Privacy & Cookies Policy

Last updated 6/12/2021

1. General

This Website belongs to the undertaking of Christiana Vardakou. The Website respects the protection of the Users’ personal data and their privacy and complies with applicable legislation regarding the processing of personal data. With this Privacy Policy we would like to explain to you how we process your personal data.

This Privacy Notice describes how we collect, use, process, and disclose your personal data in conjunction with your access to and use of www.cvardakou.com (hereinafter “Website” or “Christiana Vardakou” or simply “we“).

You must carefully read this Privacy Notice, which has been written clearly and simply to facilitate its understanding and to freely and voluntarily determine whether you wish to provide your personal data to Christiana Vardakou.

2. Who is the Data Controller?

Data Controller of the Users’ personal data of the Website www.christianavardakou.com (hereinafter “Users” or “you”) within the meaning of the General Data Protection Regulation (EU) 2016/679 (“GDPR”) is Christiana Vardakou. The office of Christiana Vardakou is located in Parren 3, 11525 Athens, Greece (tel.+302106772979, email: me@cvardakou.com)

3. What Personal Data do we collect and what are the purposes and the legal bases of the processing?

Depending on how you interact with us, we will process your personal data for various purposes. We will collect and process personal data you voluntarily provide us in connection with the following:

When you carry out a transaction as a new customer, we ask you to provide billing details such as full name, e-mail, telephone and address (City, Post code, Country, Region/State). In order to complete your order, you have to confirm that you have read this Privacy Notice. All this information is necessary for the performance of the order, namely the delivery of the products or services and the communication with you in this regard. The legal basis for the processing is the performance of the contract.

We collect similar information when you make an order through social media or by telephone.

When you fill in the online contact form (name, e-mail address, enquiry), we process this data to fulfill your requests by answering your questions and providing information. In this case, the legal basis for the processing is the consent that you provide by clicking on the specific tick-box before submitting your inquiry.

When you want to subscribe to our Newsletter, we ask for a valid e-mail address. We will send an automated email to the specified email address after the first registration step to be able to check whether you are the owner of the specified email address or whether the owner agrees to receive the newsletter. We will add the e-mail address provided to our mailing list only after confirmation of the newsletter registration via a link in the confirmation e-mail. We do not collect any further data beyond the email address and the information required to confirm the registration. When you receive our newsletter, you may unsubscribe from it at any time through the instructions that we provide you within each email. We offer the Newsletter to inform you about the latest deals of Christiana Vardakou. The legal basis for the processing is your consent.

We may also use the contact details of our existing customers (e.g. account holders or users that have purchased our products) for marketing purposes to inform them about our latest offers and deals. The processing of personal data for marketing purposes may be regarded as carried out for our legitimate interest to promote our products and services. However, you are always entitled to object to this processing since we provide an opt-out option (“unsubscribe”) within each marketing email you receive.

Although we ask you to provide payment information (such as credit card numbers) in connection with a transaction when you become a member, we do not have access to or store this data. Only payment service providers have access to this data.

However, we also collect information automatically when you visit our Website by using Cookies and similar technologies. For more information about cookies, see our Cookies Notice below .

4. Who do we share your personal data with?

Your data shall not be disclosed to any third party, apart from specific third partners, who are required to have access to personal data for the purpose of providing their services (e.g. technical support etc.) and for the purposes of the performance of the order (courier service providers, payment service providers). All third parties are bound by non-disclosure agreements.

5. Data Retention

We will retain your Personal Data for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law or if the User requests their withdrawal from us, opposes or revokes their consent. When you create an account, we retain your data for as long as your account is active. When you contact us through the online contact form, we process your data for as long as it is necessary to fulfill your request. When you subscribe to our Newsletter, we retain your e-mail address until you unsubscribe. In any case, we retain data for as long as it is necessary to fulfill our obligations according to tax law.

6. Security Measures

We will process your data at all times in a confidential way, maintaining the mandatory duty to secrecy regarding the said data under the provisions set out in applicable regulations. We have adopted measures of a technical and organizational nature required to guarantee the security of your data and prevent them from being altered, lost, processed, or accessed illegally, depending on the state of the technology, the nature of the stored data, and the risks to which they are exposed. We store all the data in the EU. For service efficiency purposes, some of our third-party providers may hold servers outside the EEA. We inform you that this data is transferred with adequate safeguards and is always kept safe.

7. Data subjects’ rights

For as long we retain your data, you, as data subjects, have the right to request at any time from Christiana Vardakou:

to obtain confirmation about whether or not your personal data are being processed by us and to request access to your personal data that we hold;

to rectify any inaccurate or incomplete data;

erasure of your personal data to the extent that they are no longer necessary for the purpose for which we need to keep processing them, as we have explained above, or when we are no longer legally permitted to process them;

limitation to the processing of your personal data, which entails that in certain cases you can request us to temporally suspend the processing of the data or that we keep them longer than necessary;

if you have given us your consent to process your data, you also have the right to withdraw such consent at any time; To revoke your consent for a certain processing activity you may contact us at me@cvardakou.com. In the event that you withdraw your consent, this will not affect the legality of the processing carried out previously.

portability of your personal data.

Finally, we inform you that you have the right to lodge a complaint regarding the processing of your personal data by us before the Hellenic Data Protection Authority (DPA).

8. Changes to the Privacy Notice

We may amend the information contained in this Privacy Notice when we consider this appropriate. Should we do so, we will notify you by various procedures through the Website, or we may even send you a notice to your email address when the change in question is relevant to your privacy, for you to be able to review the changes, assess them and, as the case may be, object or unsubscribe from any service or functionality. In any case, we suggest you to review this Privacy Notice from time to time in case minor changes are made or we make any interactive improvement. We will also change the “Last Updated” date at the beginning of this Privacy Notice. Any changes we make to our Privacy Notice are effective as of this Last Updated date and replace any prior Privacy Notices.

PRIVACY UPDATE (Privacy Notice)

To get visitor/user access to our Website www.christianavardakou.com (“Website”) and some of the services it offers, first you must notify us of personal data or information that identify or may identify you and which are considered “personal data”. The Website is owned by Christiana Vardakou (the “Company”). We collect, keep, store, organise, adapt, use, process, etc., personal data files which you provide while using/visiting our Website (“Processing”) and we are a “Data Controller” for such data. The Processing of your personal data is limited to what is strictly necessary for the purpose of processing and is performed as per the provisions of legislation in effect.

We respect the privacy of our Website visitors/users and we acknowledge that when you choose to provide us with information relating to you, you trust that we process your personal data in utmost responsibility and integrity. This Privacy Update (Privacy Notice) contains important information concerning the way in which we process your personal data. By choosing to use our Website after accepting its terms of use, you accept the provisions of this Privacy Policy. In case you do not agree with this Policy, please do not use the Website. We reserve the right to modify this Policy, whenever we deem it necessary, and we ask that you check it regularly so that are informed of any changes of content, as well as the way in which your personal data may be used.

What personal data do we collect and how?

We collect the following data about you, according to the consent you have provided us with, and exclusively for the following processing purposes; if we need more data in relation to these purposes, we will contact you.

Personal contact information by filling in forms on our site or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you register to use our site, subscribe to our service, search for a product, place an order on our site, participate in discussion boards or other social media functions on our site, enter a competition, promotion or when you report a problem with our site. The information you give us may include your name, address, e-mail address and phone number, financial and credit card information, personal description and preferences or photograph.

Internet Protocol Address (IP address). When you visit our site, we may automatically collect technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform. We may also collect information about your visit, including the full Uniform Resource Locators (URL) clickstream, through and from our site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.

We may also receive information about you from third party we are working closely with including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies.

We do not collect special personal data (as, indicatively, data relating to your racial or national origin, trade union membership, health data or data relating to your sex life or sex orientation). Even in such cases, we have taken the necessary technical and organizational measures for secure keeping and processing of your personal data belonging to the said special categories. Neither do we seek nor collect personal data from people under eighteen (18) years of age. If we find out that, by way of error or having been misled, we have collected personal data from people under eighteen (18) years of age, we shall delete such data the soonest possible.

What purposes do we collect your personal data and how do we use them?

We collect, use and process your personal data which you have provided/notified us from time to time, only to the degree necessary in order to meet the specific objectives on which you have agreed, and which are the following:

to provide you with a personalized browsing experience when using our site;

to fulfil any contractual agreements between you and us (for example, when you place an order through our site);

to send you details (including by post, phone, e-mail or SMS) of other products and services which we think may interest you, unless you inform us in writing that you do not want to receive these details.

to manage any account that you hold with us;

to comply with legal and regulatory requirements.

The processing of your personal data for each of the aforementioned processing purposes is performed in accordance with the consent you have provided for such purpose, which consent you may revoke at any time, without such revocation harming the legality of processing already performed based on such consent up to the time of its revocation. The revocation may be submitted electronically at me@cvardakou.com

In addition, we (or third parties acting on our behalf) may also store or process information that we collect about you in countries outside the European Economic Area, which may have lower standards of data protection. We may also disclose your information to third parties in connection with the sale, transfer or disposal of our business, provided that they continue to use your information substantially in accordance with the terms of this Privacy and Cookie Policy.

You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us at me@cvardakou.com

We have put in place technical and organizational security measures designed to prevent the loss or unauthorized access of your personal information. However, whilst we have used our best efforts to ensure the security of your data, please be aware that we cannot guarantee the security of information transmitted over the Internet.

Do we transmit your personal data to third parties?

We shall share your personal data with third parties to meet the processing purpose(s) in the following cases and after taking all measures necessary for the protection thereof.

Compliance with legal provisions

We shall disclose your personal data in case the law obligates us to do so (adherence to a legal provision), to the degree and the extent necessary for us to meet such obligation of ours or if, as per our discretion in good faith, such disclosure is reasonably necessary for our compliance with legal procedures or response to similar requests.

How long do we store/keep your personal data for?

We store your personal data for as long as it is strictly necessary to meet the processing purposes as well as our response to any of your requests.

What are cookies?

Our Website uses "cookies” technology. Cookies are information which a website may store in the visitor’s browsing application and, then, recover such information so that the visitor is identified next time they visit the Website. We may also use them for web errors, safe gif and similar technologies collecting data similar to those collected by a cookie. A cookie file may contain various types of information, including a user ID used by the website to track the pages visited. The Website cookies are stored in your computer or device and remain there unless you have adjusted the related settings so that cookies are not accepted for the Website. By changing your browser settings, you may be updated each time a cookie is stored in your computer or device. However, if you set your browser so that it does not accept cookies from the Website, you may not have the option of access and use of all Website features.

What cookies do we use?

We use the following cookies:

Strictly necessary cookies. These are cookies that are required for the operation of our site. They include, for example, cookies that enable you to log into secure areas of our site, use a shopping cart or make use of e-billing services.

Analytical / performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our site when they are using it. This helps us to improve the way our site works, for example, by ensuring that users are finding what they are looking for easily.

Functionality cookies. These are used to recognise you when you return to our site. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

Targeting cookies. These cookies record your visit to our site, the pages you have visited and the links you have followed. We will use this information to make our site and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

The table below lists the cookies we collect and what information they store.

Cookie Name Cookie Description

CART The association with your shopping cart.

CATEGORY_INFO Stores the category info on the page, that allows to display pages more quickly.

CURRENCY Your preferred currency

CUSTOMER An encrypted version of your customer id with the store.

CUSTOMER_INFO An encrypted version of the customer group you belong to.

CUSTOMER_SEGMENT_IDS Stores the Customer Segment ID

EXTERNAL_NO_CACHE A flag, which indicates whether caching is disabled or not.

FRONTEND Your session ID on the server.

GUEST-VIEW Allows guests to edit their orders.

NO_CACHE< Indicates whether it is allowed to use cache.

PERSISTENT_SHOPPING_CART A link to information about your cart and viewing history if you have asked the site.

STORE The store view or language you have selected.

USER_ALLOWED_SAVE_COOKIE Indicates whether a customer allowed to use cookies.

VIEWED_PRODUCT_IDS The products that you have recently viewed.

Acceptance or non-acceptance of cookies

At your first visit to the Website, you will be informed about the operation of cookies and your option not to accept the installation thereof in your computer or device. If you want to delete cookies that may be installed already, refer to the file management software to locate the file or directory saving cookies. Also, if you want to stop storing cookies in future, refer to the instructions of the browser developer, by clicking “Help” in the browser menu. More cookie related information is available at www.allaboutcookies.org. By deleting existing cookies or disabling future cookies, you may not have access to some parts or features of the Website, possibly leading to an adverse impact on its functionality as well as the ability to receive information or services from us.

Links to third party websites (Hyperlinks)

The Website may contain a hyperlink (link) to third party websites, which have full control over the posted content; therefore, they also have full responsibility for the security, validity of content as well as the manner of collection, storage and processing of personal data and information they collect. We recommend that you carefully review privacy policies of these websites, before using them, so that you ensure that you are satisfied with their manner of collection and use of your information.

How do we protect your personal data?

We are absolutely committed to the safety of your data and, in order to achieve this, we implement all contemporary technical (indicatively, encryption, anonymization) and organizational (indicatively, privacy by design, establishment of policies and procedures) which are suitable for the purposes of Processing; we regularly review the adequacy and response of such measures. Please note that these means of protection do not relate to personal data you choose to share in public domains, such as, for example community websites.

What are your rights?

As a personal data subject, you reserve the following rights:

(a) learning which of your personal data we process, why, the recipients to who such data have been disclosed or are to be disclosed, the time period of storage and, if this is not possible, the criteria establishing such time period (article 15 of the GDPR);

(b) correcting your personal data (e.g., due to omissions or inaccuracies), deleting them from our files (provided the processing thereof is no longer necessary), limiting the processing thereof, your objection to such processing (articles 6-17-18 GDPR);

(c) revocation of tour consent to the processing of your personal data (which does not cover processing retrospectively);

(d) exclusion from the receipt of personalized and customized information, if you have consented to the same through the Website; and

(e) submission of a complaint to the Data Protection Authority 1-3 Kifisias Ave., PC 11523, Athens tel: +30 210 6475600 email: contact@dpa.gr).

Method for exercising your rights?

You may exercise your rights by e-mailing at me@cvardakou.com or sending a registered letter to the Company (3, Parren Street, Athens, 11525, Attica, Greece) , unless such requests are repeated often and create administrative cost for us, in which case you shall be charged the related reasonable cost. If you exercise any of your rights, we shall take all possible measures to satisfy the same, within a month from the receipt of your request, and we will update you accordingly (unless otherwise provided for in effective provisions), unless the complexity of the request requires an extension of this time period for two more months; we shall duly inform you about such extension and the reasons for the delay. Also, we shall announce any correction or deletion of your personal data to all recipients of the disclosure thereof, unless this is disproportionate or impossible, and we shall notify you accordingly upon your request.

Legislation - Effective provisions on personal data security and protection.

Any reference in this Policy to effective provisions on personal data security and protection means Greek LAW 4624/2019 and REGULATION 2016/679 OF THE EUROPEAN PARLIAMENT AND THE COUNCIL of 27 April 2016 “on the protection of individuals with regard to the processing of personal data and on the free movement of such data” or GDPR as more widely known, the related implementing law and the related decisions of the competent organs and authorities, as currently in effect.

How to contact us?

For any question or comment relating to this Policy or the practices for the collection of personal data that we implement, and for the submission of any related request, please contact us either by emailing email me@cvardakou.com in attention of Mrs. Christiana Vardakou and you shall receive a response the soonest possible.