The Company "GEORGIO HEADS & CO., LTD." respects and protects the personal data and the confidentiality of the communications of visitors and users of the e-shop. This Privacy Policy (hereinafter referred to as "Policy") refers to the data that the Company may collect or process, how they are used and the rights of the e-shop users regarding the collection and processing of their personal data in accordance with the law and the Company's policy.

What is personal data?

Personal data is information that identifies each user directly or indirectly. Indirectly means in combination with other information, such as, for example, the name, postal address, e-mail address and telephone number, or a unique device identification number. The information voluntarily provided by the users of the online store is used in order for users to have direct and meaningful communication with the store, to provide them with answers to specific questions they ask and, finally, to service and execute their orders. 

General

Personal data is processed in accordance with the provisions of the General Data Protection Regulation (GDPR 2016/679), any specific national and European legislation for certain sectors, the applicable Greek legislation for the protection of personal data, as well as for the protection of personal data and privacy in the electronic communications sector (Law 3471/2006 , as amended) and the decisions of the Personal Data Protection Authority (PDPCA). The company has adapted to the GDPR framework. 

The Policy may be reviewed, amended and updated at any time and without notice. The Company posts the current version of the Policy in order to keep users or visitors to the online store informed. Visitors and users must check the Policy periodically in order to be aware of the current version of the Policy.

Collected data

Visitors or users of the e-shop can use or visit the entire Website without revealing their identity and without providing any personal data. However, in order to make a purchase in the online store it is possible that the user may be required to provide information such as full name, contact details (address, telephone number, e-mail address, etc.), as well as further information provided by the user under his/her responsibility, such as profession and other information provided in the message that the user may send to the Company. Also, when purchasing products from the Company's online store, data on the purchase of specific products by the buyer is collected, as well as billing data, required by law for the legal sale and shipment of these products. 

Processing of data

The registration of the data of visitors or users of the Website during their registration and/or during their communication with the Company through the contact form will imply their consent to the collection, use and processing of these data for the purposes for which the specific communication is made. Under no circumstances will the personal data processed by the Company be transmitted to third parties without the consent of the data subject and will not be used in general without complying with the provisions of these terms and applicable legislation.

The Company may keep a record and process the personal data of the users of the e-shop, which are voluntarily provided to it by the users, for the purposes of serving them and implementing the sales contract of the products available through the e-shop, including the service of the users after the conclusion of the sales contract, e.g. with after-sales services, with personalized information actions regarding similar products and services related to the purchases of the user. Personal data collected by the Company through the online shop in the above mentioned ways will be kept securely for as long as required by the intended purpose of processing and the law and then deleted. 

Recipients of such personal data may be, in addition to the Company, related persons or companies associated with the Company, who either provide guarantees for specific products sold through the online store or provide their services for the provision of product transport services or for the provision of electronic communication services with users or for the provision of other services related to the use of the online store. Unless expressly provided for in this Policy or required for the conclusion and servicing of the user's contractual relationship with the Company or required by law and/or the competent authorities at their legitimate request, the Company will not otherwise make any disclosure, disclosure, transmission, dissemination or other form of disposal of any personal data provided by the visitors and users of the online store without their consent.

The Company takes care to take all appropriate technical security measures to protect the confidentiality of the personal data collected against any unauthorized access, use, dissemination, alteration and destruction of data, in compliance with the applicable legislation for the protection of personal data. In any case, the possibility of such data being the target of a malicious attack by third parties cannot be excluded.

Rights of the data subject

Visitors and users of the e-shop retain at all times the rights granted to them by law, including Regulation EU 2016/679, for the protection of personal data, namely the right to be informed about the data processed by the company, the right of access to the data held by the company, the right to rectify such data, the right to erasure, the right to restrict or object to the processing of data and the right to the portability of data to another party. The above rights may be exercised in writing by sending an e-mail to the following address [email protected] Any exercise of the right to object to or restrict the processing of personal data or withdraw consent to processing may adversely affect the completion of the transaction, i.e. not allow the completion of the order of a product through the online store or its delivery. After exercising the right to object or restrict or withdraw consent, the Company may process data only to the extent permitted by law in order to comply with its legal obligations or to defend its rights, as well as in any other case expressly provided for by law.

Visitors and users of the e-shop can contact the data protection officer by e-mail at the following address  [email protected]

Complaints about personal data breaches can be addressed to the competent supervisory authority, the Personal Data Protection Authority, in accordance with the instructions provided on its website www.dpa.gr