Last updated: 26.10.2020
This Privacy Notice describes how we collect, use, process, and disclose your personal data in conjunction with your access to and use of www.cvardakou.com (hereinafter “Website” or “Christiana Vardakou” or simply “we“).
You must carefully read this Privacy Notice, which has been written clearly and simply to facilitate its understanding and to freely and voluntarily determine whether you wish to provide your personal data to Christiana Vardakou.
2. Who is the Data Controller?
Data Controller of the Users’ personal data of the Website www.cvardakou.com (hereinafter “Users” or “you”) within the meaning of the General Data Protection Regulation (EU) 2016/679 (“GDPR”) is Christiana Vardakou. The office of Christiana Vardakou is located in Chrysostomou Smyrnis 53, Neo Psychiko 15451, Athens, Greece (tel.+30 698720567, email: firstname.lastname@example.org)
3. What Personal Data do we collect and what are the purposes and the legal bases of the processing?
Depending on how you interact with us, we will process your personal data for various purposes. We will collect and process personal data you voluntarily provide us in connection with the following:
When you create an account we ask you to provide your full name, e-mail, telephone and address (City, Post code, Country, Region/State) and a password. The purpose of the processing is the customer authentication and to facilitate the customers' activities on the website, namely to shop faster, be up to date on an order's status, and keep track of the previous orders. The legal basis for the processing is the performance of the contract. Your email may also be used by us for marketing purposes, such as to send you offers or news about our products and services. The legal basis for this processing is our legitimate interest to pursue the expansion of our business.
When you carry out a transaction as a new customer, we ask you to provide billing details such as full name, e-mail, telephone and address (City, Post code, Country, Region/State). In order to complete your order, you have to confirm that you have read this Privacy Notice. All this information is necessary for the performance of the order, namely the delivery of the products or services and the communication with you in this regard. The legal basis for the processing is the performance of the contract.
We collect similar information when you make an order through social media or by telephone.
When you fill in the online contact form (name, e-mail address, enquiry), we process this data to fulfill your requests by answering your questions and providing information. In this case, the legal basis for the processing is the consent that you provide by clicking on the specific tick-box before submitting your inquiry.
When you want to subscribe to our Newsletter, we ask for a valid e-mail address. We will send an automated email to the specified email address after the first registration step to be able to check whether you are the owner of the specified email address or whether the owner agrees to receive the newsletter. We will add the e-mail address provided to our mailing list only after confirmation of the newsletter registration via a link in the confirmation e-mail. We do not collect any further data beyond the email address and the information required to confirm the registration. When you receive our newsletter, you may unsubscribe from it at any time through the instructions that we provide you within each email. We offer the Newsletter to inform you about the latest deals of Christiana Vardakou. The legal basis for the processing is your consent.
Although we ask you to provide payment information (such as credit card numbers) in connection with a transaction when you become a member, we do not have access to or store this data. Only payment service providers have access to this data.
4.Who do we share your personal data with?
Your data shall not be disclosed to any third party, apart from specific third partners, who are required to have access to personal data for the purpose of providing their services (e.g. technical support etc.) and for the purposes of the performance of the order (courier service providers, payment service providers). All third parties are bound by non-disclosure agreements.
5. Data Retention
6. Security Measures
We will process your data at all times in a confidential way, maintaining the mandatory duty to secrecy regarding the said data under the provisions set out in applicable regulations. We have adopted measures of a technical and organisational nature required to guarantee the security of your data and prevent them from being altered, lost, processed, or accessed illegally, depending on the state of the technology, the nature of the stored data, and the risks to which they are exposed. We store all the data in the EU.
7. Data subjects’ rights
· For as long we retain your data, you, as data subjects, have the right to request at any time from Christiana Vardakou:
-to obtain confirmation about whether or not your personal data are being processed by us and to request access to your personal data that we hold;
- to rectify any inaccurate or incomplete data;
- erasure of your personal data to the extent that they are no longer necessary for the purpose for which we need to keep processing them, as we have explained above, or when we are no longer legally permitted to process them;
- limitation to the processing of your personal data, which entails that in certain cases you can request us to temporally suspend the processing of the data or that we keep them longer than necessary;
- if you have given us your consent to process your data, you also have the right to withdraw such consent at any time; To revoke your consent for a certain processing activity you may contact us at email@example.com. In the event that you withdraw your consent, this will not affect the legality of the processing carried out previously.
- portability of your personal data.
Finally, we inform you that you have the right to lodge a complaint regarding the processing of your personal data by us before the Hellenic Data Protection Authority (DPA).
8. Changes to the Privacy Notice
We may amend the information contained in this Privacy Notice when we consider this appropriate. Should we do so, we will notify you by various procedures through the Website, or we may even send you a notice to your email address when the change in question is relevant to your privacy, for you to be able to review the changes, assess them and, as the case may be, object or unsubscribe from any service or functionality. In any case, we suggest you to review this Privacy Notice from time to time in case minor changes are made or we make any interactive improvement. We will also change the “Last Updated” date at the beginning of this Privacy Notice. Any changes we make to our Privacy Notice are effective as of this Last Updated date and replace any prior Privacy Notices.
In case you need any clarification about the processing of your Personal Data, please do not hesitate to contact us at firstname.lastname@example.org.