Privacy Policy
Privacy Policy
Last updated 09/02/2023
1. General
The company Tourtounis Dimitrios – Clothing Trading, respects the protection of personal data and the privacy of users of the website www.numascrubs.com (hereinafter “the Website“) and complies with the applicable legislation on the protection of personal data. Specifically, the processing of users’ personal data (hereinafter “Users” or “You“) is carried out in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (hereinafter “GDPR”), any other applicable national and European legislation on the protection of personal data and privacy in the field of electronic communications (Law 3471/2006, as applicable) and the decisions of the Personal Data Protection Authority (APDPH).
With this Policy, we would like to explain how we process your personal data when using the Website. Please read it carefully. This Policy has been written in the simplest possible way to facilitate your understanding and to allow you to freely and voluntarily decide whether to provide your personal data.
2. Who is the data controller?
The data controller, as defined by the General Data Protection Regulation 679/2016, is the company “Tourtounis Dimitrios – Clothing Trading”, headquartered in Thessaloniki, Address 10th km Old National Road Thessaloniki – Kilkis, postal code 54500, with VAT number 118102833 (hereinafter the “Company” or “We”).
Contact information:
email: hello@numascrubs.com
3. What kind of data do we collect – What are the purposes and legal bases for processing personal data?
3.1 Categories of data
Depending on how you interact with us, we process the following categories of personal data:
Identification, communication, and address information such as name, phone number, email address, delivery address, etc.
Financial data and transaction data such as order and return details, payment methods, etc.
Mail information (e.g. when you use the contact form).
3.2 Purposes and Legal Bases of Processing
(a) When you create an account, we process the required information for the purpose of identifying the User and facilitating their activities on the Website (e.g., faster purchases, updates on the status of an order, tracking previous orders, etc.). The legal basis for processing is the performance of the contract between us (Article 6 (1) (b) GDPR), to which you become a contracting party by accepting the Terms of Use of the Website before registering.
(b) When you place an order/purchase, we request and process all the information necessary for the execution of the transaction (e.g., product delivery, invoicing, communication). If you do not provide us with this information, it is not possible to enter into a contract between us. The legal basis for processing is the performance of the contract between us (Article 6 (1) (b) GDPR), to which you become a contracting party by accepting the Terms of Use of the Website before completing the purchase. Additionally, we retain certain transaction data for compliance purposes with legislation, e.g., tax legislation, for the period defined by law. The legal basis for processing is compliance with our legal obligations (Article 6 (1) (c) GDPR).
(c) When you fill out the website contact form, we process data to satisfy your requests by answering your questions and providing information. In this case, the legal basis for processing is your consent (Article 6 (1) (a) GDPR), which you provide by clicking on the relevant field before submitting your inquiry.
(d) When you wish to subscribe to our newsletter, we only ask you to provide a valid email address. We do not collect any further data beyond your email address. The purpose of processing is to send updates regarding our products and offers. The legal basis for processing is your consent (Article 6 (1) (a) GDPR), which you provide by clicking on the relevant field before subscribing to our newsletter. You can unsubscribe from our newsletter list at any time by following the instructions contained in each email message you receive.
(e)We may also use the contact details of our existing customers (e.g. account holders or users who have purchased our products) for marketing purposes (e.g. sending email messages about our latest offers and deals). We believe we have a legitimate interest in processing this data for the purpose of promoting our Company’s products. However, you have the right to object to this processing and to be removed from our updates list at any time by following the instructions contained in each email message you receive.
3.3 Information we automatically collect
(a) When you visit the Website, certain information is automatically collected by our server and recorded in log files. This data may include information about the device and browser you are using, your network connection, your IP address, and more. The temporary storage of the IP address is necessary to enable the delivery of the website to the user’s computer. We store the above data to ensure the functionality, security, availability, integrity, and confidentiality of information from random or illegal acts or incidents. The legal basis for the temporary storage of data and log files is Article 6 (1) (f) of the GDPR.
(b) We also automatically collect information using cookies or similar technologies. For more information about cookies, please visit the Website’s Cookie Policy.
4. Who do we share your personal data with?
Your data is exclusively accessed by:
Suppliers of the Company who are required to access data in order to provide their services to us (e.g. courier companies). These suppliers are bound by special confidentiality agreements.
Authorized employees of the Company who are required to access your data (e.g. employees who respond to messages you send through the contact form). All employees of the Company who have access to customer data are bound by special confidentiality agreements.
The Greek Government. Data is shared with the Government to comply with our legal obligations (e.g. tax legislation) or requests from national authorities.
Third-party providers who place cookies. Certain cookies are placed by third parties who work with us to provide their services. Therefore, these partners have access to information collected using these technologies (For more information, visit the Cookies Policy).
5. For how long do we keep your data?https://numascrubs.com/policy-cookies
The duration of your data storage depends on the purpose for which it was collected. Specifically, in the case of filling out the contact form, your data is kept for the time required to process your communication request. In the case of purchasing products, the data we collect is kept for the time required to execute our contract and to fulfill the Company’s tax and other obligations, in accordance with applicable law. Our customers’ contact information is kept for a reasonable period of time for the purpose of sending promotional materials unless you unsubscribe from our mailing list. The data collected for account creation is kept until you submit a request for account deletion.
6. Security measures – Transfer of data outside the EU
Our company takes care to provide all necessary technical and organizational security measures to protect personal data from unauthorized access and leaks at all times. We provide you with the highest level of security both when executing your purchases and when submitting your requests through our website.
Our servers are located within the European Economic Area (EEA). For reasons of efficiency, servers of our partners (e.g. third-party providers placing cookies) may be located outside the EEA. We inform you that data is transferred with sufficient guarantees as provided by the legislation and stored securely.
7. Connection to third-party websites
Our website may contain links, hyperlinks, banners, or tabs that, when clicked, will take you to third-party websites. Please refer to their respective privacy policies, as our company is not responsible for the processing of personal data carried out by these websites.
8. What are your rights with regard to your data?
Our company wants to ensure your ability to apply your rights with regard to your personal data. For this purpose, we inform you that as long as we keep your data, you have the right to exercise your rights free of charge. However, in case your requests are clearly unfounded, excessive, or repetitive, the Company may impose a reasonable fee on you. Specifically, you have the right to request:
- access to your data,
- correction, update, or completion when they are inaccurate or incomplete,
- deletion of them when they are no longer necessary for us according to the
- above-mentioned processing purposes and there is no longer a legal basis for their retention,
- portability of your data when the legal basis for processing is consent or the performance of a contract between us,
- restriction of data processing,
- withdrawal of your consent at any time. The withdrawal of your consent operates for the future without affecting the lawfulness of the processing that relied on your consent before its withdrawal.
- objection to processing when the legal basis for processing is our legitimate interests.
You can apply the above rights by sending an email to hello@numascrubs.com.
Finally, you have the right to lodge a complaint with the supervisory authority, which in Greece is the Hellenic Data Protection Authority (https://www.dpa.gr/), if you believe that your rights have been violated.
9. Amendments to the Privacy Policy
We reserve the right to amend this Policy in compliance with the relevant applicable legislative provisions or whenever we deem it necessary. As for your data, the Policy that is posted at the time of your visit to our Website shall apply. In case of any modifications, we also change the “Last Updated” date at the top of the text.
10. Contact
If you have any questions or comments regarding the protection of your data, please do not hesitate to contact us at the following address. hello@numascrubs.com.
