Dear customers
Please read carefully the following information on the processing of your personal data in the context of the provision of services we provide to you at “B. ROUSSOS – E. MASTOROU O.E.”, in accordance with the General Regulation on the Protection of Personal Data 2016 /679 and the relevant Greek legislation.
We would like to assure you that for “B. ROUSSOS – E. MASTOROU OE.” with VAT number 082998138 based in Piraeus Attica, Anapausesos 8, P.O. 18546, the protection of our customers’ personal data is of primary importance. For this reason, we take appropriate measures to protect the personal data we process and to ensure that the processing of personal data is always carried out in accordance with the obligations set by the legal framework, both by the company itself and by third parties that process personal data on behalf of the company.
1. What personal data we process and where we collect it from our Company processes (receives, maintains and uses) the following categories of personal data:
Identity and contact details (surname, patronymic, matrimonial name, residential address, telephone numbers, e-mail address) of you, or of your relatives.
Necessary elements we need are:
the first and last name and for businesses TIN, DOU, Profession, so that the employee making the delivery knows to whom he must deliver
billing and/or delivery address so you can pick up at your location
landline number so that we can contact you regarding your order
the mobile phone number for your electronic information via electronic messages or telephone communication regarding your order
your e-mail address (email), so that you receive updates regarding your order.
All of the above is necessary for the prevention and detection of fraud against you and against our company.
In the event that you have chosen paypal as a payment method, the details of the delivery address are automatically sent by us to paypal, in order to be able to confirm/prove the correctness of the delivery to that address.
Your credit card details are requested during the completion of your orders if you choose the relevant payment method and are solely for their electronic transmission through a secure environment to the banking institution for the completion of your payment only. The “B. ROUSSOS – E. MASTOROU OE.” does not hold any credit card information on its systems.
Our Company collects personal data following your consent and provided that you have granted it to us, either during your request for a quote, or during your order, or during your visit to our booth during an exhibition promoting our services, or during creating a member account, either when you subscribe to our newsletter and when you visit our store.
We would also like to assure you that in “B. ROUSSOS – E. MASTOROU OE”, we do not collect data about minors under 16 years of age.
Also, our company does not offer its products and services for purchase by children and minors under the age of 16.
The children’s products we offer for purchase are intended exclusively for purchase by adults and not by children or minors under the age of 16.
If you are under 16 years of age, you may use our website only with the participation and approval of a parent or guardian.
- What is the purpose and legal basis for processing your personal data
The Company processes your personal data in a lawful and lawful manner for clearly defined purposes listed below. Your personal data processed by the Company is limited to what is absolutely necessary to achieve these purposes.
There are cases in which “B. ROUSSOS – E. MASTOROU OE.” it will not be able to take actions if it does not have certain Personal Data, such as your Personal Data required when processing your orders so that they can be delivered by the carrier to you and not to some other third party.
The purposes for which our Company processes your personal data are:
- a) Communicating with you on issues related to transactions between us
(Offers – Quotations – Orders etc.)
- b) Issuance of the required tax documents and delivery and dispatch
of your order.
- c) Your information about the Company’s news and about new services we provide.
During your visits to our website, you can browse and remain an anonymous user until you decide that you want to register either by creating a member account, or by subscribing to our newsletters and personalized updates, giving your electronic address (email) as and your appropriate consent. The use of the information you give us is to provide you with a personalized user experience, to send you notifications that concern you personally, to provide you with suggestions adapted to your own needs and preferences.
Legal basis for the above purposes are:
- a) Compliance with the current tax legislation, which requires the collection of your data for the issuance of a legal document.
- b) The consent you provide under the specific conditions set by the legal framework, in order to receive updates from the Company about products, services, offers, to participate in a satisfaction survey, to send you personalized updates, etc.
- c) Safeguarding and protecting the legal interests, both yours and ours
- Who are the recipients of your personal data
The data we collect from you, we process within the Company and in cooperating companies that have been assigned the execution of part of the contract such as transport companies or pick-up points selected by you, pre-printing – printing and reprinting or product configuration companies for the purposes only of provision of the respective service.
In these cases, “B. ROUSSOS – E. MASTOROU OE.” remains responsible for the processing of your personal data and defines the individual elements of the processing, and signs a special contract with the third parties to whom it entrusts the execution of processing activities, in order to ensure that the processing is carried out in accordance with the applicable legal framework and that any natural person can freely and unhindered to exercise the rights granted by the legal framework.
We also share – where required – your data with the competent tax authorities.
Only after your order, your personal data may be transmitted to third parties or to persons indicated by you.
The Company will not transmit your data to a third country, or to an international organization, except with your permission and after the conditions of the current legislation have been met.
- How long your personal data is kept
The period of data storage is decided based on the following specific criteria depending on the case:
When the processing is imposed as an obligation by provisions of the applicable legal framework, your personal data will be stored for as long as the relevant provisions impose.
When the processing is performed on the basis of a contract, your personal data is stored for as long as is necessary for the performance of the contract and for the establishment, exercise, and/or support of legal claims based on the contract.
For the purposes of promoting products and services (marketing activities), your personal data is kept until you withdraw your consent. This can be done by you at any time. The withdrawal of consent does not affect the lawfulness of the processing that was based on the consent during the period before its withdrawal.
We will also keep your account data for as long as you keep it and you have not requested its deletion.
Your data, which you give us in order to provide you with services, will be kept for as long as necessary so that we can continue to provide you with these services.
To the extent reasonably necessary or required to comply with legal or regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions, we may retain some of your information, as required, even after the termination of your account or we no longer need to provide you with your services.
Finally, your personal data will be kept for the time defined for each of them in the current legislation and in the event of a claim for as long as is required for their irrevocable resolution.
- What are your rights in relation to your personal data
You can at any time with your request to our Company, exercise the following rights:
- a) Right of access, i.e. to ask us what your personal data is
which we process, for what purposes we do it, if we give it to third parties and to whom,
as well as other relevant information. You are also entitled to a free copy
of your personal data upon your request.
- b) Right to rectification, i.e. to request the correction of inaccurate and incomplete data by contacting the Data Protection Officer (DPO) at the contact details below.
- c) Right to delete your personal data in the following cases: (i) when your personal data is no longer necessary in relation to the purposes for which they were collected, (ii) when you revoke your consent on which the processing of personal data was based of your data and there is no other legal basis for the processing, (iii) when your personal data was processed without the existence of the necessary legal basis.
In all other cases (such as indicatively when there is a contract, an obligation to process personal data imposed by law, public interest), the right in question is subject to specific limitations or does not exist as the case may be.
- d) Right to restrict the processing of your personal data in the following cases: (i) when the accuracy of your personal data is disputed and until verification is made, (ii) when you object to the deletion of personal data and request the restriction of their use instead of deletion, ( iii) when the personal data is not needed for the purposes of processing, but is nevertheless necessary for the establishment, exercise, support of legal claims, (iv) when you object to the processing and until it is verified that there are legitimate reasons that concern us and override the reasons for which you object to processing.
- e) Right to portability, i.e. to send your data in a convenient electronic medium, and/or in printed form, to you, or to a person you will indicate, or to another data controller.
This right of yours exists for the data you have provided to us and their processing is carried out by automated means based on your consent or in execution of a relevant contract.
- f) The right to withdraw at any time the consent you have given for a matter related to the protection of personal data, without prejudice to the lawfulness of the processing based on your consent before you withdrew it.
To exercise your above rights, as well as for any communication regarding your personal data, please contact “B. ROUSSOS – E. MASTOROU O.O., Anapausesos 8, Piraeus, with Mr. Eleftherios Mastorou on phone +30 210 4631338, email gdpr@rithmos.gr
You can also use the unsubscribe options by following (clicking) on the corresponding link (link), present in our electronic communications.
You also have the right to submit a complaint at any time to the competent Authority for the Protection of Personal Data (tel.: 2106475600, email: contact@dpa.gr, web: http://www.dpa.gr), in case you consider that you are affected by your personal data in any way.
- Security of your personal data
The “B. ROUSSOS – E. MASTOROU OE.” has taken the appropriate technical and organizational measures aimed at the secure processing of personal data and the prevention of accidental loss or destruction and unauthorized and/or illegal access to them, use, modification or disclosure in order to ensure the application of legislation and the appropriate level of security of your personal data.
In any case, the way the internet works and the fact that it is free to anyone does not allow guarantees to be provided that unauthorized third parties will never be able to violate the technical and organizational measures in place by accessing and possibly using personal data for unauthorized and/or illegal purposes.
Our websites may contain links to foreign websites. The “B. ROUSSOS – E. MASTOROU OE.” is not responsible for the privacy practices or content of other non-B. ROUSSOS – E. MASTOROU OE.” Therefore, we recommend that you carefully read the privacy statements of these third-party websites.
Our company has properly trained its staff through our Privacy Policy and Procedures. It also binds all its partners, who act on its behalf as Processors with contracts governed by the existing legal framework.
Last update: 12/06/2018
