1. Introduction
With its current policy, the company with the name "NERA KRITIS SOCIETE ANONYME COMMERCIAL AND INDUSTRIAL COMPANY" (hereinafter the "Company" or "we" or "us"), which is based in Acharnes, Attica Aristeidou 1-3, defines and discloses the terms under which, acting as defined by the Law as "Responsible Processor", collects, stores, uses and generally processes your personal data, which it collects when you visit, register or use the Company's website, as well as when you deal directly with it.
This Privacy Policy also describes how you use, disclose and protect your personal data, the options you have regarding your personal data, and how you can contact us. This Privacy Policy is in accordance with the terms of European Regulation 679/2016 and any other relevant national, European and international applicable law.
We would also like to assure you that at the Company, we do not collect data on minors under 18 years of age.
For any issue regarding the processing of personal data, contact in writing with the personal data department at the email: info@nerakritis.gr, with the Data Protection Officer (DPO).
2. What is Personal Data?
The term "personal data" refers to information of natural or legal persons, such as name / surname, postal address, e-mail address, contact telephone number, etc., which identify or can identify your business or details, hereinafter "Personal Data or Data".
3. What is Personal Data Processing?
Any operation or series of operations performed with or without the use of automated means, on personal data or on personal data sets, such as the collection, registration, organization, structure, storage, adaptation or modification, retrieval, retrieval of information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction.
4. Is it mandatory to provide your Personal Data?
The provision of the Data to the Company may be necessary to achieve the purposes set out in this Privacy Policy or be optional.
If you refuse to provide the information that is marked as mandatory on the Websites, it will be impossible to achieve the main purpose for which the specific Data is collected, and it may, for example, become impossible for the Company to communicate with you or provide other services available on its Website.
The provision of additional Data to the Company, in addition to those that are marked as mandatory, is optional and does not affect the main purposes of Data collection, as their provision serves only to optimize the quality of services provided by us.
5. What Personal Data do we collect?
We take care to collect only your absolutely necessary Personal Data, which are appropriate and clear for the intended purpose. This Data includes the following:
a. Data you provide to us when you subscribe to our newsletter.
b. Data on the products and services that you preferably usually choose, in order to suggest products or services of your interest and to further improve your shopping experience with us. Of course, you always have the option not to share such information with us.
c. Traffic data of our website.
d. Information collected from the use of cookies in your browser. Learn more about how to use cookies here.
e. To provide the best possible website experience, we collect technical information about your internet connection and browser, as well as the country and phone code where your computer is located, the web pages that appear during your visit, the ads which you click on and whatever search terms you use.
f. The username of your social media, if you interact with us through these channels, to help us answer your comments or questions.
g. Educational elements, such as studies, skills, knowledge of foreign languages, professional experience (only in cases where you respond to an advertisement for a job).
6. What is the purpose of processing and how we use your personal data
We use your data in different ways which differ depending on the purpose of processing.
There are cases in which the Company will not be able to take action if it has not collected your specific personal data, such as your data required to serve requests to the Company.
Specifically:
- For Communication: The Company uses your Data to respond to requests / questions you submit and / or any complaints. The information you share with us, enables us to manage your requests and respond to you in the best possible way. We may also maintain a record of your inquiries / requests to us in order to better respond to any future communication. We do this based on our contractual obligations to you, our legal obligations and our legitimate interests, in order to provide you with the best possible service and to be able to improve our services based on your personal experience.
- For sending newsletter / offers: With your consent, we will use your Personal Data, preferences and transaction details to inform you via e-mail, internet, phone and / or via media social networking for related products and services, including personalized / personalized offers, etc. Of course you can revoke this consent at any time.
- When you communicate through the contact form of our Website for the purpose of your service by the competent department of the Company based on your request or for any reason of communication and the general management of the relationship between us, you are asked to provide us with your personal information such as name, email address etc.
- When you send us your CV in order to express interest in covering a specific or non-specific job, you provide us with personal information such as name, contact details and details of your CV.
After your consent and if you have informed us, during the personalized communication, your necessary personal data on a case by case basis, the following possibilities are provided:
Customer Satisfaction Survey
Your personal data that we collect from our Website is used for your participation in a Customer Satisfaction Survey, under the specific conditions set by the current legal framework. The Customer Satisfaction Survey is currently conducted via electronic communication with you.
Personalized communication ("profiling")
In order to provide you with the best possible browsing experience on our Website, your personal data we collect may be used to send personalized updates, provided that you have given your consent, subject to the specific conditions set by the applicable legal framework.
7. What are the legal reasons for the processing of your personal data?
The personal data that you provide with your explicit consent to the Company, can be processed by us only when there is a legal reason.
Legitimate reasons for processing your personal data are:
- your identification when communicating with you for any reason of communication and in general management of the relationship between us, such as for example the service of complaints, the expression of proposals to the Company and generally where it is reasonably necessary or required their use to comply with legal or regulatory requirements, dispute resolution, fraud prevention and abuse.
- the safeguarding and protection of the legal interests, both yours and ours, For this reason we use closed circuit television (CCTV) and security cameras in the physical stores of the Company to safeguard the safety of our customers and facilities, as well as special security software to detect and prevent malware. In particular, in our online store, we collect information, such as your IP address, location information, users' devices, etc., to detect or prevent fraud or abuse of our website.
- compliance with various obligations imposed by law, such as regulatory compliance for tax purposes, e-commerce legislation.
- the consent you provide to the Company, under the specific conditions set by the current legal framework, to subscribe to the newsletters, to receive updates on products, offers and / or promotions, to participate in customer satisfaction research, to receive personalized updates, etc.
8. Who are the recipients of your Data and how are they communicated
8.1. For the fulfillment of the above mentioned purposes of processing your personal data, the Company may disclose or transmit personal data that you have given us to subsidiaries or affiliates of the Company, or to third party service providers who in cooperation with it assist in the smooth operation of this website, as indicative and not restrictive, the technology service providers for the protection and security of our electronic systems, the advertising companies, as well as the companies that conduct customer satisfaction research.
In all the above cases, the Company remains responsible for the processing of your personal data and defines the individual elements of the processing, and signs a special contract with the third parties to whom it assigns execution of processing activities, in order to ensure that the processing is carried out in accordance with applicable law. framework and that every natural person can freely and unhindered exercise the rights provided to him by the current legal framework.
8.2. When you use your social media information on the Website, you can create a public profile that includes information such as username, profile picture and city. You can also share content with your friends or the general public, including information about your interaction with the Company. We encourage you to use the tools we provide to manage the sharing of the Company's social media in order to control the information you make available through the Company's social media data.
9. Storage of your personal data
The Company undertakes the obligation to keep with absolute confidentiality the file of personal data that you have declared to us on our Website or you have disclosed to us by physical means and only for the purposes of processing those mentioned above.
The data storage period is decided based on the following specific criteria depending on the case:
- When processing is required as required by the provisions of the applicable legal framework, your personal data will be stored for as long as the relevant provisions require.
- When processing under contract, your personal data is stored for as long as necessary for the performance of the contract and for the establishment, exercise, and / or support of legal claims under the contract.
- For various promotional / advertising activities (marketing activities), your personal data is kept until the withdrawal of your consent. You can exercise this right at any time. Revoking your consent does not affect the legality of the processing based on your consent during the period prior to its revocation.
- We will also retain the personal data of your CV that you sent us for any future use for a period of one year from their receipt for future recruitment. In case you accept an offer for employment in the Company, your personal data will be kept on the basis of the information processing of the personal data of the employees, which is communicated to all employees.
- Your statement of consent for sending a newsletter is kept for as long as a newsletter is sent to you by the Company and in any case not more than six months from the cessation of sending it.
To revoke your consent, please contact the Company's Data Protection Officer (DPO) at the following contact details: email: dpo@nerakritis.gr
10. Security of Personal Data
The Company has taken care and implements appropriate technical and organizational measures aimed at the safe processing of your personal data and the prevention of accidental loss or destruction and unauthorized and / or illegal access to them, their use, modification or disclosure. In any case, the way the internet works and the fact that it is free does not allow anyone to be guaranteed that unauthorized third parties will never be able to violate the applicable technical and organizational measures by gaining access and possibly using personal data for unauthorized and / or illegal purposes.
11. What are your rights in relation to your personal data?
Every natural person whose data is processed by the Company reserves the following rights:
Right of access:
You have the right to immediate access to information about your personal data and to verify the time and manner of their initial storage, as well as information on the methods used to process and protect them.
Right of correction:
You have the right to study, correct, update or modify your personal data.
Right to delete:
You have the right to submit a written request for deletion of your personal data from the Company's file at any time, provided that we have processed them with your prior consent. In all other cases (such as when there is a contract, obligation to process personal data imposed by law, public interest), this right is subject to certain restrictions or does not exist, as the case may be.
Right to restrict processing:
You have the right to request a restriction on the processing of your personal data in the following cases: (a) when you dispute the accuracy of your personal data and until it is verified, (b) when you do not wish to have your personal data deleted restriction of their use, (c) when your personal data is not used for processing purposes, however it is necessary for the establishment, exercise and support of legal claims, and (d) when you object to the processing and until verification that there are legitimate reasons that concern us of the reasons why you oppose the processing.
Right to object to processing:
You have the right to object at any time to the processing of your personal data in cases where, as described above, it is necessary for the purposes of the legitimate interests we pursue as processors, as well as to the processing for the purposes of direct marketing and consumer profiling.
Right to portability:
You have the right to receive, free of charge, a copy of the "Customer Card" containing your personal data in electronic or printed form, which will allow you to access, verify and process it using commonly used processing methods. You also have the right to request that, if technically feasible, we transfer your data directly to another controller. This right can be exercised for the data you have provided to us and their processing is carried out by automated means, with your prior consent or in execution of a relevant contract.
Right to withdraw consent:
Finally, the Company informs you that in cases where the processing of your personal data takes place after your prior consent, you have the right to revoke it freely, without prejudice to the legality of the processing based on your consent before revoking it.
To exercise any of your above rights you can contact the Data Protection Officer (DPO) in writing at the following contact details: email: dpo@nerakritis.gr
Right of complaint to the APDPH
You have the right to submit a complaint to the Personal Data Protection Authority (www.dpa.gr): Call Center: (+30) 210 6475600, Fax: (+30) 210 6475628, E-mail: contact@dpa.gr
12. Applicable Law
Applicable Law is the Greek Law, as formulated according to the General Regulation for the Protection of Personal Data 2016/679 / EU, and in general the current national and European legislative and regulatory framework for the protection of personal data.
13. Information on the issuance of a Personal Data Protection Policy
The Controller reserves the right to unilaterally modify and update the Policy in whole or in part at its sole discretion at any time and for any reason without prior notice to you, except for its posting on the Website.
We encourage you to read this Policy from time to time to know how your Data is protected. This Privacy Policy was last modified October 2021.