PERSONAL DATA PROTECTION STATEMENT OF THE COMPANY S AND K IMPORTS AND INTRODUCTION
The protection of your personal data is important to us. This personal data protection statement explains what kind of personal data we collect from you through our websites you visit and how we legally use these data.
Who we are and how to contact us
This website belongs to the company S and K Imports, based in Thessaloniki, Alexandroupoleos Street no. 10, which is also the Data Controller for the Personal Data we process. The Data Protection Officer of our company for issues of personal data protection is Mr. Stefanogiannis Oikonomou, telephone: 2107231630, e-mail: info@elo.gr
You can contact us for any questions or other inquiries regarding the collection and use of Personal Data or this privacy statement and for exercising your rights under the personal data protection law at e-mail: info@elo.gr
What are Personal Data and their processing?
Personal data (or data of a personal nature) is any information relating to an identified or identifiable natural person (called “data subject”); an identifiable natural person is one whose identity can be determined, directly or indirectly, particularly by reference to an identifier such as name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural, or social identity of that natural person.
Processing of personal data means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
General information about the Personal Data we collect when you visit our website and the purposes of their collection and processing
Like all businesses with an online presence, we collect data to ensure our website functions effectively and to offer you the best possible experience and information you seek while browsing. Some of these data are provided directly by you, such as when you create a personal account for website use by filling out the relevant form or contact us for support or information. With your consent, we obtain certain data by recording how you interact with our website, for example, using technologies such as cookies, and the data we collect may include your IP address or browser information used during browsing and the links you clicked. For data collection via cookies, we ask for your explicit consent upon entering our website in accordance with the cookie policy below.
Personal Data we collect when you contact us and the purposes of their collection and processing
When you contact us by e-mail or telephone, e.g., to request information about services, prices, offers, or other material, we may collect your full name, email address, telephone number or other contact details, as well as the content of the e-mail you sent because this is necessary for the communication you requested.
If you receive emails from us, you can unsubscribe from our company’s email list by following the relevant unsubscribe instructions included in every email.
Information about your Rights
The law provides data subjects with the right to submit requests to the data controller for access and correction or deletion of personal data concerning them, or restriction of processing, objection to processing, as well as the right to data portability, and to withdraw any consent given with future effect.
For related matters, you can contact the “Data Protection Authority: Kifisias 1-3, 115 23 Athens, Greece.”
Detailed information about the rights of the data subject:
Right of access of the data subject
The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning them are being processed, and if so, access to the personal data and the following information:
- the purposes of the processing,
- the categories of personal data concerned,
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly recipients in third countries or international organizations,
- if possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period,
- the existence of the right to request from the data controller rectification or erasure of personal data or restriction of processing concerning the data subject or to object to such processing,
- the right to lodge a complaint with a supervisory authority,
- where the personal data are not collected from the data subject, any available information as to their source,
- the existence of automated decision-making, including profiling as provided in Article 22 paragraphs 1 and 4 of the GDPR, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
When personal data are transferred to a third country or international organization, the data subject has the right to be informed about the appropriate safeguards pursuant to Article 46 regarding the transfer.
The data controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the data controller may charge a reasonable fee based on administrative costs. If the data subject submits the request electronically, and unless otherwise requested, the information shall be provided in a commonly used electronic form.
The right to obtain a copy referred to above shall not adversely affect the rights and freedoms of others.
Right to rectification
The data subject has the right to obtain from the data controller without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to erasure
The data subject has the right to request from the data controller the erasure of personal data concerning them without undue delay, and the data controller is obliged to erase personal data without undue delay if one of the following grounds applies:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
- the data subject withdraws consent on which the processing is based,
- the data subject objects to the processing and there are no overriding legitimate grounds for the processing,
- the personal data have been unlawfully processed,
- the personal data have to be erased to comply with a legal obligation under Union or Member State law to which the controller is subject,
- the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.
The right to erasure does not apply to the extent that processing is necessary for:
- exercising the right of freedom of expression and information,
- compliance with a legal obligation which requires processing under Union or Member State law or for the performance of a task carried out in the public interest or in the exercise of official authority,
- reasons of public interest in the area of public health according to Article 9(2)(h) and (i), as well as Article 9(3) of the GDPR,
- archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes,
- establishment, exercise, or defense of legal claims.
Right to restriction of processing
The data subject has the right to obtain from the data controller restriction of processing when one of the following applies:
- the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy,
- the processing is unlawful and the data subject opposes the erasure of the personal data and requests restriction of their use instead,
- the controller no longer needs the personal data for the purposes of processing but they are required by the data subject for the establishment, exercise, or defense of legal claims,
- the data subject has objected to processing pursuant to Article 21(1) pending verification whether the legitimate grounds of the controller override those of the data subject.
Right to data portability
The data subject has the right to receive personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format, and the right to transmit those data to another controller without hindrance from the original controller, when:
- the processing is based on consent or contract under Article 6(1)(a) or 9(2)(a) or Article 6(1)(b) of the GDPR,
- the processing is carried out by automated means.
Right to object
The data subject has the right to object at any time, for reasons relating to their particular situation, to the processing of personal data concerning them carried out by automated means.
Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to processing for such marketing, including profiling related to direct marketing.
When data subjects object to processing for direct marketing purposes, personal data shall no longer be processed for such purposes.
Transfer of data to third countries
Our company does not transfer your data to third countries.
Transfer of data to third parties
Our company does not transfer your data to third parties unless required by law.
How long do we store Personal Data?
Your Personal Data will be retained as long as necessary for the specific business purpose or the purposes for which they were collected.
If you have not conducted a transaction with us and there is no special reason, your Personal Data will be deleted 1 year after your last communication with us.
If you have made a transaction with us, your data will be deleted at the latest 20 years from the last transaction with us.
How do we secure Personal Data
Our company, taking into account the latest developments, the implementation cost, and the nature, scope, context, and purposes of processing, as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons from processing, effectively applies, both at the time of determining the means of processing and at the time of processing, appropriate technical and organizational measures, so as to meet the legal requirements and protect the rights of data subjects according to our company’s security policy.
What happens when we change this statement?
We may update this statement from time to time for any reason. We will notify you about changes by posting the new statement here or, if the changes are significant regarding the information we collect from you, by posting a prominent notice on our website or, if necessary, by sending an email to the address you have provided us before implementing these changes. If required, we will ask for your consent.
COOKIE POLICY
Information about Cookies.
This website uses a technology called “cookies.”
What are Cookies?
A cookie is a small text file placed on your hard drive by a server. Cookies do not pose risks to the user’s/visitor’s computer on our website.
Cookies are classified into the following categories:
- Strictly necessary cookies
These cookies are essential to allow you to browse our website and use its features, e.g., accessing certain areas of the site or saving products in a shopping cart. - Performance cookies
These cookies collect information about how visitors use a website, e.g., which pages visitors go to most often. They are used to improve how a website functions in future versions. - Functionality cookies
These cookies allow the website to remember choices you have made, e.g., username, language, or region, and provide a better, personalized experience. - Targeting or advertising cookies
These cookies are used to deliver content that is more relevant to you and your interests.
Consent to the use of cookies on the website
You have the option to accept or reject cookies (except those that are technically necessary for the website’s operation) by following the instructions displayed when you enter this website. If you choose not to accept cookies, you may not enjoy all the interactive features of this and other websites you visit.
Specifically, upon entering this website, you will be asked if you want cookies by displaying the following message on your screen:
“Our company uses cookies to improve your browsing experience on the website. Please read our Cookie Policy and choose either the ‘Accept’ box or the ‘Reject’ box if you do not wish to use cookies during your browsing on this website.”
Managing cookies through your web browser
If your web browser accepts cookies automatically, you can change its settings to remove them entirely or to receive a warning before a cookie is stored, if you prefer.
If you do not want your information collected via cookies, you can configure your browser to delete existing cookies and either automatically reject all new cookies or ask you each time a cookie is about to be stored on your computer’s hard drive, so you can accept or reject it.
If you initially accept cookies but later change your mind, you can change your decision by modifying your settings.
You can learn more about managing cookies in your browser’s help section.
Detailed information about the company’s Privacy Policy can be found here.
