Personal data protection policy

The company "DASKALAKIS STELIOS" (hereinafter referred to as "the company", "our company", "we", "us") recognizes that the security of your personal data is a particularly important issue. We have developed this Personal Data Protection Policy, in accordance with Article 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data, as well as the free movement of such data («GDPR»), in order to explain to you our practices regarding the security of the information we collect when you visit our website (https://www.booknpaper.gr), but also our practices regarding the personal data we collect from you when you use our services.

We encourage you to read this Data Protection Policy carefully and check the "I agree" option where prompted, only if you understand and agree to its individual terms.

Please read this Privacy Policy regularly to know how your data is protected.

1. Controller – Contact details

Our company "DASKALAKIS STELIOS", with number GEMI 0021932950000, based in Rethymnon, Crete, on Bosporou Street, no. 6 (Great Gate) and legally represented, is the controller of the personal information we collect from you.

For general information you can contact us at the e-mail address daskalakisstelios@gmail.com, by phone at: 28310-24640 or by sending a postal letter to the above address.

2. Access to your data

Only the competent employees of our company have access to your personal data on a case-by-case basis. Your personal data will be used exclusively for the purpose stated at each time and the information will not be disclosed or sold to third parties for other unrelated purposes.

For some processing we cooperate with third parties, to whom we transfer some of your data or who themselves have access to your data through our website. This is done only to provide you with our services. You will find who has access to your personal data on a case-by-case basis and for certain processing, as detailed below.

3. What information we collect from you

in most cases we collect data directly from you through our websites. Data collected:

  • By registering on our website.
  • Upon completion of an order for a product through our website.
  • In any communication you may have with us (through the above-mentioned methods) for any issue (e.g. providing information about an order in progress, resolving issues that may have arisen during our cooperation, etc.).

However, there are cases in which we collect information (e.g. using cookies to facilitate your navigation and understand how you use our website).

The truth and accuracy of the data you provide to us is solely your responsibility. The user of our website is responsible for the inaccuracy or untruthfulness of said data as well as for the damages that may be caused. Our company reserves the right to cancel relations with said user for the above reasons.

The purpose and description of the activities involving the processing of your data are detailed below:

A. Navigating the Website

When entering our website, the following are automatically sent by the browser you are using to the forwarder of our website without any action on your part:

  • When entering our website, the following are automatically sent by the browser you are using to the forwarder of our website without any action on your part:
  • the date and time of access,
  • the name and URL of the requested file,
  • the website from which the access was made (referrer-URL),
  • the browser you use, the operating system of your computer that has access to the internet, as well as the name of the access provider.

All of the above is temporarily stored for processing the session in a log file and then deleted automatically.

The collection of information concerning your connection is carried out in order to ensure the correct creation of a connection, to guarantee the smooth and comfortable use of our website as well as for the purposes of evaluating the security and stability of the system.

The legal basis for processing this data is Article 6 para. 1 para. f of the GDPR, which allows us to process data when this is necessary to secure our legal interests.

B. Create a personal account on our website

The purpose of collecting your personal information is to provide you with personalized services and the ability to manage your account. When you register as a user, you will be able to see your purchase history at any time and have your information saved for each new purchase you wish to make.

The legal basis for processing in this case is your consent in accordance with article 6 par. 1 para. a' of the GDPR.

For your registration on our website and if you wish, you can provide us with contact information, i.e. your name, your address and postal code, your e-mail, your telephone.

Once you make a purchase we will process the following data:

  • purchase history

We will use your personal data above for as long as you keep your account, or up to five years, at which point we will ask for your consent again, unless it is information that we keep for a different reason (eg keeping details complete purchase for tax reasons).

You have the right to terminate your account at any time. In this case your personal information will be deleted, with the exception of cases where we will retain your data for the period required by the tax authorities or there are pending and/or legal disputes between us arising from a sales contract.

C. Making purchases online or from our physical store

We use the information you provide us to perform and complete the sale of products through our website. We also use your personal information to inform you about the status of your order or about any product returns. Furthermore, we will use your data to check your payments, but also to manage complaints and warranty issues regarding the products you have purchased.

In the case of purchasing products or services directly from our physical store, we do not register your details, with the exception of cases where you request the issuance of an invoice. In this case, only the information necessary for the issuance of the tax document is entered.

The legal basis for processing is Article 6 para. 1 para. b of the GDPR, as the collection of information is carried out for the purpose of executing a sales contract.

The legal basis for processing is Article 6 para. 1 para. b of the GDPR, as the collection of information is carried out for the purpose of executing a sales contract.

1. Contact data, such as name, address, email, phone

  • Order history.

2. If you are a registered user of our website, we will process the personal information you have provided to us during your registration.

As long as you make purchases through our physical store, we do not keep any customer details unless they request an invoice. In this case, we process name, VAT number, D.O.Y., seat and occupation.

Tax data and documents will be kept by our company for a period of twelve (12) years, to fulfill tax obligations.

D. Cookies

Cookies are small files with information that are sent to your computer, mobile phone or other devices when you visit a website and serve to recognize your device on subsequent visits. These types of files perform various functions, such as remembering your preferences and the products you have selected, helping to improve your navigation on the website and trying to ensure that the advertisements or offers you see online are relevant to your interests.

Cookies do not cause damage to users' computers, nor to the files stored on them. In case you wish to prevent the installation of new cookies or to delete existing ones, follow the procedure described in detail below.

We remind you, however, that disabling browsing cookies or functional cookies may prevent our website from working properly and/or limit the services we offer.

Categories of Cookies

Our website uses various categories of cookies that are either installed and managed by our company or installed and managed by third parties in accordance with their own privacy policy and independently of our control, as well as similar technologies, each with different functions.

We recommend that you change the settings in your browser so that cookies are not stored on your computer without your express consent.

We use the following categories of cookies:

  • Browsing Cookies (Necessary Cookies): These cookies allow our website to function properly. If you are a registered user these cookies recognize you allowing you to access the services offered to our registered users. Browsing cookies are necessary for the operation of our website.
  • Λειτουργικά Cookies: These cookies allow our website to recognize you each time you visit it. If you have added products to your Cart and closed the browser tabs and not the page without completing your purchase and without removing the products from your Cart, these cookies allow you to continue shopping the next time you visit our website (within a limited time period) by finding your selected products in your Cart. Functional cookies are not necessary for the operation of the website, but they improve the quality of browsing on it.
  • Analytics Cookies: These cookies are used to collect data in an anonymous and aggregated form and to carry out statistical analyzes related to the way users browse our website. Our Company processes the results of these analyzes anonymously and exclusively for statistical reasons.
  • Advertising Cookies: These cookies are used to profile users in order to send advertising messages based on their preferences during their visit to our website or to improve their browsing: during your browsing on our website these cookies they are used to show you products that may be of interest to you or similar products to those you have already seen.

You can prevent the installation of cookies that record the above information regarding navigation on our website through the corresponding setting of your browser program. However, in this case, it may not be possible to use all the functions of our website.

The purpose of collecting your personal data through cookies is to analyze your usage behavior while browsing our website. The evaluation of usage behavior includes in particular the areas of the website you visit and which links you activate there.

The legal basis for this processing is our legitimate interest based on article 6 par. 1 point f of the GDPR. As long as you have provided your relevant consent (e.g. to receive electronic newsletters) the legal basis for processing is your consent based on Article 6 para. 1 para. a GDPR. The processing of the data of existing customers for advertising purposes of our company is perceived as a legitimate interest of our company.

E. Online Marketing and Advertising

When you visit the website www.booknpaper.gr we use the Google Analytics service to collect log files and details about your browsing on our website

These are:

  • the IP address of the internet-enabled device that made the request to access the website;
  • the date and time of access,
  • the name and address (URL) of the requested file,
  • the website/application through which access was made possible (referrer-URL),
  • the browser you use, the operating system of your computer that has access to the internet, as well as the name of the access provider (access provider) to our website's forwarder and are stored in a log file.
  • the operating system of your mobile device, if you visit our website via a mobile device, its type and its settings
  • the redirecting website (the website that brought you to ours)
  • actions you take on our website (eg sections you visit while browsing it)

We may collect information about the precise location of your mobile device using geolocation and technologies such as GPS (global positioning system), wi-fi (wireless local area network), Bluetooth or your proximity to a cell site (cell tower proximity ). Most mobile devices and browsers provide you with the ability to revoke the permission you have given us to collect this information, using your device settings or your browser itself.

All the above information is processed in a way that does not allow your identification (anonymized).

The above data is stored for marketing purposes for a period of 5 years and then deleted automatically. Geolocation data is deleted the moment you stop using our website.

F. Contact – Customer Service

In every communication you make with our store, whether for general questions about our company or for clarifications about our products and services, we collect and process the information you give us in order to respond to your requests.

The legal basis for the above processing is article 6 par. 1 para. f of the GDPR, i.e. the legitimate interest of our company.

The information we collect is limited solely to that which is necessary for us to be able to contact you; your name, your telephone number and your e-mail, as well as the content of the letters or e-mails you have sent us. We use this information to respond to your inquiries and keep a record of our communication with you for a period of six months from your last communication with us.

4. Transmission of data to third parties

Your personal data is transmitted to third parties, only for the provision of the above services to you. Particularly:

To make purchases from our online store, you pay with a credit or debit card. Our website in no way stores credit card data, which you enter when submitting your order. Specifically, before any transaction is approved, you are transferred through a secure online environment that uses credit card clearing technology under the responsibility of VIVA WALLET. This practically means that the credit/debit card details you enter are not visible and are not used by us.

Finally, for the shipment of the products, we cooperate with the courier company with the name "COURIER CENTER".

To these companies we exclusively transmit the data required for the dispatch and delivery of the orders you have made to you.

You retain the right to object to data processing for the stated purposes, which you can exercise at any time, free of charge and with effect for the future, by contacting us at the contact details in paragraph 1.

5. Links to other websites

Our website contains links to and from the websites of our partners, advertisers and other third parties, which are not covered by this Policy. We encourage you to first review the privacy policy of the websites you visit before entering your personal data on them.

6. Your Rights

Regardless of the purpose or legal basis on which we process your data, you retain the following rights:

Right to be informed: You retain the right to be informed clearly, transparently and in an understandable manner about how we use your personal data and about your rights regarding its collection and processing.

Right of access: You retain the right to request at any time that we inform you if we are processing your data. If we do process your personal information, you can ask to be informed about the purpose of the processing, the type of your data that we keep, if it is transmitted to which third parties and who they are, the period of time for which we store it, if it is automatically downloaded decisions, but also for your other rights, such as the right to correct, delete data, restrict processing and submit a complaint to the Personal Data Protection Authority.

Right to rectification: If you find that there is an error in your data you can submit a request to us to correct it (e.g. correct your name or inform you of any change of address). It should be noted that registered users of our website can modify the information they provide us by referring to the corresponding section of our website. In any case, by providing your personal information to us, you warrant that it is true and accurate and agree to notify us of any changes to it. The sole responsibility for any losses or damages of any nature caused to our website or to any third party, due to filling in incorrect, inaccurate or incomplete information in the registration forms, is borne by the user. Please provide only your own personal data, and not third party data.

Right to erasure/right to be forgotten: At any time you wish, you can request that we delete your data if it is no longer necessary for the aforementioned processing purposes.

However, you may not be able to exercise this right if:

  • There is a pending dispute or legal dispute with our company.
  • Your purchase has not yet been shipped.
  • You owe money to our company.
  • These are tax data which the company is obliged to keep for a period of twelve (12) years.

Transfer right: You can ask us to send you the data you have provided us in a human-readable format or to pass it on to a third party or controller that you indicate to us.

Right to restrict processing: You retain the right to request the restriction of the processing of your data for as long as the examination of your objections to the processing is pending.

Right to object:  As mentioned above, you can object to the processing of your data or withdraw the consent you have given us. In this case, we will immediately stop processing your data, provided that there are no other compelling and legitimate reasons that override your right.

7. Right of complaint to the Personal Data Protection Authority

You have the right to file a complaint with the competent data protection supervisory authority if you consider that the processing of your personal data violates the applicable national and regulatory framework law on the protection of personal data. In Greece, the competent supervisory authority is the Personal Data Protection Authority (Address: Kifissias 1-3, Athens / www.dpa.gr, tel. 210-6475600).

8. Amendments to this Personal Data Protection Policy

In the event that we modify this Policy, we will make sure to publish it in a prominent place on our website.

For any issue related to the processing of your personal data and the exercise of your rights, you can contact us by phone at 28310-24640 or by email at daskalakisstelios@gmail.com with the subject "Personal Data".

Update date: 01/12/2022.