1. Information on the collection of your personal data

In the context of our corporate obligations and commercial activity, we collect personal data which we process in accordance with the provisions of the General Data Protection Regulation (GKPD 2016/679) as applied from 25 May 2018, the current Greek data protection legislation for the protection of personal data and privacy in the field of electronic communications (Law 3471/2006, as applicable) and the decisions of the Personal Data Protection Authority (APDPH) and any specific national and European legislation for certain sectors. No one other than the Company has access to this information nor is it promoted to a third party for any further use, in addition to the data that is absolutely necessary for the execution of your order and the contract in general (transfer, etc.) from the companies that cooperate with us, as well as the companies providing e-mail services, services and technology goods to achieve the electronic our communication.

Our Company protects your personal data in full compliance with the relevant legislation. Within the framework of the GCC, the data kept by our Company or by our subcontractor, may be disclosed to third parties, competent authorities, prosecutors or other administrative services, in accordance with the rules and provisions of the respective regulatory framework.

All your data, data and transactions are governed by the principles of confidentiality of communications (electronic and non-electronic) and commercial transactions and reasonable measures are taken to protect and ensure their confidentiality during the transmission and / or execution of transactions. . All the data you submit to our Company is managed exclusively by specially authorized personnel of the Company and / or our subcontractors, which is under the control of the Company and only by its order. For the execution of the processing, the Company selects persons with corresponding professional qualifications who provide sufficient guarantees in terms of technical knowledge and personal integrity for the observance of confidentiality. Also, our Company does not sell or market the data it collects from you. Since when creating an account, the user chooses the password he will use in order to access it, the latter is obliged not to give his password to third parties and to change it at regular intervals. The Company reserves for any loss due to faulty breach of the above obligations of the user of its website.

1. How and for what purpose do we collect personal data when you submit a query / request through the contact form of our website

When you submit a query / request through the contact form of our website, we ask for your name, your phone number and your e-mail address. We use this information to answer your question / request, as well as to provide you with any information about our products and services. Access to your data, in addition to our authorized staff, is available to the public limited advertising and communication company with which we maintain cooperation and is committed to the security of your data by applying all modern and appropriate for the purposes of processing technical and organizational measures. We keep your data for the necessary period of time to complete the process, ie the satisfaction of your query / request, unless due to the nature of your request, there is a need for further communication and in any case for your own service. In specific cases of requests, such as a request related to the product warranty, the Company reserves the right to maintain its history of correspondence between us for as long as is necessary for the exercise of its rights.

When you buy a product from our website

 Order – invoicing – shipping data

When you buy our online products, you have the option to register at kassotaki.gr as a member by entering your email address or to make the purchase as a regular visitor. Upon completion of your order, we ask for your email address and phone number in order to confirm the order. We also request the necessary data for the issuance of the relevant document and the shipment of the goods, ie name, surname, address, postal code, city / region in order to execute the contract between us with the delivery of the goods. In the case of an invoice, it is necessary to collect additional data such as the name and distinctive title of the company, the VAT number, the Tax Office, the profession and the object of activity. In case the recipient is different from the customer who made the order, you provide us with the corresponding data of the recipient in order for the order to be executed upon delivery. Your delivery note is delivered upon receipt of the product and your purchase receipt is sent via email or physical mail.

Payment details

Depending on the way you choose to make the payment, we receive the necessary receipts in order to execute your order such as your name and order number (in case of deposit in one of the Banks with which we cooperate). To make payments via your credit / debit card, we inform you that the entire payment process takes place within the secure environment of National Bank of Greece that uses the SSL protocol, with 128bit encryption, for secure online commercial transactions. This encrypts your personal credit / debit card information so that it cannot be read or altered when transferred over the Internet. Your details will be used to confirm payment of the order.

Who receives your data

When you wish us to send you the product you have purchased at the address you have indicated to us, the necessary data for delivery are given to the companies cooperating with JEWELRY STORE-KASSOTAKI FOTEINI for the execution of the purpose. If necessary for the arrangement of more specific arrangements of the order as well as for the completion of the ordering process, we may send automated or personalized emails to the email address and / or to the mobile phone that you have notified us or to contact us by phone at the phones you have notified employees of our Company. For the receipt of the products by the buyer or a third party authorized by him in case of payment in a physical store and receipt from it, you will notify the employee who delivers the products of certain identification details (indicatively we mention name, ID or passport number and issuing authority) for security reasons of the transactions, which will be deleted after the delivery of the product. We process the above information to execute the contract between us. Also, the processing is necessary for the compliance with the legal obligation of Pitsoulaki – Robogiannakis SA. as a controller, as well as for the purposes of our legal interests, ie the better and more efficient handling of the process of receiving and executing an order. Following the performance of the contract between us, we retain the data we have collected for a period which does not exceed what is absolutely necessary as required and to comply with tax legislation or other provisions as they apply. The same information is collected if you place an order by phone.

Create a user account

In order to provide you with the best service and to facilitate your future purchases, you can create a member account to become a member of our website. The data you fill in the special form of the Company remain stored in the systems of our Company for as long as your account remains active as, if you choose to deactivate it, they are deleted. If you place an order, your data will be kept for the necessary period to cover tax and other obligations of the Controller based on the respective tax or other relevant legislation and / or provision. To create a member account, fill in the e-mail address and then fill in your requested personal information (Name, Surname, address, Postal Code, City, Region and telephone). Once you fill in the details to become a member, you will be sent an email to the address you have previously stated, which confirms your registration on the Website. The following information is required for the issuance of invoices: name, profession, VAT number and VAT. All this information is necessary, relevant and convenient for the transaction and invoicing of your order. It is also necessary to use login information (password) which you must store and keep safe. During your first order you are asked to fill in the required information in order to be able to complete the purchase and shipping of the product or by creating a member account, so your details will be stored and you will be able to order more easily the next time you wish to make a purchase through our online store, or as a visitor when you do not create a member account. If you wish to send us a request regarding the user account you maintain, for identification purposes, it should be sent to our Company at info@kassotaki.gr, from the email you have stated during your registration as a member. Especially for issues related to the processing of your data, you can contact the DPO (as mentioned below) either as a guest and you do not create a member account. If you wish to send us a request regarding the user account you maintain, for identification purposes, it should be sent to our Company at info@kassotaki.gr, from the email you have stated during your registration as a member.

Subscribe to the newsletter

For your subscription to the Company’s newsletter, in order to receive our news and offers, we collect your email address for sending the relevant material. We keep your data for as long as you wish to receive information from us, enabling you to opt-out on every message. Your data is processed by the advertising and communication societe anonyme and by the provider of the newsletter sending platform, with whom we maintain cooperation and are committed to the security of your data by applying all modern and appropriate for the purposes of processing technical and organizational measures. For the specific processing we apply what is defined by the e-Privacy Directive (2002/58 / EC with the amendments with 2009/136 / EC), the law 3471/2006 and the case law of APDPH.

Obligation to register correct personal data

The personal data you provide to the Company is necessary in order for the Company to contact you for the settlement of more specific issues related to your order, the fulfillment of its obligations towards you as well as for the execution of the orders you have submitted, your invoicing, the facilitation of deliveries, the general execution of the contract with you, the service of your requests as well as the sending via e-mail of a newsletter in relation to our products through the online store. For this purpose, you must provide us with information which is absolutely correct, accurate and up to date. In case of subsequent change of any of them you must inform us in writing within a reasonable time. In the event that the contractual or legal obligations of our Company, which are implemented through the use of the data declared to us are not fulfilled in a timely manner and due to the use of incorrect or up-to-date personal data that you have declared, the Company bears no responsibility. In particular, any information that will be made to the email address that you have notified us when creating an account (eg for any product availability or other arrangements of the contract, etc.) will be considered valid even if is not delivered to you due to an error in the information provided by you and / or due to a technical or other fault in your server, and / or your telephone, and / or your telecommunications provider and / or due to a change in your details (unless you have informed us in a timely manner). It is emphasized that each user bears full and exclusive responsibility for the accuracy, truthfulness and updating of the data he states. Our Company does not make any identification of the data declared by the user and therefore has no responsibility for them.

 Explicit consent

By completing and registering your personal data you declare that you expressly consent to the use of your personal data, for the legal collection and processing of which and for the purposes described above you have been informed through these terms and conditions. The instruction to save your data is your express consent to the processing described above. The user acknowledges, accepts and allows that the Company has the right to use subcontractors to provide its services and the Company declares that the subcontractors fully comply with the respective professional qualifications, technical knowledge and personal integrity required by law for ensuring the confidentiality of the processing of personal data.

1. Connection via hyperlinks

This Website is linked through hyperlinks to other Websites, which are not related to the Company and their content is not controlled by the latter (the “Linked Websites”). Therefore, the Company does not guarantee the correctness, legality, completeness, updating, truth, accuracy or quality of their content and is not responsible for them or for any loss or damage that may be caused due to or on the occasion of their use. Likewise, the Company cannot control the processing of your personal data from the Linked pages and for this reason bears no responsibility in relation to it. When you use the Linked Websites, the Terms and Conditions of each specific web page apply accordingly. For any issue that may arise in relation to the content or the use of the Linked Website, you are invited to contact the owner or administrator of the respective website. The Company in no case endorses or accepts or approves the content or services of the Linked Websites, to which the user is referred through hyperlinks.

1. Connecting and interacting with social networks

The Website provides the user with the ability to connect and interact with social networks or websites upon his own initiative and request. In this case the Company is not responsible for the processing of personal data carried out by these networks. In order to exercise the rights provided by law, the user must contact these networks themselves. The management of our accounts in social networks is done by us or by our partner advertising and communication company with which we maintain cooperation and is committed to the security of your data by applying all modern and appropriate for the purposes of processing technical and organizational measures. Purpose of processing all the data we collect about you, whether anonymous or not, is to provide updates about our products or to contact you, responding to the messages you send us. The legal basis for the processing is your consent. Provide your consent by liking or following our pages and you can revoke it just as easily, in exactly the same way (unlike, unfollow). By taking part in a competition through social networks, the details of the winner are announced through the account maintained by the Company and a member of our staff contacts him for the collection of data, in order to send or receive his gift with the procedure followed and in the case of ordering through the website. The legal basis for the processing is your consent. Provide your consent by liking or following our pages and you can revoke it just as easily, in exactly the same way (unlike, unfollow). By taking part in a competition through social networks, the details of the winner are announced through the account maintained by the Company and a member of our staff contacts him for the collection of data, in order to send or receive his gift with the procedure followed and in the case of ordering through the website. The legal basis for the processing is your consent. Provide your consent by liking or following our pages and you can revoke it just as easily, in exactly the same way (unlike, unfollow). By taking part in a competition through social networks, the details of the winner are announced through the account maintained by the Company and a member of our staff contacts him for the collection of data, in order to send or receive his gift with the procedure followed and in the case of ordering through the website. 5. Data Subject Rights Subject Access Right (Article 15 GIP)

You have the right to request from us, at any time, copies of your personal data. There are some exceptions, which means you may not always receive all the information we process.

More specifically:

Natural persons (data subjects) have the right to receive: a) confirmation regarding the processing of their data, and b) a copy of this data (cf. Articles 12, 15 GCC). You can exercise this right, in principle, free of charge, either in writing or orally if you wish. You may only be asked to pay a reasonable fee if your request is manifestly unfounded or excessive (especially when repeated) or if the number of copies we are asked to provide is large.

Right of correction (Article 16 GIP)

 You have the right to request the correction of your data when it is inaccurate, or the completion of your data when it is incomplete (cf. Articles 12, 15, 19 GCC). You can exercise this right in writing or orally.

Right of deletion (“right to be forgotten”) (Article 17 GIP)

You have the right to request the deletion of personal data concerning you, provided that one of the reasons set out in Article 17 of the Regulation applies.

Right to restrict processing (Article 18 GIP)

1. You have the right to ensure that the controller restricts the processing when one of the following applies: (a) the accuracy of the personal data is disputed by the data subject, for a period of time allowing the controller to verify the accuracy of the data; b) the processing is illegal and the data subject opposes the deletion of the personal data and requests, instead, to restrict their use; c) the controller no longer needs the personal data for its purposes processing, but this data is required by the data subject to establish, exercise or support legal claims,(d) the data subject has objections to the processing in accordance with Article 21 (1), pending verification as to whether the legitimate reasons of the controller override the reasons of the data subject.
2. Where processing has been restricted in accordance with paragraph 1, such personal data, other than storage, shall be processed only with the consent of the data subject or for the establishment, exercise or support of legal claims or for the protection of rights. another natural or legal person or in the public interest of the Union or a Member State.
3. The data subject who has secured the processing restriction in accordance with paragraph 1 shall be informed by the controller before the processing restriction is lifted.

Obligation to notify regarding the correction or deletion of personal data or the restriction of processing (Article 19 GIP)

The controller JEWELRY STORE-KASSOTAKI FOTEINI announces any correction or deletion of personal data or restriction of data processing carried out in accordance with Article 16, Article 17 paragraph 1 and Article 18 to each recipient to whom the personal data was disclosed, unless this proves impossible or if it entails a disproportionate effort. The controller – JEWELRY STORE-KASSOTAKI FOTEINI informs the data subject about these recipients, if requested by the data subject.

Right to data portability (Article 20 GIP)

You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format, as well as the right to transfer such data to another controller without objection from the controller to whom the personal data were provided, where: (a) the processing is based on consent in accordance with Article 6 (1) (a) or Article 9 (2) (a) or in a contract in accordance with Article 6 (1); b) and b) the processing is performed by automated means.

Right of objection (Article 21 GIP)

You have the right to object, at any time and for reasons related to your particular situation, to the processing of personal data concerning you based on Article 6 (1) (e) or (f), including the drawing up of profiles under these provisions.

Right to withdraw consent (Article 7 Conditions for consent)

You have the right to withdraw your consent at any time. Withdrawal of consent shall not affect the lawfulness of the proceedings which were based on prior consent.

1. Compliance time of the Controller

The person in charge of processing JEWELRY STORE-KASSOTAKI FOTEINI must respond to your requests and the satisfaction of your rights, as provided by the GKPD, within one (1) month from the date of receipt of your request. The deadline of one month can be extended for another two (2) months, if the request is complex or the number of copies we have to provide you is large. In this case we will inform you about the extension within one month from the receipt of the request.

1. Report of violation of personal data to the data subject

Our company will notify you without delay of any breach of personal data, as it may put your rights and freedoms at high risk.

1. Right of appeal to the APDPH

You have the right to file a complaint in case of violation of the provisions of Regulation 2016/679 to the competent supervisory authority http://www.dpa.gr/

Privacy policy update

This privacy policy is kept up to date whenever necessary. Visit our website often to stay informed.

In case we want or need to process your personal data for a different purpose than the one for which they were originally collected, we will contact you to provide you with any necessary information and, if required, to seek your consent.