PRIVACY POLICY

This privacy policy aims to provide the customers of the website information on how the company collect and process their personal data in accordance with the General Data Protection Regulation (GDPR). The respect of personal data is of the company's main concern.

Personal Data Responsibility

This privacy policy applies for the website and e-shop of the company with trade name "Vassilis Karelas" as aforementioned in the Terms & Conditions, under the section General Terms. The company control the ways that customers' personal data are collected and the purposes for which they are used, being aware that these personal data are valuable. The company's main effort is to protect personal data and allow the customers to have access to all their legal rights.

The policy regulates the data of both visitors of the website as well as the e-shop and how these are processed. If customers do not agree with this policy, they are free to quit either the website or the e-shop.

Personal Data Collected

By accessing the website www.vassiliskarelas.com, or subscribing to the mailing list, or placing an order through the e-shop, the customers provide the company with personal data such as full name, address(es), email address, phone number(s), and gender.

The email address provided to subscribe to mailing list or place an order, may be used to send information, respond to inquiries, inform about special actions of the company or send news and updates. In addition, a visitor's activity is tracked using Google Analytics. Google Analytics is subject to the privacy policy of Google, Inc., which could be found on Google's website. These data are used to optimise the website and do not include personally identifiable information such as name, contact information, or debit/credit card numbers.
The customers may withdraw their consent at any time or ask for their data to be deleted any time by contacting the company at info@vassiliskarelas.com.

In order to perform any transaction through the e-shop and to place any order, the customers will be asked to provide some personal data which are necessary to complete the transaction, such as full name, billing and delivery addresses, phone number(s), email address and debit/credit card details (card number, expiry date and security code) in case this payment method is selected. If the issue of invoice is selected, the customers will be asked to provide their company's VAT number and tax authority. If customers cannot provide all required information, the company may not be able to complete the order.

The company reassures that the requested personal data are the minimum required for the transaction to be completed. With the use of website, the customers provide their explicit consent to the company to process their personal data in order to fulfil the submitted order and declare that all information provided, are true and accurate.

Ways of Personal Data are Processed 
All personal data provided are kept in the company's records as long as the transaction is processing. After completion of the transaction and the period of time that is legally required for any possible review or return of goods, the data are securely stored.

How and Why the Company uses Personal Data
The company may process customers' personal data for keeping records of their interests and keep them informed about offers, sales and news relevant to its activities. The company may also use them to personalise user's experience and allow to deliver the type of content and product offerings in which they are most interested, or to improve the website in order to better serve them, or to allow the company to provide better service in responding to customer service requests or to administer a promotion, survey, or to quickly process the transactions, or to send periodic mailings regarding the order or other products and services, or to detect, prevent, mitigate and investigate fraudulent or illegal activities.

Customers' Right to Information, Access, Oppose and Delete of Personal Data

With respect to the customers' personal data, the customers retain, among other things, the rights to information, access, oppose, and deletion. In this context, at any time, they may have access to their personal data maintained in the company's databases to modify, correct or update these data, even to oppose the processing of personal data relating to them, as well as to revoke their consent with regard to their processing or to request their permanent deletion from the company's records. To do this, the customers need to follow the steps that will be listed each time in the message received through the relevant communication medium (such as e-mail or SMS messages).

If customers wish to withdraw their consent from all newsletters and their consent to the use of their personal data for marketing, promotional products or services, then they can use the unsubscribe link indicated in the messages received. Alternatively, they can contact the company directly at info@vassiliskarelas.com. The company may need to verify the customer's identity before proceeding with the request.

The customers may also at any time request that their personal data maintained in the company's records are permanently deleted, by contacting the company at info@vassiliskarelas.com. The company will respond within thirty (30) working days of receipt of such request. If the company does not respond or the response is not considered by the customers to be satisfactory, they have the right to appeal to the Data Protection Authority and request an examination of the response or omission of action.

In the event of a deletion request the company will:

i. will cease to use and make available the personal data

ii. will delete all customers' personal data from its databases other than those contained in emails, correspondence or other documents that may hold in order to be able to prove the terms of the contractual relationship with them or as otherwise provided by the applicable legislation.

iii. take into account the technology available and cost of implementation and will take reasonable technical and organisational measures to inform other data processors (processing on its behalf the customers' personal data, as specifically mentioned above), that have been requested the deletion of any links to such data or copies or reproductions of such personal data. 

The company may need to verify the customer's identity before proceeding with the request.

Personal Data Security

The company is committed in taking all appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing and against accidental loss, destruction or damage to personal data. Customers' personal data, after the completion of the purchase of any good are transmitted across the internet securely using encryption. The information provided will be held in the company's systems, located on its premises or outsourced to an appointed third party. The company may also allow access to information by other third parties who act on behalf for the purposes described in this privacy policy or for other purposes approved by the customers.

The company has taken all necessary technical measures and precautions to ensure the security and appropriate use of customers' data. However, not any technical measure of electronic storage is considered to be 100% secure.

The company shall process the above data in accordance with the GDPR (EU 2016/ 679) and the relevant national and EU legislation.

The personal data disclosed to the relevant bank or payment institution for payment execution shall be deleted from the company's database immediately after the completion of the order, thus ensuring a higher level of security.

Privacy Policy Modification

The company reserves the right to modify this policy without any prior notice if deemed necessary to be in compliance to the relevant legislation. The users are encouraged to consult this policy regularly to be aware of potential modifications and adaptations.

Contact

For additional clarifications regarding this privacy policy the customers are welcomed to contact the company using the information defined in this policy.


Privacy Policy updated on August 1st, 2020