ACCEPTANCE OF TERMS OF USE
If the user disagrees with some or all of the terms of use of the website, services or online store, he must refrain from using it, otherwise he declares that he has unconditionally accepted all the terms and conditions of its operation. The website www.amaryllis-shop.gr operates under the responsibility of the company ROSSIDOU DESPINA TOU ANESTI with VAT number: 073455029 and G.E.MI. number: 011507636000, located at 3 Estias Street, Kozani, P.C. 50100, with contact number 2461023396, which will hereinafter be referred to as the Company.
COLLECTION AND PROCESSING OF PERSONAL DATA
Visitors and users of the services of this website, while browsing its pages, may be asked to voluntarily provide information and data concerning them in order to register for services, place orders for products or services, receive updates, and enjoy the services offered by the website www.amaryllis-shop.gr. Personal data is collected by us exclusively and only if you register for our services as a member and is limited to your name, address (street, city, postal code), a contact telephone number and billing information (VAT, Tax ID). At the same time, we request some information such as a mobile phone number (in case we need to contact you directly). You hereby give your explicit consent to the collection and processing of your above personal data, without which we cannot offer you our services, while you can withdraw or modify it at any time (Article 7 of Regulation 679/2016 EU). We reserve the right to change the terms of protection of personal data without notice, in accordance with the applicable regulatory framework. We kindly ask you to check these terms at regular intervals for any changes, as your continued participation in our services implies your acceptance of all possible modifications thereof.
Personal data includes any information relating to the data subject, with the exceptions provided for by law. Personal data (simple and sensitive), according to Article 4(1) of Regulation 679/2016 EU on the protection of personal data, are: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person. Simple personal data are all non-sensitive data. The processing of personal data of visitors – users is any operation or set of operations which is performed with or without the use of automated means on personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (in accordance with Article 4(2) of Regulation (EU) 679/2016). The processing of user data by our Company is confidential. Our Company takes appropriate organizational and technical measures to secure user data and protect it from accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access and any other form of unlawful processing.
PRINCIPLES AND LAWFULNESS OF PROCESSING
The Company, acting on the basis of the principle of legality, objectivity, accuracy, transparency, integrity and confidentiality, purpose limitation, minimization and limitation of the storage period, processes user data, which it acquires lawfully and keeps in a file, strictly under the conditions of the law (article 5 of Regulation 679/2016 EU), exclusively and only upon the consent of the user – data subject. The Company declares that it processes lawfully the user data which it collects in a lawful and lawful manner for specified, explicit and legitimate purposes and which are subject to lawful and lawful processing in view of these purposes.
Purposes that justify the processing include, among others, the execution of orders of users of this website, the requested information of users via newsletter and the general more effective provision of the Company’s services to them. The processing is limited to the strictly necessary extent, collecting no more data than is required each time in view of the purposes of the processing, and it is accurate and, if necessary, updated and kept in a form that allows the identification of their subjects only during the period required for the realization of the purposes of their collection and processing (article 5, par. b, c and e, Regulation 679/2016 EU). Our Company archives the contracts with consumers – users of this website, within the institutional framework and with a view to the smooth processing of orders. Consumers can access them if specifically requested.
Unique, restrictively listed in the law (Article 6, paragraph 1 of Regulation 679/2016 EU) cases in which our Company may process the simple data of users without their consent are the following:
a) The processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract,
b) The processing is necessary for compliance with a legal obligation of the controller.
c) The processing is necessary to protect the vital interests of the data subject or another natural person, if the latter is physically or legally unable to give consent.
d) The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
e) Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
Furthermore, data processing by our Company is also permitted when: the user, after being informed about the type of data, the purpose and scope of the processing, the recipients or categories of recipients, has consented, or the processing is necessary for the performance of a contract to which the user is a party, or for taking measures during the pre-contractual stage, at the request of the subscriber even without the user’s consent (article 5, par. 2 of Law 3471/2006).
The design and selection of technical means and information systems, as well as equipment for providing users with our Company’s services, are carried out with the basic criterion of processing as little personal data as possible. The permitted storage and processing according to the above include, by way of example, informing the user, processing his order, providing requested services and any action within the framework of the user’s contract with our Company. Sensitive personal data of users, as described in the law, are not collected by the Company under any circumstances. As an exception to this rule, the Company may collect and process sensitive personal data, under the strict, restrictive conditions referred to in the law (art. 9 par. 2, of Regulation 679/2016 EU).
Consent of the data subject is any indication of will, free, specific, explicit and fully informed, by which the data subject signifies agreement, by a statement or by a clear affirmative action, to the processing of personal data concerning him or her. This information shall include at least information on the purpose of the processing, the data or categories of data concerned by the processing, the recipients or categories of recipients of the personal data, as well as the name, business name and address of the controller and of his or her representative, if any. Consent may be revoked at any time, without retroactive effect (Article 7(1-4) of Regulation (EU) 679/2016). A written form is not required for the provision of consent to the processing of simple user data, therefore consent may also be given electronically, in any appropriate manner.
USER RIGHTS
Users of this website are informed in an appropriate and clear manner during the data collection phase of the purpose of the processing and the recipients of their data. Users enjoy the rights provided by law regarding their personal data, including the right to information, access to their data and objections in accordance with the specific provisions of the law (Articles 12-15 of Regulation 679/2016 EU). In particular, the data subject has the right to require the controller to correct inaccurate personal data concerning him without undue delay, as well as the right to request the deletion of such data (Articles 16-17 of Regulation 679/2016 EU). Users also have the right to data portability and to transmit such data to another controller without objection from our Company (articles 18-20 of Regulation 679/2016 EU). To exercise these rights, you can contact us.
DATA SECURITY – SSL PROTOCOL
Credit card details are not stored on our company’s storage media during the transaction but are registered directly in a secure environment of the cooperating online payment service that has undertaken the routing of the cards.
To ensure secure and confidential data transfer, we use SSL-256bit encryption protocol. Our Company adheres to the SSL (Secure Sockets Layer) protocol, which is currently the global standard on the Internet for the certification of websites to web users and for the encryption of data between web users and web servers. An encrypted SSL communication requires that all information sent between a client and a server be encrypted by the sending software and decrypted by the receiving software, thus protecting personal information during its transfer. In addition, all information sent with the SSL protocol is protected by a mechanism that automatically verifies whether the data has been changed during transfer.
USE OF COOKIES
To provide better services and an improved user experience, the website www.amaryllis-shop.gr uses cookies. Cookies are small text files that a website stores on the users’/visitors’ computer or on their mobile device (Smartphone, tablet, etc.) when they visit it via the browser. In this way, the website remembers the users’ actions and their preferences (such as login password, language, font size and other display preferences) for a period of time, so that these preferences do not need to be entered again each time they visit the website or browse its pages. The use of one or more cookies also helps to understand user behavior, to optimize the services provided by us. Cookies help monitor the performance and traffic of the website. Under no circumstances do cookies store your personal information or information that would allow any third party to contact the visitor of the website, via email, by phone, etc. In addition, with the use of cookies there is no access to the documents or files of the visitor – user’s computer. The cookies used are as follows:
a) Strictly necessary cookies: Necessary cookies are essential for the proper functioning of the website, and allow users to browse and use the functions of this website without hindrance (e.g. session cookies). These cookies do not detect or store your individual identity and are deleted as soon as you leave the website. Without these cookies, the effective operation of the website is not possible. In addition, without these cookies functions such as logging into an account created by the user, online product purchases and online payments are impossible.
b) Performance cookies are related to the collection of information about the behavior of users when navigating the website and store information about its usage and performance statistics, etc. The purpose of these cookies is to collect information that improves the website and its navigation.
c) Usability cookies store usage data of this website which are displayed on a subsequent visit to it, thus facilitating the user. This data is not available when the user visits third-party websites.
d) Third-party cookies, such as Google Analytics and Facebook Pixel services. The Google Analytics service is a website analysis service provided by Google, Inc. (“Google”). Google Analytics uses cookies that help analyze how users use the website, demographic information, accessibility technologies and more. These cookies are governed by Google’s privacy policy which you will find here. Accordingly, the Facebook Pixel service is provided by Facebook Inc. (“Facebook”) uses cookies, which help analyze how users use the website, demographic information and more. You can see Facebook’s privacy policy here and here.
Our site Services may include links to third-party websites in the future, to which our users may be transferred. We inform you that we are not responsible for the privacy practices of such third-party websites. We encourage our users/visitors to read the data protection statements/policies of each third-party website to which they link from our site.
Visitors-users of the website www.amaryllis-shop.gr, when providing their information in the context of their transactions with the store, membership registration and any other case, are informed, consent and accept the processing of their personal data, for the needs of the smooth processing of the transaction and the appropriate provision of the services of this website. The voluntary registration by visitors-users of our online store of their personal data, grants our Company the right to process this data in order to execute orders and appropriately offer the services requested by users. Visitors-users of the website www.amaryllis-shop.gr with this registration provide their legally required consent to the processing of their provided personal data by the Company, within the framework of the law.