GENERAL CONTEXT
 
User's /Customer's data are stored and used by the Company, exclusively for the execution of orders, the provision of personalized services, and the export of statistics. We do not share personal information with third parties, except as necessary for our legitimate professional and business needs, as for providing advertising material and personalized offers or in cases where it is mandatory by law.
The Customer hereby gives his consent for the storage and processing of his data by the Company for execution and proof of his orders, the provision of personalized services and the export of statistics and for their transmission to associates with the Company companies to send him promotional material and personalized offers or to facilitate and execute the contract including payment and shipping.
The customer reserves the right to access any information provided by him and raise objections to the processing of his data at any time. In addition, visitors / customers may submit any question / request legitimate right by contacting the Data Protection Officer to the email address: [email protected].
Our goal is to ensure the confidentiality of your transactions and the protection of your privacy. Therefore, please read the following summary carefully about how our site works. We wish to inform you that the processing of your data will be carried out correctly and transparently.
 
The person in charge of processing personal data collected through this website is the Company "KOPANOS G. & CO. LLC" based in Epanomi, Thessaloniki, 1o km Epanomi - Thessaloniki, PC 57500 Email: [email protected].
 
You can contact the Data controller at the email address: [email protected]
 
INTRODUCTION
We take the protection of your data very seriously and treat your data confidentially and in accordance with the statutory data protection regulation, by the applicable National and European Legal and Regulatory Framework for the protection of personal data. The Company, defining the purposes and the way of processing personal data, becomes Responsible for the processing of such data. In addition, we will update and modify this Statement at regular intervals in case this becomes necessary.
 
Our Company is committed to protecting the personal information collected while using our website. This Privacy Policy applies to the collection, use, transfer, and retention of such data.
 
PERSONAL DATA COLLECTION AND TREATMENT BASE
We collect and use your data to the extent necessary to provide you with a functional website to access our content and services, (by subscribing to the website, within the course of a registration, by ordering services, by filling in forms, by sending emails, or other inquiries to us, etc.). To manage and respond to your requests, the Company collects the data you provide in the context of creating your profile. The information you provide to us is strictly used in the context of our both contractual and transactional obligations.
 
The legal processing of your data requires the express consent of your processor. The Company can only process personal data in the following circumstances:
 
  1. with the consent of the individuals concerned (b) where there is a contractual obligation (a contract between your Company / organization and a client) (c) to meet a legal obligation under EU or national legislation (d) to protect the vital interests of an individual (e) where processing is necessary for the performance of a task carried out in the public interest under national legislation (f) the processing is necessary for the organization’s legitimate interests, pursued by the controller or a third party, but only after having checked that the fundamental rights and freedoms of the person whose data you’re processing aren’t seriously impacted, in particular, if the data subject is a child. Subparagraph (f) of the first subparagraph shall not apply to the processing carried out by public authorities in the performance of their duties.
 
In particular: We collect, process, and use your data through this website for the following purposes:
 
  • For the performance of the contract, meaning, processing online orders. For contract conclusion and execution, we request contact details on a case-by-case basis (i.e. name, delivery address, invoicing address, e-mail address, telephone, payment method information). We also maintain our customers' data under the provisions of current legislation by storing only the relevant and necessary data).
In addition, we provide our customers with the ability to place orders as guests. If you choose this way of ordering, you do not need to register with your personal details before submitting your order. Please note that you will need to re-enter some of your details when placing future orders.
 
  • For sending newsletters and promotions in case you subscribed to the Newsletter service of our Company.
 
We use your data to send information about products, services, and other special offers to the email address you provide with your prior express consent. Consent to the above benefit is governed by Article 6 (1) (a) and Article 7 of the GDPR.
 
The above-mentioned registration for the receipt of our newsletters and our promotions is carried out for free. The registration is done using a "dual consent" procedure, through which you will receive an email during the registration, which will ask you to confirm your registration. This confirmation is necessary to prevent anyone from registering email addresses that do not belong to him. You have to opt-in and agree to your personal data being stored and/or re-used for this purpose.
 
In case you buy products or services from our website, we can send you via email information about other similar products, our special offers, and our services to the email address you have stated. In this case, however, you will be able to unsubscribe immediately from the list of recipients of our Newsletters by clicking on the relevant link that is attached to each of our emails or you can ask us not to send you information material again by sending us a relevant request through an email at [email protected] .
 
In case you give us your explicit consent to perform targeted ads based on your interests, we analyze and save the percentages of openings and clicks that you make when you are logged in to your profile.
 
It is not possible to unsubscribe from certain information emails that are necessary for the execution of contracts and the operation of our website, including service-related emails (i.e. confirmation of registration, customer service information) or information related to purchases (i.e. order confirmations, contract documents, payment processing). You will receive these notices in the contact details you provide upon your consent and based on the legal processing required to execute a contractual obligation or amend the contract or cancel it and settle both bilateral agreements under the law.
 
  • Conducting market research and customer service satisfaction as well as for any statistical purposes,
  • Customer service and customer support, in order to answer questions or complaints that you send us through the contact form,
  • Create a user account, to create a personalized profile on our website in order to tailor your experience with our web content,
  • React to content in the form of requests and comments by sending us emails and/or comments.
 
TRANSFER OF PERSONAL DATA 
 
Our Company does not share, exploit or in any way transmit your personal data to third parties without the strict conditions, control, and security measures as provided by the law.
 
In case this becomes reasonably necessary and after your prior information and modification of our relevant policy such transfers will be protected by appropriate protection safeguards (e.g., intra-group disclosures of personal data, disclosure of personal data to subcontractors, disclosure Personal Data to third-party vendors, disclosure of personal data is expressly stipulated by law, etc.). In addition, we may disclose Personal Data where such disclosure is necessary for compliance with a legal obligation to which we are subject.
 
In addition, before any transfer of information to a third party not listed below, the Company will ensure that the recipient is bound by strict security and confidentiality standards. As part of our activities and for the purposes outlined in this Privacy Policy, only authorized employees have access to your data. In addition, we may transmit your data to third parties or government agencies if we become legally liable (e.g. by order of a public authority or court).
 
Transfer To Partner Service Providers
For the operation of our website, we work with various service providers (e.g. for the provision of central information technology services, hosting on our website, processing payments and sending products, delivery of newsletters). We transmit the information necessary for the respective purposes to these service partners.
 
Some of the partner companies process and execute our orders and therefore may use the data provided solely under our instructions. In this case, we are legally responsible for ensuring that these companies, to whom we outsource the services, take appropriate data protection measures. Regarding the shipment of the products, the data are transmitted to logistics companies or the cooperating postal service provider. The provider will receive information (e.g. email address or phone number) to determine a specific delivery time after consulting with you to send your order.
 
The payment process is based on the terms of the relevant service provider, to whose website a secure referral ( redirect ) is made. In case of payment by credit cards, the security will be checked based on the transaction with the assistance of the provider who undertakes its execution to prevent fraud through credit cards. We do not collect or store payment information such as credit card numbers or account information.
Kopanos.gr is not responsible for the terms of use of personal data adopted by the financial institutions with which it cooperates for the completion of commercial transactions and/or for any fault thereof.
 
DATA STORAGE AND DELETION
We process and store your data only for as long as is necessary for the purposes of processing or otherwise to the extent permitted by applicable laws. The general time limit is set at five (5) years, while the maximum period will not exceed twenty (20) years in each case.
 
In addition, the data you have provided by registering for newsletters, promotional material, targeted advertisements, market research, and customer service satisfaction, are stored by our Company until you are removed from our relevant list or revoke your consent.
 
The data you have provided to us for a request, complaint, or query is stored until it is processed.
 
Retention of your data will always be based on the principle of minimizing and limiting the time storage to the necessary measure and period.
 
SECURITY
 
To ensure the security of your data, we take the necessary technical and organizational measures to prevent third-party data breaches. Our employees are bound by confidentiality clauses and are required to comply with them.
 
The Company is focusing particularly on the evaluation of risks to personal data and the adoption of relevant security measures in a manner that ensures appropriate security of the personal data to prevent loss, use, or unauthorized access.
 
TECHNICAL AND ORGANIZATIONAL SECURITY MEASURES
 
Our Company takes technical and organizational protection measures regularly reviewed and adapted to new technological standards if required. These protection principles also apply to our partner companies. Among other things, it can implement the following technical and organizational measures and procedures to protect your data from any loss, alteration, illegal processing or alteration, namely: encryption, detection, and management of security breaches; use of servers that follow rules security, electronic payments, and personal data security; use of information systems and programs for computers installed in a way that minimizes the use of personal data and/or user authentication data; adoption of individual procedures for the protection of personal data and their secure deletion/destruction; need-to-know principle.
 
RIGHTS OF THE DATA SUBJECT
 
In this section, Kopanos Store addresses the rights deriving from Regulation (EU) 2016/679 and how these rights can be accessed from Data Subject. 
 
Upon request, a data subject should have the right to receive a copy of their Personal Data in a structured format, requesting any information held on them be deleted or removed. If the subject requests copies of the information from the Company, it may incur a reasonable cost.
 
Furthermore, the subject reserves the right to object at any time to processing of their personal data, unless the Company demonstrates compelling and legal reasons for the processing, which prevail over the interests, rights of the subject or the said processing is done for the establishment, exercise or support of legal claims of the Company.
 
RIGHT OF ACCESS
Our Company provides data subjects with:
(1) the identity and contact details of our Company, the Processing Manager and its representative;
(2) the contact details of the DPO;
(3) the purposes of the processing of the Data, as well as the legal basis for the processing;
(4) the recipients or categories of recipients of the Personal Data, if any;
(5) the period for which the Personal Data will be stored or if this is not possible, the criteria used to determine that period;
(6) the rights of the Data Subjects, as discussed in this section;
(7) the right to complain about the supervisory authority; and
(8) where applicable, any other requested information about the subject of each right.
 
The before-mentioned information should be given:
 
(a) within a reasonable time after the collection of the Personal Data or the submission of a query, but not later than one month, taking into account the specific circumstances in which the Personal Data are processed;
 
(b) At the first communication with the Data Subject, when the Data are about to be used for communication with the Data Subject or
 
(c) if disclosure to another recipient is provided, at the latest on the first disclosure of the Personal Data.
 
It is not necessary to impose the obligation to provide information :
 
(a) where the data subject already possesses the information;
 
(b) where the provision of information to the data subject proves to be impossible or would involve a disproportionate effort;
 
(c) where the recording or disclosure of the personal data is expressly laid down by law, or
 
(d) where processing is carried out for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes. In that regard, the number of data subjects, the age of the data, and any appropriate safeguards adopted should be taken into consideration.
 
Where the controller or the Company intends to process the personal data for a purpose other than that for which they were collected, the controller or the Company should provide the data subject prior to that further processing with information on that other purpose and other necessary information.
 
The principles of fair and transparent processing require that the data subject be informed of the existence of the processing operation and its purposes. 
 
(a) The controller should provide the data subject with any further information necessary to ensure fair and transparent processing taking into account the specific circumstances and context in which the personal data are processed. 
 
(b) the data subject should be informed of the existence of the categories of data processing. 
 
(c) the recipients or categories of recipients to whom such data have been or will be notified,
 
(d) the period for which the Personal Data will be stored or, if not possible, the criteria used to determine that period;
 
(e) the other rights of the Data Subject, as defined in this section, as well as the right to file a complaint to the supervisory authority;
 
(g) when the Personal Data is not collected by the Data Subject, any available information as to the source from which it was collected.
 
In case the request is submitted electronically, the above information will be  provided electronically.
 
RIGHT TO ERASURE ('right to be forgotten')
The data subject may request the updating, deletion, or removal of any information held about him, and any third party who processes or uses the data must also comply with this request. Our Company is obliged to delete personal data without undue delay when:
 
  • the data are no longer necessary for the purposes for which they were collected or processed
 
  • the data subject withdraws his consent and there is no other legal basis for data processing
 
  • the data subject relies on the processing carried out based on the legitimate interests of the Data Manager and there are no other overriding legal reasons for the processing
 
  • the data has been processed illegally
 
In case the personal data cannot be deleted immediately for a legal reason, the Company must ensure that:
 
  • they will not be used in any way
  • they  will be protected by technical and organizational measures
  • they will be deleted within a reasonable time
 
RIGHT TO RESTRICTION OF PROCESSING
The right of an individual or data subject to require a controller or data owner to restrict the processing of their personal data in certain circumstances. 
 
RIGHT TO WITHDRAW CONSENT 
If consent is withdrawn our Company can no longer process the data. Once consent has been withdrawn, our Company needs to ensure that the data is deleted unless it can be processed on another legal ground.
The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. If the data was being processed for several purposes our Company can’t use the personal data for the part of the processing for which consent has been withdrawn or for any of the purposes, depending on the nature of the withdrawal of consent.
 
RIGHT TO DATA PORTABILITY
Upon request a data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format, where: (i) the processing is carried out by automated means, (ii) the processing is based on consent pursuant to point (iii) the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
The right should be dealt with in a month and shall not adversely affect the rights and freedoms of others. In exercising his or her right to data portability pursuant, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.  
For security reasons, we reserve the right to receive additional information to confirm your identity. In addition, if identification is not possible, we reserve the right to refuse to respond to the request.
 
​​RIGHT TO OBJECT
​​Any Data Subject whose personal data is processed by our Company may have the right to assign our Company that legally operate, have statutory goals of general interest, and operate in the field of protection of rights and freedoms of data subjects with regard to data protection, to submit a complaint, to the Hellenic DPA, on their behalf. 
Information and clarifications can be found on the website of the Authority at the following link: http://www.dpa.gr/
 
MODIFICATION OF TERMS AND CONDITIONS
The Company may revise these Terms and Conditions as needed. Any such modifications will be made available online and will be effective immediately upon posting to Kopanos-store's hosted site. User agrees to assume responsibility for periodically reviewing this Agreement. You are responsible for reviewing these terms and conditions regularly. Your continued use of the Service after such modifications will be deemed to be Your conclusive acceptance of all modifications to this Agreement. If You are dissatisfied as a result of such modification(s), Your only recourse is to immediately discontinue the use of the Service.
 
CONTACT US
If you have any questions or need further information, please feel free to contact us : [email protected]
 
Data Protection Officer (DPO) : Grigorios Kopanos