General terms for the protection of your personal data
Ktima Gerovassiliou secures the personal nature of your data and assures you that it is not transferred to any third party (natural or legal person) for any reason, except for specific cases prescribed by law and only to the competent authorities. Ktima Gerovassiliou archives your personal data sent by you for communication, financial and taxation purposes exclusively. You are entitled to communicate with the competent department at any time to verify the existence of your personal file, its rectification or modification.
The Sales Department may process part or all of your data sent by you for statistical or financial purposes, as well as to improve the quality of the provided services and/or information.
How is your personal data processed and for what reason?
Whenever the processing of your data is necessary for the execution of a contract to which you are party, that is to say whenpurchasing products from either our e-shop or our estate (sale, pricing, delivery, complaints),or whenever the processing of your data is necessary for compliance with our legal obligations, in other words we archive your personal data for accounting and taxation purposes in accordance with article 6 paragraph 1b, c and f of the GDPR. Your stored personal data is,to the necessary extent, transferred to the transport agency entrusted with the delivery of the purchased products. Moreover, we process your personal data for the management of our website and when disclosing statistical information relevant to you to third parties. These third parties, however, will in no case be in the position to identify you.
Credit card data
Your credit card is charged only once and only for the payment for goods and/or services offered by Ktima Gerovassiliou in the context of a specific transaction. Your credit card data is not archived and may not be processed for any other purpose.
Your credit card number is not visible to our website if you have chosen this method of payment.Our website stores only the necessary data for the verification of each transaction with the following electronic payment systems: Our e-shop accepts all Visa, Mastercard, American Express and Maestro cards, as well as payment through PayPal. As long as you have chosen to pay via credit card, the procedure will be carried out through the corresponding banking institution of ALPHA BANK, which offers all security guarantees for electronic transactions. The credit card clearing is carried out through the above banking systems and Ktima Gerovassiliou does not intervene at all.
Personal data security
Appropriate and effective technical, as well as organizational, measures during both the selection of the means for processing and the actual processing of your data have been implemented. These measures are especially designed for the application of the principles of data protection and the transposing of all necessary safeguards in order to meet the requirements of the GDPR and to protect your rights. Furthermore, appropriate technical, as well as organizational, measures have been implemented in order to ensure that only your personal data that is necessary for each prescribed purpose is processed. We possess active procedures to determine whether your personal data have been compromised. In such a case, we will immediately notify both the competent authorities and you.
For how long is your personal data stored?
Both the hardware and software used by our company is designed in such a way as to minimize the use of your personal data and identification information. This data will undergo processing only to the extent that is necessary for achieving the purposes mentioned in the present Policy and will be stored for as long as it is absolutely necessary to achieve these purposes. In any case, the criteria applied for determining the duration of your personal data storage are based on the time limits prescribed by law and the principles of minimizing the actual data stored, restricting its storage, and managing our archives in a rational way.
The applicable GDPR (Regulation no. 2016/679) for data protection offers extensive rights to the subjects of data processing (right to information, right to intervene) vis-à-vis the data processor, which include:
- Right of access according to article 15 thereof
- Right to rectification according to article 16 thereof
- Right to erasure (“right to be forgotten”) according to article 17 thereof
- Right to restriction of processing according to article 18 thereof
- Notification obligation regarding rectification or erasure of personal data or restriction of processing according to article 19 thereof
- Right to data portability according to article 20 thereof
- Right to withdraw consent according to article 7 paragraph 3 thereof
- Right to lodge a complaint with a supervisory authority according to article 77 thereof
Whenever we process your personal data in the context of a specific contract, you have the right to object to the processing at any time. The exercise of your right to object will have legal effects for the future, meaning that we will immediately stop the processing of your personal data. Nevertheless, we withhold the right for further processing if there are imperative reasons (e.g. taxation) overriding your rights, or if the processing of your data is necessary for satisfying legal claims.
Please check regularly for any modifications.