PROTECTION OF PERSONAL DATA

The website www.prestigioussecret.gr is the online store of the sole proprietorship with the distinctive title of Prestige (Prestige) based in Heraklion, Crete, at street 1866, no. 31, in Greece, hereinafter referred to as “Electronic Store” or “Website”.

This company, in the capacity of Data Processor, is committed to the protection of your personal data and their secure processing, keeping a file of Personal Data, with the aim of serving you more fully through the services offered to you in the Online Store.

Because the Website processes your personal data, in accordance with the provisions of the GDPR Regulation (GPRD 679/2016) and the applicable Greek legislation, prestigioussecret.gr provides you with the opportunity to be informed about the following privacy policy and it is recommended that you read it carefully so that you can be informed about what is collected, how it is used and what your rights are in relation to it during your visit to the prestigioussecret.gr online store.

With only your standard details, aimed at smooth completion of the purchase and delivery of the order to you, it is personalized in this way and therefore improves your service for the best possible shopping experience.

1. INFORMATION WE REQUEST FROM YOU

a. Privacy

Each user/consumer/visitor can browse the Online Store without providing any personal information.

We will need personal data (Name, address, telephone, your e-mail and a password) only when you order products or fill out the contact form.

b. Documents

In case you want a purchase invoice, contact 2810301677 or 6948595222 and give the name of the company, VAT number, DOU and address of its headquarters.

In summary, we only ask for as much information as is absolutely necessary for us, i.e. what is needed for the consistent delivery of the products you have ordered, the secure payment of your order and/or your orders, and the promotion of our company’s products and/or services directly to you for a personalized service based on your needs and preferences.

c. Use of cookies

The Website uses cookies to be able to offer personalized service to each user/consumer/visitor. Of those that are characterized as necessary, they are stored on each user’s terminal since they are directly connected to the smooth operation of the Website. At the same time, third-party cookies are used that allow analysis to understand how you use the Website. These cookies are stored on your server, after your consent, i.e. from the moment you choose to accept them. You can also change your preferences at any time you decide, knowing that any change in cookie settings may significantly affect the smooth operation of the Website.

In addition, during each visit to our website, data such as the browser used, the IP address of the user/consumer/visitor, or information about the products saw.

For more information about cookies, see the link below COOKIES POLICY AND SETTINGS .

2. PURPOSE OF MANAGEMENT AND PROCESSING OF THE DATA AND INFORMATION YOU HAVE TRUSTED TO US.

We use the data you have entrusted to us to offer you a powerful shopping experience, in the following ways:

• To become a member prestigioussecret.gr

(As a member you have access to your old and current orders). Also receive updates in categories of your interest.

• To deliver to your place orders that you have purchased online from prestigioussecret.gr

• To be able to confirm your orders.

• To be able to answer your possible questions and inquiries.

• To send you special offers and new product updates.

In no case do we sell your personal information to third parties, without falling under the conditions of the law, as detailed below. Under no circumstances do we sell or rent your personal data to third parties. These data are used exclusively by this Website with the sole aim of continuously improving your service. If in the future we find that sharing some of your information with a third party can significantly benefit your purchases, it will only be done with your approval.

3. YOUR RIGHTS AND PREFERENCES:

As you may know, the new General Data Protection Regulation or GDPR gives citizens certain rights in relation to their personal data. To fully comply with the provisions of this law, we have implemented additional transparency features to help users exercise these rights. Based on availability and with the limitations imposed by applicable law, the rights granted to citizens are as follows:

• Right of access – you have the right to be informed and request access to your personal data, which we process

• Right to rectification – you have the right to request that we amend or update your personal data if it is inaccurate or incomplete

• Right to erasure – you have the right to ask us to erase your personal data

• Right to restriction – you have the right to request the temporary or permanent cessation of the processing of all or some of your personal data

• Right to object – you have the right to object at any time to our processing of your personal data, based on reasons related to your personal situation

• Right to data portability – you have the right to request a copy of your personal data in electronic form and to transfer that personal data to a third party service and

• Right not to be subject to automated decision-making – you have the right not to be subject to a decision based solely on an automated decision-making process, such as profiling, if the decision would have legal or other equally important consequences for you.

If you have questions about the protection of your privacy, your rights or how you can exercise them, please contact the Data Controller at the contact details provided in these terms of use. We will respond to your request within a reasonable period of time, and in any case within one (1) month after we have verified your identity. If you are unhappy with the way we use your personal data, you can also contact and lodge a complaint with the Data Protection Authority.

You also have the possibility through our website to control the use of your personal data, in the following way:

By going to “ My account “ you can access any information you have entrusted to us (right of access), you can make changes to your information or even request their deletion and generally object at any time to the processing of your data .

An automated copy of the user’s Personal Data held by the company can be obtained after contacting the company. Data that must be stored due to legal, statutory or contractual obligations to retain commercial documents will remain in a secure environment for as long as required by law.

Finally, personal security is the password you give when you become a member of www.prestigioussecret.gr. In order to present any of your personal information, the user’s email and password must first be provided. For this reason, these details must be well guarded so that they do not risk falling into the hands of third parties.

4. LEGAL BASIS OF PROCESSING.

We undertake that the processing of your personal data is legal and legitimate because we rely on legal bases (Article 6 GDPR), such as when you access our Website, we need your personal data to perform the contract between us, regarding remote purchase of our products (contact details). We also rely on other legal bases, such as serving our legitimate interests as a business, (our economic growth and progress) or complying with a legal obligation (tax documents) as well as granting your free and informed consent.

5. DATA RETENTION AND DELETION.

We retain your personal data only for as long as necessary to provide you with our services, as well as for legal, tax and essential business purposes, such as maintaining the performance of our service, improving our services, receiving business data-driven decisions about new features, to comply with our legal obligations and to resolve disputes.

If you request it, we will delete your personal data so that it is no longer possible to identify you, unless the law allows us otherwise or requires us to retain certain personal data, including in cases such as the following:

• If there is a problem with your account, a claim or dispute that has not been resolved, we will retain the necessary personal data until the problem is resolved and harm is prevented.

• If we are required to retain your personal data for legal, tax, audit and accounting purposes, we will retain the necessary personal data for the period required by applicable law, and/or

• Where necessary for our legitimate business interests, such as preventing fraud or maintaining the safety of our users.

6. DATA OF MINORS

We do not target minors, nor do we knowingly collect and retain data about children under 18 years of age. For more information, see the General Terms and Conditions

7. SENDING NEWSLETTERS.

This company collects and processes e-mail addresses that users voluntarily provide after they have previously accepted the Terms of Use and Transactions of the website.

To send the newsletters, we only use the information you have given us, i.e. your email and name, if you have registered it. We also retain your IP address. All processes are GDPR compliant and your files are protected in accordance with our Privacy Policy.

The purpose of the processing is, exclusively, to send users newsletters, offers, etc. of this company, which processes this data until the user declares that he no longer wishes to receive newsletters and requests his deletion from the relevant list, via email to her. The possibility to delete from the list is also provided to the user with a relevant hint in each newsletter sent.

8. TRANSFER OF PERSONAL DATA.

Visitor data may be transmitted to partner providers of marketing services or other services relevant to the purposes of the business. The cooperating companies have been carefully selected and are committed to this company with a relevant contract that also concerns the protection of personal data, are located within the European Economic Area, are subject to the relevant EU legislation and provide the highest possible level of security. The visitor reserves the right to oppose or delete such actions at any time.

The data may also be forwarded to official authorities if there is a legal obligation or court order. The same applies in the event that this company has the right to do so, for the prosecution of criminal offenses or for the protection and enforcement of its rights and claims.

Data is also transmitted to third parties for the proper execution of contracts in the following cases:

• For the delivery of goods to transport companies and to companies providing postal services, as specified by placing the order.

• For the payment of the goods to domestic or foreign payment service providers (eg PayPal) or banking institutions, specified when placing the order.

During the payment process, payment information such as credit card numbers etc. is not recorded or stored during this transaction.

9.LINKS

This website may contain links that lead to other websites. This company, as well as its online store, does not have the ability to control these sites and is in no way responsible for their content and anything that the above websites may provide.

10. UPDATE

We update the Privacy Policy when there is a need to better serve you or our compliance with the latest legislation. From time to time, therefore, we may update this privacy policy for your better information, which will be posted on the Website, indicating the date of the latest version.

In any case, we recommend that you frequently check this Privacy Policy for valid and timely information on how we protect your personal data.

For any clarification regarding this Privacy Policy and the protection of your personal data, please contact us at the following details:

GEORGIOS ORFANOUDAKIS

Address: 1866 Street, No. 31, Postal Code 71201, Heraklion Crete
Contact numbers 2810301677 or6948595222
Ε-mail [email protected],