1. Data Processing Controller
The sole proprietorship under the name ‘’CHRISTINA KONTOVA” is the Data Processing Controller(hereinafter the “Controller”).
You may communicate with the Controller at the following email address email@example.com.
Data Subject:any natural person whose personal data is processed by us or on our behalf.
Personal Data:any information relating to an identified or identifiable natural person, which pertains to the physical, physiological, psychological, emotional or financial status, the cultural or social identity of said natural person.
Processing: processing of personal data (“processing”), is any operation or set of operations which is performed on personal data such as, indicatively, the collection, record-keeping, storage, alteration, analysis, use, association, restriction, erasure or destruction.
Transmission:the access to personal data, for example by allowing access, transmission or publication.
Controller: the person which determines the purpose, the content and the procedure of the processing of personal data.
Processor: the natural or legal person which processes personal data according to the controller’s instructions.
3. The Data that we process
With your consent, we process the following personal data that you provide when you interact with the website and use the services and functions it offers, which are categorized into the data of ordinary visitors of the e-shop and the data of the users of the e-shop, as follows:
a) ORDINARY VISITORS:
- Personal data collected during your navigation in the e-shop:
During your navigation in ckontova, your data are collected based on the use of the e-shop ("usage data") for the purpose of analysis, monitoring and improvement of ckontova and the services she provides. Usage data may include the IP address, the geographic location, the type and version of the navigation tool, the operational system, the source of reference (which page you have reached the website from), the duration of the visit, the page views and the navigation routes of the website, as well as information related to the time, frequency and way of using the website and its services by you.
The aforementioned personal data of the e-shop visitors are limited to the information needed for the smooth operation, security, support of the e-shop and the provision of certain services to its users, as well as the improvement of this e-shop and its services, in accordance with the existing legislation on personal data.
- Communication form:
The visitors of the e-shop who wish to contact us, may fill in the relevant form by clicking on the relevant link “Contact”, providing us with personal data that may include the following: name, email, phone, as well as any personal data that may be included in the field “comment” of the communication form.
The aforementioned personal data shall be solely used for the purpose of our communication with you.
The visitors of the e-shop who wish so, may ask to receive our Newsletter by filling their email in the field «subscribe here» earning 10% discount on their first order. Their email shall be solely used for this purpose. In case they do not wish to keep on receiving our Newsletter, they may ask to be exempted from receiving it by clicking on the link provided for this purpose each time they receive a Newsletter. Should you opt to be deleted from a service or communication, we will try to erase your data as soon as possible, nevertheless, certain time and/or information may be required, prior to processing your request.
Ckontova does not collect or requests the disclosure of personal data of special categories (sensitive personal data) and data of minors, while we don’t address our services to minors.
b) USERS OF THE E-SHOP:
While using the website, personal data are collected and processed in case someone places an order either (i) as “visitor”, namely without having “registered” or (ii) after having “registered” in the e-shop.
In particular, either one places an order as visitor or after registering in the e-shop, various data are collected, which also include personal data and which, according to the displayed relevant form, include the following: Name, Surname, Email, Address, Country, City, Postal Code, Prefecture/Municipality, Phone, TIN, Tax office, Company, Profession.
The aforementioned personal data of the users of ckontova are collected and processed for the conclusion of the agreement and the placement of orders, e.g. the communication with the visitor/subscriber with regard to the stage of the order and generally the provision of information about purchases that have taken place, the delivery of the order on the desired premises, the identification of the visitor/registered user/third party in every case this is deemed necessary, as well as their update about the existing stock in the e-shop.
In case the visitor/subscriber asks for the goods to be delivered to a third party, then the visitor/subscriber is liable to inform and obtain the consent of the third party, who is defined as recipient of the relevant products, to communicate their personal data to the e-shop for the purpose of delivery and bears full responsibility for any claims of the third party against the e-shop.
- Payments data:
In order to complete the purchase, the user is asked to make the payment and then he/she is transferred, depending on their preference, to a safe environment and in particular (a) to Eurobank’s Automated Payment System for crediting their customer’s credit/debit cards or (b) to the safe environment of PayPal, where they enter the required data. Τhe e-shop ckontova shall by no means store the payments data (cards data etc.). All transactions taking place through ckontova are made by using SSL certificate and are therefore encrypted, providing the highest possible security level against interception of personal data.
Upon registering in the e-shop and, more specifically, before submitting their personal data for creating the relevant registration account, the user who wishes so may ask to receive our Newsletter as well as our promotion actions, by selecting the relevant box created for this purpose. In such case, the user’s email shall be used solely for this purpose. The registered user of our e-shop may, if he/she changes his/her mind in the future, ask to be exempted from receiving our Newsletter and promotion actions in the future, by using the relevant choice provided in “MyDashboard”. Should you opt to be deleted from a service or communication, we will try to erase your data as soon as possible, nevertheless certain time and/or information may be required prior to processing your request.
In order to satisfy the requests that you submit via the communication form or/ and to offer you updates, in general or regarding undesirable actions, it is necessary to consent to the processing of the data, which is indicated with an asterisk (*). Without said mandatory data or your consent we are unable to proceed further. On the contrary, the information required in fields without an asterisk indication (*) as well as your consent to receive updates are optional and therefore, if you don’t provide them, there is no consequence.
In any event, even without your prior consent, the Controller may process your data, in order to comply with her obligations under law, regulations and the EU legislation, to exercise her own lawful interests and, in any occasion, pursuant to articles 6 and 9 of the GDPR, as the case may be.
The processing is performed by means of computers as well as hard copies and always entails the implementation of security measures pursuant to the legislation in force.
4. Why and how we process your data
The data is processed for the following purposes:
(i) to handle the requests that you submit via the “Communication Form”. The legal basis for the data processing for this purpose is your consent (article 6 par. 1 a) and article 9 par.2 a) of the GDPR).
(ii) to execute your orders in our e-shop. The legal basis for the data processing for this purpose is the performance of the contract (article 6 par. 1 (b) and article 9 par.2 (a) of the GDPR);
(iii) to handle the reports for undesirable actions that are submitted via the website or the forms. The legal basis for the data processing for these purposes is your consent (article 6 par. 1 a) and article 9 par.2 a) of the GDPR) as well as any public interest (article 9 par.2 (i) of the GDPR) and legal obligation.
Moreover, but only upon your optional consent which is the legal basis for the data processing pursuant to article 6 par. 1 a) of the GDPR:
(iv) in order to receive advertising material (direct marketing) from us – newsletters.
With regard to the email updates, you may remove yourself from the relevant list of recipients at any time, by following the instructions contained in every communication. Should you opt to be deleted from a service or communication, we will try to erase your data as soon as possible, nevertheless certain time and/or information may be required prior to processing your request.
By choosing the appropriate fields in the communication form you provide your consent to the processing of your data for these purposes.
In any event, your data may be subject to process, even without your consent, in order to comply with laws, regulations and the EU legislation (article 6 par. 1 (c) of the GDPR) in order to receive statistical data pertaining to the Website’s use and its proper operation (article 6 par. 1 (f) of the GDPR).
The personal data is entered in our information system in full compliance with the data protection legislation, and their processing is based on the principles of proper practice, legitimacy and transparency.
Data are stored for as long as it is absolutely necessary in order to attain the purposes for which the personal data are processed. In any event, the criteria to determine said period is based on complying with the time limits provided by law and the principles of data minimisation, storage limitation and rational processing of the records.
All data shall be subject to processing in hard copies or via automated means, by ensuring in any case the appropriate level of security and confidentiality.
5. Automatically collected Information and Cookies
Certain type of information is collected automatically, every time you enter our website, as well as through certain emails that we exchange. The automated technologies we use may include, for example, web servers / IP addresses (web server log) and cookies.
Web data servers / IP addresses
The IP address is a number given to your computer each time you connect to the internet. All computers on the internet are identified by their IP addresses, which allow computers and servers to recognize each other and communicate with each other.