DATA PROTECTION POLICY

This describes our policy regarding the personal data we collect from the visitors of our pages (hereinafter “users”).

Responsible for Processing is Nikolaos Roumeliotis, based in Thessaloniki, 20 Fragkon St., ΑΦΜ 113490074, Δ.Ο.Υ. A Thessaloniki, E-mail info@roumelstore.gr (“Processor”).

In the daily activities of our business and our website we process data concerning natural persons, including:

• Customers
• Collaborators, performing the processing on our behalf.
• Visitors of our website
• Other interested parties (employees, suppliers)

Our company complies with the General Data Protection Regulation (2016/679 EU GDPR) and any other European and national legislation concerning the protection of personal data, electronic communications, etc. and is committed to ensure the protection of your Data at all times:

• The data are collected for specific, clear and legitimate purposes and are not further processed in a manner incompatible with those purposes.
• We collect the necessary, for each purpose of processing personal data and process them legally, fairly and in a transparent manner in relation to the data subjects.
• We ensure that they are as accurate and up-to-date as possible and that we maintain them only for the period of time necessary for the purposes for which they are processed.
• In any case, the criterion we use to determine the storage period is based on and takes due account of the need to comply with any relevant legal requirements as well as the principle of data minimization.
• We process the Data electronically and manually and take all appropriate measures to protect personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Collection, purpose, legal basis of the processing and retention time of your data

1. Data that we collect automatically through our website

The website https://roumelstore.gr/ uses the SSL protocol (SecureSocketsLayer) which uses methods of encrypting the data exchanged between two devices (most commonly PCs), establishing a secure connection between them through the internet, which results in protection of your personal data.

When you visit our website https://roumelstore.gr/, our server collects the so-called server logs (logfiles) and specifically:

• Date and time of entry to the site.
• The volume of data sent in bytes.
• The browser and operating system you used to access the site.
• Internet Protocol Address (IP address) when you log in to the site. The IP address is personal data along with the date and time of your visit, although we cannot identify you with this data alone.

The legal basis on which we collect your IP address and keep it in special files (log files) is our legitimate interest in the processing of this data in order to ensure the security of networks, information and services from accidental events or illegal or malicious actions compromising the availability, authenticity, integrity and confidentiality of stored or transmitted data (eg ddos “denial of service” attacks), as well as our legal obligation to provide a more secure environment for the processing of your personal information. (GDPR Article 6 (1) indents f and c). The data will not be transferred or used in any other way. However, we reserve the right to check server logs (server logs) if specific indications of unauthorized use are detected.

2. Customer Data.

When you visit our business, we collect your personal data such as name, patronymic, E-mail, postal address, gender, age, occupation, address, and any other information related to the provision of our services to you.

The purpose of the processing of your data is to provide you with the requested services and the legal basis of the processing is the execution of the contract between us (article 6 par. 1b ‘and 9 par. 2dGGPD), as well as our compliance with legal obligations. Retention time of your data is the required and possibly longer if legal claims arise.

It is clarified that we do not have a publicly accessible list of email addresses of our subscribers / users. Therefore, any personal data (e.g. usernames, etc.) that appear anywhere on the pages and services of the Processor’s website are intended solely to ensure the operation of the respective service and may not be used by any third party, without complying with the provisions of the legislation on the protection of personal data processing, as it applies at any time. The Editor acts in accordance with applicable law and aims to best practice good practice regarding the Internet. Your personal information is kept secure for as long as you are registered in a service of the Processor and is deleted after the end of your business relationship with the Processor in any way.

3. Data we collect via email and the Contact Form

In the context of communication between us via email and the Contact Form, we collect your name, email address and any other information you provide to us. This data is stored and used solely to meet your request. The legal basis for the processing of your personal data is your consent (GPA, article 6 par. 1a). Your data will be deleted after the final processing of our communication. This will happen after the completion of the purpose and scope of our communication, provided that there are no legal requirements for the storage of such data.

4. Send newsletter

With your consent we will collect your E-mail in order to send you a newsletter with the news of our Company and articles that you may find interesting. The legal basis for the processing is your consent (GIP, article 6 par. 1a) and you have the right to revoke it at any time.

5. Supplier data

For the execution of the contract between us we collect the data of our suppliers such as name, address, contact details, shipping details, financial data, which you provide to us yourself. The legal basis for the processing of your data is the execution of the contract and our compliance with legal obligations (GCP article 6 par. 1b and c), and we maintain them for a period of up to twelve years from the last provision of services, or as required by tax and any other relevant legislation.

Who has access to your data. Data transfers.

Your data is accessible by our employees as well as by any other person authorized to process your data during his duties. In addition, we work with third parties, natural or legal, professionals, independent consultants, etc. who provide us with commercial, professional or technical services (e.g. web hosting, accounting services, transport services) for the purposes mentioned above, and support our business in whole or in part, in relation to our activities.
Where applicable, such natural / legal persons will act as Joint or Independent Processors, Processors or persons authorized to process personal data for the same purposes as above, with the same security measures and in accordance with applicable legal liabilities.

Before the third party receives the Personal Data, we must: (1) complete the privacy check to assess the privacy practices and risks associated with these third parties (2) obtain contractual guarantees from these third parties that Personal Data will be processed in accordance with our instructions and in accordance with this Policy and applicable law, that they will immediately notify our Company of any Personal Data Protection or Security events, failure to comply with the standards set out in this Policy and existing legislation , that they will work together to remedy any such incident, that they will help us meet the rights of the individuals defined below, and that they will allow the Controller to oversee their processing of compliance with these requirements.

Finally, the data can be further transmitted to public authorities and institutions, as well as to our legal assistants (legal and insurance companies), for legal purposes.

Apart from the above, the Data will not be disclosed to third parties, individuals or legal entities and will not be disseminated.

Our company does not transfer Personal Data outside the EU, and if necessary (for example, in order to use Cloud services) this will be done under the terms and conditions set out in Articles 44 et seq. standard contractual clauses approved by the European Commission or in countries considered safe by the European Commission.

Use of cookies 

For the better operation of the website and your better navigation, as well as for the better provision of our services, we use cookies. Cookies are text files with information, which the web server (web server of the Editor) stores on your computer when you visit this website. In this way, the site remembers your actions and your preferences for a period of time, in order to have, for example, personalization of online ads, traffic analysis or other statistical analysis, and provision of the services you have requested. This way you do not have to enter these preferences every time you visit the site or browse its pages. Only the Processor and its specially authorized associates have access to any information regarding cookies.

You can control and / or delete cookies depending on your wishes. Details can be found at: aboutcookies.org. In case you choose to disable cookies on the website https://roumelstore.gr/ the functionality of some pages may be lost or reduced.

See here which Cookies we use:

More information on the use and management of cookies on the website can be found on the websites:

About cookies and their management:

http://www.aboutcookies.org/default.aspx

http://www.whatarecookies.com/

About Google Policy:

https://www.google.com/about/company/user-consent-policy.html

https://www.google.com/policies/technologies/cookies/

http://www.google.com/intl/el/policies/privacy/partners/

Data Security and Integrity 

The Controller implements reasonable technical and organizational security policies and procedures in order to protect personal data and information from loss, misuse, alteration or destruction.

In addition, we strive to ensure that access to your personal data is restricted to those who need to be aware of it. People who have access to the data are obliged to maintain the confidentiality of this data.

Please note that the transmission of information over the internet is not completely secure. Although we make every effort to protect your personal data, we cannot guarantee the security of the data transmitted on our site. After receiving your information we will implement strict security procedures and functions to try to prevent unauthorized access.

We make every reasonable effort to keep the personal data we collect from you only for the period for which we need this data for the purpose for which it was collected or until its deletion is requested (if this occurs earlier), unless we continue to we comply with them as provided in the current legislation.

Links to other sites

Our website may contain links to other websites, which are governed by other privacy statements, the content of which may differ from this Privacy Statement. Please review the privacy policy of each site you visit before submitting any personal information to it. Although we strive to provide links only to sites that share our high standards and respect for privacy, we are not responsible for the content, security or privacy practices of other sites.

Of the underaged

When we need to process data of minors (e.g. data of minor patients), i.e., according to the GDPR, those who have not completed the 15th year, the processing is done only with the written and explicit consent of the persons who have the custody of the minor. In any case, we make reasonable efforts to verify that the consent is given or approved by the person who actually has the parental responsibility of the child, i.e. by authentication and any other available information.

Rights of Subjects

You may contact us by mail or e-mail at the addresses referred to in paragraph (1) above, to exercise your rights in accordance with Articles 15 et seq. You can, for example, request an up-to-date list of people who have access to your data, get confirmation of whether or not we process personal data related to you, check their content, source, accuracy and location (also in relation to any third country), request a copy, request their correction and restrict their processing, and even delete them, if applicable. Likewise, you can always report comments and submit complaints to the Hellenic Data Protection Authority, 1-3 Kifissias Ave., GR 115 23, Athens, Call Center: + 30-210 6475600 or at http://www.dpa.gr/

Changes to this Policy

The Controller frequently reviews this Policy and may modify or revise it periodically at our discretion. When we make any changes, we will record the date of modification or revision in the Policy. The updated Policy will apply to you and your details from this date. We encourage you to periodically review this Policy to determine if there are any changes to the way we handle your personal data. This Statement was last updated in April 2021.

Contact us

If you have any questions, comments or complaints regarding the management or protection by us of your personal data or if you wish to modify your personal data or exercise any of your rights as a data subject, please contact us at info@roumelstore.gr .