The following Privacy Policy aims to inform you about how we use your personal data, complying with the strict requirements of the legislation on personal data protection, including the Law. 4624/2019 and the General Data Protection Regulation EU 2016/679 (GDPR).
1. Contact details of the controller
The controller of your personal data collected through this website is the company “SARAFOUDI ELENI”, and VAT number 046418876 of the Tax Office of N.Ionia, and GEMI number: 154184906000, based in Thessaloniki, in Agios Athanasios at 33 Ioanni Metaxa Street.
2. Who will use your Personal Data
The website www.mellowboutique.gr will use your personal data in its capacity as Data Controller.
3. What personal data do we use?
The company SARAFOUDI ELENI (hereinafter referred to as the “company”) collects and maintains exclusively the personal data that you disclose to it by entering the requested personal information in the respective fields and / or your answers in the context of specific actions it carries out and you may voluntarily participate, and are the minimum necessary for the proper operation of the website and the services it provides.
WHAT ARE COOKIES?
Cookies are pieces of information in the form of very small text, stored in the browser you use on your PC on your Smartphone & tablet (Chrome, Mozilla Firefox, etc.), helping the most efficient operation of our site. Cookies in no way cause damage to users’ computers or to the files stored on them. The information stored in cookies is used for identification & optimization purposes.
CATEGORIES
1) Necessary Cookies
They allow the execution of basic functions of the site, such as adding products to the cart, electronic payment and storing products in the wish-list. Without these absolutely necessary Cookies, the smooth operation of the e-shop is directly affected, but your personal browsing experience is also degraded, since basic e-commerce functions are under-functioning.
2) Performance cookies
Performance cookies collect information about how visitors use the website. They allow us to see which pages they visit most often or show us if they have a problem navigating. These cookies do not collect information that identifies the visitor. All information collected by these cookies is aggregated and is only used to improve the way the www.mellowboutique.gr works.
3) Functionality cookies
These cookies “memorize” your preferences when you browse our site, so we can recommend the right products based on your needs. With these cookies you enjoy a personalized version of the www.mellowboutique.gr making it much easier to find what you are looking for.
4) Advertising cookies
These cookies are used to provide advertisements more relevant to you and your interests. They are also used to send targeted advertising or offers aimed at limiting mass, unwanted and meaningless advertising messages. At the same time, they help us measure the effectiveness of advertising campaigns.
5) Cookies Analytics
They are a subset of functionality cookies and enable us to evaluate the effectiveness of the various functions of our site, so that we can continuously improve the experience we offer you.
Specifically:
Third-party vendors, including Google, may display company ads on websites on the Internet.
Third-party vendors, including Google, may use cookies to update, optimize and display ads based on a user’s previous visit to www.mellowboutique.gr website.
The www.mellowboutique.gr may also use cookies from a previous visit to its website for remarketing.
You can set your browser to inform you each time before a cookie is downloaded and you decide to download or reject it. In this case, keep in mind that you may not be able to take full advantage of it.
www.mellowboutique.gr may use Google Analytics features for display ads (e.g., remarketing, Google Display Network display reports, Doubleclick Campaign Manager integration, and demographic and interest reports).
Using Ads Settings, visitors can opt out of Google Analytics for display ads and customize Google Display Network ads.
Here are the available Google Analytics opt-out options for the web.
The www.mellowboutique.gr complies with the Google AdWords Interest-Based Advertising Policy and restrictions for sensitive categories and:
It uses remarketing with Google Analytics for online advertising.
The www.mellowboutique.gr and third-party vendors, including Google, use both an original manufacturer cookie (such as the Google Analytics cookie) and a third-party cookie (such as the DoubleClick cookie) to update, optimize and display ads, according to the previous visits of some users to its website.
www.mellowboutique.gr and third-party vendors, including Google, use both first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick cookie) to perform reports on how www.mellowboutique.gr ad impressions, other uses of advertising services and interactions with those ad impressions and advertising services are related to website visits of www.mellowboutique.gr.
www.mellowboutique.gr may use data from Google’s interest-based advertising or third-party audience data (such as age, gender and interests) with Google Analytics.
We do not collect special categories of your personal data (this includes your nationality, religion or belief, sex life, sexual orientation, political opinions, trade union membership, information about your health and biometric data, as well as criminal record data).
In the context of the obligation to safeguard and protect the information of its customers and partners, the “company” is committed to protecting and using in an appropriate way the personal data collected either online from this website or through communication / cooperation with any third party.
The “company” collects only the personal data voluntarily provided by our online visitors, so that we can satisfy your requests, to be able to provide you with information about our products and services, by sending information material (letters, newsletters, etc.) and to serve you in the best way. Where additional, optional information is sought, you will be informed of this at the time of collection.
This personal data falls into the following categories:
a) Identity data: include name, surname, title, etc. If you contact us via social media, your social media username may also be included.
b) Contact data: includes shipping address, delivery address, e-mail address and telephone numbers.
c) Transaction data: includes details about payments by you and other details about the products you have purchased from us.
d) Technical data: includes your internet connection e-mail address (IP address), your browser, your location, your operating system and other information related to the device you use to visit the website.
e) Tracking data: includes data that we or others collect through cookies and similar tracking technologies such as web beacons, pixels and mobile identifiers.
Skroutz Service Usage Data
Our company, in order to be able to constantly evaluate and improve the quality of the services it provides to the consumer, uses the Skroutz Analytics service, which works with cookies. Through this service, if you have previously given your consent through Skroutz.gr, usage statistics are securely communicated by us to Skroutz. The data received by our company through this service is covered by the privacy policy as well as the cookies policy of the Skroutz.gr, at the end of which you can also withdraw any consent you may have.
In addition, we inform you that, if you have been directed to our online store through the Skroutz.gr and made a purchase with us, data related to your specific purchase are securely communicated by us to Skroutz, in the context of our commercial cooperation with Skroutz and your use of Skroutz services. Our disclosure of this data is done through cookies and is necessary for the financial clearance of this commercial partnership, which you may have used. Due to this necessity, the law allows us not to ask for your consent to share this data. More information can be found in the privacy policy as well as the cookies policy of the Skroutz.gr.
4. Collection and purpose of personal data processing
The receipt of personal data takes place only if you voluntarily choose to provide them, for example, in person or if you contact by email or if you register as customers of the products and services of the “company” or if you participate in various actions / competitions on social media and / or as users of www.mellowboutique.gr.
The use of the products and services provided by www.mellowboutique.gr, including the provision of online ordering services of our products and services, requires ensuring that you can be contacted. Therefore, it is necessary when registering on the website www.mellowboutique.gr to state the true personal data that will be requested of you.
By subscribing to the services provided by www.mellowboutique.gr you also consent to the storage and use of your personal data in accordance with this Statement.
The purpose of collecting, using and processing your personal data is:
(a) the provision of the services and products you request through the website, for the receipt of which their use and / or processing is required, e.g. Online orders, and the subsequent implementation of contractual obligations, in the context of execution, delivery and invoicing of orders under the best conditions and in the most efficient way,
(b) the provision of personalized services and the facilitation of the ordering process, with the aim of facilitating the user and / or ensuring that the content of the website is presented in the most efficient way for you and your computer. The legal basis for the processing of personal data for this purpose is your consent (Article 6 (1) (a) and Article 9 (2) (a) of the GDPR)
(c) in addition, but only with your optional consent which is the legal basis for the processing in accordance with Article 6 (1) (a) of the GDPR: the promotion of the products and services provided by the “Company”, in particular through the www.mellowboutique.gr, and the receipt of advertising information material (direct marketing) from the “Company”.
Your data may in any case be processed, even without your consent, for the purpose of complying with laws, regulations, EU law (Article 6 (1) (c) of the GDPR Regulation, to obtain statistics on the use of the Website and its proper functioning (Article 6 (1) (f) of the Regulation), and the establishment or defense of legal claims in the interest of the company.
Personal data is entered into the company’s IT system in full compliance with data protection legislation, including security and confidentiality profiles, and is based on principles of good practice, legality and transparency regarding processing.
The data is stored for as long as is strictly necessary to achieve the purposes for which it was collected. In any case, the criterion used to determine this period is based on compliance with the deadlines set by law and the principles of data minimization, storage limitation and rational management of records.
All your data will be processed in printed or automated media, ensuring in any case the appropriate level of security and confidentiality.
Your personal data is not used for purposes other than those described in the Statement, unless we obtain your prior permission, or unless required or permitted by law.
The “company” collects “sensitive” personal data only when you voluntarily offer us this data or when this data is required or their collection is permitted by law.
We advise you to refrain from providing sensitive data unless this is required for the purpose of providing the personal data or if you hereby consent to the use of such data.
The “company” may ask you to provide it with certain personal data to send informational messages about products and services and / or relevant offers and announcements. It may also ask for your permission for certain uses of your personal data and you can either consent or deny those uses. If you want specific services or communications, such as an electronic newsletter, you will be able to unsubscribe from the relevant list of recipients at any time by following the instructions contained in each communication. If you decide to unsubscribe from a service or communication, we will try to delete your data as soon as possible, although we may need some time and / or information before we can process your request.
5. Individuals who have access to Personal Data and Transmission of Personal Data
The Data are processed by electronic and manual means in accordance with the procedures and practices related to the aforementioned purposes and are accessible by the staff of the Controller authorized to process the Personal Data and the supervisors and in particular the employees belonging to the following categories: technical staff, IT staff and administrative staff, product managers, as well as other staff members who need to process the data for the performance of their tasks.
The “company” does not transmit personal data to third parties.
In some cases, the “company” may share your personal data with various companies or service providers that cooperate with it, in order to respond to your requests or to natural or legal persons entrusted with the execution of the processing, provided that we inform you in advance and obtain your prior consent. Individuals who have access to the data are obliged to maintain the confidentiality of this data.
The Data may also be disclosed to countries outside the European Union (“Third Countries”): a) to institutions, authorities, public bodies for institutional purposes, b) to professionals, independent consultants – whether working individually or collectively – and other third parties and providers who provide the Data Controller with commercial, professional or technical services required for the operation of the Website (e.g. provision of IT and Cloud Computing services) for their purposes mentioned above and to support the Company in providing the services you have requested and c) to third parties in the event of mergers, acquisitions, transfers of their businesses or branches, audits or other extraordinary acts.
The mentioned recipients receive only the necessary data for their respective functions and duly undertake their processing only for the purposes mentioned above and in accordance with data protection laws. The Data may also be shared with the other legitimate recipients identified from time to time by applicable laws. With the exception of the above, the Data will not be disclosed to third parties, natural or legal persons, who do not perform commercial, professional or technical duties for the Controller and will not be disseminated. The persons receiving the data will process them, as the case may be, as Data Controllers, Processors or persons authorized to process the personal data for the purposes mentioned above and in accordance with applicable data protection legislation.
With regard to the transfer of data outside the EU, even to countries whose laws do not guarantee the same level of protection of the privacy of personal data as that provided by EU law, the Controller informs that the transfer will in any case be carried out in accordance with the methods allowed by the GDPR, for example based on the user’s consent, based on the standard contractual clauses approved by the European Commission, selecting parties participating in international programs for the free movement of data or implemented in countries considered safe by the European Commission.
6. Your rights regarding Personal Data
If you wish, you can request at any time to be informed about your personal data held by the “company”, their recipients, the purpose of their keeping and processing as well as their modification, correction or deletion, by sending a relevant e-mail to the address mellow.elemar@gmail.com from the contact e-mail address you have provided. You also have the right to review the personal data we hold and generally to exercise any right provided by the legislation on the protection of personal data.
The personal data you disclose to us through www.mellowboutique.gr, either during your registration or at a later stage, are collected and used and processed in accordance with the applicable provisions on the protection of personal data. and in particular, in accordance with the provisions of N. 4624/2019, as in force, but also of the new European General Data Protection Regulation (EU) 2016/679, on the protection of personal data.
You maintain, upon your request, in accordance with the provisions of Articles 15 – 22 of the GDPR:
- Right to be informed about the personal data we hold about you.
- Right to correct your personal data.
- Right to complete your personal data, provided that such data is necessary for the purposes of processing your data.
- Right to delete your personal data. Some data will only be deleted after a specified retention period, for example because in some cases we are legally obliged to retain the data, or because the data is required to fulfill our contractual obligations to you.
- Right to block your personal data: in certain cases provided for by law, we will block your data if you ask us to do so. Further processing of blocked data is done only to a very limited extent.
- Right to withdraw your consent, which can be done at any time.
- Right to object to the processing of your data.
You may at any time object to the processing of your personal data in the future, if we process your data on the basis of one of the legal justifications provided for in Article 6 §§ 1e) and 1f) of Regulation (EU) 2016/679. If you object, we will stop processing your data, provided that there are no legitimate grounds for further processing. The processing of your data for advertising purposes does not constitute a legitimate ground.
7. Security of Personal Data
The “company” applies specific technical and organizational security procedures in order to protect personal data and information from loss, misuse, alteration or destruction. Our partners who support us in the operation of the website and digital infrastructure, also comply with these provisions. The company has ensured the compliance of the cooperating companies with the GDPR policy and bears no responsibility for any unfair action by them on personal data.
8. Links to other websites
This Privacy Policy applies only to the Website set out above. Although the Website may contain links to other websites (known as third-party websites), we inform you that the company does not have access to or use cookie tracking systems, web beacons or other user tracking technologies that may be active on third party websites, the content and material posted on them or the methods of processing your personal data. For this reason, the company expressly denies any liability for such matters. Therefore, you should verify the privacy policies of such third-party websites and collect information about the terms and conditions and how your personal data is processed.
9. How we store data and for how long
In accordance with Article 5 (1) (c) of the GDPR Regulation, the computers and programs used by the company are created in such a way as to minimize the use of personal and identification data. This data is processed only to the extent necessary to achieve the purposes stated in this Policy and will be stored for as long as is absolutely necessary to achieve the specific purposes pursued. In any case, the criterion used to determine the storage period is based on compliance with the deadlines allowed by law and the principles of data minimization, storage limitation or rational management of our records.
10. Resolution of complaints, grievances
According to the General Data Protection Regulation, the “company” is committed to resolving complaints or complaints about the collection or use of personal data.
If you wish to report any complaint, you can send an e-mail to mellow.elemar@gmail.com address from the contact e-mail address you have provided.
In case you consider that the protection of your personal data is affected in any way, you may appeal to the Personal Data Protection Authority, Kifissias 1-3, P.C. 115 23, Athens, www.dpa.gr
11. Revisions to the Statement
The “company” reserves the right to modify or revise this Statement periodically, at its sole discretion. In the event that changes are made, the “company” will record the date of modification or revision in this Statement and the updated Statement will apply to you from that date. We encourage you to periodically review this Statement to see if there are any changes to the way we handle your personal data.
Last updated: June 2022
