This page informs you of our policies regarding the collection, use and disclosure of personal information-data we receive from users of the Website
By using the Website, you agree to us collecting and using information in accordance with this policy and the requirements of the Greek Law, the European General Data Protection Regulation (“GDPR”) and the relevant decisions and acts of the competent supervisory authority.
For the purposes of the GDPR , we consider ourselves to be the “data controller” in relation to any personal information you provide to us or otherwise obtain about you.
PERSONAL DATA WE COLLECT FROM YOU
We collect personal data when you use our services or contact us.
Specifically:
We keep the information you give us directly during your registration, either in the mandatory registration fields, such as contact information (name, surname, e-mail address, address and mobile phone number), or in the optional registration fields if any (e.g. date birth or gender).
We record through cookies and analyze the frequency of visits to the website, details about your purchases, whether you benefit from our offers and your possible participation in competitions.
We record your comments and if there is an incident reported by you, we may need to record your personal information about it, following your specific consent that will be requested for this purpose.
If you contact us directly (by post, e- mail or telephone) and submit a complaint or reply to us, or participate in a competition, we will record the details and all related necessary information, such as e-mails, letters and telephone calls.
DATA WE RECEIVE FROM THIRD PARTIES
We may receive your personal data from third parties. This can happen when you participate in market surveys or to protect you from fraudulent activities ( eg transaction with your stolen credit card).
COLLECTION AND USE OF INFORMATION
Your decision to disclose your personal data is entirely optional and by doing so you give us your specific consent to use your personal data only for the purposes for which you disclosed it to us. The specific personally identifiable information you may provide to us could reasonably be used by us as permitted by and in accordance with applicable data protection laws to (i) identify you and enable you to use our services (for order management and delivery ) or to assist our Stores in carrying out the delivery of an order or in response to any query. ( ii ) to send promotional and advertising communications to you about us and our products and services through newsletters . ( iii ) sharing data with our affiliates, business partners and market research companies to conduct market research and analysis about our services on our behalf; ( iv ) to support any other purpose stated at the time of collection of your information, subject to any preferences you may have indicated. (v) to prevent fraudulent transactions and theft and ( vi ) to comply with applicable law, governmental request, court order or otherwise protect the rights, property or safety of others.
By participating in our Services you acknowledge and agree to our use of your information in these limited circumstances and for the purposes described.
GDPR defines a set of categories of personal data that are considered “sensitive” and which require special attention from data controllers. This website and any services available from this website do not collect or process sensitive personal data
HOW WE SHARE YOUR PERSONAL INFORMATION
In some cases we may transfer your personal information to carefully selected third parties. We will never pass on your personal information for such purposes unless you have given us permission to do so or we have a legal right to do so.
We use third- party service providers for the following services:
Sending promotional offers.
Customer satisfaction surveys.
Customer service via phone line and e- mail .
Development, support, maintenance and hosting of information systems, including the provision of website hosting.
Ordering and delivery process through the stores of the ” Aktaio ” Franchise Network .
Payment processing so you can pay by credit or debit card.
If after you have given us permission to transfer your personal data to third parties, you change your mind, you can opt out by contacting us as described below.
By submitting your personal information to us, you acknowledge that these third parties may receive and process your personal information. We ask all third parties to treat your personal information securely and maintain all appropriate organizational and technical measures to protect your personal data, ensuring their above obligation and with relevant contracts between us, always maintaining the right to receive and reasonable measures to enforce it. We will never commercialize (sell) your personal information.
COOKIES
Cookies are small data files, which may include an anonymous unique identifier .
Cookies are sent to your browser from a website and stored on your computer’s hard drive .
Like many websites , we use ” cookies ” to collect information. You can instruct your browser to reject all cookies or to indicate when a cookie is being sent . However, if you do not accept cookies , you may not be able to use some parts of our website . For more details, read the cookies policy .
SECURITY
Where we collect sensitive information (such as credit card data), that information is encrypted and transmitted to us in a secure manner. You can confirm this by looking for a lock icon in the address bar and looking for “ https ” at the beginning of the website address.
While we use encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job (for example, billing or customer service) have access to personally identifiable information. The computers / servers on which we store personally identifiable information are kept in a secure environment.
The technology we use and the policies we have in place are intended to protect your privacy from unauthorized access and inappropriate use.
SSL encryption software ( Secure Sockets Layer ). However, due to the inherently open nature of the Internet, we cannot guarantee that all data transmitted will be secure, as no method of transmission over the Internet or method of electronic storage is 100% secure. Use of this website indicates acceptance of the risk thereof.
CHANGES TO THIS PRIVACY POLICY
We reserve the right to update or change our Privacy Policy at any time, and you should periodically check this Privacy Policy for updates that will be effective after they are posted. Your continued use of the Service after any changes to the Privacy Policy are posted on this page will constitute your acknowledgment of the changes and your agreement to abide by and be bound by the modified Privacy Policy.
If we make material changes to this Privacy Policy, we will notify you either through the email address you have provided to us or by placing a prominent notice on our website .
RIGHTS OF CONSUMERS AND CITIZENS
As provided in the personal data legislation, you have various rights related to the provision of your personal data to Aktaio by using this Website . These include your rights to ask Aktaio:
To confirm to you what personal data it may keep about you and for what purposes.
Do not change the consent you have provided in relation to your personal data.
Correct any inaccurate or incomplete personal data.
Provide you with a full copy of your personal data to transfer it elsewhere.
To stop the processing of your personal data.
Completely delete all your personal data and confirm that it has done so (however there may be reasons why we may not be able to do this).
To transfer your personal data to another Organization.
To contact us, please see our contact details below.
If we do not respond to your request or provide you with a valid reason why we are unable to comply with your request, you have the right to contact the Data Protection Authority to file a complaint. You can contact them by mail (Personal Data Protection Authority, Offices: Kifissias 1-3, P.O. 115 23, Athens), by email (contact@dpa.gr) or by phone (+30-210 6475600).
HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?
We will not retain personal information about you for longer than is necessary. We have a personal data retention policy, which sets out how long we keep certain types of personal information. After the end of this period, the corresponding data is deleted, as long as we do not have a justified legal interest in their retention or their retention is not required by the Law. For more information you can contact us.
THE TRANSFER OF PERSONAL DATA OUTSIDE THE EEA
The personal data you provide to us will be transferred to and stored on our servers, which are located within the EEA . We will not transfer your information outside the European Economic Area ( EEA ) unless you are a non- EEA user , in which case your details may need to be transferred in order to deliver your products, process payment / returns or send you promotional information, to which you have registered. We will take all necessary steps to ensure that your personal information is processed securely and in accordance with this Policy and data protection law when it takes place from a location outside the EEA . For the avoidance of doubt, where the United Kingdom is no longer part of the EEA , references in this paragraph to the EEA shall mean the EEA and the United Kingdom.
LEGAL BASIS FOR THE PROCESSING OF THE FILE
Article 6 (1) a of the GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract in which the data subject participates, such as e.g. in the event that the processing operations are necessary for the supply of goods or for the provision of any other service, the processing takes place based on article 6 (1) b of the G.K.P.D. The same applies to the processing operations that are necessary to carry out the pre-contractual measures, for example in the case of investigations concerning our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 (1) c of the G.K.P.D.
The provision of personal data as a mandatory or contractual requirement. Necessary requirement to enter into a contract. Obligation of the data subject to provide the personal data. Possible consequences of not providing this data.
We clarify that the provision of personal data is partly required by law (e.g. tax legislation ) or may also result from contractual provisions (e.g. information about the counterparty). Failure to provide personal data would have the consequence that the contract with you could not be completed.
EXISTENCE OF AUTOMATED DECISION MAKING
As a responsible company, we do not use automated decision-making or profiling processes.
CONTACT US – EXCEPTION PROCEDURE
You can opt out of receiving various updates from us at any time by contacting us. If you have any questions about this Privacy Policy, wish to exercise any of your statutory rights or make a complaint, please email: info @ aktaion . en We will ask you to verify your identity before we can act on your request. We aim to resolve all complaints within one month. Where we are unable to resolve a complaint within one month, we will notify you of the reason for the delay and when we expect to resolve your complaint.