1. Quotations

  1. The company with the name “DIMITRA PAPADOPOULOU” (hereinafter the company) is responsible for the processing of personal data in the context of the products sold and services provided on the website www.bobofarfallina.gr. It recognizes the importance of protecting your personal data and respects your privacy.
  2. Our company only collects the personal data that is necessary for the reason for which it is collected and applies appropriate technical and organizational measures in order to ensure the appropriate level of security.
  3. At the time it collects your personal information, our company informs you of the reason for which it is collected, the duration of its processing, any recipients, any transfer to a country outside the European Union, as well as the relevant rights you against our company.
  4. Nevertheless, in order to provide the above information under 3 in a concise, understandable, transparent and easily accessible form, we have drawn up this policy, which includes general information. Please read this policy carefully.
  5. This privacy policy will be revised in case of changes in the activity of our company or the legislation. The revision will be updated through this website.

2. Personal data collected, purpose and legal basis of collection

Our company specifically processes, receives, maintains and uses the following categories of personal data:

  1. Your contact data (name, phone, email, etc.). This data is obtained from you following your request to contact you. The legal basis of the processing is your consent, as well as our legitimate interest to better understand your needs and expectations and, accordingly, to improve our services and products.
  2. Your identity data (name, phone, email, VAT number, address, occupation, etc.). This data is obtained from you, as you declare it, for the purpose of concluding the contract between us, its execution and support, our communication with you and the issuance of the required tax documents. The legal basis of the processing is the performance of the contract, compliance with tax legislation or other applicable legislation or the fulfillment of our duty, such as for example to comply with a court order, with instructions, requests or decisions of a Public Authority, as well as our legitimate interest in the management and handling of judicial or extrajudicial disputes between us.
  3. Your contact details (email and mobile phone) as well as your date and month of birth. This data is obtained following your request to send informational and advertising material about our products and services (newsletter, sms), as well as informing you about the provision of privileges on the occasion of your birthday. Legal basis of processing is your consent.
  4. Login data – customer identification (password to your account and email). This data is obtained from you in order to provide our services to you. The previous information you enter can be modified by you. For security reasons, the company recommends complex passwords of at least 12 characters consisting of uppercase, lowercase, numbers and special characters and that you maintain confidentiality. The legal basis of the processing is the performance of the contract.
  5. Your order data. This data relates to the history of your orders through the online store. The legal basis of the processing is the performance of the contract and our legitimate interest in serving you better.
  6. Login data (online identifier). Our company uses cookies during your navigation on our website.
    Legal basis of processing is our legitimate interest in promoting our products and services.
  7. When connecting to our company’s social networking account or participating in our activity, e.g. declaration that you like (like) or share (share), our company has access to your social network identity and the relevant information you have declared. This access is defined by the mechanisms of the applications and services of the social media providers.
  8. Our website occasionally contains links to and from third party websites. We point out that the websites of these third parties have their own privacy policy, independent of that of our company, for which we bear no responsibility.

3. Categories of recipients of personal data

During the fulfillment of our company’s contractual and legal obligations, the performance of duty, the service of its legal interests as well as in the event that the company has received your consent, the recipients of the data belong to the following categories, depending on the services we have undertake to offer you:

  1. External partners of the company (accountants, courier companies, persons who provide services on our behalf, such as for the newsletter service, lawyers/legal advisors, etc.), who perform processing on our behalf in accordance with the legislation on personal data.
  2. Servers located within the European Union in a completely secure environment, which are subject to the appropriate regulatory obligation of confidentiality.
  3. Public authorities (D.O.Y, Independent Public Revenue Authority, Ministries), in order to comply with the legislation, with a court order, with their instructions, requests or decisions.
  4. Judicial and prosecuting authorities in case of claims or criminal acts.
  5. Payments are made through a secure environment of a partner financial institution.

4. Your Rights

  1. According to the General Regulation on the Protection of Personal Data (EU 2016/679) you have the right to submit a complaint to a supervisory authority.
  2. According to the same Regulation, you have the right to access, correct, delete, limit or object to the processing and portability of the personal data collected by our company. In particular, you have the right to confirm whether or not your personal data is being processed and, if so, to have access to relevant information and, in each case, to request the restriction of processing. You have the right to correct inaccurate or complete incomplete personal data by providing any necessary document from which the need for correction or completion arises. You have the right on a case-by-case basis to request the deletion of personal data, provided that our company has no legal or valid reason to retain this data. You have the right on a case-by-case basis to object to the processing of your personal data based on your legitimate interest and on a case-by-case basis to receive your personal data in a structured, commonly used and machine-readable format or to request their transfer to a third party.
  3. To exercise the rights under 2, you can apply in writing via email to info@bobofarfallina.gr.
  4. In order to process your requests, we are entitled to request verification of your identity.
  5. The exercise of the above rights acts for the future and not for already executed processing.

Last updated 03/06/2023