PRIVACY STATEMENT
This Privacy Policy (hereinafter referred to as the “Policy”) provides information regarding the collection, storage, processing and use of your personal data. The collection, use and disclosure of your information by us is based on your consent or the provisions of the General Data Protection Regulation 679/2016 (hereinafter “GDPR”) and the Law 4624/2019. Furthermore, it shows you how we shield your information and data, ensuring reliability and confidentiality.
Our company Chapter Five SA is committed and makes the protection of your personal data a top priority. We fully understand the importance of your personal information and make every effort to carefully store and process the information you share with us.
This Privacy Statement describes the personal data that the company collects about you, how we use and protect your personal data, and the options you have regarding how we use that data. The Company is responsible for processing the personal data of the users / visitors of our website.
We recognize that the protection of personal data is an ongoing responsibility and we will therefore update and amend this Statement from time to time. Please visit our website, www.pickashop.gr from time to time, to make sure that you are informed and satisfied with any changes. In case of doubt regarding the term of this Privacy Statement, you can contact us via e-mail at [email protected].
1. What is Personal Data?
“Personal Data” means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
2. What is Personal Data Processing?
“Processing of Personal Data” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
3. What personal data do we collect about you?
3.1. Full name. We collect the names (name, surname) for the needs of order execution from our website www.pickashop.gr
3.2. Postal address. We collect the home address of our customers for the purpose of delivery and completion of the order.
3.3. Email address. We collect the email address of our customers to confirm the order.
3.4. Other contact details. We collect other contact information, such as the telephone number of our customers or the contact persons of our customers, in order to provide our services better and faster.
3.5. Pricing details. We collect the data of our customers that are necessary for the invoicing of our services, such as for example the Tax Identification Number, Tax Office, etc.
4. How do we collect your personal data?
We collect your personal data:
4.1. When you express your interest in our services;
4.2. When you make purchases from our e-shop;
4.3. When we provide you with our services;
4.4. When you visit our website.
We do not share your personal data with anyone and we only share it with third parties who facilitate the provision of our services to you.
5. How do we use (process) your personal data?
We use your personal data for the following purposes:
5.1. To execute your order.
5.2. For your invoicing.
6. Legal basis for the processing of your personal data by our company
6.1. The processing of your personal data for the sale of our products and services, is necessary for the overall management of your order by the company and its partners. This management includes the detection of online fraud and fraud relating to modern payment instruments, the prevention and management of payment (non-payment) incidents and the maintenance of the company’s rights in relation to its commercial activity.
6.2. The processing of your personal data for marketing purposes and / or promotions / profiling is based solely on your consent.
6.3. In some cases the processing of your personal data is necessary for the purposes of our legal interests or for the purposes of our compliance with national and / or European legislation.
7. Retention time of your personal data
7.1. For the purpose of executing your order, we will retain your personal data for a reasonable period of time from the completion of the order and to fully meet your requests in relation to the respective order.
7.2. For marketing / promotional purposes, we will retain your personal data throughout our trading relationship, unless in the meantime you declare that you no longer wish to receive updates for such purposes.
8. Data protection guarantees
When you provide us with your personal information, we take all necessary steps to ensure that they are kept secure. In order to protect your personal data, we take physical, technical and organizational measures to protect them. We update and control the security technology we use on an ongoing basis. We restrict access to your personal data only to those employees and stores of our network, who need to know this data in order to provide services to you. In addition, we educate employees about the importance of confidentiality and the confidentiality and security of your personal data.
9. When and how do we provide your personal data to third parties?
As part of our activities, we may use third party providers who provide services on our behalf. Thus, we may need to share your personal data with them only after we have informed you and obtained your express consent to that effect. In any case, we share with them only your personal data that are necessary to provide the services we request and we require them to protect your data and not use it for other purposes.
10. Your Rights
You have the following rights:
10.1. Right to transparent information, communication and modalities for the exercise of the rights of the data subject (Article 12 of the GDPR), i.e. your right to be informed about the use of your personal data {as detailed in this Privacy Policy}.
10.2. Right to information and access to your personal data depending on whether this data is collected by you or not (Articles 13,14 of the GDPR).
10.3. Right of access (Article 15 of the GDPR) to the personal data we have collected from you concerning you.
10.4. Right to rectification (Article 16 of the GDPR) of any inaccurate personal data we have.
10.5. Right to erasure (“right to be forgotten”) (Article 17 of the GDPR) of the personal data we have concerning you.
10.6. Right to restrict the processing of your personal data (Article 18 of the GDPR).
10.7. Right of notification regarding rectification or erasure of personal data or restriction of processing (Article 19 of the GDPR).
10.8. Right to data portability (Article 20 of the GDPR), i.e. the right to transmit your data either to you or to another service provider.
10.9. Right to object (Article 21 of the GDPR) to the processing of your personal data.
10.10. Right not to be subject to a decision based solely on automated processing, including profiling (Article 22 of the GDPR).
10.11. Right to withdraw your already given consent (Article 7 of the GDPR, i.e. to withdraw your consent at any time for processing based on the consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent until its withdrawal.
10.12. Right to lodge a complaint to the competent supervisory authority, Personal Data Protection Authority (1-3 Kifissias Ave., Athens, PC 115 23, +30 210 6475600, [email protected]).
11. Transfer of personal data outside the EU
The personal data we collect from you are not transmitted or processed outside the European Union. In the event that this happens, users will be informed by updating this privacy policy.
12. How to contact us?
You can contact us for any question regarding the processing of your personal data or the use of cookies by us or to exercise your rights, using the online contact form of our website or sending an email to [email protected].
We shall respond to your requests free of charge without delay, and in any case within (1) one month from the time we receive your request. However, if your Request is complicated or there is a large number of your Requests we will inform you within the month if we need to receive an extension of another (2) two months within which we will respond to you.
If your Requests are manifestly unfounded or excessive, in particular due to their recurring nature, the Company may impose a reasonable fee, taking into account the administrative costs of providing the information or performing the requested action or refusing to follow up on the Request. .
13. Applicable law when processing your data
The applicable Law is the Greek Law, as formulated in accordance with the General Data Protection Regulation (EU) 2016/679, the Law 4624/2019 and in general the current national and European legislative and regulatory framework for the protection of personal data. The courts of jurisdiction for the resolution of any disputes related to your Data are the Courts of Athens.
14. Changes and Updates
This Statement was last updated on 19/03/2021. We update this Policy whenever necessary. If there are significant changes to the Policy or the way we use your Personal Data, we will post an update on this site, and we will notify you in any appropriate way. We encourage you to read this Policy at regular intervals to know how your Personal Data are protected.