Protection of Personal Data

Privacy policy

Τhe present privacy policy informs you about your rights, the way your personal data is processed as well as about the range of the processing by our website, which is in full conformity with the General Data Protection Regulation (GDPR 2016/679). In any case, Ktima Gerovassiliou maintains the right to change the terms of the present Personal Data Protection Policy after prior notification, each time according to the applicable law.

General terms for the protection of your personal data

Ktima Gerovassiliou secures the personal nature of your data and assures you that it is not transferred to any third party (natural or legal person) for any reason, except for specific cases prescribed by law and only to the competent authorities. Ktima Gerovassiliou archives your personal data sent by you for communication, financial and taxation purposes exclusively. You are entitled to communicate with the competent department at any time to verify the existence of your personal file, its rectification or modification.

The Sales Department may process part or all of your data sent by you for statistical or financial purposes, as well as to improve the quality of the provided services and/or information.

How is your personal data processed and for what reason?

Whenever the processing of your data is necessary for the execution of a contract to which you are party, that is to say whenpurchasing products from either our e-shop or our estate (sale, pricing, delivery, complaints),or whenever the processing of your data is necessary for compliance with our legal obligations, in other words we archive your personal data for accounting and taxation purposes in accordance with article 6 paragraph 1b, c and f of the GDPR. Your stored personal data is,to the necessary extent, transferred to the transport agency entrusted with the delivery of the purchased products. Moreover, we process your personal data for the management  of our website and when disclosing statistical information relevant to you to third parties. These third parties, however, will in no case be in the position to identify you.

Credit card data

Your credit card is charged only once and only for the payment for goods and/or services offered by Ktima Gerovassiliou in the context of a specific transaction. Your credit card data is not archived and may not be processed for any other purpose.

Payment information

Your credit card number is not visible to our website if you have chosen this method of payment.Our website stores only the necessary data for the verification of each transaction with the following electronic payment systems: Our e-shop accepts all Visa, Mastercard, American Express, Diners, Discover and Maestro cards, as well as payment through PayPal. As long as you have chosen to pay via credit card, the procedure will be carried out through the corresponding banking institution of ALPHA BANK, which offers all security guarantees for electronic transactions. The credit card clearing is carried out through the above banking systems and Ktima Gerovassiliou does not intervene at all.

Cookies

Ktima Gerovassiliou uses cookies to recognize visitors of certain services and pages (e.g. shopping basket). Cookies are small text documents stored in the hard disk of each visitor, which do not take note of any document or file from the computer. Cookies are used for facilitating the access of the visitor to certain services of Ktima Gerovassiliou, as well as for statistical purposes, in order to identify the areas where the services of Ktima Gerovassiliou are useful and/or popular. 

Any visitor of our e-shop may set the browser in such a way to be warned for the use of cookies by certain services, or to refuse to accept the use of cookies in all cases at all. However,if visitors of these services and pages do not want cookies to be used for identification purposes, further access to these services will be denied.

Cookies used in our site:

Personal data security

Appropriate and effective technical, as well as organizational, measures during both the selection of the means for processing and the actual processing of your data have been implemented. These measures are especially designed for the application of the principles of data protection and the transposing of all necessary safeguards in order to meet the requirements of the GDPR and to protect your rights. Furthermore, appropriate technical, as well as organizational, measures have been implemented in order to ensure that only your personal data that is necessary for each prescribed purpose is processed. We possess active procedures to determine whether your personal data have been compromised. In such a case, we will immediately notify both the competent authorities and you.

For how long is your personal data stored? 

Both the hardware and software used by our company is designed in such a way as to minimize the use of your personal data and identification information. This data will undergo processing only to the extent that is necessary for achieving the purposes mentioned in the present Policy and will be stored for as long as it is absolutely necessary to achieve these purposes. In any case, the criteria applied for determining the duration of your personal data storage are based on the time limits prescribed by law and the principles of minimizing the actual data stored, restricting its storage,  and managing our archives in a rational way. 

The applicable GDPR (Regulation no. 2016/679) for data protection offers extensive rights to the subjects of data processing (right to information, right to intervene) vis-à-vis the data processor, which include:

• Right of access according to article 15 thereof
• Right to rectification according to article 16 thereof
• Right to erasure (“right to be forgotten”) according to article 17 thereof
• Right to restriction of processing according to article 18 thereof
• Notification obligation regarding rectification or erasure of personal data or restriction of processing according to article 19 thereof
• Right to data portability according to article 20 thereof
• Right to withdraw consent according to article 7 paragraph 3 thereof
• Right to lodge a complaint with a supervisory authority according to article 77 thereof

Whenever we process your personal data in the context of a specific contract, you have the right to object to the processing at any time. The exercise of your right to object will have legal effects for the future, meaning that we will immediately stop the processing of your personal data. Nevertheless, we withhold the right for further processing if there are imperative reasons (e.g. taxation) overriding your rights, or if the processing of your data is necessary for satisfying legal claims. 

If you feel that your rights regarding your personal data have been violated, you reserve the right to submit a complaint to the competent Supervisory Authority for Personal Data Protection: www.dpa.gr/en. In this case, a contact with our Company would be greatly appreciate it, either by phone or by email. We assure you that we value your trust, and we make sure to respond immediately to any request, question or complaint.

The present privacy policy was updated on March 6, 2023. 

Please check regularly for any modifications. 

Data processor

We designate Ktima Gerovassiliou as our data processor, whom you may consult for any questions regarding our privacy policy or the exercise of your rights ensured by the GDPR.