PRIVACY/PERSONAL DATA PROTECTION POLICY

This policy is posted on our website in order to inform the user of the website and our e-shop in a concise, understandable, clear and easily accessible manner regarding the processing of their personal data.

At the sole proprietorship Panagiotis Velios with an address of business in Greece, in the Municipality of Paleo Faliro, Poseidonos Avenue 31, 17561 (Tax Identification Number 079752060 GLYFADA TAX TAX OFFICE (hereinafter "The Company"), we absolutely respect our customers and make the protection of your data our priority.

This Personal Data Protection Policy (hereinafter the "Data Policy" or "PDPP") has been established by us as "Data Controllers", with the aim of informing you regarding the Company's policy in the management of your personal data.

• What personal data do we process?

The Company collects, stores and uses the following data:

• Information related to your computer, including your IP address, geographic location, browser type – version and operating system.
• Information related to your visits and use of the website, including the external source, duration of the visit, page views and navigation path on the website.
• Information that you enter when registering on the website, such as your email address.
• Information you enter when creating your profile on our website such as your first name, last name, address and telephone number.
• Information that you enter when setting up your subscriptions and for the purpose of sending emails/newsletters, such as your name and email address.
• Information about the time, manner and frequency of website use.
• Information related to the purchases, services you use and transactions you make on the website/e-shop, which includes your name, address, telephone number, and email address.
• Information related to your wish list, your preferences in a product category and your size.
• Information contained in any communication you have with us via email or through the website, including the content of the communication and metadata.
• Information that you include in your CVs such as your name, surname, date of birth, your studies, your professional experience, your interests, etc.
• Information collected from the use of cookies in your browser.
• Your social media username, if you interact with us through these channels.
• Any other personal information you provide to us.

According to the GDPR, for any personal information of a third party that is disclosed to us, you must have received the consent of that third party regarding its processing and disclosure.

The disclosure of personal data by users of the website and online store of zenbee.gr in the above manner constitutes acceptance of the terms of use of such data in accordance with this.

• How do we collect your personal data?

The Company collects your personal data in the following ways:

• When you connect to our website's email address.
• When you browse our website address.
• When you complete the electronic form either on our website or in the e-shop to proceed with your order and purchase a product or for us to contact you.
• When you communicate (by phone, email, fax or social media) with us to proceed with your order and purchase a product.
• When you register on our website.
• When you create your profile on our website.
• When you communicate (by phone, email or fax or social media) with us to create or manage your registration or profile on our website.
• When you send us your CVs.
• When you send us a message from a social media platform.
• When you communicate (by telephone, email, fax or social media) with us for any reason and you disclose any personal data to us.

• For what purposes do we process your personal data?

The Company processes your personal data for the following purposes:

• Shipping – receipt of the goods you purchase from us / error prevention, monitoring, updating – execution of the order, mediation for the conclusion of a main contract.
• Issuing and sending purchase invoices for the goods you purchase from us.
• Issuing warranties for the products and services you purchase from us.
• Compliance in general with our contractual obligations to you or in application of legal provisions or in execution of court decisions.
• Informing you about our new products and services.
• Assignment of search for possible changes, cancellations or refunds, in the event of an abnormal development of the transaction.
• Improving the management of our website and business.
• Custom website configuration for you.
• Improving the management of our e-shop
• Sending non-promotional messages.
• Send email notifications about your requests
• Sending newsletter via email if you request it (with simple option to revoke at any time).
• Providing statistical data of our users to third parties (who will not be able to identify any user from this information)
• Managing requests and complaints you submit to us.
• Website security precaution/fraud prevention.
• Evaluation of CVs for recruitment purposes.

With this Privacy Policy, we assure you that we will not transfer your personal data without consent or for the other reasons mentioned in the following paragraph, or for cases a - d of the third bullet point of article 5, to any third party.

• What is the legal basis for processing your personal data:

The Company lawfully processes your personal data based on the following provisions:

• Your consent, as defined in article 6 par. 1a, in accordance with article 7 of the GDPR (Regulation 2016/679).
• The processing is necessary for the performance of a contract to which the data subject is a party, as defined in Article 6(1)(b) of the GDPR (Regulation 2016/679).
• The necessity of processing for the controller's compliance with a legal obligation, as defined in article 6 paragraph 1 c of the GDPR (Regulation 2016/679).
• The processing is necessary for the purposes of the legitimate interests pursued by the controller, as defined in Article 6(1)(f) of the GDPR (Regulation 2016/679).

• Who are the recipients / To whom is your personal data disclosed / Where is your personal data transferred?

Only the Company's absolutely necessary personnel have access to your personal data.

The Company shares your personal data with:

• Companies that collaborate with us to complete your order and hopefully make our transaction successful.
• Other third parties, to the extent necessary for the following purposes: (a) compliance with a request from a Greek State body, a court order or applicable law, (b) prevention of illegal uses of our Websites or violations of our Website Terms of Use and our policies, (c) our own protection from third-party claims, and (d) contribution to the prevention or investigation of fraud.
• Our specific or universal successors in the event of a sale, disposition, merger, or liquidation of our business.
• Other third parties to whom you have given your consent.

The personal data we collect (or process) within the framework of our website/e-shop will be stored within the European Union. However, some of the recipients of the data processed may be located in countries other than the one in which your personal data was initially collected, including third countries (e.g. the USA) to which European legislation does not apply.

• How long do we keep your personal data for?

We retain your personal data for as long as necessary to fulfill the purposes set out in this Privacy Policy (unless a longer retention period is required by applicable law).

Generally this means that we will retain your personal data for as long as you have an account with our Company.

Without prejudice to the above, our Company retains your personal data for as long as the applicable legislative and regulatory framework provides in each case and in any case for a period of twenty (20) years from the last calendar day of the year of termination of your respective transactional relationship with FLAIRFASHION. In the event that any request for cooperation / transaction with our Company is not accepted and the transaction or the conclusion of a contract is not completed, the data will be retained for a period of five (5) years. In the event of legal proceedings, the personal data concerning you will be retained in any case until the end of the pending proceedings, even if the above period of twenty (20) years is exceeded.

 Some other examples of customer data retention periods:

Guarantees

If your order included a warranty, the relevant Personal Data will be retained until the end of the warranty period. 

Newsletter

Your declaration of consent to receive a newsletter is kept for as long as the newsletter is sent to you by the Company and in any case no longer than six months from the cessation of its sending.

• What are your rights?

The Company informs you of the following rights, as defined by applicable legislation:

• Right of access to your personal data.

This means that you have the right to be informed by us if we are processing your data. If we are processing your data, you can request to be informed about the purpose of the processing, the type of your data we hold, to whom we provide it, how long we store it, whether automated decision-making is used, as well as about your other rights, such as correction, deletion of data, restriction of processing and filing a complaint with the Personal Data Protection Authority.

• Right to correct inaccurate personal data.

If you find that there is an error in your data, you can submit a request to us to correct it (e.g. name correction or address change update).

• Right to erasure/Right to be forgotten.

You can ask us to delete your data if it is no longer necessary for the above-mentioned processing purposes or you wish to withdraw your consent in the event that this is the only lawful basis.

• Right to portability of your data.

You can ask us to receive the data you have provided in a readable format or ask us to transmit it to another controller.

• Right to restriction of processing.

You can ask us to restrict the processing of your data for as long as your objections to the processing are pending.

• Right to object and withdraw consent to the processing of your data.

You can object to the processing of your data and we will stop processing your data, unless there are other compelling and legitimate reasons that override your right. If you have given your consent to the collection, processing and use of your personal data, you can withdraw your consent at any time with future effect,

• Opting out of Marketing Communications.

You can choose not to receive marketing communications by notifying us with any type of communication or by unsubscribe using the corresponding option at the end of each newsletter email.

Where we rely on our legitimate interest:

In cases where we process your personal data based on our legitimate interest, you can ask us to stop for reasons relating to your personal situation. We must then do so unless we believe we have a compelling legitimate reason to continue processing your personal data.

• How do you exercise your rights?

To exercise your rights, please contact us in one of the following ways:

• By phone at the number 210 98 32 348
• By email to the email address info@zenbee.gr
• By mail to the address as indicated at the beginning of this document.

To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Privacy Policy. If you have authorized a third party to make a request on your behalf, we will ask them to demonstrate that they have your permission to act for this purpose.

We will respond to your requests without delay and in any case within (1) one month of receiving your request. However, if your request is complex or there is a large number of your requests, we will inform you within the month if we need to obtain an extension of another (2) two months within which to respond to you.

• Is your personal data safe?

The Company guarantees to safeguard your personal data, committing to taking all appropriate organizational and technical measures for the security and protection of your data from any form of accidental or unlawful processing.

• What is the applicable law when we process your Data?

Applicable Law is Greek Law, as formulated in accordance with the General Regulation on the Protection of Personal Data 2016/679/EU, and in general the current national and European legislative and regulatory framework for the protection of personal data.

• Where can you appeal in the event of a violation of applicable law for the protection of your personal data?

You have the right to submit a complaint to the Personal Data Protection Authority (postal address Kifisias 1-3, P.C. 115 23, Athens, tel. 210. 6475600, e-mail address (e-mail) contact@dpa.gr), if you consider that the processing of your Personal Data violates the applicable national and regulatory legal framework for the protection of personal data.

• How will you be informed of any amendments to this Privacy Policy?

We update this Privacy Policy whenever necessary. If there are significant changes to the Privacy Policy or the way we use your personal data, we will post an updated version of this Policy on our website before the changes take effect and will notify you by any appropriate means.

We encourage you to periodically read this Privacy Policy to be aware of how your data is protected. 

• Cookies

Cookies are pieces of data stored on your hard drive about a current or previous web experience, such as a username/password combination used to access certain areas of the website or other services. We may use a cookie to record predetermined interests and preferences (through data submitted to us) in order to improve your experience when using our website. Because the cookie is client-side, i.e. on your hard drive, your privacy is not compromised.

You can disable cookies in your web browser or refuse the creation of a cookie depending on your personal preferences. If you do this then the functionality of our website may be impaired and some services may not be available.

IP address information

Each time you access information, we record what you access and the IP address you use to access the data. An IP address is a unique identifier given to you by your Internet service provider when you connect to the Internet. This may be different each time you connect or may be permanently set depending on your settings.

We use these addresses to track your movements, analyze general trends in such a geographic location and thereby improve the quality of our services.

IP addresses are not linked to personally identifiable information. We will also store your browser version to track trends in which browsers users prefer. We may from time to time share information with these partners. This information is not linked to personal information that can identify any individual.