PRIVACY POLICY
At our company, “Kotanidis Family”, we aim to protect and safeguard the privacy of the information provided to us, always respecting the trust of our customers and the users of our website.
We always comply with the applicable national and European legislation on the Protection of Personal Data and have implemented a series of actions and procedures in order to be fully compliant with the new General Data Protection Regulation (GDPR) of the European Union.
Please review this Privacy and Personal Data Protection Policy.
This Policy sets the basis for the processing by our website of all personal data that we collect from you or that you provide to us. We retain certain basic information when you visit our website and recognize the importance of keeping this information secure, as well as informing you about how we intend to use it.
Please review this Policy to learn more about the way we collect, store, use, transfer, and protect the personal data and information we receive. Also, inform yourself about the rights you have regarding this collection and processing, the ways in which you can exercise them, and generally how you can get in touch with us for any questions.
1. Principles governing data processing
2. Lawfulness of processing
3. Minors
4. Collection and use of Personal Data
5. Transfer of Personal Data to third parties
6. Rights and how to exercise them
7. Links to other websites
8. Provision of professional services
9. Changes to the personal data protection policy
10. Contact
1. Principles governing data processing
α) Lawfulness and transparency
All personal data we collect is subject to lawful and fair processing, always in accordance with the applicable legislation and in a transparent manner regarding the information we collect about you.
β) Purpose limitation and data minimization
“Kotanidis Family” collects your personal data for specified, explicit, and legitimate purposes, and it is not subject to further processing in a manner incompatible with those purposes. Furthermore, only the appropriate and necessary data is collected, to the extent required for the purpose for which it is processed. That is, the information and data you share with us is not subject to further unlawful processing, unless there are reasons of public interest.
γ) Accuracy
Your personal data is accurate and, when necessary, updated. “Kotanidis Family” takes all reasonable measures for the immediate erasure or rectification of personal data that is inaccurate, through the ready-to-use editing form as well as through our direct communication via electronic mail (e-mail), as detailed below.
δ) Storage period limitation
“Kotanidis Family” retains your personal data only for the period deemed necessary for the purposes of its processing, or to comply with the request of each individual, or until its erasure is requested by the data subject (and in any case for no longer than 7 years, unless we continue to retain it as provided by applicable legislation).
ε) Integrity, Confidentiality, and Data Security
“Kotanidis Family” implements appropriate security policies and procedures so that your personal data is processed in a manner that guarantees appropriate security, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage, by using appropriate technical and organizational measures.
Despite the efforts made by “Kotanidis Family”, security cannot be absolutely guaranteed against all threats. In the event of loss or breach of personal data, we have partners specialized in incident response and a procedure for handling these incidents in order to remediate the breach as quickly as possible, limit the potential consequences, and comply with our obligations under the law. We make every possible effort to ensure that access to your personal data is restricted to those who have a need to know. The individuals who have access to the data are obliged to maintain the confidentiality of this data. In the event of a breach of your personal data, we will inform you immediately and by any appropriate means.
2. Lawfulness of processing
In order for the processing of your personal data and information to be lawful, certain conditions must be met. “Kotanidis Family”, always aligned with Greek and EU legislation, collects only the personal data that is essential and necessary, adhering to the aforementioned legal conditions, which are the following:
α) Your consent: For the processing of the data provided to us, you must first of all have given us your consent, by accepting the terms of use and this privacy policy of our website, and the use of cookies. We may occasionally ask you for specific permission to process some of your personal data, and the processing of your personal data will only take place in this manner if you agree to it. You can withdraw your consent at any time either by filling out the “Personal Data Management Request”, through which you can request the withdrawal of your consent regarding the processing of certain personal data at any time, as well as the export, rectification, or erasure of your personal data held by us, or by contacting “Kotanidis Family” at akotanidis@kotanidisfamily.com.
In general, you are not required to submit personal data to “Kotanidis Family” online, but we may ask you to provide certain personal data in order to receive additional information regarding our services and our events. “Kotanidis Family” may also request your permission for certain uses of your personal data, and you may either consent to or refuse these uses. If you accept the consent clause for specific services or communications, such as an electronic newsletter, you will have the ability to unsubscribe from the relevant recipient list at any time by following the instructions contained in each communication. If you decide to unsubscribe from a service or communication, we will try to erase your data as soon as possible, although we may require some time and/or information before we can process your request.
β) Performance of a contract: This occurs when the processing of your personal data is necessary for the fulfillment of our obligations arising from a contract where you are a contracting party, or upon your request prior to entering into a contract.
γ) Legal obligation: This occurs when we are obliged to process your personal data in order to comply with a legal obligation, such as keeping records for tax purposes or providing information to a public body or law enforcement authority.
δ) Legitimate interest: We may process data about you when we have a legitimate interest during the execution of a lawful activity in order to ensure the continuity of this activity, provided that it does not override your interests.
ε) Public interest: Sometimes processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
3. Minors
“Kotanidis Family” understands the importance of protecting children’s personal data, especially in an online environment. If the child providing consent for the processing of their personal data has reached the age of 16, then the processing is in accordance with the law. If the child is under the age of 16, such processing is lawful only if and to the extent that such consent is provided or authorized by the person holding parental responsibility for the child.
4. Collection and use of Personal Data
4.1 What data we collect
We receive your personal data provided that you choose to provide it (for example, if you contact electronic mailboxes or if you subscribe to certain services). Depending on your activity on our website, we collect different data; more specifically, we can divide the users of our website into three categories: a) registered users, b) users who make their purchases without registration, and c) simple visitors. Paragraphs 4.1 to 4.4 of this Policy refer in detail to all three cases of users, while paragraphs 4.4 and 4.5 refer specifically to the first two categories of users, namely registered users and those who make their purchases without registration respectively.
By registering and/or submitting your personal data to “Kotanidis Family”, you also consent to the use of this data in accordance with this Policy. Your personal data is not used for other purposes, unless we obtain your permission, or unless this is required or permitted by law or by professional standards. For example, if you register on the website of “Kotanidis Family” and provide information regarding your preferences, we will use this information to personalize your user experience. When you register or log in using a third-party single sign-on service, we may identify you as the same user regardless of the use of different devices and personalize your user experience on any other websites of “Kotanidis Family” you visit.
In some cases where you have registered for certain services, we may temporarily store your email address until we receive confirmation of the information you provided via email (i.e., by sending an email to the electronic address you provided in the context of your registration to confirm the registration request). In some cases, it is possible that you have already previously given your Personal Data to “Kotanidis Family”.
4.2 Automatic collection of Personal Data
In some cases, “Kotanidis Family” as well as its service providers use cookies and other technologies to automatically collect certain categories of data when you visit us online, as well as through the electronic messages we may exchange. The collection of this data allows us to personalize your online experience, improve the performance, usability, and effectiveness of the online presence of “Kotanidis Family”, and evaluate the effectiveness of the marketing activities of our services.
4.2.1 IP Addresses
An IP address is a number assigned to your computer each time you access the internet. It allows computers and network servers to recognize and communicate with each other. The IP addresses from which visitors appear to originate may be logged for information technology security and system diagnostic purposes. This data may also be used in aggregate form to conduct trend and website performance analysis.
4.2.2 Cookies
Cookies may be placed on your computer or internet-connected device each time you visit us online. This allows the website to remember your computer or device and serves multiple purposes.
A warning banner will appear on our website requiring your consent to collect cookies. If you do not grant consent, your computer or internet-connected device will not be tracked for marketing-related activities. A secondary type of cookies may be required to ensure necessary functionality. These cookies will not be blocked through the use of this warning banner. Your choice will be stored in a cookie and will be valid for a period of 365 days. If you wish to revoke your choice, you can do so by deleting your browser’s cookies.
Although most browsers automatically accept cookies, you can choose whether or not to accept cookies via your browser’s settings (an option often found in your browser’s Tools or Preferences menu). You can also delete cookies from your device at any time. However, you should be aware that if you do not accept cookies, you may not be able to fully experience some of our website’s features and some parts of our website may not function properly.
Additional information regarding cookie management can be found in your browser’s “Help” file or through websites such as www.allaboutcookies.org.
Other third-party tools and widgets may be used on our website to provide additional functionality. The use of these tools or widgets may install a cookie on your device to make their service easier to use and to ensure that your activity is displayed correctly on our web pages.
Cookies by themselves do not disclose your email address to us or personally identify you in any other way. In our analytical reports, we may receive identification information including IP addresses, but only to determine the number of unique visitors to our web pages and the geographic origin of the visitors, and not to identify individual visitors.
By browsing our website and entering your login details to access areas restricted to registered users only, you agree that we have the ability to place cookies on your computer or your internet-connected device.
4.2.2.1 Types of cookies
The main types of cookies that websites may use are described below:
Session cookies
These are temporary cookies that remain in the cookie file of your device’s browser only during your visit and are deleted when you close the browser.
Persistent cookies
These remain in the cookie file of your device’s browser even after the browser is closed, sometimes for a year or more (the exact duration of stay depends on the lifetime of each cookie). Persistent cookies are used when the website administrator may need to know who you are for more than one visit (e.g., to remember your username or your preferences regarding the customization of the website).
First-party cookies
These are cookies installed in the browser and/or on the hard drive of your device by the website you are visiting. This includes assigning a unique identification code to you for the purpose of tracking your navigation on the website. Website administrators often use first-party cookies for managing visits and for identification purposes.
Third-party cookies
These are cookies used by third parties, such as social networks, to track your visits to the various websites on which they advertise. The website administrator has no control over these third-party cookies.
4.2.2.2 Cookies from video service providers (Google, etc.)
These providers may place cookies on your device if you watch videos on our website which they provide to us as an external service. If you deactivate these cookies, you may not be able to view the embedded videos from our website.
4.2.3 Google Analytics
“Kotanidis Family” uses Google Analytics. More information regarding the way Google Analytics is used can be found here: http://www.google.com/analytics/learn/privacy.html
In order to provide website visitors with more choices on how their data is collected by Google Analytics, Google has developed the Google Analytics Opt-out Browser Add-on. The add-on communicates with the Google Analytics JavaScript (ga.js) to indicate that information about the website visit should not be sent to Google Analytics. The Google Analytics Opt-out Browser Add-on does not prevent information from being sent to the website itself or to other web analytics services.
4.2.4 Location-based tools
“Kotanidis Family” may collect and use the geographic location of your computer or mobile device. This location data is collected for the purpose of providing you with information regarding services that we believe may interest you based on your geographic location, as well as for improving our location-based products and services.
4.3 Social media applications and widgets
The website of “Kotanidis Family” may include functionality so that you can share via third-party social networking applications, such as the Facebook Like button and the Twitter widget. These social networking applications can collect and use information regarding your use of the websites of “Kotanidis Family” (see above details regarding “Social Networking” cookies). Any personal information that you provide through such social networking applications can be collected and used by other members of the social networking application in question, and these exchanges are governed by the privacy policies of the companies providing the application. We have no control over or responsibility for these companies or their use of your information.
4.4 Data collected during your registration
When you register on our website, we ask you to provide us with certain information about yourself.
This information may include:
- Personal data such as first name, last name, address, city, country, postal code, date of birth, gender, email address, telephone number, and other contact details. This data is collected during the purchase of a product from our stores or upon your first registration to our online services, e.g., when you make a market inquiry, a comment on our social media pages (Facebook, Twitter, YouTube), participate in one of our contests, etc
- Account information, such as a username and other identifiers or credentials used for your access to our online services.
- Record of purchases, orders, and “cart”, meaning that when you purchase a product or add it to your “cart” without ultimately completing its order, we retain this data to assist you with future purchases.
- Device information.
- IP address and Cookies data
- Location.
Cases in which we ask you to provide your personal data:
- When you register to use our online services.
- When you request to receive updates regarding marketing promotional activities.
- When you participate in one of our contests or when you fill out one of our customer surveys.
- When you submit requests.
4.5 Data collected from users who purchase products without registration
In this case, users submit to us the absolutely necessary details for the completion of their order, such as first name, address, email address, telephone number, and other contact details, which are used until its completion and are then erased without keeping any record.
5. Transfer of Personal Data to third parties
We do not proceed with any disclosure of your personal data to third parties who are not affiliated with us, unless this is required for our legitimate professional and business needs, in order to respond to your requests and/or provided that it is enforced or permitted by law or professional standards. In any case, the third parties to whom your personal data is transferred proceed with its processing only for the aforementioned purposes and under no circumstances for their own benefit.
This includes the following third parties:
External service providers: Where required, we will assign to other companies and natural persons the performance of certain tasks that contribute to our services on our behalf within the framework of data processing contracts. We may, for example, provide personal data to partners to host our databases and applications, for the provision of data processing services, or to send you information you requested. All partners of “Kotanidis Family” are fully compliant with the General Data Protection Regulation (GDPR compliant) and are contractually bound to adhere to it. “Kotanidis Family” transfers personal data to them only when they meet our strict data processing and security standards. We disclose only personal data that allows them to provide their services.
Business transfer: In the event of reorganization, restructuring, merger, sale, or other transfer of assets, we will transfer data, including personal data, on a reasonable scale, provided that the recipient agrees to respect your personal data in a manner consistent with applicable data protection laws. We will continue to ensure the confidentiality of any personal data and will inform you when your personal data becomes subject to a different privacy policy.
Courts, judicial or regulatory authorities: “Kotanidis Family” may disclose personal data in order to respond to requests from courts, judicial, governmental, or police authorities, or where it is required and prudent to comply with applicable legislation, court decisions, or orders of courts or judicial authorities.
Public Bodies: “Kotanidis Family” may disclose personal data in cases of audits by public bodies and authorities, such as audits relating to personal data protection, security, or tax audits.
Indicatively, your Personal Data is disclosed to the following recipients:
- One More Site – Seferidis Ilias
- Mailchimp
6. Rights and how to exercise the
If you have submitted personal data to “Kotanidis Family”, you have the following rights:
Right to information: you have the right to request any information and any communication regarding the processing of your personal data in a concise, transparent, intelligible, and easily accessible form (in writing or electronically).
Right of access: you have the right to access and export your personal data. Before we provide personal data to you, we may request proof of your identity and sufficient information about your transactions with us from which we can locate your personal data.
Right to rectification: if the data we have about you is incomplete or inaccurate, you can rectify it by editing your profile, through the “Personal Data Management Request”, or alternatively, ask us to rectify any inaccuracies in it.
Right to object and to restriction of processing: you have the right to object to the processing of your personal data by us if it is deemed to exceed its purposes and if we no longer have the right to make use of it for any legitimate reason, or to request that its processing be restricted in certain cases, such as for reasons of data accuracy and reasons of lawfulness.
Right to data portability: upon your request, we will transfer your data to another data controller, where this is technically feasible, provided that the processing is based on your consent or is necessary for the performance of a contract.
Right to erasure: you have the right to request the erasure of your data in certain cases, such as if it is no longer necessary for processing or has been in our records for a long period of time beyond what is necessary and agreed upon.
Right to notification: we have a notification obligation regarding the rectification or erasure of personal data or the restriction of processing.
Right to withdraw consent: you retain the right to withdraw the aforementioned granted consent in writing at any time you wish.
Right to lodge a complaint: έyou have the right to address any request/inquiry to the Hellenic Data Protection Authority (1-3 Kifissias Ave., P.C. 115 23, Athens, Telephone: 210 6475600), to report a breach incident, or to lodge a complaint in writing or electronically via the website www.dpa.gr.
You can also submit a request or exercise your above rights by contacting us at akotanidis@kotanidisfamily.com and we will make all reasonable and practical efforts to comply with your request, provided that it is in accordance with applicable law and professional standards.
7. Links to other websites
The website of “Kotanidis Family” may contain links to other websites for your convenience and information. These websites operate independently, and since they do not affiliate with “Kotanidis Family”, they are not under our control and we are not responsible for any potential unlawful processing of your personal data. They likely follow their own privacy policy, which we urge you to review in the event that you visit a link to other websites, before disclosing any personal data.
8. Changes to the personal data protection policy
“Kotanidis Family” may periodically modify this Policy so that it adapts to national and EU legislation and reflects our recent privacy practices. When we make any changes, we will record the date of modification or revision at the bottom of this page, and whenever deemed necessary, we will inform you about the changes.
9. Contact
If you have any questions, comments, or complaints regarding our management or protection of your personal data, or if you wish to modify your personal data or exercise any of your rights as a data subject, please contact us at akotanidis@kotanidisfamily.com.