PRIVACY POLICY

The company with the name "Antonella Concept Boutique" urges you to read this privacy policy of the company "BAKOUSIS G. and SIA O.E." (hereinafter, "Company"), which is headquartered in Heraklion, Crete, on 1821 Street, No. 93 and which you can contact for any information or clarification regarding the processing of your personal data and the exercise of your relevant rights either by phone at (+30) 2810 229820 or at the email address info@antonella.gr or even at the company's headquarters: Antonella Concept Boutique, Heraklion, Crete, 1821 Street, No. 93

1. What and who does this privacy policy cover?

The "Company" as Data Controller, collects, stores, uses and generally processes personal data from and about you through its websites and specifically the e-shop ( www.antonella.gr ) but also in some cases through its physical store, located in Heraklion, Crete, 1821 Street, No. 93, with which you do business (hereinafter "Services") in accordance with the law and this Privacy Policy.

This Privacy Policy as well as our Cookie Policy applies to the personal data of all users of the Company's Services, regardless of whether they have registered or are subscribers to any of them.

2. What personal data do we collect from you and how do we collect it?

Our company collects and processes only the absolutely necessary personal data of the users of our services, which are necessary for the respective purpose they serve. Specifically, we collect:

  • Your identification data: name, tax ID, etc. We collect this data directly from you.
  • Your contact details: postal and email address, landline and/or mobile phone number, etc. This data is collected directly from you.
  • Data from your participation in competitions organized by our Company and which you share with us when registering for the competition.
  • Recording of conversations and communications after prior notification to you, in accordance with legal requirements.
  • Image data from the video surveillance systems of the company's premises, where the relevant markings are present according to the law. For example, during your visit to our physical store "Antonella Concept Boutique" (Heraklion, Crete, 1821 Street, No. 93) your image may be recorded on CCTV.
  • Billing information. We collect our customers' information that is necessary for billing our services, such as their residential or registered office address, VAT number and Tax Office number.
  • Social Media Information. If you choose to access or connect to a Company Service through a social media platform or if you connect a Company Service to a social media platform, the data we collect may also include your user ID and/or username associated with that social media platform, information or content you have authorized the social media platform to share with us, as well as your profile picture, email address or friends lists, and any personal information you have made public in connection with that social media platform.
  • Data from your online visits to our e-shop. When you access or interact with the Company's online Services, we may collect certain information about these visits. In particular, in order to provide the best possible website experience, we collect technical information about your internet connection, computer, device and browser, including your IP address, browser type and other software or hardware information. We may also use cookies to collect and store information about your use of the Company's Services, such as the websites you have previously visited, the advertisements you have seen, the search queries you have submitted, your preferences while browsing our website, etc. For detailed information about our Cookie Policy, click here.
  • Data from your communication with our physical store. For the best and most complete service to you, we may record details regarding complaints or comments you make, your preferences regarding our merchandise, etc. which you tell us during your visit to our physical store.
3. Method and purpose of processing personal data

We process your personal data by electronic and non-automated means, taking into account the latest security technologies, the cost of implementation and the scope, nature, context and purpose of the processing, as well as the severity of the potential risk to the rights and freedoms of individuals. In particular, the Company has established and uses appropriate organizational and technical measures such as TOM concerning its employees as well as physical measures aimed at protecting the personal data in its possession from possible loss, theft and unauthorized use, disclosure or modification.

In particular, we process your personal data for the following purposes:

  • To carry out and manage the sale of our products and/or services and generally fulfill our relevant contractual obligations towards you. For example, we use your personal data to fulfill your order and deliver the products you have purchased to the address of your choice, to process product returns, to inform you of any debts you may have to the Company, etc.
  • To send - depending on your choice and upon your consent - via electronic (newsletter) and/or traditional means (postal mail, etc.) updates, offers, promotions, organizational and/or commercial information, advertising material as well as other announcements regarding our services and products.
  • To monitor, analyze and improve our services and products by conducting customer satisfaction surveys.
  • To offer you personalized communication and service ("profiling") by improving your experience in both our physical and online stores.
  • To enable you to participate in competitions, reward programs, as well as other events that may interest you and that we organize online or in our physical store.
  • To provide you with comprehensive customer service by giving you the opportunity to communicate with us verbally or via electronic means any comments and observations you may have and to respond to the questions/requests you submit to us.
  • To protect the rights and assets of the Company and third parties. For example, we monitor browsing activity on our online store in order to identify and resolve any problems in a timely manner and to ensure the integrity of our website and the protection of your account or, respectively, in the event of criminal activity within our Company's premises, we may process the data resulting from our video surveillance systems in order to protect our customers, employees and partners from illegal acts.
  • In order to comply with applicable law or legal process and/or respond to any requests from competent government authorities.
4. What is the lawful basis for processing your data?

The lawful basis for processing your personal data by the Company may be:

  1. The execution of the contract. In this case, the processing by us of the specific personal data is a necessary condition of the contract between us as the said data is a prerequisite for the conclusion, operation and execution of the contract between us.
  2. Your consent. The processing of your personal data for marketing and/or promotional purposes and/or profiling is based on your discretion. In all these cases, you can freely withdraw your consent.
  3. Legal obligation of the Company. The Company may be bound by law to process certain of your personal data (e.g. tax legislation). In this case, the provision of such personal data is necessary as otherwise it is impossible to provide our Services to you.
  4. Legitimate interest of the Company. In certain cases, we collect your personal data in a way that is reasonably expected as part of the operation of our business and that does not substantially affect your interests, rights and freedom.
5. Is it mandatory to provide your personal data?

The provision of personal data is in no way mandatory.

However, depending on the respective legal basis for processing, the provision of your personal data to the Company may be necessary to achieve the purposes specified herein or optional.

In any case, we highlight the mandatory nature of the provision of personal data with an asterisk (*) next to the mandatory data (for example, the information required to ship your purchase from our online store).

The provision of additional personal data to the Company, beyond those marked as mandatory, is optional and does not have any consequences regarding the main purposes of data collection, but their provision serves to improve the quality of the services provided.

6. Who has access to your personal data?

Our company makes every effort to limit access to your personal data to the absolutely necessary and authorized personnel of the Company who have been trained and committed to maintaining their confidentiality.

Furthermore, the Company, in order to fulfill the above purposes of processing your personal data, may disclose or transmit personal data:

  1. To third-party service providers who, in collaboration with the Company, assist in the smooth provision of the Services, such as, for example, technology service providers for the protection and security of our electronic systems, advertising companies, companies that conduct customer satisfaction surveys, companies providing logistics, transportation, order management services, etc.
  2. To affiliated companies in their capacity as data controllers or processors (e.g. external accountant)
  3. To the competent authorities for the purposes of compliance with applicable laws.

In the above cases, the Company remains responsible for the processing of your personal data and defines the individual elements of the processing, and signs a special contract with the third parties to whom it assigns the execution of processing activities, in order to ensure that the processing is carried out in accordance with the applicable legislative framework and that each natural person can freely and unhinderedly exercise the rights granted to them by the applicable legislative framework.

7. Are your personal data transferred abroad?

The personal data we process in order to provide our Services is stored in Greece.

However, some of the recipients of personal data with whom the Company shares your personal data in the context of the above paragraph 6 hereof may be located in countries other than Greece and the European Economic Area (hereinafter referred to as the “EEA”). The legislation in these countries may not provide the same level of data protection. Therefore, in the event of data transfer from the EEA to countries not considered safe by the European Commission, we have established appropriate and appropriate safeguards aimed at protecting your personal data and transferring them in accordance with applicable data protection laws, such as standard contractual clauses approved by the European Commission in accordance with Articles 45 and 46 of Regulation (EU) 2016/679 on data protection.

8. Retention period of your personal data

Our Company undertakes to maintain in absolute confidentiality the record of the personal data that you have provided to us during your registration on our website or our physical store, as well as your transaction history in the online store www.antonella.gr and only for the purposes of processing those mentioned above.

The period of data storage is decided based on the following specific criteria and varies depending on the case of processing:

  • When processing is imposed as an obligation by provisions of the applicable legislative framework, your personal data will be stored for as long as the relevant provisions require.
  • When processing is carried out on the basis of a contract, your personal data is stored for as long as is necessary for the performance of the contract and for the establishment, exercise, and/or defense of legal claims based on the contract.
  • In case the data processing is carried out for various promotional/advertising actions (marketing activities), your personal data will be kept until you withdraw your consent. You can exercise this right at any time. The withdrawal of your consent does not affect the lawfulness of the processing that was based on your consent during the period before its withdrawal.
    We will also retain the account data you created on our website for as long as you maintain it and have not requested its deletion. If necessary to comply with legal or regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce the terms and conditions of access to this website, we may retain some of your data, as required, even after your account has been deleted.

To withdraw your consent, please contact our company in writing at the email: info@antonella.gr.

9. Rights of personal data subjects

You can exercise the following rights at any time:

  1. Right of access to your personal data. You have the right to be informed by us if we are processing your personal data. In case we are processing, you can ask to be informed about the purpose of the processing, the type of your data we keep, to whom we give it, how long we store it, whether automated decision-making is used, but also about your other rights.
  2. Right to correct inaccurate, incorrect or out-of-date personal data. If you find that there is an error in your personal data, you can submit a request to us to correct it (e.g. correcting a telephone number or updating a change of address).
  3. Right to erasure ("right to be forgotten"). You can ask us to erase your data if it is no longer necessary for the above-mentioned processing purposes or you wish to withdraw your consent in cases where this is the only lawful basis.
  4. Right to data portability. You can ask us to receive the personal data you have provided in a machine-readable format or ask us to transmit it to another controller.
  5. Right to restrict the processing of your personal data. You can ask us to restrict the processing of your personal data for as long as your objection to the processing is pending.
  6. Right to object and withdraw consent to the processing of your personal data. You may object to the processing of your personal data and we will stop processing it, unless there are other legitimate reasons that override your right.
    If you have given your consent to the collection, processing and use of your personal data, you can withdraw your consent at any time with future effect.

It is noteworthy that you have the right to submit a complaint to the competent Greek Independent authority, which is the Personal Data Protection Authority (http://www.dpa.gr, postal address Kifissias 1-3, P.C. 115 23, Athens, tel. 210. 6475600, e-mail address (e-mail) contact@dpa.gr ).

10. Ways to exercise your rights regarding the processing of your personal data

In order to exercise any of your rights, you can submit a relevant request to the headquarters of our company (G. BAKOUSIS & CO., 1821 Street, No. 93, Postal Code 72201, Heraklion, Crete) or to the email address (info@antonella.gr) with the title "Exercise of Rights" and we will take care to examine it and respond to you as soon as possible.

In this case, to protect your personal data, we will ask you to verify your identity before we proceed with any request under this Privacy Policy. If you have authorized a third party to submit a request on your behalf, we will ask them to demonstrate that they have your permission to act for this purpose.

It is not necessary to send a request in cases where:

You wish to correct your personal data in your user account of our online store, so you can log in to it and make any corrections/changes.

11. Updates to this privacy policy

This Privacy Policy was last updated on 20/12/2022.

The Company may modify or update this Privacy Policy for any reason (including, without limitation, changes in applicable law and interpretations, decisions, opinions and orders regarding such applicable law.)

Any changes to this Privacy Policy will be communicated in advance by posting the revised Privacy Policy on the Company's e-shop. In the event that we make material changes to this Privacy Policy that change the nature of the processing or expand our rights regarding the use of personal data that we have already collected from you, we will notify you and provide you with a choice regarding the future use of such personal data, as may be required by applicable law.

12. Contact

If you have any questions about this privacy policy, please contact us at the following email address: info@antonella.gr