A.Field of Application 

This privacy policy explains how the company operates«Spiros-Soula»,(hereinafter the “Company”) collects, uses, processes, stores, manages, transmits and protects personal data (hereinafter “Information”) through its website, in order to meet the company’s data protection standards – and to comply with the law. 

The privacy policy of the Website www.spiros-soula.gr (hereinafter referred to as the “Website”) was prepared in accordance with GPA 679/2018 (hereinafter referred to as “GDPR”), which is a binding European Regulation, as well as in accordance with applicable Greek legislation. 

This privacy policy, under which the Company undertakes to protect the personal data of the visitors and the Users / Customers of the Website and the applications that operate through it, applies to all Personal Data of the third parties (hereinafter the “User or / and Customer ”) which are processed by the Company through the Website, but also the applications that have been developed by the Company and which operate through the above website. 

In particular, the Company provides the ability to the User / Customer to send online message via the contact form in the “Contact Us” section or the email address info@spiros-soula.gr

The Website www.spiros-soula.gr is not intended for minors. If you are not an adult or unable to enter into legally binding agreements in your home country, you may not use this Website. If you believe that we have received data from a person protected by child protection laws without the necessary parental consent, let us know immediately and we will take reasonable steps to securely delete this data. 

This policy does not apply to information collected through any other website or to company practices that we do not control. Please note that the Website may contain links to other websites. 

In addition, for example, the above web page may contain links that refer to ads. In the event that the User / Customer selects a link that links to another website or advertisement on the Website and links to another website, then this privacy policy will not apply to any information collected on this site. the website. We are not responsible for the privacy practices of other websites and we recommend that you read the privacy policy of each website you visit. 

In addition, the Company hereby declares that it is not responsible in any case for the content of the above websites, to which the User / Customer is referred through other links (links), nor for any financial or other damage suffered by the user who follows them. In no case does the Company guarantee that these links will operate uninterruptedly or that their content is accurate and valid at all times. Furthermore, external links are indicative and not exclusive or restrictive. The Company reserves the right to remove or add links without any notice to anyone and to change the content of the Website at any time. 

By using the Website you understand and accept that the Company is not responsible in any case for the content of the hyperlinks included in it, the services / products they offer or the ads they contain. 

This data protection policy ensures that the Company: 

· Complies with data protection legislation, as defined by the current Greek and European data protection legislation 

· Protects the rights of Users / Customers and visitors 

· Ensures transparency in data processing and storage issues 

· Protects against the risks of data breach 

B. Legal Basis For Data Processing 

The www.spiros-soula.gr provides e-commerce services with the possibility of purchasing products through e-commerce applications.  

The use of the information we collect is aimed at fulfilling any commercial transaction you wish with our store as well as sending information and offers for promotional purposes and for the best possible service and information. In order to provide you with the relevant offers and information we may analyze your personal data, which you provide to us during your browsing of the Website and are intended solely for the purposes of your transactions with us. 

In particular, during your visit and browsing of the Website, the absolutely necessary personal data are collected, which are necessary for your browsing of the Website, the processing of our commercial transaction and the use of the applications / services offered through the website, ie the cookies. For the sole purpose of “transmitting a communication via an electronic communications network or necessary for the provision of an information society service expressly requested by the user.” For more information you can refer to the relevant Cookie Policy of our website. 

The Company collects personal data resulting from the registration of each User / Customer and the creation of an account on the Website, telephone or e-mail communication with him. 

Therefore, www.spiros-soula.gr collects any personal data for the following purposes: 

(a) For the fulfillment of any commercial transaction you wish with our store as well as the sending of information and offers for promotional purposes, (b) For the maintenance of any personal customer card, especially in case you use the applications provided through the Internet Place or in general for the creation of a customer card (profile), when the communication with the company is done via e-mail or by phone or live based on the data that you enter yourself. In all the above cases, as a Company, we maintain the personal data, which you provide to us yourself and which are necessary for the provision of the services that are the object of our activity. In some cases, such as when filling out the electronic communication form, the personal data collected are determined by the relevant legislation, therefore this data is collected by the Company in compliance with current legislation, but also to enable the conclusion of the relevant contract with the respective User / Customer. (c) In order to improve the services provided and to ensure the operation of the respective service, we use Cookies, for part of which you are given the opportunity to choose which of them can be used during your browsing of our website. More information can be found in the Cookies Policy of this website. 

The personal data you provide to us may not be used by any third party (except as provided by law and the competent authorities only), without complying with the legal provisions regarding the protection from the processing of personal data, such as apply each time. 

The Company operates in accordance with the applicable Greek and Community legislation and safely keeps your personal data for as long as you are registered in one of our services or until your consent is revoked, based on which you provided us with your personal data. 

In short, the Company requests and processes the personal data absolutely necessary for the respective processing. In any case, the criterion used to determine the storage period of personal data is based on compliance with the deadlines allowed by law and the principles of data minimization, limitation of the storage period and rational management of our files. 

C. Security of Personal Data 

The https://spiros-soula.gr/ apply at all stages of the process the appropriate technical, physical and administrative data security measures to protect the data from loss, misuse, damage or modification, unauthorized access and disclosure as provided for in Article 32 of GPA 679/2016 in order to ensure the appropriate level of security against risks. In particular, these measures include, where appropriate: a) the encryption of personal data b) the ability to ensure the confidentiality, integrity, availability and reliability of processing systems and services on an ongoing basis; (c) the possibility of restoring the availability and access to personal data in a timely manner in the event of a physical or technical event; (d) a procedure for regularly testing, evaluating and evaluating the effectiveness of technical and organizational measures to ensure the safety of processing. Furthermore, the Company takes measures to ensure that any natural person acting under the supervision of the controller or processor, who has access to personal data, processes it only at the request of the controller, and allows access to your personal information only to its authorized employees. 

Indicative key features of our information security program are the following: 

· The Company checks the safety and functionality of its products and services before their introduction on the Internet, for any vulnerabilities of the technology. 

· The Company carries out continuous infrastructure inspections to detect weaknesses, possible intrusions and other vulnerabilities in its systems. 

· The Company uses a protocol “https” for its secure and encrypted communication with the User / Customer. 

· An SSL (Secure Sockets Layer) certificate is used to create an encrypted connection between the web server and the browser of the User / Client visitor. 

The servers (servers) of the website and the applications hosted on it are located in Greece, except for the integrated product googlemaps for which GOOGLELLC is responsible with servers all over the world and the security and privacy policy of the latter applies. 

D. Categories of Personal Data Which We Collect 

By visiting the Website and in order to use a Service you must accept this Privacy Policy of https://spiros-soula.gr/

In case you use the applications provided through the Website and: 

a) subscribe to the services of the Website by creating a personal “account”, you must register: 

· Name,  

· Last Name,  

· Company Name (about legal entities)  

· Telephone Number,  

· Address,  

· City, Country, Region,  

· E-mail address,  

· Fax number  

· Postal Code,  

· Password (Confirm Password) 

b) you use the electronic communication service through the registration form of www.spiros-soula.gr in the section Contact (Contact Us) you must register: 

· Your name 

·Your email address (e-mail) 

· The subject of your message 

c) for your communication, regarding our products and services or with issues that you may want to ask us, contact us at the details listed on our website, at our website www.spiros-soula.gr or by phone at the center +30 2810 811576. 

The purpose of their use of communication is to respond to the question – request – complaint or other reason for contacting us, which you have described in your e-mail, letter or telephone. 

Similar contact details (name, email, contact phone) will be requested from https://spiros-soula.gr/ for the provision of the above described services and in case of telephone communication with the headquarters of the Company. 

E. Sources of Personal Data Collection 

·         Directly from the users / visitors / customers of the Website and the Applications 

F. Information About the Processing of Personal Data From www.spiros-soula.gr  (as Responsible and Executing the Processing – according to the General Data Regulation EU 679/2016) 

1. Why would you process my Personal Data (IFRS)? 

The Company provides services, based on its intended purpose as described above. The categories of personal data collected from the Website, through the created account, e-mail and telephone vary and depend on the type and purpose of the service provided by www.spiros-soula.gr. In particular, the Company processes your personal data which it collects through the above mentioned ways for the following purposes: 

·         To enable the purchase of products through e-commerce applications. 

·         To provide the possibility of registering the User / Customer as a member and user of the services through the website, e-mail, telephone. 

· To provide the ability to respond to requests submitted by the User / Customer regarding the pricing policy of its services and products. 

· To ensure your ability to communicate with the Company regarding our products and services or with issues that you may have asked us or any complaints you have expressed. 

·         For the registration of the requests for the use of the Company’s services, as well as for the purposes of managing these requests and informing the Users / Customers. 

2. Information that is automatically collected during your visit and interaction with himWebsite 

We inform you that your personal data and the information that is collected and processed during your visit to the Website www.spiros-soula.gr are appropriate for the occasion and absolutely necessary for the processing of your requests and the use of our services. 

We inform you that your personal data and the information that is collected and processed during your visit to the Website www.spiros-soula.gr are appropriate for the occasion and absolutely necessary for the processing of your requests and the use of our services. 

·         The Internet Protocol (IP) address of your computer, 

·         The type of browser and the configuration of the operating system 

·         The websites you visited immediately before and after your visit to the Website, 

· ·         Websites and ads you see and links you click on within the Website, 

·         Basic server connection information and 

·          Information collected through HTML cookies, and other similar technologies. 

The Company does not manage, collect or process geolocation data (GPS), which are collected and processed exclusively by the companies that offer the operating system of the device you use (in case of using IoS – Apple Inc, or Android – Google Inc). The Company does not have access to the GPS position renewal rate. 

The Website may use cookies to identify you and certain services. Cookies are small pieces of data that are sent to your web browser by a web server and stored on your computer’s hard drive. Cookies do not damage your system and do not affect its functionality in any way. Cookies also make browsing the web easier for you by storing your settings. You can set up your server in such a way that you either warn about the use of cookies in certain services of the Website or prohibit the use of cookies. If you do not wish to use cookies for your identification, you will not be able to further access these services. 

The Company will use the e-mail contact details and the name of the User / Customer or other information, for the direct promotion of similar products or services, for informing the users about the status of test applications, as well as for the service of similar purposes, except if the User / Customer informs www.spiros-soula.gr to the electronic address www.spiros-soula.gr or to its postal address info@spiros-soula.gr, that it does not wish the collection and use of its electronic data for these purposes. 

Access to personal data is strictly limited to the Company’s staff, which implements the appropriate technical and organizational measures in order to ensure the appropriate level of security and only to achieve the intended purpose. 

The Company does not carry out a systematic and comprehensive evaluation of personal aspects related to natural persons which is based on automated processing, including profiling. 

3. How long will you keep my account information on file? 

·         In the case where the legal basis of the processing is the exercise of the legal interest, the processing and retention of personal data will be carried out for as long as is necessary to achieve the desired purpose of the Company, as well as for as long as required until the expiration of limitation period of any relevant claims. 

·         In case where the personal data of the User / Customer (Customer Card – profile) is provided by him in the context of the registration in the services of the Website, we will keep the personal data for as long as the user does not object or does not exercise his rights from of the current legislation.  

·         In case where the legal basis of the processing is the execution of the contract, we will keep your data for as long as you maintain a contractual relationship with us in both printed and electronic form or for as long as it takes until the limitation period has passed. any relevant claims. 

4. What rights do I have in relation to the processing of my data? 

You can exercise, as the case may be, your rights under the current Greek Legislation and the General Regulation for Data Protection (Regulation (EU) 2016/679) which are as follows: a. the right to information (Articles 13 and 14), b. the right of access (Article 15), c. the right of correction (Article 16), d. the right of deletion – “right to be forgotten” (Article 17), e. the right to restrict processing (Article 18), f. the right of data portability (to receive your data in structured and commonly used format – Article 20 if applicable) and g. the right to object (Article 21) as well as the right to complain to the Data Protection Authority: complaints@dpa.gr.  

·         These rights are exercised free of charge for you, by sending a relevant letter to the office of the Data Protection Officer (DPO) of the Network of www.spiros-soula.gr til. 30 2810 811576 or by e-mail to the e-mail address info@spiros-soula.gr, unless they are repeated often and due to volume have administrative costs for us, in which case you will be charged with the relevant costs. 

·         If you exercise any of these rights, we will take all possible measures to satisfy your request within thirty (30) days of receiving the relevant request, after informing you either of its satisfaction or of the objective reasons that prevent his satisfaction. 

·         In addition, you can at any time object to the processing of your personal data by revoking your consent (article 7 par. 3 of GPD 679/2016), provided that the legal basis for this processing is the consent of the data subject. 

5. Where will you send my data? 

· Your data will be transmitted to departments within www.spiros-soula.gr, which are responsible for the proper and uninterrupted operation of the services of the Website and the applications provided through it. 

·         Your data may be transmitted and made available by legal entities with which, from time to time, we maintain contracts within the intended purpose of the Company, such as to data storage / hosting / processing companies that act as processors ( such as Infosector Ltd, Digital Sapiens, WeTransfer, Microsoft Corp., Google Inc., Dropbox Inc., etc.). 

·         As part of certain functions of the Website, we transmit to legal entities (Google Inc.) certain personal data of Users / Customers of our Website via cookies (such as indicative IP address and all user interaction with the application). 

·         As part of promotional and advertising activities we maintain the email address of our Users / Customers and other personal data, such as name, surname, mobile phone and we transmit them to companies such as Digital bird which advertises ads, at various times. In this case you must have explicitly given your consent that you wish to receive information and promotional material  

·         The data collected by Google’s Google Analytics tool, such as the url visited by the user, the action taken and the time remaining on each page (retention), are transmitted by rule on a Google server and stored there. In this case you must have explicitly given your consent that you wish to receive information and promotional material  

·         For more information visit the Cookies Policy of this website. 

·         In every transmission we always take every measure so that the personal data that is transmitted are always the minimum necessary, as well as that the conditions for legal and fair processing are always met. 

6. How can I file a complaint / protest? 

·For any issue regarding the processing of your data you can contact the office of the Data Protection Officer (DPO) of the Network of www.spiros-soula.gr 30 2810 811576 and email info@spiros-soula.gr

·         Also, you always reserve the right to contact the Personal Data Protection Authority, which may accept the submission of relevant complaints or grievances, either in writing in its protocol or electronically following the instructions of the Authority at, however, after first contacting the Data Processing Manager according to the above. 

7. Cookies & other Technologies 

·         The Company on its website uses “cookies” to provide Users / Customers with information, to process the services provided through it, as well as to improve the level of internet services provided by creating a safer and more efficient browsing environment. 

·          In no case do cookies contain personal information or information that will allow anyone to communicate with the visitor of the website, by phone, e-mail, etc. In addition, using cookies does not access your computer documents or files. 

·          In addition, cookies help us see the performance and traffic of our Website, improving its presentation and content, according to the preferences of our visitors. 

·         See the Cookies Policy for more information. 

8. Website security 

·         The access to the website is made at the initiative of the Visitor / User therefore he is responsible for the protection of his system from viruses or other malicious software. 

·         The Website Software is designed and monitored to ensure, as far as possible, the maximum level of security and trust. All information contained in the applications submitted through the Website is equally secure and confidential. Only authorized employees who have appropriate training in the handling of users ‘/ Customers’ personal data will have access to this information and only when this is necessary to satisfy your requests and to execute the respective contract. 

9. Modifications 

This policy may be renewed from time to time, due to amendments to the relevant legislation or changes in the corporate structure of the Company or in the Network of www.spiros-soula.gr. We therefore encourage Users / Customers to periodically review the Website for the latest privacy policy information. In any case, the Users / Customers will be informed via e-mail which they have provided consensually or through a warning on the Website for changes in this policy.