Personal Data Protection Policy

The sole proprietorship with the name “GIATRA DIONYSSIA ANGELIKI” and distinctive title “DNZ Boutique”, with headquarters in Attiki, Amerikis street no. 20, P.O. 10671, hereinafter “the Company” attaches great importance to the legal processing, security and protection of your personal data, in whatever capacity you communicate or cooperate with us, such as prospective or active customers, consumers, suppliers, individuals coke.

Please read this Company’s privacy policy carefully. By using our website, you unconditionally accept the practices that are described herein, the terms of which henceforth govern the contractual relationship between us and are incorporated into the terms of use of each of our services.

1. Data Processing Officer

The sole proprietorship with the name “GIATRA DIONYSSIA ANGELIKI” based in Amerikis street no. 20, P.O. 10671 is the controller of the personal data we collect from you.

2. What is your personal data

Your personal data includes any information that can lead, either directly or in combination with others, to your unique identification or identification as a natural person. This category includes, as the case may be, information such as full name, VAT number, physical and electronic addresses, landline and mobile phone numbers, bank/debit/prepaid card details and any other information that enables your unique identification in accordance with the provisions of the General Data Protection Regulation (GDPR 2016/679), of Law 4624/2019, of the currently applicable Greek legislation as well as of the decisions of the Personal Data Protection Authority (PDPA).

3. What personal data we collect

We process in accordance with the law and protect your personal data when you contact us and/or purchase our products or services. More specifically, we collect the following personal data:

– Data related to the execution of the order, which includes first name, last name, address including the number, postal code, city, landline and mobile phone, e-mail address, credit card details and credit card billing address.

– Account connection data such as username and password, order history, if the corresponding service has been activated on the website.

– Data of images, photos and videos that may have been sent by you which have been associated with your account such as profile pictures, if the corresponding service has been activated on the website.

– Physiometric data such as for example height, weight, shoe size, and various other measurements and preferences, if the corresponding service on the website has been activated.

– Internet Protocol (IP) addresses, browser info, tags, web beacons and cookies.

– Audio and video data through the applications Zoom, Skype, Teams, Google meet, WhatsApp, Facetime, or Viber, if the corresponding service has been activated on the website.

4. Ways of collecting your personal data

The Company collects your personal data by accepting the terms of use of each of our services, such as:

– When you call our numbers, when you send us an email or fill out an application or order.

– When you send us the postal address for issuing or sending an invoice or service receipt as well as home delivery details of your order.

– When you voluntarily subscribe to electronic directories to receive printed, electronic or SMS informational or other marketing materials or to update your preferences or when participating in competitions and surveys.

– When you visit the Website through which we collect, with your express consent, through cookies, information from your terminal device such as your internet protocol address, the operating system you use, the type and version of your browser, etc. etc.

5. Purposes and law basis of processing

The Company will use your information for the following legitimate processing purposes (according to article 6 GDPR), as the case may be, with your express consent which you can freely withdraw at any time (article 6 par. 1 item a’ GDPR), for the execution contract or pre-contractual relationship with us (Article 6 para. 1 point b GDPR) and to serve our legitimate interest (Article 6 para. 1 point f GDPR) and more specifically:

– To respond to your requests and questions about our products/services.

– To verify your details, fulfill your order and serve you better.

– To manage your calls for information in order to complete your requests, purchases and orders.

– To analyze our website traffic and improve your experience, as well as to provide you with information about new products and services, special offers and promotions.

– For the operation, improvement and maintenance of the business activity, products and services as well as for the protection of the financial interests, rights of the company or third parties.

In any case, you can change your preferences at any time by calling (+30) 6971926604 or by using the unsubscribe link at the end of every email you receive from us (unsubscribe).

6. Minimizing, storing and maintaining your data

The Company will always ask you for the minimum personal data required by law to connect to our online platforms and services, to purchase products/services or to take part in contests and promotions.

The Company keeps your personal data only for as long as required by the contractual terms of each service, in combination with the current legislation, based on the purpose of each processing, while they are then deleted.

You can us ask and find out what data we collect about you and correct or delete it, unless its retention is required by law for tax, evidentiary or judicial purposes and for the prosecution of illegal acts.

7. Cookies

Cookies are small data files that a website you visit, such as ours, can install and store on your computer or mobile terminal device (tablet, smartphone, laptop). Thanks to cookies, the website remembers your actions during navigation. Cookies do not cause damage to users’ computers or to the files stored on them. According to the European E-Privacy Directive 2009/136/SE, our website accepts the use of cookies. Cookies are divided into the following categories:

– Necessary cookies: They allow the execution of basic functions of the website, such as adding products to the cart, saving products to the wishlist, online payment. Without these necessary cookies, the smooth operation of the online store is immediately affected and your personal browsing experience is limited.

– Functionality cookies: These cookies remember your preferences when browsing our website, so that we can recommend the right products based on your needs, thus helping you to find what you are looking for much more easily.

– Performance cookies: Performance cookies collect information about how visitors use our website. They allow us to see which pages are visited most often, inform us if they experience any problem while navigating, etc. These cookies do not collect information that identifies the visitor as the information is aggregated and therefore anonymous. They are used only to improve the way the website works.

– Analysis cookies: They are a subset of functionality cookies and enable us to evaluate the effectiveness of the various functions of our website, thus constantly improving the experience we offer you.

8. Transmission of your personal data to third parties

As a general rule, the Company does not transfer your personal data to third parties, except when we act as an intermediary and to the extent that this is necessary to complete your order and fulfill requests related to the services provided by us. Such third parties may be courier companies, banking and financial institutions and businesses, such as Stripe, Paypal, Eurobank for credit card and payment processing, service providers, such as web hosting, cloud providers, or other third parties, such as in official state and supervisory bodies (e.g. prosecuting and prosecuting authorities, Prosecution of e-crime, APDPH, etc.), when we are called upon to comply with the law and to prevent illegal actions at our expense and at the expense of our customers (e.g. e.g. telecommunication fraud, verbal abuse, insult to personality.

9. Data Security

The Company is committed to ensuring the confidentiality, integrity and availability of the data it collects about the users of the website. The Company takes the appropriate technical and organizational measures, which protect the personal data that users provide on the website or provide by any other means (e.g. by telephone). These procedures protect user data from any unauthorized access or disclosure, loss or misuse, and alteration or destruction. They also help to ensure that this information is accurate and used correctly. We apply an appropriate level of security and have therefore implemented procedures to safeguard the data we collect from accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data that is transmitted, stored or otherwise processed. In the event of a personal data breach, the Company shall notify the Personal Data Protection Authority immediately and, if possible, within 72 hours of becoming aware of the breach, to the Personal Data Protection Authority, unless the breach is unlikely to cause risk to the rights and freedoms of subjects.

10. Transaction Security

All payments made using a card are processed through the international secure online payment platform www.stripe.com. Alternatively, payments are also accepted through PayPal “www.paypal.com” or after telephone consultation with a deposit to the Company’s bank account.

11. Third Party Links

The Company’s website may contain links that lead to other websites of third parties, independent entities, such as, for example, telecommunications companies, transport service providers, payment service providers, etc., which are operated and maintained exclusively by them and which we do not control. Therefore, we are not responsible for the content, actions or policies of these websites. Please read carefully the respective data protection policies of the websites you visit, as they may differ significantly from ours.

12. Social Media

We use social media plugins to make our website more personal. The Business also has its own social media pages (Facebook, Instagram). Any content sent to our website through social networks or our Business social network pages may be viewed publicly, so you should be careful when providing certain personal data. On their websites, the relevant social media provide detailed information about the scope, nature, purpose and processing of your data.

13. Processing of children's personal data

The Company will not collect or process personal data of children under the age of 15 unless parental consent has been given, in accordance with applicable law. If become aware that a child’s personal data has been collected in error, we will delete such data without undue delay.

14. Your rights

At any time, you have the right to information and access to the personal data concerning you, as well as for the purposes of its processing, the legal basis of the processing, the recipients or categories of recipients and the period of their storage.

You have the right at any time to correct inaccurate data and complete incomplete data that we process.

You have the right to delete your data, subject to our obligations and legal rights to retain them for a minimum specified period of time, pursuant to the applicable legislative and regulatory framework.

You have the right to restrict the processing of your data, provided that either their accuracy is disputed, or their processing is illegal, or the purpose of the processing no longer applies and provided that there is no legitimate reason for their retention.

You have a right to data portability, provided that the processing is based on your consent and is carried out by automated means. The satisfaction of this right is subject to our legal rights and obligations to retain the data and fulfill our duty in the public interest.

You have the right to object to the processing of your data for reasons related to your particular situation.

Your requests regarding your personal data and the exercise of your rights are submitted to the email address [email protected]

If we do not respond to your request, you can contact the Personal Data Protection Authority regarding the exercise of your rights (Leoforos Kifisias no. 1-3, 11523 Athens, tel: 2106475600, email: [email protected]).

15. Contact

If you have questions or comments regarding this Privacy Policy please contact us at [email protected]