The protection of your personal data is important to us!
Take some time to read this Privacy Policy and find out how the company with the name “Vasilopoulos Parts” based in Karditsa, street, contact phone number 244100000000, contact email address info@vasilopoulos.gr & ( hereinafter the “Company” or “we” or “our”), acting as Processor, collects, stores, uses and generally processes your personal data when you visit, register or use the Company’s websites (hereinafter the “Websites ») as well as when you do business with its physical stores.
This Privacy Policy also describes how we use, share and protect your personal data, the choices you have regarding your personal data, and how you can contact us. For questions regarding this Privacy Policy, as well as any issue related to the processing of your Data and the exercise of your rights, you can contact info@vasilopoulos.gr.
1. What is personal data The term “personal data” refers to information of natural persons, such as name, postal address, e-mail address, contact phone number, etc., which identify or can identify you, hereinafter “Personal Data or Data’.
2. What is Personal Data Processing Any act or series of acts carried out with or without the use of automated means, on personal data or sets of personal data, such as collection, registration, organization, structuring, storage, adaptation or alteration, retrieval, retrieval of information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction.
3. It is mandatory to provide your Data The provision of Data to the Company may be necessary to achieve the purposes specified in this Privacy Policy or may be optional. The mandatory or optional nature of the provision of Data is indicated by an asterisk (*) next to mandatory personal data. If you refuse to provide the information marked as mandatory on the Websites, it will be impossible to achieve the main purpose of collecting the specific Data, and it may, for example, make it impossible for the Company to fulfill the sales contract or provide the other services available on the Websites. The provision of additional Data to the Company, beyond those marked as mandatory, is optional and does not have consequences regarding the main purposes of data collection, but its provision serves to optimize the quality of the services provided.
4. What Data we collect from you We take care to collect only your absolutely necessary Data, which is appropriate and clear for the intended purpose. This Data includes the following:
a. Data when creating a user account on the Websites. Mandatory: e-mail address*, login password*, mobile phone. Optional: first name, last name, surname, date of birth, postal address, telephone number.
b. Data from your transactions with us, either through our physical stores or through our online store. For example, we collect notes from our conversations with you, details of any complaints or comments you make, details of purchases you make, products added to or removed from your basket,), websites you visit and how and when contact us.
c. Interests and shopping preferences, which help us recommend specific products and services that interest you. For example, which products you show us a preference in order to receive a personalized offer from us (We will only request and use the Data we have collected to recommend you products or services of interest and to further improve your shopping experience with us. Of course , it is always your choice if you share such information with us.)
d. Traffic data of our website or other websites that you have visited before us
e. Information collected from the use of cookies in your browser. (What are cookies: “Cookies” are small pieces of files in text format, which are stored in the User’s browser when visiting a website. The information stored on the User’s computer may contain information such as what pages visited by the User, the date and time of the visit as well as any random
the User’s own identification number. With this use, the Site is able to store useful information about the User’s browsing on the Site, as well as to read this information in order to offer the User a unified browsing experience.
f. Copies of documents you provide to prove your age or identity where required by law (such as a copy of a police or student ID). For example these copies may include details of your full name, address, date of birth and your face image (photograph). If you provide a passport, the data will also include your place of birth, gender and nationality.
Payment information.
Your comments and product reviews.
Your image may be recorded on CCTV when you visit one of our physical stores
In order to provide the best possible website experience, we collect technical information about your internet connection and browser, as well as the country and telephone code where your computer is located, the web pages displayed when you visit, the advertisements in which you click and whatever search terms you entered.
Your social media username, if you interact with us through these channels, to help us respond to your comments, questions or feedback.
Educational information, such as studies, skills, knowledge of foreign languages, professional experience (only in cases where you apply for a job)
We comply with the law and do not allow children to register on our Sites when they are under 16 years of age. We will seek parental consent for children participating in Company experiences and events.
5. How we use your Data We want to offer you the best possible shopping experience. To achieve this it is necessary to obtain a complete picture of you by combining the Data we have collected. We then use your Data to offer you offers for products and services that are likely to be of interest to you. The legislation for the protection of personal data allows us to do the above in the context of our legitimate interest and the need to understand our customers in order to provide them with a high level of service. Of course, if you ever want to change how we use your Data, you will find details in sections 13 & 14 ‘What your rights are’ and ‘How you can exercise your rights’ below. Remember, if you choose not to share Data with us or decline certain communication rights, we may not be able to provide some services you have requested. For example, if you have asked us to notify you when a product is available again, we cannot serve you if you have withdrawn your general consent to receive updates from us. Finally, we inform you that the processing of your Data is carried out either by the specially authorized personnel of the Company, or through IT systems and electronic devices by the Company and exceptionally by third parties, who, having contractually committed to the observance of confidentiality and the protection of With your data they carry out tasks necessary to achieve the purposes strictly related to the use of our Websites, its services and the sale of products through our Websites. Information on this can be found below in section 8 “Who are the recipients of your Data? How your Data is shared”. Below you will find details of how we use your Data and why:
To provide information about the Websites, and the services you request
Product orders: The Company processes your Data in order to fulfill its contractual relationship, process the order for products and/or services, provide customer service, comply with legal obligations, counter, raise or exercise legal claims. If we do not collect your Data at checkout from either our physical stores or our online store, we will not be able to process your order and comply with our legal obligations. Your Data may need to be transferred to third parties for the supply or delivery of the product or service you have ordered. In addition, we may retain your Data for a reasonable period of time in order to fulfill our contractual obligations, such as product returns, as required by relevant law.
Creating a User Account: The Company processes your Data in order to provide you with account functions and to facilitate the conclusion
the purchase of products and/or services.
Contact: The Company uses your Data to respond to your requests/queries, refund requests and/or complaints. The information you share with us enables us to manage your requests and respond to you in the best possible way. We may also keep a record of your queries/requests to us to better respond to any future communications. We do this based on our contractual obligations to you, our legal obligations and our legitimate interests to provide you with the best possible service and to be able to improve our services based on your own personal experience.
Sometimes, we will need to share your Data with a third party that provides a service (such as courier delivery). Without you sharing your personal data, we would not be able to fulfill your request.
To share information about our products, services and events, and for other promotional purposes
Sending a newsletter/offers: With your consent, we will use your personal data, preferences and transaction details to inform you via e-mail, internet, phone and/or social media about relevant products and services, including personalized/personalized offers, discounts, etc. Of course you have the possibility to withdraw this consent at any time.
Participation in Contests: The Company processes your Data, in case you agree to participate in contests it conducts, to notify you if you are a winner of the contest and to deliver your prize.
To operate, improve and maintain our business, products and services
Development and improvement of systems and services for the products we provide to you. We do this based on our legitimate business interests. We want to provide you with offers and suggestions that are most relevant to your interests. To help us form a better and more general understanding of you as a customer, we combine your personal data collected throughout the relationship between us, for example your purchase history in both our physical stores and our online store. For this purpose, we also combine the Data we collect directly from you with Data we receive from third parties to whom you have given your consent to transfer this data to us. For example, by combining this data, this will help us customize your experience and decide what inspiration or content to share with you. We also use anonymized data from customer purchase history to identify trends in different regions of the country. This can then guide which products we display in specific stores. To show you the most interesting content on our Sites, we will use the Data we hold about your favorite products. This is based on your consent to placing cookies on your device. For example, we may display a list of products you have recently viewed or offer you recommendations based on your purchase history and any other Data you have shared with us. To send you research and evaluation requests so that we can improve our services. These messages will not contain advertising content and do not require prior consent when sent by email or text message (SMS). We have a legitimate interest in doing so as it helps our products or services to be more relevant to you. Of course, you are free to opt out of receiving these requests from us at any time by updating your preferences in your online account.
To protect our or third parties’ rights, property or safety
Protecting your account from fraud and other illegal activities: This includes using your Data to maintain, update and protect your account. We also monitor browsing activity with us to quickly identify and resolve any issues and protect the integrity of our website. All of the above are part of our legitimate interest. For example, we check your password when you log in and use automated IP address tracking to detect potential fraudulent logins from unexpected locations.
Operation of CCTV Systems: In order to protect our customers, premises, assets and partners from ec
security, we operate CCTV systems in our stores that capture images for security. We do this based on our legitimate business interests. If we detect any criminal activity or alleged criminal activity through the use of CCTV, fraud monitoring and suspicious transaction monitoring, we will process this Data for the purposes of preventing or detecting illegal activity. Our goal is to protect our customers, employees and partners from criminal activities.
Processing payments and preventing fraudulent transactions: We do this based on our legitimate business interests. This also helps protect our customers from fraud.
For our compliance with our obligations arising from the law
To comply with our contractual or legal obligations to share data with law enforcement. For example, following a court order to share data with judicial services.
To send you communications that are required by law or that are necessary to inform you of changes to the services we provide to you. For example, updates on these privacy notices, product recall notices and legally required information about your orders. These service messages will not contain advertising content and do not require prior consent when sent by email or text message (SMS). If we do not use your personal data for these purposes, we cannot comply with our legal obligations.
6. For what purpose do we process your Data? We collect your Data for the purposes of the provided products and/or services of our Company and in particular for: a) managing the sale of our products/or services, e.g. communicating and informing you about the availability of products and the progress of your order, the execution of your order, the shipment of the products, the management of your debts to the COMPANY, the making of returns and the provision of guarantees. b) compliance with the obligations imposed by the current legislation, e.g. tax legislation, e-commerce directive, c) checking, improving and adapting to your preferences and choices regarding our products and/or services, d) sending, by electronic or traditional means, administrative, technological, organizational and/or commercial information about the Company’s products and/or services. e) the satisfaction survey of our customers, the promotion of our products and/or services, the sending of newsletters about our products and/or services. f) the evaluation of applications and CVs for the purpose of recruitment to our Company.
7. What is the legal basis for processing your Data by the Company?
Data protection legislation sets out various reasons why a company may collect and process your personal data, including: the terms of our contractual relationship your consent where required. For example when you choose to receive newsletters. When collecting your personal data, we will always inform you which data is necessary in relation to a particular service, the Company’s obligations arising from the law (e.g. tax legislation, e-commerce legislation, etc.) the legal interest of our Company. In certain cases, we collect your Data in a way that can reasonably be expected as part of the operation of our business and that does not materially affect your rights, freedom or interests. For example: We will use your purchase history to send you or make available personalized offers. We also combine the purchase history of many customers to identify trends and ensure that we can keep up with market demand or develop new products / services.
8. Who are the recipients of your Data – How is your Data shared? Access to your Data is given to the absolutely necessary personnel of the Company, who are bound by confidentiality, and the companies cooperating with us or third-party service providers, who process your Data as Processors on our behalf and in accordance with our orders.
Sharing of Data by the Company The Company shares your Data with:
Third party service providers who process personal data on behalf of the Company, for example (but not limited to) credit card and payment processing, transfers and deliveries, hosting, management and maintenance of our data, email distribution, research and analysis, management of company promotions brand and products, Google, Facebook, as well as
provision of certain services and elements. When we use third party service providers we enter into agreements obliging them to implement appropriate technical and organizational measures to protect your personal data. Other third parties, to the extent necessary for the following purposes: (i) complying with government request, court order or applicable law, (ii) preventing illegal uses of our Websites or violations of our Website Terms of Use and our policies , (iii) our own protection against third-party claims, and (iv) helping to prevent or investigate cases of fraud (e.g. counterfeiting). To other third parties when you yourself have given your consent
Notification by you. When you use certain social media features on our Sites, you may create a public profile that includes information such as your username, profile picture, and city. You may also share content with your friends or the general public, including information about your interaction with the Company. We encourage you to use the tools we provide to manage Company social media sharing to control the information you make available through Company social media assets.
The following is the policy we apply to those with whom we share your Data in accordance with the above:
We provide only the information needed to perform their specific services.
They can only use your Data for the exact purposes we set out in our contract with them.
We work closely with them to ensure that your privacy is respected and protected at all times.
If we stop using their services, any of the data you hold will be deleted or anonymized.
To improve your experience as a customer on our Sites, we use the following companies, which will process your Personal Data as part of their contracts with us: SearchNode, Yahoo, Facebook, Google, Twitter, Instagram. For more information about sharing your Data with third parties, please contact the personal data controller at info@vasilopoulos.gr
9. How do we ensure that Processors respect your Data? The Processors on our behalf have agreed and contractually committed to the Company: to maintain confidentiality, not to send your Data to third parties without the Company’s permission, to take appropriate security measures, to comply with the legal framework for the protection of personal data data and in particular Regulation 979/2016/EU (otherwise GDPR).
10. International Data Transfer The personal data we collect (or process) in the context of our Websites and Apps will be stored in Greece. However, some of the Data recipients with whom the Company shares your Personal Data may be located in countries other than the one in which your Personal Data was originally collected. The legislation in those countries may not provide the same level of data protection compared to the country that originally provided your Personal Data. However, when we transfer your Personal Data to recipients in other countries, including the US, we are committed to protecting your Personal Data as described in this Privacy Policy and in accordance with applicable law. We take measures to comply with applicable legal requirements for the transfer of personal data to recipients in countries outside the European Economic Area or Switzerland that do not ensure an adequate level of protection. We use various measures to ensure that your Personal Data transferred to these countries is adequately protected under data protection rules. These include signing the Contractual Clauses, certifying that the recipient has adopted the European binding rules or adheres to the EU-US and Switzerland-US Privacy Shield.
11. How long do we keep your Data? We retain your Personal Data for as long as necessary to fulfill the purposes set out in this Privacy Policy (unless a longer retention period is required by applicable law). Generally this means that we will keep your personal data for as long as you have an account with our Company. In relation to your Personal Data related to product purchases, we retain this data for a longer period in order to comply with our legal obligations (such as tax and commercial law and for warranty purposes).
After this retention period, your data will be completely deleted or anonymized, for example by aggregating with other data, so that it can be used in a de-identified way for statistical analysis and business planning.
12. Is your Data secure? We are committed to safeguarding your Personal Data. Recognizing the importance of the security of your Personal Data, we have taken all appropriate organizational and technical measures to secure and protect your Data from any form of accidental or unlawful processing. We use the most modern and advanced methods to ensure maximum security. The website www.vasilopoulosparts.gr uses the TLS protocol, for secure online commercial transactions. This encrypts all Data you provide, including your credit card number, name and address, so that it cannot be decrypted or changed in transit over the Internet. In addition, the information used to identify you as an account user is two: the Login Code (Username) and the Personal Secret Security Code (Password). Each time you register your details, you are given access to your personal account. The specific process is achieved safely through encryption during their transfer to the internet and the servers of the Company. By the same standards, you are given the possibility to change your Personal Secret Security Code (Password) as often as you wish. After entering the desired code, the new code is coded and stored in the Company’s systems. For this reason, you are the only one who knows your password and you are solely responsible for keeping the password confidential from third parties. These measures are reviewed and amended when deemed necessary.
13. What are your rights?
You have the right to access your personal data.
This means that you have the right to be informed by us if we are processing your Data. If we process your Data, you can ask to be informed about the purpose of the processing, the type of your Data we keep, to whom we give it, how long we store it, whether automated decision-making takes place, but also about your other rights, such as correction, deletion of data, restriction of processing and filing a complaint with the Personal Data Protection Authority.
You have the right to correct inaccurate personal data.
If you find that there is an error in your Data you can submit a request to us to correct it (eg correct a name or update a change of address).
You have a right to erasure/right to be forgotten.
You can ask us to delete your data if it is no longer necessary for the aforementioned processing purposes or you wish to withdraw your consent in the event that this is the only legal basis.
You have the right to portability of your Data.
You can ask us to receive the Data you have provided in readable form or ask us to pass it on to another controller.
You have the right to restrict processing.
You can ask us to restrict the processing of your Data pending the consideration of your objections to the processing.
You have the right to object and withdraw consent to the processing of your Data.
You can object to the processing of your Data and we will stop processing your Data, unless there are other compelling and legitimate reasons that override your right. If you have given your consent to the collection, processing and use of your personal data, you can withdraw your consent at any time with future effect.
Opting Out of Receiving Marketing Communications.
You can choose not to receive marketing communications from the Company by modifying your options in the user account (my profile) of our Sites. You can also choose not to receive marketing communications by changing your email and sms registrations, clicking the delete link or following the instructions included in the message. Alternatively you can contact us using the contact details in the ‘Questions and Comments’ section below.
In case we rely on our legitimate interest.
In cases where we process your personal data based on our legitimate interest, you can ask us to stop for reasons related to your personal situation. We must then do so unless we believe we have a compelling legitimate reason to continue processing your Personal Data.
14. How you can exercise your rights
your omas? To exercise your rights, you can submit a request to the Data Protection Officer (Data Protection Officer in Itea Karditsa) or to her email address (info@vasilopoulos.gr) under the title “Exercise of Right” and we will take care to examine it and reply to you as soon as possible. Exceptionally: if you wish to correct your Data in your user account, you can log in to it and make any correction/change without the need to submit a Request. If you wish to withdraw your consent to send a newsletter, you can do so by selecting the link “To delete from the “newsletter mailing list” click here” located at the bottom of each newsletter. If you wish not to receive web push notifications from the Company, you can disable the option in your browser settings.
Identity Verification To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Privacy Policy. If you have authorized a third party to make a request on your behalf, we will ask them to demonstrate that they have your permission to act for this purpose.
15. When do we respond to your Requests? We respond to your Requests free of charge without delay, and in any event within (1) one month of receiving your request. However, if your Request is complex or there are a large number of your Requests we will inform you within the month if we need to obtain an extension of another (2) two months within which we will respond to you. If your Requests are manifestly unfounded or excessive in particular due to their repetitive nature, the Company may impose a reasonable fee, taking into account the administrative costs of providing the information or carrying out the requested action, or refuse to proceed with the Request .
16. What is the applicable law when we process your Data? Applicable Law is Greek Law, as formulated in accordance with the General Regulation for the Protection of Personal Data 2016/679/EU, and in general the current national and European legislative and regulatory framework for the protection of personal data. Competent courts for any arising disputes related to your Data are the Courts of Edessa.
17. Where can you go if we violate the applicable law for the protection of your Personal Data? You have the right to file a complaint with the Personal Data Protection Authority (Kifisias 1-3 postal address, PO Box 115 23, Athens, tel. 210. 6475600, e-mail address) if you consider that the processing of your Personal Data violates the applicable national and regulatory framework law for the protection of personal data.
18. How will you be informed of any changes to this Policy? We update this Privacy Policy whenever necessary. If there are significant changes to the Privacy Policy or the way we use your Personal Data, we will post an update to this on our website before the changes take effect and we will notify you as soon as possible.