1. GENERAL INFORMATION
Thank you for your interest in our Website and online services. The protection of the personal data of the customers/visitors/users of our Website and its lawful processing constitutes the highest priority for us.
The following Policy refers to the management and processing of your personal data that you are providing us with or that we are collecting via our Website and your visit to it. It is drawn up to meet the conditions for your updating as data subject regarding the processing the data is undergoing and your relevant rights, under the legislation in force including the General Data Protection Regulation (GDPR).
1.2. DATA CONTROLLER
The company ATHANASSIOU S.A. (hereafter, the “Company”) acts as Data Controller, in the sense that it determines the purposes and the means of the processing that your personal data undergoes.
1.3. DATA PROTECTION OFFICER
Regarding the management of the data it processes, the Company has assigned a Data Protection Officer (DPO) that you can contact using the following contact details: 63, Loutrou Street, Acharnai 13678, Athens, Greece. Tel.: 211 1047700. Email: dpo @ athanassiou . gr
2. PERSONAL DATA PROCESSING UPON YOUR VISIT AND USE OF THE WEBSITE
Your visit to our Website and/or the use of our online services is recorded. The IP address used to enter the Website with your terminal, the date and time, the type of browser and the operating system of your device, the pages you have access to and data for country of origin might be recorded.
This data is collected in order to improve our Website as well as our online services. Its processing is lawfully based on the promotion of the legitimate interest of the Company to protect its Website and improve the quality of its services.
Moreover, we process the personal data that you provide us with on your own initiative within the framework of preliminary actions necessary for the performance of a contract or transaction, as well as within the framework of the performance of the contract or transaction as such, for instance, as part of a registration, a survey, an online application or an online purchase (performance of contract).
We take and apply all the appropriate measures and procedures, technically and organizationally, to safeguard that the data that we are processing is adequately protected by violations and non-authorized use, as well as that its processing is lawful. These measures indicatively include the application of encryption methods, access control procedures, segregation of duties, internal control etc.
2.1. SUBSCRIPTION TO NEWSLETTER
If you wish, you can sign up via our Website (given that the service is available) in order to receive our newsletter by filling in the related sign-up form for this purpose. We will process the personal data we collect via the sign-up form in order to complete the delivery of the newsletters you have requested.
In any case, as long as you have provided us with your personal data and contact details within the framework of a transaction, we reserve the right to send you newsletters about products and services similar those involved in the transaction.
In every occasion of communication with you for reasons of information or promotion, you will have the option to cancel your subscription to the newsletter by following the link “unsubscribe”.
Take into consideration that you will be not receiving newsletters by us anymore after canceling your subscription.
You can contact us via email or via a contact form, as long as this is available. Our contact details can be found on our Website here. The personal data you have filled in the sign in form, as long as this is available, or you have sent on the email of the Company, will be processed solely to address your request. By filling in and submitting the contact form, you automatically give your consent for the processing of your data for the specific purpose.
In order to make your visit to our Website more pleasant and activate the use of specific functions, we might use “cookies” on various pages. “Cookies” are small text files stored in the device you are using upon your visit to the Website.
Some of the cookies that we are using are deleted after the completion of the browser session. Other cookies remain in your device and allow us and our collaborating companies to recognize your browser upon your following visit. You can set your browser in such a way so as to be informed separately for the cookie settings and decide specifically whether to accept them or block them in specific cases or in general.
For more information, refer to the Help function of the browser you are using for your navigation on the internet.
2.4. DATA RECIPIENTS
We can use third-party service providers to process your personal data. These service providers might be located in countries within and outside the European Union (EE) and the European Economic Area (EEA).
We ensure that these service providers are processing personal data in compliance with the European legislation about data protection, so as to safeguard an adequate level of data protection, even if this personal data is transferred to a country outside the EEA, on which a decision of the European Commission does not apply.
We do not transmit personal data to other recipients, unless we are obliged by law to do so. For more information regarding the appropriate assurances for the transmission of your data to third countries, you can contact our Data Protection Officer.
2.5. PERIOD OF RETENTION
The personal data provided via our Website is stored only until the purpose for which it has been submitted is met. If it needs to be retained, the period of retention according to the commercial and tax law, the period of storage for specific data can be up to 2 years.
Moreover, the periods of retention can be also modified due to the legal interest of the Company (for instance, to safeguard the safety of the data, to avoid abuse or to prosecute criminal activity).
3. YOUR RIGHTS
As data subject, you can contact the Data Protection Officer of our Company at any time by using the contact details mentioned above in section 1 to exercise your rights.
These rights are the following:
- Your right to get informed about the data processing and to receive a copy of the processed data.
- Your right to ask us to correct inaccurate data or update incomplete data.
- Your right to have your personal data deleted.
- Your right to restrict the processing of your data.
- Your right to get your personal data in a structured, widely used and machine-readable format and provide the data to another data controller of your choice.
- Your right to object to the processing of your data.
- Your right to withdraw a given consent at any time to stop data processing based on your consent.