Privacy Policy
For our Company, the
protection of the personal data of natural persons who deal with us in any way
is of primary importance. For this reason, and fully harmonized with the
institutional framework that has been established, in accordance with the provisions
of Regulation (EU) 2016/679 [on the protection of natural persons with regard
to the processing of personal data and on the free movement of such data and
repealing Directive 95/46/EC (General Data Protection Regulation)] and
Directive 2016/680/EU [on the protection of individuals with regard to the
processing of personal data by competent authorities for the purposes of
prevention, investigation, detection, investigation and prosecution].
LEGALITY OF PROCESSING
Our Company may
process personal data of its customers if any of the following conditions are
met:
a) the processing is
necessary for the performance of a contract that you have awarded or intend to
award to us, for the purpose of fulfilling our contractual obligations in the
above context.
b) The safeguarding
and protection of your and our legitimate interests.
c) The processing is necessary for compliance with a legal obligation of our Company or for the pursuit of its legitimate interests arising from its business relations with customers or other rights under applicable law.
d) you have given
your specific, explicit and written consent to the processing of your personal
data for one or more specific purposes and provided that the processing is not
based on any of the legal grounds referred to in points (a) to (c) above.
It is noted that the concept of processing of personal data of customers by our Company includes any operation or series of operations carried out with or without the use of automated means on personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, search for information, use, disclosure by transmission, dissemination or any other form of making available, association or combination, restriction, erasure or destruction.
TYPES OF PERSONAL DATA AND PURPOSES OF PROCESSING
Our Company has access
to the following personal data of each user of our online store:
When entering our
website, the user grants us access to the Internet Protocol Address (IP
Address), the navigation data within our website and his/her preferences for
our products.
The purposes of the
collection and processing of the above personal data by our Company are: to
facilitate our technical capabilities for the uninterrupted operation of our website,
to provide an easy-to-use, friendly and understandable operation of our website
to each user, to improve the use of our website during navigation by the user
and to record consumer habits through the use of anonymous consumer data.
When placing an order
for the purchase of our products, the user grants us access to his/her personal
data, such as name, address, telephone number, e-mail address, and if he/she
wishes to receive an invoice, profession, name, VAT number and tax office, the
content of the ordered product, the desired method of payment and the indicated
place of delivery of the products.
The purposes of the
collection and processing of the above personal data by our Company are: the
timely, uninterrupted and legal execution of our contractual obligations
towards the customers of our online store, the communication and information of
our customers regarding the availability of products and the progress of the
order, the support of legal claims, the use of these data for tax purposes and for
invoicing purposes and proof of the provision of the ordered products, the use
of these data for the proper organization and operation of our online store,
the use of these data for the proper organization and operation of the Company,
the use of the data for the proper functioning of our online store, and the use
of the data for the proper functioning of our online store.
In the event that any
user communicates with us by e-mail or other means, we will collect their
personal data related to such communications, under the terms and conditions
herein, in order to respond to the relevant requirements and requests and to
improve our offered services and the provision of our products.
Our Company does not
collect or gain access to personal data of its Users - customers, related to
the online payment of orders, such as credit card numbers and codes.
Furthermore, our
Company does not collect or gain access in any way to sensitive personal data
of its users - customers. In the event that any user posts sensitive data on
our website, such sensitive data will be deleted as soon as it comes to our
attention.
Our Company undertakes
to collect and process the above personal data of its users - customers,
exclusively and only for the aforementioned purposes and only to the extent
absolutely necessary for the effective service of these purposes. These data
are in each case relevant and not more than required in view of the above
purposes, and are accurate and, if necessary, updated. Furthermore, such data
shall be kept only for the period necessary to fulfil the purposes for which
they were collected and processed and shall be deleted after that period.
USER CONSENT FOR
PROCESSING OF PERSONAL DATA
For the following
purposes, our Company may process personal data only with the lawful consent of
the users of our website:
- For purposes of
commercial communication, marketing and advertising of our products via email,
internet, fax, social media and/or any other appropriate communication channels
such as but not limited to SMS, telephone, mail.
- For the purpose of
sending newsletters,
- For the purposes of
user satisfaction research
- For the purposes of
research and/or analysis to better understand the needs, preferences,
interests, experiences and/or habits of users as consumers.
- To operate and
administer any loyalty programs that may exist through our website.
The above consent and
assent to the processing of users' personal data for the above purposes will be
provided to us in an electronic statement in a manner clearly distinguishable
from other matters, in an understandable and easily accessible form. This
explicit statement by which the user will provide us with his/her consent to
the processing of his/her personal data for the purposes of this article will
be made either when completing the relevant product order form or when
concluding the relevant contracts through our website. .
The user reserves the right to withdraw the above consent and consent at any time. The withdrawal of consent shall not affect the lawfulness of the processing based on the consent prior to its withdrawal. The withdrawal of consent shall be made by means of a declaration by the user that he/she wishes to withdraw his/her consent, which shall be sent to the following e-mail address: info@fos4u.gr.
DATA RETENTION AND
RETENTION PERIOD:
The Personal Data of
our Company's Customers that are subject to processing are kept and stored in a
secure environment, exclusively and only for the purposes for which they are
intended and only for as long as necessary to achieve those purposes, without
prejudice to the more specific provisions of applicable legislation.
The data processing
process of our Company is carried out in a way that ensures the confidentiality
and the physical and logical security of the data, taking into account the
latest developments, the implementation costs and the nature, scope, context
and purposes of the processing, as well as the risks of varying likelihood and
severity to your rights and freedoms.
Our Company retains
personal data for as long as the purposes for which they were collected and
mentioned above remain valid.
If we have been
granted explicit consent for the use of personal data for advertising purposes
(subscription to the Newsletter), your data will be used for this purpose until
the relevant consent is withdrawn.
The Data collected by
Cookies will be deleted in accordance with the Cookies Policy.
Furthermore, our
Company may retain personal data even after the fulfilment of the purposes of
their collection and processing in the following limited cases:
- Where the processing
is imposed as an obligation by provisions of the applicable legal framework,
personal data will be stored for as long as the relevant provisions require.
- For use before tax
and social security authorities and any other auditing authority within the
statutory limitation period.
- To defend our rights
and legitimate interests before any competent court and any other public
authority in the event of litigation.
At the end of the
retention period, your personal data will be destroyed from our records and
system in accordance with our Company's policy and provided that their
retention is no longer required to fulfil the purposes we have described above.
RECIPIENTS OF PERSONAL
DATA
The recipients of the
Data are the Company's absolutely necessary personnel, who are bound by
confidentiality obligations, and the companies cooperating with us, which
process your Data as Processors on our behalf and in accordance with our
instructions.
We may share or
disclose your Data when you have expressly requested it or when required by
law.
The Performers have
agreed and contractually committed to the Company:
- maintain
confidentiality
- not to send Data to
third parties without the Company's permission
- take appropriate
security measures
- comply with the legal
framework for the protection of personal data and in particular the GDPR
Regulation.
Your Personal Data are
stored and processed only within the E.U. Our Company does not make
cross-border transfers to third countries outside the European Economic Area,
for which there is no adequacy decision of the European Commission.
RIGHTS OF THE DATA
SUBJECT :
Each user, a natural
person whose data is processed by our Company, enjoys the following rights:
a) Right to Information and Access to personal data concerning him or her and to obtain information about them, as well as their origin, the purposes of their processing, the recipients or categories of recipients and the period of their storage. The data subject may be aware of and verify the lawfulness of the processing, as well as have access to the data relating to him or her and obtain additional information on the processing.
b) Right to rectification. The data subject has the right to review, correct, update or modify his/her personal data by contacting the Data Protection Officer (DPO).
c) Right of Deletion. The Data Subject has the right to request the erasure of his/her personal data subject to the restrictions provided for in the cases provided for in Article 17 of the Regulation.
d) Right to restriction of processing. The Data Subject has the right to request restriction of the processing of his/her personal data in the following cases: (1) when he/she contests the accuracy of the personal data and until verification, (2) when he/she objects to the erasure of personal data and requests instead of erasure the restriction of their use, (3) when the personal data are not necessary for the purposes of processing, but are nevertheless necessary for the establishment, exercise, support of legal claims, and (4) when he/she objects to the processing and until verification that the personal data exist.
e) Right of portability. The data subject shall have the right to obtain his or her personal data free of charge in a form which allows him or her to access, use and process them by commonly used processing methods. He or she also has the right to ask us, where technically feasible, to transmit the data directly to another controller. This right exists for the data he has provided us with and the processing is carried out by automated means on the basis of his consent or in performance of a relevant contract.
f) Right to object to the Processing. The Data Subject has the right to object at any time to the processing of his or her personal data in cases where, as described above, it is necessary for legitimate interests pursued by us as data controllers.
g) Right to withdraw the Consent. Where processing is based on consent, the Data Subject shall have the right to freely withdraw it, without prejudice to the lawfulness of the processing based on his or her consent before withdrawing it.
For any issue related
to the processing of Data and the exercise of the rights of each natural person
user, anyone who wishes may contact the Data Protection Officer (DPO) of our
Company at 22 Praxitelous Street, Athens, P.O. 10561 or to the e-mail address
(email): info@fos4u.gr
Our Company will make
every effort to respond to the requests of users - natural persons free of charge
without delay, and in any case within one (1) month from the date of receipt of
the request. However, if the request is complex or there is a large number of
requests, it will inform within one month if it needs to obtain an extension of
another (2) two months to respond to the request.
If the Requests are
manifestly unfounded or excessive, in particular due to their repetitive
nature, the Company may impose a reasonable fee, taking into account the
administrative costs of providing the information or performing the requested
action, or refuse to follow up the Request.
If there are doubts
about the identity of the natural person submitting the request, our Company
reserves the right to request the provision of additional information necessary
to confirm his/her identity.
Every user is a
natural person and if his/her rights are violated, he/she has the right to file
a complaint with the Personal Data Protection Authority.
OBLIGATIONS OF USERS
Each user natural
person, by using our website and by providing personal data, after explicit
consent and consent, acknowledges that he/she has the obligation to declare the
real, accurate and complete data requested by our Company. Furthermore, he/she
must inform our Company of any changes to these data in order to keep them up
to date and accurate.
If our Company
determines or has reasonable suspicion that the above obligations of each user
are not complied with or that the information provided is false or incomplete
or in any way contrary to the law or the Terms of Use or this Data Protection
Policy, it reserves the right to reject any request without notice. In this
case, the user does not reserve any right to any compensation due to the
rejection of his/her request.
By using our website,
each user certifies that he or she is over the age of sixteen (16). If the user
is under sixteen (16) years of age, he/she is obliged to refrain from any use
of the Website and from any transfer of personal data without the consent of
the person exercising parental authority. If he/she fails to comply with the
above obligations, he/she must immediately notify our Company. In any case, by
using the Website, he acknowledges that our Company is not liable for any
breach of the above obligations on his part to the extent that he is unable,
even if he makes reasonable efforts, to verify his age or to obtain the consent
of the person exercising parental responsibility.
AMENDMENT OF THE TERMS
OF THE DATA PROTECTION POLICY
Our Company reserves
the right to update, modify and update this Policy whenever it is deemed
necessary, while any changes will take effect from the public display of the
changes on the Website of our online store.
APPLICABLE LAW;
JURISDICTION; EXTENSION OF JURISDICTION
The present terms and
conditions of use of our Company's e-shop www.fos4u.gr are governed by Greek
Law, are valid and applicable to any distance selling contract concluded in
Greece or abroad. The terms and conditions of use of the website and the
transactions carried out through it do not affect the provisions of mandatory
law. Any dispute, question or disagreement related to the execution and/or
interpretation of these terms and conditions of use of the company's online
store that may arise will be subject to the exclusive jurisdiction of the competent
Courts of Athens.
COMPLAINT FORM ON CONFIDENTIALITY
Any user who wishes to express a complaint about privacy can fill out the contact form found on our respective page or click HERE