PRIVACY POLICY

Last updated 6/12/2021

1. General

This Website belongs to the undertaking of Christiana Vardakou. The Website respects the protection of the Users’ personal data and their privacy and complies with applicable legislation regarding the processing of personal data. With this Privacy Policy we would like to explain to you how we process your personal data.

This Privacy Notice describes how we collect, use, process, and disclose your personal data in conjunction with your access to and use of www.cvardakou.com (hereinafter “Website” or “Christiana Vardakou” or simply “we“).

You must carefully read this Privacy Notice, which has been written clearly and simply to facilitate its understanding and to freely and voluntarily determine whether you wish to provide your personal data to Christiana Vardakou.

2. Who is the Data Controller?

Data Controller of the Users’ personal data of the Website www.cvardakou.com (hereinafter “Users” or “you”) within the meaning of the General Data Protection Regulation (EU) 2016/679 (“GDPR”) is Christiana Vardakou. The office of Christiana Vardakou is located in Chrysostomou Smyrnis 53, Neo Psychiko 15451, Athens, Greece (tel.+30 698720567, email: me@cvardakou.com)

3. What Personal Data do we collect and what are the purposes and the legal bases of the processing?

Depending on how you interact with us, we will process your personal data for various purposes. We will collect and process personal data you voluntarily provide us in connection with the following:

When you create an account we ask you to provide your full name, e-mail, telephone and address (City, Post code, Country, Region/State) and a password. The purpose of the processing is the customer authentication and to facilitate the customers' activities on the website, namely to shop faster, be up to date on an order's status, and keep track of the previous orders. The legal basis for the processing is the performance of the contract.

When you carry out a transaction as a new customer, we ask you to provide billing details such as full name, e-mail, telephone and address (City, Post code, Country, Region/State). In order to complete your order, you have to confirm that you have read this Privacy Notice. All this information is necessary for the performance of the order, namely the delivery of the products or services and the communication with you in this regard. The legal basis for the processing is the performance of the contract.

We collect similar information when you make an order through social media or by telephone.

When you fill in the online contact form (name, e-mail address, enquiry), we process this data to fulfill your requests by answering your questions and providing information. In this case, the legal basis for the processing is the consent that you provide by clicking on the specific tick-box before submitting your inquiry.

When you want to subscribe to our Newsletter, we ask for a valid e-mail address. We will send an automated email to the specified email address after the first registration step to be able to check whether you are the owner of the specified email address or whether the owner agrees to receive the newsletter. We will add the e-mail address provided to our mailing list only after confirmation of the newsletter registration via a link in the confirmation e-mail. We do not collect any further data beyond the email address and the information required to confirm the registration. When you receive our newsletter, you may unsubscribe from it at any time through the instructions that we provide you within each email. We offer the Newsletter to inform you about the latest deals of Christiana Vardakou. The legal basis for the processing is your consent.

We may also use the contact details of our existing customers (e.g. account holders or users that have purchased our products) for marketing purposes to inform them about our latest offers and deals. The processing of personal data for marketing purposes may be regarded as carried out for our legitimate interest to promote our products and services. However, you are always entitled to object to this processing since we provide an opt-out option (“unsubscribe”) within each marketing email you receive.

Although we ask you to provide payment information (such as credit card numbers) in connection with a transaction when you become a member, we do not have access to or store this data. Only payment service providers have access to this data.

However, we also collect information automatically when you visit our Website by using Cookies and similar technologies. For more information about cookies, see our Cookies Notice .

4. Who do we share your personal data with?

Your data shall not be disclosed to any third party, apart from specific third partners, who are required to have access to personal data for the purpose of providing their services (e.g. technical support etc.) and for the purposes of the performance of the order (courier service providers, payment service providers). All third parties are bound by non-disclosure agreements.

5. Data Retention

We will retain your Personal Data for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law or if the User requests their withdrawal from us, opposes or revokes their consent. When you create an account, we retain your data for as long as your account is active. When you contact us through the online contact form, we process your data for as long as it is necessary to fulfill your request. When you subscribe to our Newsletter, we retain your e-mail address until you unsubscribe. In any case, we retain data for as long as it is necessary to fulfill our obligations according to tax law.

6. Security Measures

We will process your data at all times in a confidential way, maintaining the mandatory duty to secrecy regarding the said data under the provisions set out in applicable regulations. We have adopted measures of a technical and organizational nature required to guarantee the security of your data and prevent them from being altered, lost, processed, or accessed illegally, depending on the state of the technology, the nature of the stored data, and the risks to which they are exposed. We store all the data in the EU. For service efficiency purposes, some of our third-party providers may hold servers outside the EEA. We inform you that this data is transferred with adequate safeguards and is always kept safe.

7. Data subjects’ rights

For as long we retain your data, you, as data subjects, have the right to request at any time from Christiana Vardakou:

to obtain confirmation about whether or not your personal data are being processed by us and to request access to your personal data that we hold;

to rectify any inaccurate or incomplete data;

erasure of your personal data to the extent that they are no longer necessary for the purpose for which we need to keep processing them, as we have explained above, or when we are no longer legally permitted to process them;

limitation to the processing of your personal data, which entails that in certain cases you can request us to temporally suspend the processing of the data or that we keep them longer than necessary;

if you have given us your consent to process your data, you also have the right to withdraw such consent at any time; To revoke your consent for a certain processing activity you may contact us at me@cvardakou.com. In the event that you withdraw your consent, this will not affect the legality of the processing carried out previously.

portability of your personal data.

Finally, we inform you that you have the right to lodge a complaint regarding the processing of your personal data by us before the Hellenic Data Protection Authority (DPA).

8. Changes to the Privacy Notice

We may amend the information contained in this Privacy Notice when we consider this appropriate. Should we do so, we will notify you by various procedures through the Website, or we may even send you a notice to your email address when the change in question is relevant to your privacy, for you to be able to review the changes, assess them and, as the case may be, object or unsubscribe from any service or functionality. In any case, we suggest you to review this Privacy Notice from time to time in case minor changes are made or we make any interactive improvement. We will also change the “Last Updated” date at the beginning of this Privacy Notice. Any changes we make to our Privacy Notice are effective as of this Last Updated date and replace any prior Privacy Notices.

In case you need any clarification about the processing of your Personal Data, please do not hesitate to contact us at me@cvardakou.com.