Privacy Policy

Personal Data Protection

E. Kalogeropoulos & SIA E.E. (hereinafter referred to as the “Company”) welcomes you to its online store  www.ekalogeropoulos.gr and presents, in a clear and comprehensible manner, the terms that safeguard your individuality and your right to the protection of your personal data.
We would like to inform you how we collect, use, and disclose personal data from and relating to you through this website and any associated mobile websites, applications, and widgets, as the protection and security of your privacy is a matter of paramount importance to us and one which we fully respect.
Please read this Privacy Policy carefully in order to understand it, as your continued use and browsing of our online store (e-shop)  www.ekalogeropoulos.gr constitutes your explicit and unconditional consent and acceptance of its terms.
 
1. SCOPE OF THIS PRIVACY POLICY
The Company is the Data Controller of the personal data (i.e. information that identifies a specific individual, such as full name or email address) that we collect from and about you through the Company’s Services and process in accordance with the terms of this Privacy Policy.
This Privacy Policy, together with our Cookie Policy, applies to all users, including those who use the Company’s Services without registering or subscribing to any Company Service, as well as those who are registered or subscribed.
As stated in our Terms of Use, the Company’s Services are intended for a general audience, are not directed at children, and we do not knowingly collect personal data from children under the age of 16.
 
2. WHAT TYPES OF PERSONAL DATA WE COLLECT
The Company collects:

(1) registration data
(2) public data and posts shared through the Company’s Services
(3) data you allow social media platforms to share with the Company
(4) activity data when you access and interact with the Company’s Services
(5) information from other sources

Specifically, we collect:

1. Registration Data. Information you provide when registering for a Company Service, such as creating an account, posting comments, subscribing to newsletters, or participating in contests. This may include first name, last name, email address, gender, country, postal code, and date of birth.
2. Public Data and Posts. Comments or content you post through the Company’s Services and any personal data associated with them, such as username, comments, likes, status, profile information, and photos. Such information is public and may appear in search engine results.
3. Social Media Data. If you access or connect to the Company’s Services through social media platforms, we may collect your user ID, username, profile photo, email address, friend lists, and any content you have authorized the platform to share with us. By doing so, you authorize the Company to collect, store, and use such data in accordance with this Privacy Policy.
4. Activity Data. Information regarding your interaction with the Company’s Services, including IP address, browser type, device identifiers, geographic data, cookies, pixels, beacons, and similar tracking technologies. For more information, please refer to our Cookie Policy.
5. Information from Other Sources. We may supplement the data we collect with publicly available information or commercially available data sources.

We do not collect:

• Payment Information. Payments are processed through third-party payment providers. Any information you provide is governed by their privacy policies, not ours. We do not control and are not responsible for their data practices.
• Sensitive Personal Data
  Please do not send or disclose sensitive personal data (such as social security numbers, health data, political opinions, religious beliefs, criminal records, or trade union membership).

 
Linked Services
The Company’s Services may include links to third-party websites or services not operated by us. We are not responsible for the privacy practices of such third parties. Please review their privacy policies when leaving our Services.
 
3. HOW WE USE YOUR PERSONAL DATA
We use personal data to:

1. To provide you with the Company’s Services and Features
2. To measure, analyze, and improve the Company’s Services and Features
3. To enhance your experience through the Company’s Services (both online and offline) by delivering content that may be relevant and of interest to you
4. To allow you to comment on content and participate in online games, contests, or rewards programs
5. To provide customer service and respond to your inquiries
6. To protect the rights of the Company and others. For example, there may be instances in which the Company may use your personal data where it reasonably believes such processing is necessary to: (i) protect, enforce, or defend the legal rights, safety, or property of the Company, its affiliates, employees, agents, contractors, licensors, and suppliers (including enforcing agreements and our Terms of Use); (ii) protect the safety, privacy, and security of users of the Company’s Services or the public; (iii) protect the Company and other involved third parties, such as the Company’s suppliers, from fraud or for risk management purposes.
7. For compliance with applicable laws or legal processes and/or to respond to requests from competent governmental authorities.
8. To facilitate corporate transactions, such as a proposed or actual reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or part of the Company’s operations, assets, or inventory (including in connection with bankruptcy or similar proceedings). For example, if the Company participates in a merger or transfer of all or a substantial part of its operations, the Company may disclose and transfer your personal data to the relevant party or parties as part of the transaction.
9. To enable social interactions — if you log in or link a social media account with the Company’s Services, we may share your username, photo, likes, activities, and comments with other users of the Company’s Services and with your friends related to your social media account. We may also share this personal data with the social media service provider.
10. To send you, with your prior consent, offers, promotions, and other commercial communications regarding the Company’s Services via email, SMS, telephone, chat, and social media.
11. To send you, with your prior consent, commercial communications tailored to your interests and needs through the communication methods listed above.
    We may use anonymous or de-identified data (e.g., statistical data) for any purpose or share it with third parties, even if such data can no longer identify you directly or indirectly.

 
4. WHAT LEGAL BASIS DO WE USE TO PROCESS YOUR PERSONAL DATA?
The processing of your personal data for the purposes outlined below is based on the following legal grounds:
The processing of personal data for the purposes described in Section 3, points (a) to (f) of this Privacy Policy is necessary for the provision of the requested services and is therefore mandatory, as the services could not otherwise be provided.
The processing of personal data for the purpose described in Section 3, point (g) of this Privacy Policy is required by applicable law and is therefore also mandatory.
The processing of personal data for the purpose described in Section 3, point (h) of this Privacy Policy is based on the legitimate interests of the Company and its counterparties in conducting such business activities. This interest is adequately balanced against your own interests, as the processing is carried out strictly within the necessary limits for conducting these business activities. This processing activity is not mandatory, and you may object at any time, as described in Section 11 of this Privacy Policy.
By contrast, the processing of your personal data for the remaining purposes:
Section 3, point (i) is at your discretion, but without your consent it is impossible to link a social media service account with the Company’s Service. In that case, you would need to access the Company’s Service using an alternative mechanism.
Section 3, points (j) and (k) are also at your discretion, but without your consent the Company and/or third parties cannot provide you with general commercial communications, services/products, or third-party communications tailored to your interests and needs, nor provide you with services under the same brand.
You may withdraw your consent at any time regarding the processing of your personal data for the purposes described in Section 3, points (i) to (k) by sending a notification to the email address provided in Section 11 below.
 
5. DATA PROCESSING AND SECURITY
Your personal data is processed both electronically and manually and is protected by appropriate security measures, taking into account the latest technology, implementation costs, the nature, scope, context, and purpose of the processing, as well as the likelihood and severity of risks to the rights and freedoms of individuals.
Specifically, the Company employs administrative, technical, personnel-related, and physical measures designed to protect personal data in its possession from loss, theft, unauthorized use, disclosure, or alteration.
 
6. WHO MAY HAVE ACCESS TO YOUR PERSONAL DATA?
The Company may share your personal data for the purposes outlined in Section 3 with the following categories of recipients, located within or outside the European Union, in accordance with and within the limits of the provisions set out in Section 7 below:

• third-party service providers tasked with processing activities and, where required by applicable law, duly appointed as processors (e.g., cloud service providers, other group entities, service providers that support or maintain the Company’s Services, including but not limited to IT service providers, experts, consultants, and law firms arising from possible mergers, demergers, or other corporate reorganizations).
• affiliated companies, in their capacity as either data controllers or data processors
• competent authorities, for compliance with applicable laws. Processors appointed by the Company include IT service providers.
• third-party service providers responsible for the collection and delivery of your orders (e.d. ELTA Courier). To complete the transaction, only the strictly necessary date (such as your full name, transaction amount and order reference number) may be transferred to the aforementioned providers, solely for these specific purposes and in accordance with the GDPR
• in cooperation with affiliated partners for the processing of your orders paid by debit/credit card and interest-free instalments.
  Payments by debit or credit card are processed through Eurobank, using the electronic payment platform of Worldline. Our company does not store or process your card details.
  Upon completion of your order, you are redirected to a secure environment of Eurobank/Worldline, where you enter your card details.
  For the purpose of completing the transaction, only the strictly necessary data may be transmitted to the above providers, such as your full name, transaction amount and order reference number.
  If you choose to pay in interest-free instalments, the bank may process additional data required for the provision of credit services, including for the assessment and approval of the transaction. Such processing is carried out exclusively by the bank in accordance with its own terms and privacy policies. Our company does not have access to, nor is it involved in, any creditworthiness assessment procedures.
  The processing of the above data is carried out solely for the purpose of executing the transaction and, where applicable, for the provision of instalment services, and is based on the performance of a contract.
  For more information regarding the processing of your personal data by the payment providers, please refer to their privacy policies:
  https://www.eurobank.gr/el/prosopika-dedomena-ston-diadiktuako-topo
  https://worldline.com/el-gr/compliancy/privacy

 You may request from the Company a complete list of appointed data processors at the email address provided in Section 11 of this Privacy Policy

7. ARE YOUR PERSONAL DATA TRANSFERRED ABROAD?
Your Data may be transferred to countries inside and outside the European Economic Area (EEA), specifically to the United States of America. The European Commission recognizes that certain countries outside the EEA provide an adequate level of data protection in line with EEA standards. The full list of such countries is available at:  http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm.

For transfers from the EEA to countries not recognized as safe by the European Commission, the Company has established appropriate and suitable safeguards to ensure the protection of your personal data and the lawful transfer of personal data in accordance with applicable data protection laws. These safeguards include standard contractual clauses approved by the European Commission under Articles 45 and 46 of Regulation (EU) 2016/679 on data protection (the “Data Protection Regulation”).

You have the right to request a copy of these safeguards and further information regarding your personal data by contacting the Company at the address provided in Section 11 of this Privacy Policy.

8. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?
You have the right, at any time, to: obtain confirmation of whether your personal data exists and to be informed about its content and origin. Verify the accuracy of your data and request correction, updating, or modification. Request deletion, anonymization, or restriction of the processing of your personal data that has been processed in violation of applicable law. Object to the processing of your personal data for legitimate reasons in all cases.

You may submit your request to the address provided in Section 11 below. Please include your email address, name, postal address, and phone number, and clearly specify the information you wish to access, change, update, remove, or delete.

Please note that even after you close your account, or request deletion of your personal data, copies of certain information from your account may remain visible in cases where, for example, you have shared information via social media or other services, or when retention of such copies is required for legal compliance or legal defense purposes. Due to the nature of temporary storage technology, your account may not be immediately inaccessible to others. Additionally, we may retain backup information about your account on our servers for a period of time after account closure or deletion requests, for compliance with applicable laws.

You are also provided with choices regarding the use and disclosure of your personal data for marketing purposes. You may withdraw your consent regarding:

• Receiving electronic communications from us. If you no longer wish to receive marketing emails from us, you can opt out either by following the unsubscribe instructions included in our communications, by updating your preferences in your user profile if you are a registered user, or via the consent management tool available on our website if you are not a registered user. Administrative messages regarding the provision of the Company’s Services may still be sent.
• Sharing personal data with subsidiaries or business partners for their own marketing purposes. If you do not wish your personal data to be continuously shared with subsidiaries or business partners for their direct marketing purposes, you can opt out by updating your profile settings (if registered) or using the consent management tool on our website (if not registered), or by sending a request to the address listed in Section 11.

In all cases, we may contact you to request additional information necessary to process your request correctly. The additional rights described in Section 9 below apply as of May 25, 2018.

9. WHAT APPLIES AS OF MAY 25, 2018?

From May 25, 2018, the General Data Protection Regulation (GDPR) applies, including the following provisions:

1. Retention Periods for Personal Data
We retain your data only for the period necessary to fulfill the purposes for which the data were collected as described in this Privacy Policy. In particular:

• Data collected for the purposes outlined in Section 3(a)–(h) are retained  during the provision of the Company’s Service, plus the applicable statute of limitations under current law, after termination of the Service.
• Data collected for the purpose of Section 3(i) are retained for the period necessary to connect to the Company’s Service via a social network.
• Data collected for Section 3(j) are retained in a form that allows identification of data subjects only for as long as necessary for the purposes of personal data processing; personal data may be stored longer if processed solely for archiving in the public interest, scientific or historical research, or statistical purposes, in accordance with Article 89(1) of the GDPR, provided appropriate technical and organizational measures are implemented.
• Data collected for the purposes of Section 3, point (k), are retained in a form that allows the identification of data subjects only for as long as necessary for the purposes of personal data processing; personal data may be stored for longer periods provided that the personal data are processed solely for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes, in accordance with Article 89(1) of the General Data Protection Regulation (GDPR), and provided that appropriate technical and organizational measures required by this regulation are applied to ensure the rights and freedoms of the data subjects (“storage limitation”).

At the end of the retention period, personal data will be deleted, anonymized, or aggregated.

2.Additional Rights
In addition to the rights listed in Section 8, under the GDPR, you also have the right at any time to:

• Request restriction of processing where:
  • You contest the accuracy of your personal data until it is corrected or verified.
  • Processing is unlawful but you do not want the data deleted.
  • The Company no longer needs the data for processing, but you require it to establish, exercise, or defend legal claims.
  • You have objected to processing for legitimate interests pending verification of compelling legitimate grounds.
  • Object to the processing of your personal data.
• Request deletion of your personal data without undue delay.
• Receive an electronic copy of your personal data for portability purposes, either for yourself or to another provider, when processed automatically and based on either your consent or necessity for service provision.
• Lodge a complaint with the competent data protection supervisory authority.

10. UPDATES TO THIS POLICY
The Company may modify or update this Privacy Policy for any reason (including, but not limited to, changes in applicable law, interpretations, decisions, opinions, and orders).

Refer to the Effective Date at the top of this Privacy Policy to see the latest revision. Any changes will be communicated in advance by posting the revised Policy on the Company’s Services. If significant changes are made that alter the nature of processing or expand our use of previously collected personal data, we will notify you and provide choices regarding the future use of your personal data as required by law.

11. CONTACT INFORMATION
Data Controller: Efstathios Kalogeropoulos
GEMI number: 142696401000
Phone: +30 210 608 4513
Email:  info@ekalogeropoulos.gr