PAPADIMITRIOU S.A. (hereinafter the Company) is committed to respecting and safeguarding personal data. We understand and pay serious attention to the fact that you are aware about and interested in your personal data.
This Personal Data Protection Policy outlines the personal data the Company collects from you, how we use and protect your personal data and the choices you have about how we use that data. Its purposes is to brief your about the Company’s policy relating to your personal data provided to us, to tell you about the purposes for which it is processed by us, the categories of recipients, and the procedures you can follow to exercise your lawful rights.
1.1. Type of processing. When you visit our website the Company may collect personal data:
1.1.1. When you register to receive the newsletter or other promotional materials: You provide us with your email address, name and surname, thereby allowing us to personal direct, non-transactional communication with you.
1.1.2. When you take part in competitions/contests, fill out questionnaires and surveys: When you fill out forms on questionnaires, surveys or participate in competitions/contests, you provide us with personal data such as: your name, address, email address and phone number.
1.1.3. When you contact staff from our Customer Service Department: When you contact us by email, phone or mail, for example, when you come into contact with our Customer Service Department, we will ask you to provide personal data: name, address, email address, etc. In addition, any calls to our switchboard may be recorded. You are not obliged in any way to provide that personal data. However, not providing data marked mandatory will prevent you visiting and navigating the website. Not providing other non-mandatory personal data will not affect how we provide services to you in any way.
We collect your personal data when you express interest in our services, when you use the contact form or when you subscribe to our newsletter.
Your personal data is not processed by third parties, except those we collaborate with and who are necessary in providing or help us provide our services to you, but always under conditions that fully ensure that your personal data is not processed illegally in any way, namely for a purpose other than one you sent it for in accordance with the above. As part of our operations, we use third parties to provide services on our behalf. Note that those categories of personal data recipients are data processors who process data on our behalf and therefore they do not process your data for purposes other than the ones the data was sent for. In all events, our Company will not make the personal data of visitors to/users of its website available for sale or otherwise transmit or disclose it to third parties, apart from the ones referred to above, without the consent of visitors/users, with the exception of relevant legal obligation when it may be provided to the competent authorities only.
In all events, access by unauthorised persons including our employees to your personal data is prohibited.
The Company collects, holds and processes only the minimum, personal data absolutely necessary to achieve the purpose of processing.
We use your personal data for the following purposes:
5.1. We will keep your personal data for the time considered absolutely necessary to achieve the exact purpose and to fully meet your requests relating to each order.
5.2. For direct marketing / promotional measure purposes, we retain your personal data for 3 years during which time you retain all your rights under the applicable personal data protection laws which are set out in section 7 of this Policy. If you have not reconfirmed your consent at the end of that 3-year data retention period, the data are deleted.
5.3. Our company may continue to store your personal data for a longer period if that is necessary to safeguard is legitimate interests in relation to potential liability associated with the provision of the service.
When you provide us with personal data we take measures to ensure that the data is held and managed safely. To protect your personal data we take adequate physical, technical and organisational measures. We update and check the security technology we use on a continuous basis. We limit access to your personal data to those employees who need to know about the data so they can provide you with the services you want. In addition, we train all employees about the importance of confidentiality and keeping your personal data secret and secure. Among other things, we have put in place the following technical and organisational measures and procedures to protect your personal data from any loss, corruption, illegal processing or alteration:
You can exercise the following rights under the conditions and specific provisions set out in Regulation (EU) No 2016/679:
7.1.1. Right of access to your personal data which we process and to information relating to the processing thereof.
7.1.2 Right to correct personal data, namely the right to correct any inaccurate data.
7.1.3 Right to object to the processing of your personal data when there is a legitimate interest, including your right to object to the automated processing of your data and the processing thereof for commercial marketing purposes.
7.1.4 The right to limit the processing of your personal data which means you can ask for processing to be suspended if you contest the accuracy of the data, you have objections to it being processed or there is another ground specified in the relevant Greek or European protection of personal data legislation.
7.1.5 The right to obtain your personal data which you provided to us with consent, so that it can be used elsewhere.
7.1.6 The right of deletion of your personal data without undue delay at your request under the conditions laid down in the relevant Greek and European protection of personal data legislation.
7.1.7 The right to withdraw consent. In cases where we process your personal data based on your consent, you also have the right at any time to withdraw your consent or change the degree of consent you have given, without that affecting the legality of the processing in the period prior to the withdrawal of consent.
7.1.8 Right to information about data breaches.
7.1.9 The right to submit a complaint to the competent Greek independent authority which is the Hellenic Data Protection Authority if your data is illegally processed (http://www.dpa.gr/).
The personal data we collect from you is not transmitted or processed outside the European Union.
Cookies are small text files which are stored on a website in an internet browser when you navigate and are then recovered so identify it the next time it is visited. However cookies never contain personal information that could allow anyone to contact the website visitor, such as email address, etc.
9.1 Types of Cookies The Company may use the following types of cookies to ensure a better experience for website users, and to personalise information and preferences on each browser.
A) Essential cookies
These are cookies vital for a website’s function. Without those cookies the website cannot operate properly. No special consent is requested for this category of cookies. Consent is required for all other cookies.
B) Functionality cookies
These are cookies that improve website functionality. Thanks to use of the specific cookies the browser adapts to your interests and so we can save the time you would spend keying it in.
C) Third party cookies
The website uses third party cookies.
9.2 Google analytics
If you do not want your personal data collected by Google Analytics you can download and install the program Google Analytics OptOut on your browser from the link below: https://tools.google.com/dlpage/gaoptout/
You can control and/or delete cookies to suit your preferences. You can also delete all cookies already on your computer (or any device used to browse the internet) and can adjust most web browsers so they do not allow cookies to be installed.
However, in that case you may need to adjust certain preferences each time you visit a website. Some services may not work if you delete cookies.
The company does not seek and does not want to collect any personal data about children aged under 16 and urges all parents to inform their children about safe, responsible use of their personal data when they are using the internet. Children aged under 16 must visit the website under the supervision of a parent or person with parental care of the child and information must not be sent to the website by anyone under 16 without the consent of their parent or person with parental care of the child. If the company is notified that online personal data of a person aged under 16 has been sent via the website without the consent of the parent or person with parental care, the company will take appropriate measures to delete that data from its databases and not use that data for any reason (except, where necessary, to protect the child or others in accordance with the provisions of law).
We reserve the right to amend and update this policy in whole or in part at out unfettered discretion at any time. Any change hereto shall apply immediately once the amended policy is posted to the website. There will also be a notice on the homepage indicating the change. In any event, if you accept this Policy and continue to use the website after any amendments made in accordance with the above you are deemed to have accepted those changes. If you do not agree with the terms of this Policy as amended in whole or in part you must stop using the website. We may send periodic emails to remind you of changes and updates to the Policy but you should check the website frequently to learn about our current, valid personal data protection policy.
All changes to this Policy will be posted here immediately.