Privacy Statement – Security and Privacy Policy

This Privacy Statement and its attached terms and conditions of use describe the method of data collection from the website and the use of such data by us. The use of the website presupposes the acceptance of this Privacy Statement by the user/customer of the website.

Generally:

The Company created this website with the sole purpose of serving its customers. Our website is simple and friendly to use, while it is designed to meet the specific needs of each user. In our effort to provide you with the best service, you need to provide us with specific information related to the processing of your order which is kept by us. It refers exclusively to your personal data, which you provide to us.

The information voluntarily provided by the users of the website is used by our company, in order for the users to have direct and meaningful communication with the store, to provide them with answers to specific questions they ask and finally to serve and execute their orders . The information collected by our company through the website is intended to measure its traffic numbers, to determine customer requirements for more products and to facilitate transactions with the company. The Company does not distribute to any other organization or partner that is not connected to it the electronic addresses, or any other information concerning its users and customers.

 

Cookies Policy:

This website uses cookies to collect information. Cookies are small data files, which are placed in the user’s/customer’s browser while browsing the website, allowing the website to function smoothly and providing the maximum possible smooth navigation function to the visitors. They are used to customize the products and services offered to the user. We only use the necessary cookies for the best possible operation of our website, the correct browsing of the user, the connection and movement on the pages as well as for the provision of advertising content. All information collected by cookies is anonymous and is used only to improve the structure and content of the website.

Cookies are stored on the user’s computer and can be removed at any time. In each browser, either in the Settings or in the Privacy and security tab, you will find your browsing history and you can, if you wish, delete it. Cookies do not store email addresses or phone numbers or bank details. These cookies are necessary for the proper functioning of our website but also for the user to be able to browse it and use its features, such as access to secure areas of the website. To activate cookies, the user’s consent is required. By disabling Cookies or withdrawing your consent, some of the website’s services and functions may not be available.

 

Information collection:

We have designed our website so that users can visit it without having to reveal their identity unless they choose to do so. Visitors to our website are asked to provide us with personal data only if they want to order product(s), register on our website and/or send us an e-mail.

The website collects information about users in four different ways:

  1. Information provided by the user using the automated mail contact form through the site.
  2. Information provided by the user when registering for our e-store newsletter (newsletter),
  3. Information provided by the user in order to execute his order,
  4. Information provided by the user when registering as a customer.

These items may include:

  • Personal data such as name, address, email address, telephone number and other contact details.
  • Registration information, such as username and other identifiers or credentials used to access our online services.
  • Device information
  • IP Address and Cookies Data

It is clarified that financial transactions are carried out by an authorized payment gateway and no financial data of any kind is provided or stored in our electronic files. Please visit the payment methods link for more information.

 

Processing information:

  1. Basic Processing:

The user/customer has the possibility to choose 2 ways to complete an online order and declare his personal information:
A) As a visitor: In this case the personal data of the visitor/customer is kept in the Company’s files only as a transaction history.
B) As a registered user of the online store: In this case the customer/user has created a user account in our online store and their personal data is kept in our company files as a user record until their deletion is requested. The user/customer can at any time change or correct his data by logging into his website account (with his username and password).

The purpose of the basic data processing is the execution of the contract and the completion of the specific order, the communication with the user/customer and the sending of informational messages concerning the stages of processing the order, the provision of clarifications related to the order and the delivery of the order to area of choice of the user/customer. The visitor/registered user is informed that the provision of the above mandatory personal data as well as the details of his transactions are necessary for the proper execution of the contract of order and delivery of products and services. For this reason, the consent of the user-client is not required for this specific processing.

Each user-customer who uses the website is informed that his personal data regarding the receipt, execution and delivery of an order will be processed for the purpose of serving users/customers both by our competent employees and by third party recipients and/or processing on its behalf in the context of order execution. These third party recipients are transport companies and internet service providers with whom the Company cooperates.

No other processing or transmission of user/customer data will be carried out by the Company and its online store except for the processing under item b. below for which the Company has obtained the prior consent of the user-clients or if required by the Law or a competent supervisory or judicial authority.

 

  1. Processing that requires consent:

In order to send the registered user/customer commercial informational and promotional messages from the company, the registered user/customer must have previously given his express consent. The Purpose for the processing of the data of the registered user/customer is to send commercial promotional messages of the website to the registered user/customer, to provide special offers and discounts of the online store, to make new or alternative products available. You have the option to withdraw this consent at any time and not receive such communications.

Any supporting document and document that certifies and declares the identity of the customer remains strictly confidential and is controlled only by the responsible data processor of the company. The provision of your personal data on your part means that you consent to this data being used by the company’s employees for the reasons mentioned above. The company requires its employees and website maintainers to provide its users/customers with the level of security stated in this Privacy Statement. Under no other circumstances may the Company share your personal information with others without your prior consent, unless required to do so by legal means (such as in the event of a court order).

Data storage duration:

The user/customer’s order execution data is maintained by the Company as order history.

The Company keeps the data of the registered user/customer until the user/customer requests the deletion of his account or, for any processing of his data based on his consent, until he declares the withdrawal of his consent for the purposes of providing the services of the Company. Nevertheless, some necessary personal data concerning his transactional relations with the Company as well as the information, consent and withdrawal of the member’s consent for the processing of his data remain as information for the user/customer to ensure the proof of the legality of the processing of the data from the Company and the safeguarding of the legal claims of the parties.

Also, personal data is kept for as long as tax legislation requires.

 

Changes to the Privacy Policy:

The information on our company’s privacy policy reflects the current state of data processing on our website. In case of changes in data processing, this data protection information will be updated accordingly. Our website will always have the latest version of this data protection information so that you are informed of the scope of data processing on our website. We encourage you to always be aware of how we maintain and protect your personal information. All future changes regarding this Privacy Statement will be made known in good time before such changes become effective.

The above information is provided to you in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council and the provisions of the Greek legislation on the protection of personal data that are adopted and applied in this context.

 

Data subject rights:

Each registered user/customer, as a data subject, may at any time exercise his rights, as provided for in the General Regulation on the Protection of Personal Data 679/2016 EU. and in particular articles 12 to 23 thereof and national legislation and in particular:

  • Right of access: You have the right to be aware of and verify the lawfulness of the processing. You have the right to access the data and receive additional information about its processing.
  • Right to rectification: You have the right to correct, update or modify your personal data.
  • Right to erasure: You have the right to request the erasure of your personal data when it is processed based on your consent or in order to protect your legitimate interests. In all other cases (obligation to process personal data imposed by law), this right is subject to specific restrictions or does not exist depending on the case.
  • Right to restriction of processing: You have the right to request restriction of processing of your personal data in the following cases: (a) when you dispute the accuracy of your personal data and until verification is made, (b) when you object to the deletion of personal data and request deletion instead the limitation of their use, (c) when the personal data are not needed for the purposes of processing, but are nevertheless necessary for the establishment, exercise, support of legal claims.
  • Right to object to processing: You have the right to object at any time to the processing of your personal data in the cases where, as described above, it is necessary for the purposes of legitimate interests.
  • Right to portability: You have the right to receive your personal data free of charge in a form that will allow you to access it, use it and process it by commonly used processing methods. You also have the right to request, if technically possible, that your data be transmitted directly to another controller. This right of yours exists for data provided by you and processed by automated means based on your consent or in execution of a relevant contract.

To exercise your rights, you can send us your request by filling out the relevant form, or to the Company’s postal address (Anastasia Michail Papadopoulou & Co., Thessaloniki 110 – Oreokastro T.K.: 570 13 – Thessaloniki Tel. 2310 688.620) or to the e-mail address () with the title “Exercise of the right of access/correction/deletion/restriction/objection”, with a description of your request and we will take care to examine it and respond to you within 30 days of receiving it if this is possible and there is no other reason, otherwise we will inform you of any extension of the deadline.

You also always retain the Right to submit a complaint to the competent Greek independent authority, which is the Personal Data Protection Authority, in case of illegal processing of your personal data, in writing to its address (Kifisias 1-3, P.O. 115 23 , Athens, Telephone Center: +30-210 6475600, Fax: +30-210 6475628) or electronically (complaints@dpa.gr).

 

Special terminology:

“Personal data” means any information or information that could lead to the identification of a natural person directly or indirectly. This means that Personal Data includes information such as email / residential addresses, usernames, user-generated content, IP address, etc.

“User(s)” is any of the potential customers, existing or potential, service providers, partners.

“Processing” means any operation or set of operations performed on Personal Data or groups of Personal Data, whether or not by automated means, such as collection, recording, organization, configuration, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission , disseminate or otherwise make available, adapt or combine, restrict, delete or destroy.

“Profiling” any form of automated processing of personal data consisting of the evaluation of certain personal aspects of a natural person in particular to analyze or predict aspects related to his personal preferences and interests or movements. The personalization based on your needs and preferences occurs based on the purchases you make, as well as on the basis of your details, which you fill in on the website platform for sending Newsletters.

“Controller” the legal entity that determines the purposes and manner of personal data processing. For the purposes of this Policy, the Company is considered the Data Controller.

“Data subject” any identified or identifiable natural person to whom the processed personal data relate. For the purposes of this Policy, all those who have transactions with the Company are considered data subjects.

The Company, in compliance with the current legislative framework, has taken all the necessary actions, applying the appropriate technical and organizational measures for the legal observance, processing and safe keeping of the personal data file, committing to ensure and protect in every way the processing of your personal data from loss or leakage, alteration, transmission or in any other way improperly processing it.

We recognize that the protection of personal data is an ongoing responsibility and, therefore, we will periodically update and modify this Policy. Please periodically visit our website http://www.brimstrims.gr in order to be aware of any changes. In case of doubt regarding any term of this Privacy Policy, you can contact us by e-mail at brimstrims@gmail.com.

BRIMSTRIMS