The louloudia-online.gr is committed and guarantees the protection of the personal data of its customers. Responsible for the handling and maintenance of the data is the DPO Chrysafidis Dimitrios.
1. What and who is covered by this privacy policy:
Our company is solely responsible for processing the personal data we collect from and about you through the company's services. This privacy policy applies to all users who have provided their personal data for the processing of their order, as well as users registered in our company's newsletter.
2. What kind of personal data we collect about you and why:
The data that our company collects about you are the following: (1) full name, (2) email address and (3) contact telephone number, in case we need to contact you directly for any progress of your order. We do NOT collect financial information from a payment service provider or sensitive data related to your person.
When visitors leave comments on the site, we collect the data that appears on the comment form as well as the visitor's IP address and browser user string to help detect spam.
An anonymized string generated from your email address (also called a "hash") may be provided to Gravatar to see if you use it. Gravatar's privacy policy is available here: https://automattic.com/privacy/. After your comment is approved, your profile picture is visible to the public within the context of your comment.
3. How we use your personal data:
The main reason we collect data about you is to provide you with our company's services and to allow you to interact with those services. In addition, with your prior consent, we may send you a text message (SMS) about the progress of your order, as well as emails with our offers, commercial announcements and company promotions.
Also, our company, in order to improve the services it provides, has incorporated in this website the BestPrice 360 Analytics tool, in the context of extracting statistics and performance data from the participation of its online store in the respective product price comparison platform. www.bestprice.gr, in which it participates. BestPrice Analytics 360 allows the transmission to the BestPrice.gr anonymous data on the movement of users on this website (such as a visit or an online order) in order to obtain the corresponding statistical results and to improve marketing activities. In addition, only if you have given your consent to the storage of orders via the corresponding option in your profile on BestPrice.gr, every order you place online will be automatically saved in your profile in the BestPrice.gr. This feature serves exclusively to store the basic order data (such as order code, products, etc.) without transmitting any personal data contained in your order. This feature is in no way related to the processing of the order, for which our company is responsible and responsible. More information about the possibility of storing your orders at BestPrice.gr, click here.
4. Why we use your personal data:
We collect your personal data mainly to provide you with our company's services. It is also necessary to be collected for purposes of complying with legal obligations or for purposes of protecting the legitimate interests of the company. Failure to provide such data will result in our inability to provide you with our services. When data is collected for marketing purposes (newsletter), you have the option not to provide your personal data beyond your email address.
5. Who can use your personal data:
Only employees of louloudia-online.gr have exclusive access to your personal data, who are specific and unauthorized access to your sensitive data is prohibited. All personal data concerning each of our customers, under no circumstances, is channelled outside our company.
6. How long we keep your data
If you leave a comment, the comment and its metadata are kept indefinitely. This is so that we can automatically recognize and approve subsequent comments, rather than keeping them in a moderation queue. In addition, the personal information you share when ordering or subscribing to the newsletter is kept indefinitely, unless you request that it be deleted.
For users who register on our website, we also store the personal data they enter in their user profile. All users can view, edit or delete their personal data at any time (except that they can change their username). The administrators of this website may also view and edit this information.
7. What rights you have to your data
α) Right of confirmation
Every data subject has the right conferred by the European legislator to obtain confirmation from the controller as to whether or not personal data concerning him or her are being processed. If the data subject wishes to exercise the right of confirmation, he or she may, at any time, contact any employee of the controller.
b) Right of access
Every data subject has the right conferred by the European legislator to be freely informed at any time by the controller of the personal data stored concerning him or her and to obtain a copy of that information.
In addition, the European Directives and Regulations give the data subject the right of access to the following information:
-the purposes of the processing,
-the relevant categories of personal data,
-the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations,
-where possible, the period for which the personal data will be stored or, where this is not possible, the criteria determining that period,
-the existence of a right to request the controller to rectify or erase personal data or restrict the processing of personal data concerning the data subject or a right to object to such processing;
-the right to lodge a complaint with a supervisory authority,
-where the personal data are not collected from the data subject, any available information on their origin,
the existence of automated decision-making, including profiling, as provided for in Article 22(1) and (4) and, at least in those cases, meaningful information on the logic followed, as well as the significance and the envisaged consequences of such processing for the data subject.
In addition, the data subject has the right to receive information on whether personal data are transferred to a third country or an international organisation. Where this is the case, the data subject shall have the right to be informed of the appropriate safeguards taken during the transfer.
If a data subject wishes to benefit from the right of access, he or she may, at any time, contact an employee of the controller.
c) Right to rectification
Every data subject has the right conferred by the European legislator to require the controller to rectify without undue delay inaccurate personal data relating to him or her. Having regard to the purposes of the processing, the data subject shall have the right to require the completion of incomplete personal data, including by providing a supplementary declaration.
If the data subject wishes to exercise the right of rectification, he or she may, at any time, contact an employee of the controller.
(d) Right to erasure ("right to be forgotten")
Every data subject has the right conferred by the European legislator to request the controller to erase personal data concerning him or her without undue delay and the controller shall be obliged to erase personal data without undue delay if one of the following grounds applies, in so far as the processing is not necessary:
-The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
-The data subject shall withdraw the consent on which the processing is based in accordance with Article 6(1)(a) of the General Data Protection Regulation or Article 9(2)(a) of the General Data Protection Regulation and, where there is no other legal basis for the processing.
-The data subject objects to processing in accordance with Article 21(1) of the General Data Protection Regulation and there are no compelling legitimate grounds for processing or the data subject objects to processing in accordance with Article 21(2) of the General Data Protection Regulation.
-The personal data were processed unlawfully.
-The personal data must be erased in order to comply with a legal obligation under EU or Member State law to which the controller is subject.
-The personal data have been collected in connection with the provision of information society services referred to in Article 8(1) of the General Data Protection Regulation.
If one of the aforementioned cases applies and the data subject expresses the wish to delete the personal data held by louloudia-online.gr, he or she may, at any time, contact an employee of the controller. Each employee of the louloudia-online.gr shall ensure prompt compliance with the erasure request.
Where the controller has made the personal data public and is obliged in accordance with paragraph 1 of Article 17 to erase the personal data, the controller shall, taking into account available technology and the cost of implementation, take reasonable steps, including technical measures, to inform the controllers processing the personal data that the data subject has requested the erasure by those controllers of any links to An employee of the louloudia-online.gr will ensure that suitable measures are taken in each individual case.
(e) Right to restriction of processing
Every data subject has the right conferred by the European legislator to obtain from the controller the restriction of processing where one of the following applies:
-The accuracy of the personal data is contested by the data subject, for a period of time that allows the controller to verify the accuracy of the personal data.
-The processing is unlawful and the data subject objects to the erasure of the personal data and requests, instead, the restriction of their use.
-The controller no longer needs the personal data for the purposes of processing, but the data are required by the data subject for the establishment, exercise or support of legal claims.
-The data subject has objected to the processing in accordance with Article 21(1) of the General Data Protection Regulation, pending verification of whether the legitimate grounds of the controller override those of the data subject.
If one of the above-mentioned cases applies and the data subject expresses the wish to restrict the processing of personal data held by louloudia-online.gr, he or she may, at any time, contact an employee of the controller. Each employee of the louloudia-online.gr shall ensure prompt compliance with the restriction of processing request.
f) Right to data portability
Every data subject has the right conferred by the European legislator to receive personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format. He or she will also have the right to transmit those data to another controller without objection from the controller to whom the personal data have been provided, provided that the processing is based on consent given in accordance with Article 6(1)(a) or Article 9(2)(a) of the General Data Protection Regulation or a contract in accordance with Article 6(1)(a) of the General Data Protection Regulation and the processing is carried out by automated means, on
In addition, when exercising the right to data portability in accordance with Article 20(1) of the General Data Protection Regulation, the data subject shall have the right to request the transfer of such personal data directly from one controller to another, where this is technically feasible and does not adversely affect the rights and freedoms of other persons.
In order to exercise the right to data portability, the data subject may at any time contact an employee of louloudia-online.gr.
g) Right to object
Every data subject shall have the right conferred by the European legislator to object, at any time and on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is based on Article 6(1)(e) or (f) of the General Data Protection Regulation. The same shall apply to profiling based on those provisions.
louloudia-online.gr must no longer process personal data in case of objection, unless it can prove compelling and legitimate reasons for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or support of legal claims.
If www.louloudia-online.gr processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her and relating to such marketing. The same shall apply in the case of profiling to the extent that it relates to that direct marketing. If the data subject objects to the louloudia-online.gr to the processing of data by the louloudia-online.gr for direct marketing purposes, the louloudia-online.gr may no longer process the personal data for those purposes.
In addition, the data subject, for reasons relating to his/her particular case, has the right to object to the processing by louloudia-online.gr of personal data concerning him/her for scientific or historical research purposes or statistical purposes in accordance with Article 89(1) of the General Data Protection Regulation, unless the processing is necessary for the performance of a task carried out in the public interest.
In order to exercise the right to object, the data subject may at any time contact employees of louloudia-online.gr. In addition, the data subject shall be free, in the context of the use of information society services and without prejudice to Directive 2002/58/EC, to exercise the right to object by automated means using technical specifications.
η) Automated individual decision-making, including profiling
Every data subject has the right conferred by the European legislator not to be subject to a decision taken solely on the basis of an automated procedure, including profiling, which produces legal effects concerning him or her or significantly affects him or her in a similar way, where that decision (1) is not necessary for the conclusion or performance of a contract between the data subject and the controller or (2) is not permitted by Union law or the law of a Member State in which the data subject is subject to the processing of personal data.
If the decision (1) is necessary for entering into or performing a contract between the data subject and the controller or (2) is based on the data subject's explicit consent, louloudia-online.gr shall take appropriate measures to safeguard the data subject's rights, freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express an opinion and to challenge the decision.
If the data subject wishes to exercise the rights concerning automated decision-making, he or she may contact an employee of louloudia-online.gr.
i) Right to withdraw consent
Every data subject has the right conferred by the European legislator to withdraw at any time his or her consent to the processing of personal data concerning him or her.
If the data subject wishes to exercise the right to withdraw consent, he or she may contact an employee of louloudia-online.gr.
8. How we protect your information
The measures we have taken to protect the personal data of our users are as follows: Technical measures such as encryption, security measures such as two-factor verification, and measures such as data protection training for staff.
9. What procedures we have adopted for data breach
In addition to physical security measures, our website has software to protect against data theft attempts and keeps data encrypted.
Contact forms
Cookies
If you leave a comment on our site, you can choose to have your name, email address and website saved in cookies. This is for your convenience, so that you don't have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and log in to the site, we will create a temporary cookie to determine whether your browser accepts cookies. The cookie does not contain any personal information and will be deleted once you close your browser.
When you sign in, we will also create several cookies to store your login information and screen options. Login cookies last for two days and screen options cookies last for one year. If you select "Remember me", your login will remain for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be stored in your browser. This cookie does not contain any personal data and simply indicates the post ID of the article you have just edited. It expires after 1 day.
Embedded content from other sites
Articles on this website may contain embedded content (e.g. videos, images, articles, etc.). Embedded content from other sites behaves in exactly the same way as if the visitor visited the other site.
These sites may collect data about you, use cookies, incorporate additional third-party tracking, and track your interaction with this included content, including tracking your interaction with the included content if you have an account and are logged in to that site.
Intellectual Property
1. This website is the official online store of Louloudia-online. All the content of the website, including images, graphics, photographs, drawings, texts, services and products are the intellectual property of louloudia-online.gr, without prejudice to any rights not expressly granted herein. By accessing this Website you agree that you accept the above copyright laws.
2. Any copying, analogue/digital recording and mechanical reproduction, distribution, transfer, processing, resale, creation of derivative works or misleading the public about the actual provider of the content of the website is prohibited. Any reproduction, republication, republishing, uploading, announcement, dissemination or transmission or any other use of the content in any way or means for commercial or other purposes is only permitted with the prior written permission of Chrysafidis Dimitrios or any other legal owner of the above copyright.
