Last updated 09/02/2023
The company Tourtounis Dimitrios – Clothing Trading, respects the protection of personal data and the privacy of users of the website www.numascrubs.com (hereinafter “the Website“) and complies with the applicable legislation on the protection of personal data. Specifically, the processing of users’ personal data (hereinafter “Users” or “You“) is carried out in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (hereinafter “GDPR”), any other applicable national and European legislation on the protection of personal data and privacy in the field of electronic communications (Law 3471/2006, as applicable) and the decisions of the Personal Data Protection Authority (APDPH).
With this Policy, we would like to explain how we process your personal data when using the Website. Please read it carefully. This Policy has been written in the simplest possible way to facilitate your understanding and to allow you to freely and voluntarily decide whether to provide your personal data.
2. Who is the data controller?
The data controller, as defined by the General Data Protection Regulation 679/2016, is the company “Tourtounis Dimitrios – Clothing Trading”, headquartered in Thessaloniki, Address 10th km Old National Road Thessaloniki – Kilkis, postal code 54500, with VAT number 118102833 (hereinafter the “Company” or “We”).
3. What kind of data do we collect – What are the purposes and legal bases for processing personal data?
3.1 Categories of data
Depending on how you interact with us, we process the following categories of personal data:
Identification, communication, and address information such as name, phone number, email address, delivery address, etc.
Financial data and transaction data such as order and return details, payment methods, etc.
Mail information (e.g. when you use the contact form).
3.2 Purposes and Legal Bases of Processing
(c) When you fill out the website contact form, we process data to satisfy your requests by answering your questions and providing information. In this case, the legal basis for processing is your consent (Article 6 (1) (a) GDPR), which you provide by clicking on the relevant field before submitting your inquiry.
(d) When you wish to subscribe to our newsletter, we only ask you to provide a valid email address. We do not collect any further data beyond your email address. The purpose of processing is to send updates regarding our products and offers. The legal basis for processing is your consent (Article 6 (1) (a) GDPR), which you provide by clicking on the relevant field before subscribing to our newsletter. You can unsubscribe from our newsletter list at any time by following the instructions contained in each email message you receive.
(e)We may also use the contact details of our existing customers (e.g. account holders or users who have purchased our products) for marketing purposes (e.g. sending email messages about our latest offers and deals). We believe we have a legitimate interest in processing this data for the purpose of promoting our Company’s products. However, you have the right to object to this processing and to be removed from our updates list at any time by following the instructions contained in each email message you receive.
3.3 Information we automatically collect
(a) When you visit the Website, certain information is automatically collected by our server and recorded in log files. This data may include information about the device and browser you are using, your network connection, your IP address, and more. The temporary storage of the IP address is necessary to enable the delivery of the website to the user’s computer. We store the above data to ensure the functionality, security, availability, integrity, and confidentiality of information from random or illegal acts or incidents. The legal basis for the temporary storage of data and log files is Article 6 (1) (f) of the GDPR.
4. Who do we share your personal data with?
Your data is exclusively accessed by:
Suppliers of the Company who are required to access data in order to provide their services to us (e.g. courier companies). These suppliers are bound by special confidentiality agreements.
Authorized employees of the Company who are required to access your data (e.g. employees who respond to messages you send through the contact form). All employees of the Company who have access to customer data are bound by special confidentiality agreements.
The Greek Government. Data is shared with the Government to comply with our legal obligations (e.g. tax legislation) or requests from national authorities.
Third-party providers who place cookies. Certain cookies are placed by third parties who work with us to provide their services. Therefore, these partners have access to information collected using these technologies (For more information, visit the Cookies Policy).
5. For how long do we keep your data?https://numascrubs.com/policy-cookies
The duration of your data storage depends on the purpose for which it was collected. Specifically, in the case of filling out the contact form, your data is kept for the time required to process your communication request. In the case of purchasing products, the data we collect is kept for the time required to execute our contract and to fulfill the Company’s tax and other obligations, in accordance with applicable law. Our customers’ contact information is kept for a reasonable period of time for the purpose of sending promotional materials unless you unsubscribe from our mailing list. The data collected for account creation is kept until you submit a request for account deletion.
6. Security measures – Transfer of data outside the EU
Our company takes care to provide all necessary technical and organizational security measures to protect personal data from unauthorized access and leaks at all times. We provide you with the highest level of security both when executing your purchases and when submitting your requests through our website.
Our servers are located within the European Economic Area (EEA). For reasons of efficiency, servers of our partners (e.g. third-party providers placing cookies) may be located outside the EEA. We inform you that data is transferred with sufficient guarantees as provided by the legislation and stored securely.
7. Connection to third-party websites
Our website may contain links, hyperlinks, banners, or tabs that, when clicked, will take you to third-party websites. Please refer to their respective privacy policies, as our company is not responsible for the processing of personal data carried out by these websites.
8. What are your rights with regard to your data?
Our company wants to ensure your ability to apply your rights with regard to your personal data. For this purpose, we inform you that as long as we keep your data, you have the right to exercise your rights free of charge. However, in case your requests are clearly unfounded, excessive, or repetitive, the Company may impose a reasonable fee on you. Specifically, you have the right to request:
- access to your data,
- correction, update, or completion when they are inaccurate or incomplete,
- deletion of them when they are no longer necessary for us according to the
- above-mentioned processing purposes and there is no longer a legal basis for their retention,
- portability of your data when the legal basis for processing is consent or the performance of a contract between us,
- restriction of data processing,
- withdrawal of your consent at any time. The withdrawal of your consent operates for the future without affecting the lawfulness of the processing that relied on your consent before its withdrawal.
- objection to processing when the legal basis for processing is our legitimate interests.
You can apply the above rights by sending an email to email@example.com.
Finally, you have the right to lodge a complaint with the supervisory authority, which in Greece is the Hellenic Data Protection Authority (https://www.dpa.gr/), if you believe that your rights have been violated.
We reserve the right to amend this Policy in compliance with the relevant applicable legislative provisions or whenever we deem it necessary. As for your data, the Policy that is posted at the time of your visit to our Website shall apply. In case of any modifications, we also change the “Last Updated” date at the top of the text.
If you have any questions or comments regarding the protection of your data, please do not hesitate to contact us at the following address. firstname.lastname@example.org.