1. GENERAL INFORMATION

1.1 In the context of its activities, our Company keeps and processes Personal Data that we collect from you or for you when you visit our physical or electronic or contact us in writing or orally or through our website www.melampioti.gr or from others resources in order to support, promote and execute our contractual relationship, protect transactions and inform you about the services provided.

1.2 At our Company we understand the importance of protecting the privacy of our customers and we make every effort to store and process carefully and in accordance with applicable law the information you share with us. For this reason, we have prepared this Privacy and Protection Statement in order to inform you in accordance with Regulation (EU) 2016/679 and the provisions of the relevant Greek legislation on personal data protection (Law 4624/2019) on how collection, use and disclosure of your personal data.

1.3 For the purposes of the Privacy and Protection Statement, personal data means any information concerning you with which your identity is verified or can be verified. This information includes, for example, your name, your address, etc.

1.4 This Statement:

(a) provides an overview of the categories of personal data that our Company collects, their processing purposes, their retention period, their sources and recipients;

(b) provide a summary of the practices by which we collect, use, disclose, transfer and store your personal data;

(c) confirm the technical data security measures, internal management procedures and the physical measures we take to protect them

(d) inform you of the nature and manner of exercising your rights;

(e) is addressed to individuals whether they are existing or potential customers and partners.

1.5 This Privacy and Protection Statement applies to:

(a) for our physical store located in Gazi, Heraklion, Crete on Eleftheriou Venizelou Street no. 224

(b) for the website www.melampioti.gr

(c) for each Web site or OnLine application;

(d) for each OnLine and Offline promotion of our Company as well as

(e) for any Service or function provided by us and referred to in the Declaration.

1.6 Before disclosing any personal data that concerns you, we encourage you to take the time and carefully read this text, which describes the privacy and privacy policy, to learn more about how we collect , store, use, transmit and protect the information / personal data we receive.

1. WHO WE ARE

2.1 Our Company is the legal entity with the name “ANGELIKI NO. MELAMPIOTI” and the so-called “AGGELIKI NO. MELAMPIOTI” located in Gazi, Heraklion, Crete, on Eleftheriou Venizelou Street no. 224, holder of the Tax Identification Number 047622314 of the Tax Office of Heraklion and is active in the field of retail and wholesale sales

2.2 For the purposes of this Privacy Statement and Personal Data Protection Policy, our Company is defined as the Processor, ie the legal entity that alone or jointly with others determines the objectives, conditions and manner of processing personal data. Our Company acts, mainly, as a Head of Processing or jointly as a Head of Processing and, as the case may be, as an Executor of Processing, in accordance with the General Regulation (EU) 2016/679 and law 4624/2019.

III. SOURCES OF PERSONAL DATA

In the provision of our services and the exercise of our business activity, we collect and process different types of personal data, which we receive from our customers in person or through written, telephone or electronic communication through the website that we manage (www.melampioti.gr). We may also collect personal data that we legally obtain from other natural or legal persons who have the legal right to share such data with us as well as from publicly and commercially available sources (as permitted by law) and services. third-party social networking when you choose to connect to these services.

ΙV. CATEGORIES OF PERSONAL DATA

4.1 We collect and process various categories of personal data. These categories are as follows:

1. i) Identity data: name
2. ii) Contact details: postal and e-mail address, landline and mobile phone, etc., billing address (city, postal code), shipping address (city, postal code).

iii) Billing data: number and type of credit / debit card and TIN (where required), method of payment (deposit, cash on delivery, etc.), invoicing details, registered office, occupation, etc. (in case of issuance of TSI).

1. iv) Device and Internet browsing data: device ID, MAC address, Internet Protocol (IP) address, operating system version, time and duration of stay on site.
2. v) Information and order history: no. order, order registration date, product, product code, product quantity, order status, delivery date, delivery method, withdrawal data from distance selling contract.
3. vi) Special categories of data collected in accordance with the legal requirements directly from you: health data (eg allergy to avoid buying an unsuitable product, etc.).

4.2 The processing of your data for the purposes set out below is fully governed by the principles of legality, objectivity, transparency, limitation of purpose, data minimization, accuracy, limitation of storage period, integrity, confidentiality and accountability as defined in Article 5 of the General Regulation (EU) 2016/679 and Law 4624/2019.

Cookies are small text files which are stored on your computer when browsing a website and retrieved later, allowing the website to recognize your internet browser on its next visit.Cookies contain no personal information which could allow anyone to contact the website’s visitors, such as email addresses etc.

Cookie Types
The company may use the following types of cookies so that the website can best serve internet browsers and customize the information and preferences of each browser.

• Necessary cookies
  The absolutely necessary cookies are essential for the proper operation of our website. They allow you to browse it and make use of its functions, such as accessing secure areas etc. These cookies do not contain any information about your personal identity. Without these cookies, our website cannot function properly.
• Performance cookies
• These cookies collect information about the way visitors use the website, e.g. the pages they visit frequently or whether they receive error messages from web pages. These cookies collect aggregated, anonymous information which does not identify any visitors. These details are used exclusively to improve the performance of our website.
• Functionality cookies
  These cookies allow the website to remember the user’s options, such as username, language, region or settings, in order to provide improved and personalized functions. They can also be used to provide services requested by the user, such as video playback or the use of social media. The information collected by these cookies can be made anonymously and cannot track browsing activities on other websites. If you do not accept these cookies, the performance and functionality of the website can be affected and the access to its content may be limited.
• Targeted advertising cookies
  These cookies are used to provide content better suited to you and your interests. They can be used to send targeted advertisements/offers, to limit advertising views or to measure the effectiveness of an advertising campaign. They can also be used to remember your visited websites, so that we can determine which digital marketing channels are more effective, allowing us to reward external websites and associates which directed you to us.
• Third party cookies
  During you browsing on our websites, other organizations and companies may generate their own cookies to check their implementation and tailor them to you. Due to the nature of cookies, the company has no control over or access to third party cookies and no other organization can access the data stored in them. These companies and organizations have their own Cookie and Privacy Policies.
• Google Analytics
  The Company’s website uses the Google Analytics “Remarketing and Advertising Features”, through which our Company collects information. This information helps our Company optimize its website based on its visitors’ preferences. The information collected is sent to and stored at Google’s servers in the USA. For more information about Google’s Privacy Policy, please visit https://www.google.com/intl/en/policies/privacv/ and specificallyhttps://support.google.com/analvtics/answer/6004245.

If you do not want your data collected by Google Analytics, you can download and install the Google Analytics Opt out web browser add-on from the following link: https://tools.google.com/dlpage/gaoptout/.

Controlling and accepting cookies

When browsing the company’s website for the first time, a relevant notification will inform visitors that they accept and acknowledge the necessary use of cookies so that it can properly function.Otherwise, they must stop browsing the website or disable cookies through the browser’s settings.If you wish to enable or disable cookies, please visit your browser’s support page:

• Internet Explorer http://support.microsoft.com/kb/278835
• Firefox http://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored
• Chrome http://support.google.com/accounts/answer/61416?hl=en
• Opera http://www.opera.com/browser/tutorials/security/privacy/
• Safari http://support.apple.com/kb/PH5042
• Safari για iPad και iPhone http://support.apple.com/kb/HT1677

If cookies are disabled, there may be significant impact on both the website’s functionality and the ability to receive information or services from our company.

List of cookies used

1. MANNER OF COLLECTION OF PERSONAL DATA

We collect personal data in various cases such as:

1. i) During your visit to our physical or online store.
2. ii) When you participate in marketing programs or events (subscribe to newsletters in order to receive offers and other promotional material via e-mail).

iii) When transmitting information from third parties.

(iv) When operating electronic devices.

1. OBJECTIVES OF TREATMENT – LEGAL TREATMENT

6.1 The Regulation allows us to process personal data, as long as the processing is legal, ie it meets one of the conditions of article 6 of the General Regulation (EU) 2016/679 and law 4624/2019. When we process your personal data, we rely on one of the following legal processing bases:

1. i) In the execution of the contract for the sale of goods between us.

The processing in this case is done to achieve the following purposes:

– Your identification and communication with you during the processing of your order through our website and until its delivery, for reasons of transaction security and your information regarding it.

– The general management of your order (delivery to a courier company, etc.).

– The proper preparation and timely satisfaction of your special requests related to your order

– The management of various requests / complaints / grievances and your possible withdrawal from the distance selling contract.

1. ii) The compliance of the Company with its legal obligations imposed by the applicable legal, regulatory and supervisory framework at national and European level and decisions of any Authorities (public, supervisory, etc.) or Courts.

The processing in this case is done to serve the following purposes:

Issuance and maintenance of legal – tax documents (eg receipts, invoices, etc.) in accordance with applicable law.

– Drafting, issuing and keeping legal documents, in accordance with current legislation

iii) In the service of the legal interests of the Company or a third party.

This processing is always carried out after balancing the interests of our Company with your fundamental rights and freedoms that require the protection of your data.

The processing in this case is done to achieve the following purposes:

– The defense of our legal interests from the contract of sale of goods.

– The defense of the legal rights and interests of the Company in case of legal disputes.

– The improvement of our services in order to adapt our products and services to your requirements in order to remain completely satisfied.

– Conducting market research and the analysis of questionnaires and customer comments.

– The evaluation of our services and the creation of statistical data based on it.

– Customer complaint management.

– Informing customers and satisfying their requests after their departure or sending and receiving the order.

1. iv) With your consent

When you register on our website www.melampioti.gr we may ask you to provide your explicit consent for the processing of your specific data for a specific purpose. Particularly :

1. i) the identity and contact data for sending updates in the form of e-mails / sms / newsletter / letters, for your information about programs / offers / discounts and / or other promotional actions of the Company.
2. ii) your health data for the provision of improved benefits and specialized services where required (eg allergy notification to avoid purchasing an unsuitable product, etc.)

iii) In case the data we process concern persons (children) under sixteen years of age, the consent or approval of the processing is required from the person exercising parental care of the minor. The Company does not bear any responsibility if the statement of the person that he / she exercises parental responsibility of the child is false or inaccurate.

We make it clear to you that you always reserve the right to revoke consent to the above processing purposes at any time without, however, affecting the legality of the processing based on your consent prior to its withdrawal. You do not need to justify your decision and you will not suffer any negative consequences or penalties from it (except for the cessation of the benefits that may have resulted from your consent, eg cessation by us of sending information – promotional material). For this purpose you can send a relevant request to the e-mail address (e-mail: info@melampioti.gr).

VII. DATA CONSERVATION AND STORAGE PERIOD

7.1 The Company will maintain (in printed and / or electronic form) and process your data for as long as is required to fulfill the purpose for which they were collected or under applicable law or until the statute of limitations expires for any relevant claims.

7.2 In order to determine the appropriate period of retention of personal data, we consider the quantity, nature and sensitivity of personal data, the potential risk of damage from unauthorized use or disclosure of your personal data, the purposes for which we process the personal data, if we are able to fulfill these purposes by other means, the limitation period of any legally enforceable claims and our applicable legal or contractual obligations.

VII. DISCLOSURE OF PERSONAL DATA / RECIPIENTS OF THE DATA

When fulfilling the contractual and legal / regulatory obligations of the Company, the service of its legal interests as well as in cases where the Company has received your consent, the recipients of your data may be the following:

1. Affiliates – partner companies

Your information may be shared with affiliates of “ANGELIKI NO. MELAMPIOTI”. We may also share your personal data with our business partners. These providers may use your information to provide you with the services you have requested and / or, if you give your consent, to provide you with promotional and advertising material.

1. ii) Authorized employees of the Company.

In order to provide you with the best possible service, we provide access to your personal data or certain specific categories of your personal data to our authorized personnel. Our authorized employees are responsible for evaluating your requests, managing the contract of sale of goods, for the fulfillment of the obligations arising from it as well as the relevant obligations imposed by law, by public Authorities or Courts.

iii) Service providers or individuals / entities to whom our Company entrusts the execution of specific tasks on its behalf (performing the processing).

The above persons include, but are not limited to, lawyers, law firms, notaries and bailiffs, accountants, providers of IT products and / or services and / or support of all kinds of information and electronic systems and networks, including online systems and platforms, , file and data storage, archiving, management and destruction companies, telephone service companies, postal and courier companies.

Legal and / or natural persons will process your personal data, exclusively for the purpose of providing services to our Company and not for their own benefit, acting as processors and committed in writing to the confidentiality and protection of your personal data and taking the necessary organizational and technical measures for their safety

1. iv) Public Authorities.

We may disclose your personal information to public authorities under specific legal provisions to comply with the law or to comply with a mandatory legal process (such as a search warrant or other court order or decision). These principles include the Courts, judicial authorities, law enforcement or regulatory, governmental authorities.

1. v) Other third parties.

When required by law or when we have to protect our services to confirm or enforce our compliance with the policies governing our services and to protect the rights, property or security of “ANGELIKI NO. MELAMPIOTIS” or any affiliate of the Company, business partner or our customer. We may also disclose personal data when required to conduct checks on the protection of personal data and security and / or to investigate or respond to a complaint or security threat.

1. vi) Other third parties in relation to corporate transactions.

We may disclose your information to third parties in the event of a merger or transfer or in the event of bankruptcy or in the event that we cease to have the management or management of our store / company.

VIIΙ. DATA TRANSMISSIONS

Our servers, on which your data is stored and protected, are located within the European Economic Area (EEA). However, our external partners and / or service providers to our Company may be located or use servers in other countries. Whenever we transfer your personal data outside the EEA, we make every effort to ensure an equal degree of protection for it, following a specific policy. Particularly :

1. i) If required, we transmit personal data only to countries which the European Commission deems to provide an adequate level of protection for personal data.
2. ii) Where we use specific service providers, we reserve the right to use specific contracts approved by the European Union, which give personal data the same protection as in Europe.

iii) Where we use providers based in the United States, we reserve the right to transmit data to them if they participate in the Protection Shield which requires them to provide similar protection for personal data shared between Europe and the United States.

Contact us at info@melampioti.gr for any clarification about the specific mechanism used by us when transmitting your personal data outside the European Economic Area.

1. YOUR RIGHTS

9.1 According to General Regulation (EU) 2016/679 you have the following rights:

1. i) Right to information and access (Article 15): to know the categories of your personal data that we hold and process, their origin, the purposes of their processing, the categories of their recipients, the time of their observance, your relevant rights, the the right to lodge a complaint with the competent supervisory authority, the existence of automated decision-making, including profiling, and to receive a copy of your data.
2. ii) Right of correction (Article 16): request the correction of any deficiencies or inaccuracies in your data and / or their completion, so that it is complete and accurate.

iii) Right to restrict processing (Article 18): to request under certain conditions that your data be restricted.

1. iv) Right of objection (Article 21): to object at any time under certain conditions to any further processing of your personal data that we hold.
2. v) Right to delete (“right to be forgotten” – Article 17): to request under certain conditions the deletion of your personal data from the records we keep.
3. vi) Right to data portability (article 20): to request under certain conditions from the Company your data in a structured and commonly used format, in cases where this is technically possible, in order to transfer it to another controller.

viii) Right to withdraw your consent (article 7 par. 3) in cases where the processing of your data is based on it.

9.2 Please note the following in relation to your above rights:

1. Your rights under iii), iv) and v) may not be met, in whole or in part, if they relate to data necessary to defend the Company’s legal interests or the fulfillment of its obligation arising from the law or a decision of public Authorities or Courts.
2. The Company has in any case the right to refuse your request for restriction of the processing or deletion of your personal data if the processing or keeping of the data is necessary for the establishment, exercise or support of its legal rights or the fulfillment of its obligations.
3. The exercise of the above rights is valid for the future and does not concern data processing already performed.

1. HOW TO EXERCISE RIGHTS / SUBMITTED COMPLAINT – PROTEST

10.1 For the exercise of your rights, you can send a registered letter to the following contact address of our Company: Eleftheriou Venizelou no. 224– Gazi Heraklion Crete – Greece or via email at info@melampioti.gr

10.2 Also, you always reserve the right to contact the Personal Data Protection Authority, which can accept the submission of relevant complaints / grievances either in writing in its protocol (1-3 Kifissias Ave., PC 115 23, Athens, call center 210-6475600 / fax 210-6475628) or electronically at the email address complaints@dpa.gr. For more information visit www.dpa.gr.

10.3 The Company will make every effort to respond to your request within thirty (30) days of submission. This deadline may be extended for an additional sixty (60) days, if deemed necessary, taking into account the complexity of the request and the number of requests. The Company will inform you in any case of extension of the deadline within thirty (30) days.

10.4 The above service is provided by the Company ANGELIKI NO. MELAMPIOTI free of charge. However, if you request that the reply be sent by post, you may incur shipping costs. Prior to shipment, our Company will inform you of its exact cost.

10.5 The Company may refuse to respond to a request which is manifestly unfounded, excessive or repetitive.

10.6 For the correct, efficient and secure processing of your request, it is required that the details of the submitter of the request be identified. For this reason, the Company may request additional information for your identification as well as the sending of supporting documents.

08/11/2021

1. SECURITY MEASURES

11.1 The security of your personal data is a high priority for us. Therefore, we protect your data, which is stored with us through technical and organizational measures to effectively prevent loss or misuse by third parties.

11.2 In the event that the Personal Data has not been provided by you in any other way, we inform you that the Company adheres to a strict Personal Data Protection Policy for the processing of your personal data, which has been notified to its staff and associates and is controlled. its regular application.

11.3 In principle we collect only what information is necessary for the intended purpose. Then we check the purpose of processing if it is legal and if the way of data collection is compatible with the principles of data processing (article 5 of the Regulation and law 4624/2019). Especially if the processing of personal data is necessary for the purposes of the legal interests of our Company or a third party, we proceed with weighting of interests according to the requirements of the Regulation.

11.4 The Company makes every effort to ensure that your data is secure. Implements appropriate organizational and technical measures for the security of your data, ensuring its confidentiality, processing and protection against accidental or unauthorized destruction, accidental loss, alteration, prohibited dissemination or unauthorized access and any other form of unlawful processing. Our IT department follows international standards and practices to ensure network security and data encryption. In order to ensure the long-term protection of your data, technical security measures are regularly monitored and, if necessary, adapted to the relevant prevailing technology standards.

11.5 The Company, realizing the importance of the security of your personal data and fully respecting your fundamental rights and freedoms, makes every effort to comply with the requirements of Regulation (EU) 2016/976 and the relevant Greek legislation (Law 4624/2019). ).

11.6 In any case, you must not ignore the fact that despite all the reasonable measures we take to protect your personal data, no information system and network and no transmission via the Internet, is completely secure. Despite the efforts made by our Company, security can not be absolutely guaranteed against all threats.

11.7 In case of loss or violation of personal data we have a specialized team that follows a clearly defined procedure to deal with the incident, in order to remedy the violation as soon as possible, to limit the possible consequences and to comply with our obligations under the law.

11.8 In addition, we restrict access to your personal data to employees, agents, contractors and other third parties who need to be aware of it in order to perform their professional duties. Your personal data will be processed exclusively in accordance with our instructions and we are committed to complying with the relevant terms of confidentiality.

XII. AMENDMENTS TO THIS DECLARATION

12.1 This Privacy and Privacy Statement may be amended periodically to include our current privacy practices. For this reason, please check periodically and especially before placing any product order, to ensure that you are aware of any changes.

12.2 The most recent version of the Declaration will always be available at www.melampioti.gr. When making any changes, we will record the date of modification or revision at the beginning of this Statement.

12.3 You can check the “effective date” at the beginning of the text to confirm when the Privacy Statement was last updated. Look for the printed form of this Statement at the cashier of our physical store. This release was updated on 08/11/2021 This Statement supersedes all previous disclosures we may have made in the past regarding our information practices. We reserve the right to change this statement and to make any changes to the information previously collected, in accordance with the law. If there are significant changes to this statement or our information practices change in the future, we will notify you by posting the changes on our website.

XIII. CONTACT

For any questions regarding this Privacy Policy or in general the protection and security of data in our Company and our affiliates, contact us at the following contact details:

“ANGELIKI NO. MELAMPIOTI”

Eleftheriou Venizelou no. 224, Gazi, Heraklion, Crete – Greece

Phone: +30 2810 821119

e-mail: info@melampioti.gr