Introduction
This Privacy Policy governs access to and use of our website store is the Website and the Online Store.
Any natural person visiting the site pages or using the Services for brevity purposes is hereinafter referred to as "Personal Data Subject" or "Subject".
The management and protection of your personal data is governed by the terms of this notice and the relevant provisions of both Greek, EU and international law regarding the protection of the individual from the processing of personal data, as well as the Decisions of the Data Protection Authority Personal Character. Any possible future change of the above regulatory framework will be the subject of this.
This Privacy Policy (hereinafter the "Data Policy" or "PP") aims to inform you about the Company's policy regarding your personal data, which you provide to us, so that you know the purpose of their processing by us , the category of recipients, and the procedures you can follow to exercise your legal rights.
This Policy is an integral part of the General Terms and Conditions of Use and the General Terms of Transactions of our e-shop and a single whole with them. The Company, in its capacity as Data Controller, may from time to time modify its Terms and Policies, including the "PP", either in whole or in part, at its absolute discretion. Any modification herein will be effective immediately upon posting the modified Policy on the Website. We therefore urge you to periodically verify its content.
In any case, as long as you continue to use our website and its services and the services of our Online Store after modifications have been made in accordance with the above, you will be deemed to accept those modifications without reservation. If you do not agree with the terms of this Policy, as it may be amended, you must stop using the Website and our Online Store.
Your privacy as well as the security and protection of your personal data are very important to the Company. For this reason, we collect and manage your personal data with the utmost care, responsibly and adopt special measures to keep them safe. To have detailed indications of how the Company manages your personal data, we invite you to read the following Data Policy, where you will find all the basic information on the processing by the Company of your personal data in relation to your browsing on e -shop and by using the services offered.
We also urge you to read the "Cookies Policy" and "General Terms and Customer Service" of our e-shop, which contain detailed information on the conditions regarding the services we provide you. Certain services may be subject to specific legal conditions and regulations. In these cases, we will make sure to provide you with all the information that may be needed each time.
The Company is not responsible under any circumstances for the Terms of Protection and Management of Personal Data of other websites, to which you can possibly connect through links through this website.
For any clarification, question or legal requirement regarding your privacy and the processing of your personal data, you can contact us at any time by sending a request to our Customer Service Department by stating the request by e-mail at store@aekbc.gr or by sending a written letter to address of the Company's headquarters. If you wish, you can also contact the Data Protection Officer (DPO) by sending a letter to the "Data Protection Officer" electronically or by post.
2. PERSONAL DATA PROTECTION POLICY
2.1. DEFINITION OF PERSONAL DATA
Personal Data means any information that refers to the subject of the data, i.e. any information that refers to any natural person to whom the data refers and whose identity is known or can be ascertained. Such data, as defined by the Law and the relevant European provisions, are for example the member's name, address, date of birth and gender, mobile phone number, email address as well as usage data, such as for example username, password and IP address.
2.2. COLLECTION AND PROCESSING OF PERSONAL DATA
For your simple browsing of our online store, the Company does not ask you for any of your personal information. However, the Company, while you browse or use the services offered by our e-shop, collects and processes browsing data through cookies that relate exclusively to your shopping habits.
The categories of personal data that the Company collects and processes during your visit/browse to the Website and Online Store are the following:
- we collect the necessary Personal Data, which according to the Law and the General Terms and Conditions of Use and the General Terms of Transactions, are deemed necessary to complete, execute and ship your order. Among these, indicatively, are the First and Last Name, the Electronic Address (email), the Contact Phone, the Address (street, city, postal code, country), the Billing Address of the order, the Date of Birth, Gender and Payment Details such as Credit/Debit Card mask, Privilege Card Details etc. and the Type of Document you want us to issue (Receipt or Invoice). If you request the issuance of an Invoice, you will be asked for information about your company such as the Company's Name, National Security numbers, Activity, Address of its headquarters as well as Contact Phones.
- we collect your email when you subscribe to our Newsletters service, in order to send you newsletters about the Company, our e-shop, its products/services, any offers etc. .etc If you choose to join our email newsletter, the email address you provide to us will be forwarded to mailchimp.com who provide us with email marketing services. We consider mailchimp.com to be a third party data processor (Clause 2.5 below). Your email address will also remain in the mailchimp.com database for as long as we continue to use mailchimp.com for email marketing services or until you explicitly request to be removed from the list. You can do this by using the unsubscribe links contained in any email newsletters we send you. For as long as your email address remains in the mailchimp.com database you will receive periodic informational emails from us.
- we collect and process the Personal Data, such as your First Name, Last Name, Email, Telephone and Order Code, which you provide when you contact our Customer Service, in order to ensure that we can contact you, in order to providing assistance regarding your current orders as well as informing you about new products/services. If you choose to contact us using the contact form on the Contact page, none of the data you provide will be stored by this Website or transferred/processed by any of the third party data processors set out in Clause 2.5. Instead, the data will be sorted into an email simply to reply to you.
- we collect your First and Last Name, Email Address, Personal Password, Gender and Date of Birth when you register as a Member in our e-shop and open an Account, so complete your purchases from our online store.
2.3. PURPOSE OF COLLECTION AND PROCESSING OF PERSONAL DATA
The personal data you declare during your visit/browse to the pages and services of our e-shop website are intended and processed exclusively for the following purposes:
- for the completion and implementation of the purchase contract for the products offered by our e-shop. Upon completion of your purchase, you will be asked for the necessary Personal Data that will ensure the implementation of the contract, such as payment, the necessary anti-fraud checks (in cases of payment by credit/debit card), billing, shipping product and the management of any return
- to offer our e-shop services, through your registration on the Website and the use of services intended only for Registered Users/Members. Registration on the Website is possible by entering specific Personal Information, necessary for the verification of the Identity of the Personal Data Subject and the development of the services offered to the registered users. For this purpose, the Company may collect, regarding each service and its characteristics, the necessary Personal Data for the development of the service requested by the Personal Data Subject
- to send Company and e-shop newsletters, for commercial communication about our products and services, so that you are informed about innovations, new arrivals, exclusive products, and offers
- for the communication between us, and the management of your requests through the Customer Service Department
- to improve the services provided. Always with your consent, we may use your contact details in the context of conducting market research and more general surveys to detect satisfaction in order to improve our services and the relationship with our users
- for the purposes of statistical research and analysis with data in aggregate form for the purpose of understanding how users interact and use the Website, improving our products and services
In the above cases, the processing of your Personal Data is considered legal as it aims to perform a contract between us or to provide a specific service that you have requested.
These data may not be used by any third party without complying with the applicable provisions.
2.4. TIME PERIOD OF PERSONAL DATA RETENTION
The Company processes your personal data throughout the validity period of each contract and after its termination or expiration in any way for a period of time defined by the applicable legal framework.
Your personal data processed by the Company must be kept for the entire duration imposed by the purpose of the processing for which they are processed and/or the applicable legal framework.
At the end of this period, the data is kept in accordance with the current institutional framework for the period of time foreseen from the end of the business relationship or for as long as is required to defend the rights of the Company before a Court or other competent Authority.
2.5. RECIPIENTS OF PERSONAL DATA AND PURPOSE OF THEIR TRANSFER
Your Personal Data is processed by the Company that has the status of Personal Data Processor.
For organizational and operational requirements related to the provision of products and services from our e-shop, the Company may transmit your personal information to its agents and/or subcontractors for the purpose of supporting, promoting and executing your business relationship with it, but always under conditions that fully ensure that your personal information does not undergo any illegal processing, i.e. other than the purpose of transmission in accordance with the above.
The Company reserves the right for the above purposes to transmit your Personal Data:
- to the delivery service companies with which it cooperates, as mentioned in the General Terms of Transactions, in order to ensure the shipment to you of the products you have selected from the Online Store.
- to credit card providers to process payment on your behalf to ensure that the products you have selected from the Online Store are shipped to you
- to third parties, natural or legal persons, who may provide on behalf of the Company promotion and marketing services for both the Company and its products or services
- or to our third party partners who provide technical services, such as indicative hosting and technical support services
All partners, representatives and/or subcontractors have been evaluated and selected by the Company for their proven reliability and competence and all comply with the legislation defined in the above paragraphs. In the event that some of them are based in countries that do not belong to the European Union, the transfer of your Personal Data takes place with the guarantees defined by the Law.
The Company and our e-shop will not make available for sale or otherwise transmit or publish personal information of the Subjects of its website to third parties, except for those mentioned above, without the consent of the Subject, with the exception of the application of relevant legal dictates and to the Competent Authorities only. The data kept in the file may be communicated to the Competent Judicial, Police and other Administrative Authorities upon their legal request and in accordance with the applicable legislative provisions. In addition, in the event of a legal provision, official order or official preliminary examination, our e-shop and the Company reserve the right to make the relevant information available to the respective service.
2.6. SUBJECT CONSENT
By carrying out any transaction and using any Service in our e-shop, in accordance with the General Terms and Conditions of Use and the General Terms of Transactions of our e-shop, you declare that you are over 15 years old and accept and consent to this Privacy Policy Personal Data and in particular:
2.6.1. Register as a Member – Create an Account
When registering as a Member, if you enter your Personal Data into your Member Account, you agree that our e-shop will use this data for all purposes necessary to successfully complete the transaction between you.
2.6.2. Checkout
When completing your order, if you enter your Personal Data, then you agree that our e-shop will use this data for all necessary purposes in order to successfully complete the transaction between you. In addition, you agree that our e-shop will use this data for possible refunds to you in the event that you exercise your Right of Withdrawal in accordance with the provisions of the General Terms of Transactions and the Law.
2.6.3. Marketing and Advertising Actions
By subscribing to the Newsletter service in our e-shop, you agree that our e-shop will process and use your personal data for advertising purposes, such as e.g. sending emails with general information or advertising (newsletters) regarding the Company, its products and services.
If you wish, our e-shop will waive the use of your Personal Data for advertising purposes, provided however that you request or follow the procedures to be removed from the list of registered members who receive e-shop newsletters us. You may, at any time, send relevant email to store@aekbc.gr or Unsubscribe from them by following the procedures set out in each informational type of email you receive from us.
The Company is required by law to report to the Personal Data Protection Authority any illegal breach of the Website's Personal Data database or the database of any third party data processor to any and all relevant persons and authorities within 72 hours of the breach if it is apparent that personal data stored in an identifiable form has been compromised.
Process related to fraudulent acts
By completing a transaction in our e-shop, you agree that in the event of the existence of reasonable data and if the specific circumstances require it, our e-shop will have the right to collect, process and use all data, which is necessary for the disclosure , as well as the interruption of offers created with fraudulent intent as well as the details of any other illegal or non-contractual use of our e-shop.
2.6.5. Forwarding to Legal Services in case of or in the absence of a Legal Order
As the transfer of data is not permitted under the Law, you consent to the transfer of your personal data to law enforcement and supervisory authorities for the necessary protection against risks to state and public security as well as for the prosecution of criminal acts.
2.7. TRANSFER AND STORAGE OF PERSONAL DATA
The transfer of Personal data between the Website and your browser is encrypted and delivered via HTTPS.
Your data is stored on our servers located in a secure location.
2.8. SUBJECT, UPDATE AND DELETION RIGHTS
Providing your Personal Data is a contractual obligation. You retain your free will and choice as to whether or not to share your Personal Data with us, but in the absence of the required data, it will not be possible to conclude or execute the Sales Agreement and your requests by our Company.
In case of concluding a Contract for the Sale of products from our e-shop, the processing of the Subject's data will be carried out with the sole purpose of enabling the Company to fulfill its legal obligations and to be in compliance with the tax provisions and the applicable legislation in which is subject to.
You are free to decide whether to enter into a Sales Contract with us and whether or not to share your data. If, however, you enter into a Sales Contract, your Personal Data will be necessary and processed for the fulfillment of said legal obligations to which the Company is subject.
The Company carries out the following processing of personal data exclusively in the case in which the Subject of Personal Data has given his express consent:
- conducting marketing activity, surveys and market research
- analysis of browsing and consumption habits in the environment through the use of the Profile of the Personal Data Subject, with the sole purpose of creating a better shopping experience and personalizing it on our Website.
Providing your Personal Data for such activities is entirely optional. You are free to provide your Personal Data for this purpose or not, but without it the Company will not be able to carry out marketing and advertising actions, polls and market research or analyzes of your habits.
After verification of your identity, as Personal Data Subjects you have the following rights:
|
Right to information: |
The COMPANY must inform you about the processing to which it submits your data, such as what data it processes, for what purpose, for what period of time it is kept, using clear and simple wording. |
|
Right of access: |
You have the right to receive confirmation from the COMPANY as to whether or not your personal data is being processed and, if so, you have the right to access that data. |
|
Right to rectification: |
You have the right to demand from the COMPANY the correction of any inaccurate personal data and the completion of any incomplete data. |
|
Right to erasure: |
You have the right to request from the COMPANY the erasure of personal data, which may be granted if specific conditions are met. |
|
Right to restriction of processing: |
You have the right to obtain from the COMPANY the restriction of processing, if certain conditions are met. |
|
Right to object: |
You have the right to object, at any time, to the processing of personal data concerning you. The COMPANY in this case should stop the processing, unless it demonstrates compelling and legitimate reasons that override your interests, rights and freedoms as a data subject or for the establishment, exercise or support of legal claims. |
|
Right to human intervention in the context of a decision through an automated process: |
You have the right to ask the COMPANY not to be subjected, if applicable, to a decision-making process solely based on automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way. |
|
Right to portability: |
You have the right to ask the COMPANY to receive your personal data, which you have provided, in a structured, commonly used and machine-readable format, or to have the COMPANY transmit it to another provider. |
For your further convenience regarding the exercise of your relevant rights, the COMPANY ensures the development of internal procedures to respond promptly and efficiently to your relevant requests.
At any time, you reserve the right to update or object to the further processing of your data in accordance with the current legislation on the Protection of Personal Data. For this purpose, any request you may have should be addressed in writing to the Company and our e-shop or by sending the relevant email to the address store@aekbc.gr.
We respond to your Requests free of charge without delay, and in any case within (1) one month of receiving your request. However, if your Request is complex or there are a large number of your Requests we will inform you within the month if we need to obtain an extension of another (2) two months within which we will respond to you.
If your Requests are manifestly unfounded or excessive in particular due to their repetitive nature, the Company may impose a reasonable fee, taking into account the administrative costs of providing the information or carrying out the requested action, or refuse to proceed with the Request.
If you believe that your Personal Data has been held unlawfully, you can present a request to one of the Supervisory Authorities responsible for compliance with the Personal Data Protection Rules.
This text may undergo modifications over time, so we encourage you to periodically verify its content.
2.9. LEGAL REFERENCES AND USEFUL LINKS
The processing of the Personal Data of the Users/Customers of our e-shop is carried out by the Company, which also uses a Personal Data Protection Officer, based in the EU and subject to the terms of Regulation (EU) 2016/679 General Protection Regulation of Personal Data, and the European and Greek regulations for the processing of Greek personal data and controls of the competent Greek Control Authority.