Privacy Policy & Protection of Personal Data of mfytros.com

Last updated on December 7, 2018

Welcome to the “Michalis E. Fytros” Website.
The Company takes the protection of its customers’ privacy seriously. For this reason, we strictly follow the following protection policy, which ensures the high level of services offered and strictly adheres to the current legislative framework.
With this Data Protection Policy statement, we wish to inform you of how the Company protects the privacy of your communications and collects, processes, uses and stores your personal data through our Website as well as the choices and rights that have regarding the above collection and processing of your personal data. By visiting our Website, you become aware of and accept the following data protection policy.
This Data Protection Policy applies only to the Website. Users should note that our Website may contain links to other websites, however our Company bears no responsibility for the data protection practices and conditions or the content of said websites.

1. SUBJECT

1.1. This policy defines the terms and conditions, which are observed by our Company, to protect the privacy of the users of the Website. This policy includes the rules, based on which we proceed with any collection and processing of your personal data and ensure the confidentiality of this information.
1.2. Our Company reserves the right to modify and update this policy, whenever it deems it necessary, while any changes become effective upon their public appearance on the Website.
1.3. In the event that any of these terms are held to be invalid, illegal or abusive for any reason, the remaining terms will remain valid and effective as such to the extent that they do not conflict with the intent expressed through this policy.

2. PRINCIPLES OF PROCESSING

We fully respect your fundamental rights and make the protection of your privacy a priority of our Company. In this context, when processing your personal data, we follow the following basic principles:
2.1. We process your personal data lawfully and lawfully and maintain complete transparency with you in relation to the way we manage your personal data.
2.2. We collect and process your data only for specified, express and lawful purposes as stated in this policy, and do not further process it in a manner incompatible with those purposes.
2.3. We process your personal data, only to the extent that it is suitable and relevant for the above purposes, at the same time limiting the relevant processing to the measure necessary for these purposes.
2.4. We make reasonable efforts and with your assistance, so that your data being processed is accurate and, when necessary, updated in relation to the purposes of the processing, taking all reasonable measures to immediately delete or correct it in case of inaccuracy.
2.5. We keep your personal data in a form that allows your identification only for the time required for the above processing purposes.
2.6. We process your personal data in a way that guarantees its security by using appropriate technical or organizational measures.
2.7. We do not intend to further process your personal data for a purpose other than that for which it was collected.
2.8. We inform you that there is no obligation for you to provide your personal data and there are no possible consequences from not providing them. Further, we inform you that your personal data will not be used for automated decision-making, including profiling.
2.9. Without prejudice to what is mentioned in this policy, we do not disclose or transmit your personal data to third parties without your consent, unless this is permitted by law or by the contract between us for the provision of some services.
2.10. We inform you that we do not transmit your personal data to a third country or international organization, for which there is no adequacy decision of the European Commission according to the GDPR.
2.11. In general, we fully comply with the current legislation and comply with all our obligations arising from it, as the legal controller of your personal data.

3. TYPES OF DATA

3.1. The types of personal data we collect and process from you depend on the services you choose to provide. Thus, when (a) entering and using the Website, (b) when registering a new user in the “Contact” field, (c) registering for the newsletter service, (d) when creating a profile account in the “add my first address” field, (e) when creating a profile account in the “my personal information” field
By using the services of the Website, you provide the following types of personal data to our Company.
a. When browsing our Website you provide the following data:
• Internet Protocol Address (IP Address).
• Navigation data within the Website.
• Service preference information.
• Content generated by the User (cookies).
• Operating system type/screen range (analytics)
b. When registering a new user in the Contact field
• Name
• Last name
• Date of birth
• Email
• Code
• Confirm Password
c. When registering for the information service via electronic letters (newsletter), you provide us with the following data:
• E-mail address
d. When creating a profile account in the “add my first address” field
• Name
• Adjective
• Company Name
• Address 1
• Address 2
• Postal code
• City
• Country
• Telephone
• Mobile
• Additional information field
• Address title for future references
e. When creating a profile account in the “my personal information” field
• Title (Mr. or Mrs.)
• Name
• Last name
• Date of birth
• Email
• Existing Code
• New password
• Confirm Password
3.2. In addition, in the event that any user communicates with us by telephone, e-mail or other means, we collect and process personal data, related to such communications, under the terms and conditions herein, in order to meet the relevant requirements and requests and to improve our services offered. (4.7)
3.3. Our Company does not collect or gain access in any way to special categories of (“sensitive”) personal data or data related to criminal convictions and offenses of its users – customers. You have the obligation to refrain from posting such data, concerning your person or third data subjects. In the event that you post such data on our Website, it will be removed as soon as it comes to our attention. We bear no responsibility towards you or third parties for any posting and/or processing of sensitive data, due to your actions or omissions in violation of the above obligation.

4. PURPOSES AND LEGAL BASIS OF PROCESSING

4.1. Your personal data, which are necessary for the navigation and use of our Website in accordance with Article 6 § 1 (b) of the GDPR, are collected and processed by our Company for the following purposes:
• Technical possibility for the smooth operation of our Website.
• User-friendly and user-friendly operation of our Website.
• Improving your online experience when navigating and using our Website.
• Recording consumption habits through the use of anonymous statistical data.
4.2. Your personal data, which are necessary for the provision of our services within the framework of a contractual relationship between us in accordance with Article 6 § 1 (b) of the GDPR, are collected and processed by our Company for the following purposes:
• Fulfilling the contractual obligations of our Company towards the individual and Business Users of our Website.
• Prompt, adequate and efficient provision of our services.
• Fiscal use and use for invoicing purposes and proof of provision of the services we provide to you.
• Communication with our customers in the context of the good performance of our services as well as to resolve any complaints.
• Improving and renewing our products and services so that they meet the needs of our customers as much as possible.
• Administrative organization and operation of our Company.
• Managing our clientele.
• Updating and expanding the business register.
• Legal claims support.
4.3. Our Company collects and processes personal data of its users – customers only for the aforementioned purposes and only to the extent necessary to effectively serve these purposes. This data is always relevant, convenient and no more than is required in view of the above purposes, and it is accurate and, if necessary, submitted for updating. Furthermore, said data are kept during the period required to carry out the purposes of their collection and processing and for twenty (20) years after the end thereof, subject to any provisions of law that provide for longer retention.

5. CONSENT

5.1. Our Company may process personal data only with the legal consent of the Website users for the following purposes:
• For purposes of commercial communication, marketing and advertising of our services or services of third parties via SMS, telephone, email, internet, fax, mail, social media and/or any other appropriate communication channels.
• For research and/or analysis purposes to better understand your needs, preferences, interests, experiences and/or habits as a consumer.
5.2. You provide us with your consent to the processing of your personal data for the above purposes by electronic declaration in a manner clearly distinguishable from other matters, in an understandable and easily accessible form. Your consent is given freely and your personal data is provided, without such provision being a legal or contractual obligation of yours or a requirement of our company for the conclusion of a contract between us.
5.3. In this context, by completing the relevant field online, you expressly declare that you wish and that you provide your consent for the above purposes in accordance with the terms and conditions of this policy. Provide your above consent in the following ways:
• When registering a new user in the “Contact” field,
• When registering for the newsletter service,
• When creating a profile account in the “add my first address” field,
• When creating a profile account in the “my personal information” field
5.4. You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing that was based on consent prior to its withdrawal. Withdrawing your consent is done in the same way as giving it.

6. THIRD PARTY RECEIVERS OF THE DATA

6.1. Our Company does not grant your personal data or link its file against any financial or other consideration with any third-party private companies, natural or legal persons, public authorities or services or other organizations.
6.2. In order to serve the purposes of processing, referred to in this policy, Our Company may provide access to or transmit the following types of your personal data to the following processors on its behalf and on its behalf:
• Your personal data to the web hosting service provider, with whom we maintain a contractual relationship, for the purpose of hosting them on the Website.
• Your personal data and transaction data to a partner accounting firm for the provision of tax services and the maintenance of your tax information
• We may disclose your details (name, phone, address) to courier companies to fulfill the order (name, phone, address)
• In addition to the disclosures described in this Privacy Policy, we may share information about you with third parties when you separately consent or request such sharing.
6.3. The processing of your personal data by the above entities cooperating with us is carried out under our control and only at our command and is subject to the same data protection policy or a policy of at least the same level of protection.
6.4. In the event that it is required by a court or other administrative authority as well as in any other case where it has a legal obligation to do so, our Company may provide your personal data to the extent provided by law, but after informing you.

7. PRIVACY AND DATA SECURITY

7.1. Our Company, in order to ensure the proper use and integrity of your personal data as well as to prevent unauthorized or accidental access, processing, deletion, alteration or other use thereof, implements appropriate internal policies, while taking all appropriate organizational, technical , physical, electronic and procedural security measures, as well as technological standards, in accordance with applicable laws and regulations.
7.2. The processing of data by our Company is carried out in a way that ensures the privacy and physical and logical security thereof, taking into account the latest developments, the cost of implementation and the nature, scope, context and purposes of the processing, as well as risks of varying likelihood and severity to your rights and freedoms;
7.3. The processing of your personal data is carried out exclusively by the Company’s staff authorized for this purpose, who are bound by strict obligations to maintain their confidentiality.
7.4. The user/consumer/visitor/member of “Michalis E. Fytros” should also protect the privacy of his data and not make disclosures to third parties (even through his negligence) nor grant the use of his data from third parties. It is also recommended to change the user code (password) at regular intervals. The company reserves the right for any possible damage caused by a culpable violation of the above obligations of the user/consumer/visitor/member of “Michalis E. Fytros”.

8. DATA RETENTION PERIOD

8.1. We retain your personal data for as long as the purposes for which it was collected and stated above remain in force.
8.2. Our Company may retain your personal data even after the purposes of collection and processing have been fulfilled in the following limiting cases:
• As long as there is a legal obligation on our part from a relevant provision of the law.
• For use before tax and social security authorities as well as any other auditing authority within the legal limitation period.
• Until the statute of limitations for the relevant claims for the defense of our rights and legal interests before any competent Court and any other public authority.
8.3. After the end of the retention period your personal data is destroyed from our files and system in compliance with our company policy and provided that its retention is no longer required to fulfill the purposes we have described to you above.

9. RIGHTS

9.1. Subject to applicable law, you have the following rights:
• Request access to your personal data as well as the information related to the processing and receive a copy thereof.
• Request the correction of any inaccurate and completion of any incomplete personal data.
• Request the deletion of your personal data.
• Request the restriction of the processing of your personal data for the cases expressly defined by law.
• Request the portability of your personal data to another controller in a structured, commonly used and machine-readable format (eg cd).
• Object to the processing of your personal data for the cases expressly defined by law.
• Not be subject to a decision made solely on the basis of automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way. The above requests are addressed in writing by postal letter to the headquarters of our Company.
9.2. Our Company will respond to each of your requests within one month of receipt. Upon your notification, this deadline may be extended by two more months, if necessary, taking into account the complexity of the request and the number of requests. Any rejection of your request will take place with reasons.
9.3. If your requests do not meet the requirements of the law, our Company reserves the right to either: (a) impose a reasonable fee, taking into account the administrative costs of providing the information or announcement or performing the requested action; or (b) refuse to act on your relevant request.
9.4. In the event of a breach of your personal data, which may put your rights and freedoms at high risk and provided that it does not fall under one of the exceptions expressly provided by law, we undertake to inform you without undue delay delay.
9.5. If there is any doubt about the identity of the natural person making the request, we reserve the right to request the provision of additional information necessary to confirm their identity.
9.6. If your rights are violated, we inform you that you have the right to file a complaint with the Personal Data Protection Authority or another competent supervisory authority.

10. OBLIGATIONS OF USERS

10.1. By using the Website as well as by providing your personal data upon consent, you acknowledge that you have the obligation to provide the real, accurate and complete information requested by our Company. Further, you must notify our Company of any changes to this information in order to keep it up-to-date and accurate.
10.2. If it is found that you do not comply with your obligations above, or if our Company reasonably suspects that the information you provide is false or incomplete or in any way contrary to the law or to the Terms of Use or this Data Protection Policy, we retain the right to reject your application for registration or to immediately suspend or terminate your account without notice. In this case, you have no right to any compensation due to the rejection of your application, or the suspension or termination of your account.
10.3. You acknowledge that our Company may delete, cross-reference, supplement or modify the information you provide based on information lawfully provided by third parties. In this case, our Company will inform you accordingly, following the legal procedure.
10.4. By using the Website you certify that you are over sixteen (16) years of age. As long as you are under sixteen (16) years of age, you have the obligation to refrain from any use of the Website as well as from any provision of your personal data without the approval of the person exercising your parental care. If you do not comply with the above obligations, you must notify our company immediately. In any case, by using the Website you acknowledge that our Company is not responsible for your violation of the above obligations to the extent that it is unable, even if it makes reasonable efforts, to verify your age or consent of your guardian.

11. COOKIES

Our Website works with cookies.
11.1 What are cookies? Why do we use them?
A cookie is a small file stored on your computer by a website that gives you a unique ID. With the help of cookies it becomes faster and easier to browse our site, because they can remember if you have visited the site again and it helps us to provide you with the necessary information about your purchases or your account – as and when they are needed. The cookies created by our website do not contain your personal information. They contain, for example, only a numerical ID, which allows us to find your account details or shopping list. According to the Privacy Policy, in terms of customer information, we analyze the data we collect through cookies only at an aggregate level and not at an individual level.
We use cookies to create a pleasant and easy-to-use online shopping experience for you. They help us recognize your browser, device type, unique ID, computer, connection information, website view statistics, traffic to and from the website, referring URLs, Internet Protocol (IP) address and the basic information of the blog.
By using the “Michalis E. Fytros” website, you agree that we may transfer cookies to your device. If you prefer, you can set your browser not to accept cookies, but this may limit your online experience on our website.
11.2 Types of cookies and why we use them:
There are two types of cookies that may be used when you browse the jewls and jems website:
– Strictly necessary cookies: they are necessary for the proper functioning of the website and for the browsing by the user – without them the user may not be able to see the pages correctly or use certain features.
– Advertising cookies: they are used to create user accounts and send electronic messages with advertising content according to the preferences of each user during their browsing.
Cookies, in addition to being necessary and advertising, can also be categorized as follows:
– Functionality cookies: they are used to recognize users during browsing and are necessary for it, such as e.g. they remember some of your settings. Without them, some of the services provided (such as the use of the shopping cart) on the website will not be able to be provided.
– Performance cookies: used to collect information and analyze how visitors use the website (for example movements to and from it, total sales through the website, pages they have

12. INTERNATIONAL JURISDICTION AND GOVERNING LAW

12.1. For the resolution of any dispute arising between our Company and users of the Website regarding this data protection policy and its subject matter, the courts of Athens are competent and the applicable law is Hellenic, without regard to its conflict of law rules.
12.2. In the event that a provision of this policy is invalidated by a decision of a competent court as not legal, valid and enforceable, this fact will not affect the rest of its provisions, which will remain in force and be applied normally.

13. COMMUNICATION

13.1. For any further information or request regarding this data protection policy, you can contact our Company’s Data Processor at the following details:
• Ayiou. Dionysiou 6, Ayios Dimitrios of Attica, Hellas
• Telephone: 2109710248
• email: fytros.m@gmail.com