Privacy Policy

Protection of Personal Data

“Μ. ΠΡΙΝΤΕΖΗ Γ. ΓΙΑΝΝΑΚΟΔΗΜΟΣ Β. ΜΑΝΙΑΤΗΣ Ο.Ε.” (hereinafter referred to as the “COMPANY”) is fully compliant with and applies the provisions of the General Data Protection Regulation (GDPR 2016/679), the specific provisions of national and European legislation, as well as the provisions concerning the protection of personal data and the decisions of the Hellenic Data Protection Authority.

The COMPANY processes users’ personal data in accordance with the provisions of the General Data Protection Regulation (EU 2016/679). Processing is based on the legal grounds provided for in Article 6 of the GDPR and, specifically: (a) the performance of a contract or the taking of pre-contractual measures at the request of the data subject, (b) compliance with a legal obligation of the COMPANY, (c) the consent of the data subject, where required, and (d) the legitimate interest of the COMPANY, provided that the fundamental rights and freedoms of the data subjects do not override such interest.

Information provided voluntarily by the user/visitor of the website is used by the COMPANY in order to enable users to have direct and effective communication with the store regarding their enquiries or orders placed through the website. The information collected by the COMPANY through the website is intended to measure website traffic, determine customer preferences and facilitate communication with the company, among other purposes.

The COMPANY does not distribute information provided by users/visitors to third parties, except to direct partners for the fulfilment of orders and the purposes of the company.

Data subjects have the right to access their personal data, the right to rectify or complete inaccurate or incomplete data, the right to erasure (“right to be forgotten”), the right to restriction of processing, the right to object to processing, as well as the right to data portability, in accordance with Articles 12 to 22 of the GDPR.

The data subject also has the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before such withdrawal. If the data subject considers that his or her rights are being violated, he or she has the right to lodge a complaint with the Hellenic Data Protection Authority.

Categories of Data and Recipients

The COMPANY collects and processes, as applicable, personal data provided directly by the user, such as identification and contact details (full name, address, email address, telephone number), order and transaction details, as well as website usage data.

Such data may be transferred, to the extent necessary for the performance of the contract or compliance with legal obligations, to cooperating third parties, such as courier companies, payment service providers, website hosting providers and technical support providers, which act as data processors and are bound by confidentiality and data protection obligations.

Personal Data Retention Period

Personal data is retained for a period appropriate to the purpose of the processing. In particular, data relating to orders and transactions is retained for as long as required by tax and commercial legislation, data necessary for the performance of the contract is retained for the duration of the contractual relationship and for as long as legal claims may arise, while data based on the user's consent, such as promotional communications, is retained until such consent is withdrawn.

After the expiry of the above periods, the data is securely deleted or anonymised.

Security Measures

The COMPANY implements appropriate technical and organisational security measures, in accordance with Article 32 of the GDPR, to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised access or disclosure.

The visitor/user may request the deletion of his or her personal data from the company's records by sending a relevant request to info@horrorbros.gr.