Privacy and Cookies Policy

SIGMA AND KAPA’S PERSONAL DATA PROTECTION STATEMENT

The protection of your personal data is important to us. This privacy statement explains what kind of personal data we collect from you through our websites that you visit and how we lawfully use this data.

Who we are and how to contact us
This website belongs to the company S and K Eisagogiki, based in Thessaloniki, 10, Alexandroupoleos Street, which is also the Data Controller for the Personal Data we process. The Data Protection Officer in our company for personal data protection issues is Stefanogiannis Economou, telephone: 2107231630, e- mail : info@elo.gr

You can contact us for any questions or other inquiries regarding the collection and use of Personal Data or this privacy statement and for the exercise of your legal rights on the protection of personal data at the e-mail : info@elo.gr

What is Personal Data and its processing?

1. Personal data is any information relating to an identified or identifiable natural person (called the “data subject”); an identifiable natural person is the one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person,
2. Processing of personal data is any operation or set of operations which is performed upon personal data or upon sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction,

General information about the Personal Data we collect when you visit our website and the purposes for which we collect and process it.
Like all businesses that have an online presence, we collect data to make our website work effectively and offer you the best possible experience and the information you are looking for during your browsing. Some of this data is provided directly by you, such as when you create a personal account to use our website by filling out a relevant form or contacting us for support or information. With your consent, we obtain certain data by recording how you interact with our website, for example, using technologies such as cookies and the data we collect may include the IP address or information about the browser you use while navigating our website and the links selected. For the collection of data through cookies, we ask for your explicit consent when you enter our website in accordance with the cookie policy that you can see below.

Personal data we collect when you contact us and the purposes of their collection and processing.
When you contact us by email or telephone, e.g. to request information about services, prices, offers or other material, we may collect from you your full name, email address and telephone number or other contact details as well as the content of the email you sent us because this is necessary for the communication with you that you requested from us.

If you receive an email from us, you can unsubscribe from our company’s email list by following the relevant unsubscribe instructions included in each email.

Informing you about your rights.
The legislation provides for data subjects the right to submit a request to the controller for access and correction or deletion of personal data or restriction of processing concerning the data subject or a right to object to processing, as well as a right to data portability , as well as the right to withdraw any consent you have given with future effect.

For related issues you can contact the “Personal Data Protection Authority: Kifisias 1-3, 115 23 Athens, Greece”

In detail regarding the rights of the data subject:

Right of access of the data subject

1. The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed and, where that is the case, the right of access to the personal data and to the following information:
   • the purposes of the processing,
   • the relevant categories of personal data,
   • the recipients or categories of recipients to whom the personal data have been or are to be disclosed, in particular recipients in third countries or international organisations,
   • if possible, the period for which the personal data will be stored or, where this is not possible, the criteria determining that period,
   • the existence of the right to submit a request to the data controller for rectification or erasure of personal data or restriction of the processing of personal data concerning the data subject or the right to object to such processing,
   • the right to submit a complaint to a supervisory authority,
   • any available information regarding the origin of the personal data, when the personal data are not collected from the data subject, 
   • the existence of automated decision-making, including profiling, as provided for in Article 22 (1) and (4) of the GDPR and, at least in such cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
2. When personal data are transferred to a third country or to an international organisation, the data subject has the right to be informed of the appropriate safeguards in accordance with Article 46 concerning the transfer.
3. The data controller shall provide a copy of the personal data being processed. For additional copies that may be requested by the data subject, the controller may charge a reasonable fee for administrative costs. If the data subject submits the request by electronic means and unless the data subject requests otherwise, the information shall be provided in a commonly used electronic format.
4. The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.

Right to rectification
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of a supplementary statement.

Right to erasure

1. The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall be obliged to erase personal data without undue delay, if there is one of the following reasons :
   • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
   • the data subject withdraws the consent on which the processing is based
   • the data subject objects to the processing and there are no compelling and legitimate reasons for the processing
   • the personal data was processed unlawfully,
   • the personal data must be erased in order to comply with a legal obligation under Union or Member State law to which the controller is subject,
   • the personal data have been collected in connection with the provision of information society services referred to in Article 8(1) of the GDPR.

The right of data erasure does not apply to the extent that processing is necessary:

1. for the exercise of the right to freedom of expression and the right to information,
2. for compliance with a legal obligation requiring processing under Union law or the law of a Member State to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority assigned to the controller,
3. for reasons of public interest in the field of public health in accordance with Article 9, par. 2, (h) and (i), as well as Article 9, par. 3 of the GDPR,
4. for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes.
5. for the establishment, exercise or support of legal claims.

Right to restriction of processing

1. The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:
   • the accuracy of the personal data is contested by the data subject, for a period of time enabling the controller to verify the accuracy of the personal data,
   • the processing is unlawful and the data subject opposes the erasure of the personal data and requests, instead, the restriction of their use,
   • the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims,
   • the data subject objects to the processing pursuant to Article 21, par. 1 of the GDPR, pending verification of whether the legitimate grounds of the controller override those of the data subject.

Right to data portability

1. The data subject has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format, and has the right to transmit those data to another controller without objection from the controller to whom the personal data were provided, when:
   • the processing is based on consent pursuant to Article 6, par. 1 (a) or Article 9 par. 2 (a) or on a contract pursuant to Article 6 par. 1 (b) of the GDPR and
   • the processing is carried out by automated means.

Right to object

1. The data subject has the right to object, at any time and for reasons relating to his or her particular situation, to the processing of personal data concerning him or her by automated means.
2. If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning him or her for such marketing, including profiling, if it is related to such direct marketing.
3. When data subjects object to processing for direct marketing purposes, the personal data shall no longer be processed for these purposes.

Data transfer to third countries
Our company does not transfer your data to third countries.

Transfer of data to third parties.
Our company does not transfer your data to third parties unless this is required by law.

How long do we retain Personal Data?
Your Personal Data will be retained for as long as it is necessary for the specific business purpose or for the purposes for which it was collected. If there has been no transaction with us and there is no special reason, your Personal Data will be deleted 1 year after your last communication with us. If you have made a transaction with us, your data will be deleted no later than 20 years from the last transaction with us.

How do we secure Personal Data?
Our company, taking into account the latest developments, the cost of implementation and the nature, scope, context and purposes of the processing, as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons from the processing, effectively implements, both at the time of determining the means of processing and at the time of processing, appropriate technical and organizational measures, in a way that meets the requirements of the law and protects the rights of data subjects in accordance with our company’s security policy.

What happens when we change this privacy statement?
We may update this statement from time to time for any reason. We will notify you of changes to it by posting the new statement here or, if the changes to the statement are essential in relation to the information we collect from you, by posting a prominent notice on our website or, if necessary, by sending an email to the address you have provided to us prior to the implementation of such changes. If required, we will ask for your consent.

COOKIE POLICY

Cookie Notice.
This website uses a technology called ” cookies “.

What are Cookies?
A cookie is a small text file that is placed on your hard drive by a server. Cookies do not pose any risks to the computer of the user/visitor of our website.

Cookies are divided into the following categories:

Strictly Necessary
These cookies are essential to enable you to browse our business website and use its features, e.g. access areas of the website or save products to a shopping cart.

Useful for website performance 

These cookies collect information about how visitors use a website, e.g. which pages visitors go to most often. They are used to improve how a website works in future versions.

Useful for website functionality 

These cookies allow the website to remember choices you have made, e.g. your username, language or the region you are in, and provide a better personal experience.

Useful for displaying content relevant to your interests.
These cookies are used to offer content that is more relevant to you and your interests.

Consent to the use of cookies by the website.
You have the option to accept or reject cookies (except those that are technically necessary for the operation of the website) by following the instructions displayed when you enter this website. If you choose not to accept cookies, you may not be able to enjoy all the interactive features of this website and other websites you visit.

Specifically, when you enter this website, you are asked whether or not you want cookies by receiving the following message on your screen:

Our company uses cookies to improve your browsing experience on the website. Please read the Cookies Policy and select either the “Accept” box or the “Reject” box if you do not wish to use cookies while browsing this website.

In case the web browser you are using automatically accepts cookies, you can modify its settings to remove them completely or to receive a warning before a cookie is saved, if you prefer.

If someone does not wish to have information collected through cookies, he or she can configure his or her browser (web browser) on the internet, to delete the cookies already existing on his hard drive and to choose either to automatically reject all new cookies, or to be asked each time a cookie is about to be installed on the computer’s hard drive, whether he wants to reject or accept it.

If you initially accept cookies and later change your mind, you can change your mind later by modifying your selection.
You can learn more about how to manage cookies by going to the Help section of your browser.

Detailed information about the company’s Personal Data Policy can be found here .