Responsible
for the processing of this website (hereinafter “our website” or
“our website”) www.bexwoman.gr is Haida Vassiliki, owner of the
business with the distinctive title bex woman and the name B & D EPE with
address Kouma 26 , Larissa (hereinafter “our store”). The company’s
activities are clothing and footwear trade.
Our store
collects personal data for the efficient performance of day-to-day business
operations and services and, in some cases, for its compliance with the
requirements of applicable laws and/or regulations.
The Privacy
Policy states our compliance with the Regulation for the Protection of Personal
Data 679/2016 but also our respect for the protection of privacy and security
of personal data
This
Privacy Policy was posted on the company’s website on 1/8/2020, simultaneously
with its publication and design of its current version and supersedes any
previous posting/version. The Privacy Policy applies, in general, to any
natural person who has or intends to have any kind of cooperation with us.
Personal
data collected and legal basis of collection
Personal
data collected from subjects
In certain cases our legitimate interest is the legal basis for processing your personal data, as we collect your Data in a way that is reasonably expected as part of the operation of our business and that does not materially affect your rights, freedom or interests . For example We will use your purchase history to send you or make available personalized offers.
Our store processes and specifically receives, maintains and uses the following categories of personal data:
Your
contact data (name, phone, email, etc.). This data is obtained from you
following your request to contact you. Legal basis of processing is your
consent or our legitimate interest. When issuing our documents we inform you
that we will contact you about our services.
Information
we receive from your use of our services or our partners’ services.
Your
identity data (name, phone, email, VAT number, address, occupation, etc.). This
data is obtained from you, as you declare it. The legal basis of the processing
is the execution of the contract, compliance with tax legislation or other
applicable legislation or the fulfillment of our duty, such as for example to
comply with a court order, with instructions, requests or decisions of a Public
Authority, as well as our legitimate interest to manage and deal with legal or
extrajudicial disputes between us.
Login data
(online identifier). Our store uses Google Analytics during your navigation on
our website. For more information visit: http://www.google.com/analytics/learn/privacy.html
Legal basis
of processing is our legitimate interest in promoting our products and
services.
Our website
occasionally contains links to and from third party websites. We point out that
the websites of these third parties have their own privacy policy, independent
of that of our company for which we bear no responsibility
Through our
website www.bexwoman.gr we collect the name of the interested subjects in the
processing e.g. as well as the email, telephone, comments from the form entitled
“make a reservation” found in each travel program.
Copies of
documents you provide to prove your age or identity where required by law (such
as a copy of a police or student ID).
For example
these copies may include details of your full name, address, date of birth and
your face image (photograph). If you provide a passport, the data will also
include your place of birth, gender and nationality.
Data collected by third parties
In the context of a contract with other companies – Partners, they transmit personal contact and identity data of travelers to us for the processing of services as defined by the relevant legislation. Partners who transmit personal data to us are travel agencies within Greece.
Purpose of personal data processing
We use the information we collect to:
We will
process and serve your request for the provision of a tourist service
the
conclusion of the contract between us, its execution and support, our communication
with you and the issuance of the required tax documents
we send you
information and advertising material about our products and services only with
your prior express consent or based on the legitimate interest
we have,
after purchases of services you have made, which are also the legal basis of
said processing
We may
provide you with personalized and updated services and/or products;
We contact
you to inform you about new services or products that may be of interest to you
if you have completed the “make a reservation” form on our website.
We process
your payment
We will
answer any questions you may have
Technical and organizational measures we have taken
We implement appropriate technical and organizational measures to protect the company and our partners from unauthorized access or alteration, violation or destruction of the personal data in our possession. Specifically:
We control
our data collection, storage and processing practices, including physical
security measures, to protect against unauthorized access to systems and
processes.
Access to
personal information is limited and controlled, and such individuals are
subject to strict contractual obligations of confidentiality.
In the
event that external partners (for maintenance or support purposes) have,
potentially, access to personal data, relevant appendices to the existing
cooperation agreements cover the requirements of the Regulation.
Throughout
the personal data processing cycle (from collection to destruction of personal
data) we take appropriate technical and organizational measures to ensure the
confidentiality, integrity and availability of personal data. We require
similar measures from third parties who handle or process personal data.
Categories of recipients of personal data – with whom we share your personal data
Access to your Data is given to the strictly necessary staff of the Company, who are bound by confidentiality and the companies cooperating with us or third party service providers, who process your Data as Processors on our behalf and in accordance with our orders.
In the fulfillment of the contractual and legal obligations of our company, the execution of a duty, the service of its legitimate interests as well as in the case that our store has received your consent, the recipients of the data belong to the following categories, depending on the services that we have undertaken to offer you:
External
partners of the business (accountants, courier companies, persons who provide
the services on our behalf, advertising companies, website management
companies, lawyers/legal advisors, etc.), who carry out processing on our
behalf in accordance with the legislation on personal data.
Servers
located within the European Union in a completely secure environment, which are
subject to the appropriate regulatory obligation of confidentiality.
Public
authorities (D.O.Y, Independent Public Revenue Authority, Ministries), in order
to comply with the legislation, with a court decision, with instructions,
requests or decisions of a competent Authority.
Judicial
and prosecuting authorities in case of claims or criminal acts.
Credit card
and payment processing companies. Payments are made through Paypal or a secure
environment of a partner financial institution or via bank deposit.
Period of
keeping personal data
TYPE OF PROCESSING
PERIOD OF COMPLIANCE
Billing
documents
According to the applicable tax law
Contact request
6 months from the processing of the request
Booking form
10 days from the date of your request
Newsletter service
Your
declaration of consent for sending a newsletter is kept for as long as the
newsletter is sent to you by the Company and in any case no more than 12 months
from the request to stop sending it.
In the event that the legislation provides for a shorter or longer period of time for keeping personal data, the above duration is reduced or increased accordingly.
In the event that claims or criminal acts are raised before the expiration of the above period, otherwise legal actions are in progress, the relevant period is extended until the issuance of an irrevocable court decision.
At the end of the above retention period, your data will be completely deleted or anonymized, for example by aggregating with other data, so that it can be used in a non-identifiable way for statistical analysis and business planning
In case we rely on our legitimate interest.
In cases
where we process your personal data based on our legitimate interest, you can
ask us to stop for your personal reasons. We must then do so unless we believe
we have a compelling legal reason to continue processing
We process
your Personal Data.
Personal data from children
Our services and website are not directed to children under the age of majority. Our store does not knowingly collect information or personal data from children. In the event that we become aware that we are processing information of a child under the age of 16 without the valid consent of a parent or guardian, we will delete the relevant data.
Your rights
According
to the General Regulation on the Protection of Personal Data (EU 2016/679) you
have the right to submit a complaint to a supervisory authority.
According
to the same Regulation, you have the right to access, correct, delete, limit or
object to the processing and portability of the personal data collected by our
store. In particular, you have the right to confirm whether or not your
personal data is being processed and, if so, to have access to relevant
information and, in each case, to request the restriction of processing. You
have the right to correct inaccurate or complete incomplete personal data by
providing any necessary document from which the need for correction or
completion arises. You have the right on a case-by-case basis to request the
deletion of personal data, provided that our store does not have a legal or
valid reason to retain such data. You have the right on a case-by-case basis to
object to the processing of your personal data based on your legitimate
interest and on a case-by-case basis to receive your personal data in a
structured, commonly used and machine-readable format or to request their
transfer to a third party.
To exercise
your rights, you can contact us in writing via email at info@bexwoman.gr or by
filling out the form you will find here
Exceptionally:
if you wish
to withdraw your consent to send a newsletter, you can do so by selecting the link
“To delete from the “newsletter mailing list” click here”
located at the bottom of each newsletter.
To handle
your requests, we are entitled to request verification of your identity, while
the law provides us with a period of 30 days, or up to 90 days if we have an
excessive load or if it is a complex request.
Cookies Policy
Information
This website uses small files called cookies which help us improve your browsing experience. This describes in detail what cookies are and their function:
Your browsing on this website implies that you provide your consent to the use of cookies as described in this Cookies Policy
If you do not agree with the way we use cookies, you should set your browser accordingly or not use the website.
If you
disable the cookies we use, this may affect your experience when browsing our
website.
This website complies with the provisions of European legislation on cookies.
What are cookies?
Cookies are small files that are stored by your browser on your computer, tablet, mobile phone and generally on your device.
Each cookie contains information such as usually the name of the website it comes from, its “lifetime” (ie how long it will stay on your device), and a value, which is usually a number.
Essentially, cookies allow websites to store various anonymous information such as the visitor’s preferences or whether he has visited the website again.
On this website, cookies are used to make it easier for users to navigate the website, to better adapt it to your interests and needs and to improve its use and functionality.
In addition, cookies are used to compile anonymous traffic statistics. We cannot verify your personal identity from cookies. Cookies are stored exclusively on your own device (computer, tablet, mobile phone) and the website does not maintain any file or database with your personal data.
How cookies are used on this website
When you visit our website, the following types of cookies will be created on your device, as long as you accept them either from the relevant prompt or through your browser settings.
Absolutely necessary
Strictly necessary cookies are essential for the proper functioning of the website, they allow you to browse and use its functions. These cookies do not recognize your individual identity. Without these cookies, we cannot offer efficient operation of our website.
Targeting and advertising cookies
These cookies
are used to provide content, which best suits you and your interests. They may
be used to deliver targeted advertising or measure the effectiveness of an
advertising campaign. Included are the following:
Google
Analytics
Google
Adwords Remarketing tag
Facebook
pixels
Disable
cookies in your browser
Usually,
web browsers are set to accept all cookies. If you wish, it is possible to set
your browser not to accept cookies from a specific website, to be notified when
it stores cookies or not to accept cookies at all.
However, if
you choose to disable cookies for our website, we may not be able to properly
provide you with all the features offered on our website.
What is the
applicable law when we process your Data?
Applicable Law is Greek Law, as formulated in accordance with the General Regulation for the Protection of Personal Data 2016/679/EU, and in general the current national and European legislative and regulatory framework for the protection of personal data.
Competent courts for any arising disputes related to your Data are the Courts of Larissa.
Where can you go if we breach the applicable law to protect your Personal Data?
You have
the right to submit a complaint to the Personal Data Protection Authority
(postal address Kifisias 1-3, P.K. 115 23, Athens, tel. 210. 6475600, e-mail
address (e-mail) contact@dpa.gr ), if you consider that the processing of your
Personal Data violates the applicable national and regulatory legal framework for
the protection of personal data.