I. General Provisions on the Protection of Personal Data

 1. Who is responsible for your Data. - Who do you contact to exercise your rights?

The company responsible for the processing of your data is the company with the name "Dimitriadis Geo. Kyriakos", and d.t. "CRYSTAL", located in Kallithea, Halkidiki, Greece, legally represented, with telephone number 23740 22688 and e-mail address info@crystalclothing.gr (hereinafter: "the Company"), to which you can address for the exercise of your rights under (I.4.) below.

2. Which of your Data are considered personal?

2.1. Personal data (Data) is any information relating to a person that can lead to his or her identification, i.e. to the verification of his or her identity from this identifier.

2.2. Simply browsing this website does not require you to provide your Data. Any allocation of your Data to our Company requires your prior notification and requires your consent.

3. What are the general principles that our Company adheres to for the protection and security of your Data - How is your Data processed?

3.1.The personal data that you provide anywhere on the pages and services of our website are intended solely for purposes related to your transactions with us, communication with you, your proper service and the improvement of the services we provide you (as these activities are described below - under II.1., II.2., II.3.) and only with your consent.

3.2.By carrying out any of your transactions and using any of our services in accordance with our Company's Terms of Use and after you have declared to us that you have read and accepted this Privacy Policy, you provide us with your consent to process the data for the purpose of the service you choose each time.

3.3.  You have the right to withdraw your consent at any time by submitting a written request to info@crystalclothing.gr

3.4.Our company does not store and manage your payment means data (credit/debit). When paying by credit or debit card, the Customer automatically switches to the electronic payment platform of ALPHA BANK, with which our Company cooperates, which platform operates with a strict privacy policy that ensures the confidentiality and privacy of your data. Our Company only receives confirmation that the payment has been successfully completed.

3.5.Our Company operates in accordance with current Greek and EU legislation (fully compliant with Regulation 2016/679/EU) and keeps your personal data securely for as long as provided below (under II.1., II.2, II.3.), depending on the category of subject to which you belong.

4. What are your rights in relation to the Personal Data you have provided to us?

4.1. Right to Information

You have the right to request information about the personal data we have received from you and that we hold for one or more of the purposes described below (under II.1., II.2, II.3.).

4.2. Right of Access

You have the right to request access to your data that we hold and to obtain confirmation as to whether it is being processed. In particular, you may request to be informed about the purposes of processing, the categories of personal data, the recipients or categories of recipients, the period of retention and processing, the existence of a right of complaint to the Data Protection Authority, and a copy of the personal data held and processed.

4.3. Right of rectification

You have the right to request our Company to correct your data if any of the data for which we have the right to process has changed or has been incorrectly recorded.

4.4. Right of Deletion

You have the right to request from our Company the complete or partial deletion of your data to which we have the right to keep and process, either because they are no longer necessary for the purposes for which they were collected, or because you withdraw your consent, or because the data were collected for a purpose that you consider unlawful. Our Company will, within a reasonable time, inform you about the satisfaction of your request. Otherwise, it will inform you of the impossibility of erasure, in the event that it is obliged either by law not to proceed with the erasure, either due to the fulfilment of a duty in the public interest or due to a request from the tax authorities. Similarly, where he wishes to retain it for the purpose of pursuing or supporting a legal claim.

4.5. Right of Restriction

You have the right to request our Company to limit the processing of your data, in terms of quantity, time or the purpose of processing. In particular, you may request the restriction(α) or because you question the accuracy of your data and until it is confirmed by the Company,(β) or because you consider their processing to be unlawful, but instead of deleting them you choose restriction (γ)or because you no longer wish to be included in the membership of our Company, even though you were registered as such, but you do not wish to have your details deleted.

4.6. Right to Portability

You have the right to request the Company to transfer your Data to a third party, without your involvement or mediation.

4.7. Right to Refuel

You have the right to object to the use of your personal data for the purpose of direct marketing. In particular, with regard to our Company's e-mail newsletters, or short SMS or viber messages, you have the right to request to be removed from the relevant mailing list by sending a request to the e-mail address info@crystalclothing.gr .

 5. Can your Data be forwarded to a third party other than the Company?

5.1.Your Data is not intended to be transferred to a third party, other than the Company, with the exception of (α)courier companies (courier), to which your absolutely necessary Data are transmitted in order to achieve the dispatch of your order and after you have previously consented to this, (β) the competent tax authorities, if the Company is obliged to do so and to the extent required by tax legislation. In any case, the parties involved are contractually bound to maintain confidentiality.

5.2. In cases where, in order to complete your actions for an order, your data are transmitted to third parties, such as to credit card providers to process a payment on your behalf when you purchase from our online store or to our third-party partners who provide us with technical services, such as hosting and technical support services, we assure you that your data are always encrypted and in no case can they lead to the person of the Customer. Both our website hosting site and our online payment and banking platforms adhere to security measures and safeguard your data and have a corresponding privacy and personal data policy.

5.3. The employees of our Company who have access to your Data are specific and always under the supervision of the manager of the Online Store. Unauthorized access to the Data by unauthorized persons is prohibited.

5.4.The data kept in our Company's archives may be disclosed to the competent judicial, police and other administrative authorities upon their legitimate request, always in accordance with the applicable legal provisions. In addition, in the event of a public prosecutor's order, an official order or an official preliminary investigation, our Company shall be obliged to make the relevant data available to the relevant authority.

6. Guarantees

We assure you that the Company will exhaust every technical and organizational measure for the protection of the Data and will only make the optimal, minimal and absolutely necessary use and processing of the Data, as required by law and strictly and exclusively for the purpose for which you have made them available to us.

 

II. Specific provisions regarding the individual categories of Data Subjects

1. CUSTOMERS

1.1. Data: When the customer places an order, our Company will ask him/her for the following data: full name, full address (city, street, number, postal code, country), in order to send the products and contact telephone number, e-mail address, in order to be informed about the progress of the order.

1.2. Purpose: This information is necessary in order for our Company to properly execute the online sale and to inform the Customer about it. The Customer, by filling in his data and accepting the terms of use and the Company's policy, gives his consent to the collection by the Company of the data requested. The Customer undertakes that the information provided is true and accurate and that he/she will inform our Company in case of change, so that it is kept up to date.

1.3. Data Retention Period: we will retain the above (under 1.1.) Data for three (3) years and then we will delete them subject to the lower (under II.2. and II.3.) articles. In addition, the data of your order, and only those that are necessary, may be kept by our Company for a longer period of time, if required by tax legislation or for the purpose of making legal claims.

2. MEMBERS

2.1. Data: To register as a MEMBER, the following data will be requested: name, full name, full address (city, street, number, postal code, country), telephone number, e-mail address and password.

2.2. Purpose: Registration as a MEMBER provides the opportunity for faster and better service.

By registering in the system as a MEMBER and accepting the terms of use and the Company's policy, the Customer/Potential Customer gives his/her consent to the collection by the Company of the data requested and which he/she completes of his/her own free will. In any case, this is information necessary for the execution of the online sale and informing the Customer about it. The Customer/Potential Customer undertakes that the information provided is true and accurate and that it will update it in the event of any change, so that it is kept up to date.

The registered MEMBER has at any time access to his/her data through his/her account and the possibility to correct them and delete them.

2.3. Data Retention Period:For the above service, i.e. your registration as a MEMBER, we consider as a reasonable period of retention of your Data, the period during which we can offer you this service, provided that during this period you have not objected -as you are entitled- to your inclusion in the above category of Subjects.

3. COMMUNICATION RECIPIENTS

3.1. Data:For your subscription to the Company's Newsletter service, your e-mail address will be requested. In addition, we may request your mobile phone number to send you short SMS or viber text messages. In any case, your prior consent is required to send these, and you constantly reserve the right to withdraw this consent.

3.2. Purpose: Your subscription to our Company's Newsletter service is intended to send you informative messages about our products and services, our offers and discounts and news in general about our Company. Likewise, the provision of your mobile phone number to us for information purposes by means of short SMS text messages or viber messages is also intended to inform us in the cases mentioned immediately above.

3.3. Data Retention Period: for the above service, i.e. your subscription to the Company's Newsletter or to the list of recipients of short SMS or viber messages, we consider as a reasonable period of retention of your Data, the period during which we can offer you this service, provided that during this period you have not objected -as you are entitled- to receiving the information.