PRIVACY POLICY

This Privacy Policy should be read in conjunction with the Terms and Conditions. This page informs you of our policies regarding the collection, use and disclosure of personal information we receive from users of the Website.

By using the Website, you agree to us collecting and using information in accordance with this policy and the requirements of the Greek Law, the European General Data Protection Regulation ("G.D.P.R") and the relevant decisions and acts of the competent supervisory authority.

For the purposes of the G.D.P.R, we consider ourselves to be the "data controller" in relation to any personal information you provide to us or otherwise obtain about you.

Personal Data we collect from you.

We collect personal data when you use our services or contact us.

Specifically:

• We keep the information you give us directly during your registration, either in the mandatory registration fields, such as contact information (name, surname, email address and mobile phone number) or in the optional registration fields (city, region and age).
• We record through cookies and analyze the frequency of visits to the Website, details about your purchases, whether you benefit from our offers and your possible participation in contests.
• We record your comments and if there is an incident reported by you, we may need to record your personal information about it, following your specific consent that will be requested for this purpose
• If you contact us directly (by post, e-mail or telephone) and submit a complaint or reply to us, or participate in a competition, we will record the details and all related necessary information, such as emails, letters and telephone calls.

Data we receive from third parties

We may receive your personal data from third parties. This can happen when you participate in market surveys.

Collection and use of information

Your decision to disclose your personal data is entirely optional and by doing so you give us your specific consent to use your personal data only for the purposes for which you disclosed it to us. Certain personally identifiable information that you may provide to us could reasonably be used by us; as permitted by and in accordance with applicable data protection law to (i) identify you and enable you to use our services (to manage and deliver an order) or to assist our Stores in making the delivery of an order; order or in response to any query. (ii) send promotional and advertising communications to you about us and our products and services through newsletters; (iii) sharing data with our business partners and market research companies to conduct market research and analysis about our services on our behalf. (iv) to support any other purpose stated at the time your information is collected, subject to any preferences you may have indicated. (v) to prevent fraudulent transactions and theft and (vi) to comply with applicable law, governmental request, court order or otherwise protect the rights, property or safety of others.

By participating in our Services you acknowledge and agree to our use of your information in these limited circumstances and for the purposes described.

GDPR defines a set of categories of personal data that are considered "sensitive" and which require special attention from data controllers. This website and any services available from this website do not collect or process sensitive personal data

How we share your personal information

In some cases we may transfer your personal information to carefully selected third parties. We will never pass on your personal information for such purposes unless you have given us permission to do so or we have a legal right to do so.

We use third party service providers for the following services:

• Sending promotional offers.
• Customer satisfaction surveys.
• Customer service via phone line and e-mail.
• Development, support, maintenance and hosting of information systems, including the provision of website hosting.
• Ordering and delivery process through the stores of the "PARADOSIAKO" Franchise Network.

If after you have given us permission to transfer your personal data to third parties, you change your mind, you can opt out by contacting us as described below.

By submitting your personal information to us, you acknowledge that these third parties may receive and process your personal information. We ask all third parties to treat your personal information securely and maintain all appropriate organizational and technical measures to protect your personal data, ensuring their above obligation and with relevant contracts between us, always maintaining the right to receive and reasonable measures to enforce it. We will never commercialize (sell) your personal information.

Cookies

Cookies are small data files, which may include an anonymous unique identifier.

Cookies are sent to your browser from a website and stored on your computer's hard drive.

Like many websites, we use "cookies" to collect information. You can instruct your browser to reject all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our website. For more details, read the cookies policy.

Security

Only employees who need the information to perform a specific job (for example, a tender or customer service) have access to personally identifiable information. The computers / servers on which we store personally identifiable information are kept in a secure environment.

The technology we use and the policies we have in place are intended to protect your privacy from unauthorized access and inappropriate use.

Where appropriate, we strive to ensure the secure transmission of information, such as personal data, from your computer to our server. However, due to the inherently open nature of the Internet, we cannot guarantee that all data transmitted will be secure, as no method of transmission over the Internet or method of electronic storage is 100% secure. Use of this website indicates acceptance of the risk thereof.

Changes to this Privacy Policy

We reserve the right to update or change our Privacy Policy at any time, and you should periodically check this Privacy Policy for updates that will be effective after they are posted. Your continued use of the Service after any changes to the Privacy Policy are posted on this page will constitute your acknowledgment of the changes and your agreement to abide by and be bound by the modified Privacy Policy.

If we make material changes to this Privacy Policy, we will notify you either through the email address you have provided to us or by placing a prominent notice on our website.

Consumer and citizen rights

As provided in the personal data legislation, you have various rights related to the provision of your personal data to PARADOSIAKO COMPANY using this Website. These include your rights to ask the company:

• To confirm to you what personal data it may keep about you and for what purposes.
• Do not change the consent you have provided in relation to your personal data.
• Correct any inaccurate or incomplete personal data.
• To stop the processing of your personal data.
• Completely delete all your personal data and confirm that it has done so (however there may be reasons why we may not be able to do this).
• To transfer your personal data to another Organization/supplier.

To contact us, please see our contact details below

If we do not respond to your request or provide you with a valid reason why we are unable to comply with your request, you have the right to contact the Data Protection Authority to file a complaint. You can contact them by post (Personal Data Protection Authority, Offices: Kifisias 1-3, P.O. 115 23, Athens), by email (contact@dpa.gr) or by phone (+30-210 6475600).

How long we keep your personal information

We will not retain personal information about you for longer than is necessary. We have a personal data retention policy, which sets out how long we keep certain types of personal information. After the end of this period, the corresponding data are deactivated, as long as we do not have a justified legal interest in their retention or their retention is not required by Law. For more information, you can contact us.

The transfer of personal data outside EEA

The personal data you provide to us will be transferred to and stored on our servers, which are located within the EEA. We will not transfer your information outside the European Economic Area (EEA) unless you are a non-EEA user, in which case your information may need to be transferred in order to deliver your products, process advertising information you have subscribed to.

Legal basis for processing the file

Article 6 (1) a of the GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract in which the data subject participates, such as e.g. in the event that the processing operations are necessary for the supply of goods or for the provision of any other service, the processing takes place on the basis of Article 6 (1) b of G.K.P.D. The same applies to the processing operations that are necessary to carry out the pre-contractual measures, for example in the case of investigations concerning our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 (1) c of the G.D.P.R.

The provision of personal data as a mandatory or contractual requirement. Necessary requirement to enter into a contract. Obligation of the data subject to provide the personal data. Possible consequences of not providing this data

We clarify that the provision of personal data is partly required by law (e.g. tax legislation) or may also result from contractual provisions (e.g. information about the counterparty). Failure to provide personal data would have the consequence that the contract with you could not be completed.

Existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling processes.

Contact Us – Opt Out Process

You can opt out of receiving various updates from us at any time by contacting us. If you have any questions about this Privacy Policy, wish to exercise any of your statutory rights or make a complaint, please email: paradosiako@paradosiako.net. We will ask you to verify your identity before we can act on your request. We aim to resolve all complaints within one month.