1.General

 The sole proprietorship ATHANASIADIS KONSTANTINOS, located at 10 Ethnikis Antistasis Street, P.C. 50200, Ptolemaida, P.C. 50200, Ptolemaida Tax Office 149202607, D.O.Y. Ptolemaida and G.E.M.I. 134051636000 respects the protection of personal data and the privacy of the users of the website www. thecart.gr, which is an electronic commercial store selling products (hereinafter "the Website") and complies with the applicable legislation on the protection of personal data.

In particular, the processing of personal data of users (hereinafter "Users" or "you") is carried out in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (hereinafter the "GDPR"), any other applicable national and European legislation on the protection of personal data and privacy in the electronic communications sector (Law 3471/2006, as amended) and the decisions of the Personal Data Protection Authority (PDA).

With this Policy we would like to explain how we process your personal data when using the Website. Please read it carefully. This Policy has been written in the simplest possible way in order to make it easier for you to understand and decide freely and voluntarily whether you wish to provide your personal data.

2.Who is the controller?

The Data Controller within the meaning of the General Data Protection Regulation 679/2016 is the sole proprietorship ATHANASIADIS KONSTANTINOS, located at 10 Ethnikis Antistasis Street, Ptolemaida, P.C. 50200, P.O.I. 149202607, Ptolemaida Tax Office and G.E.M.I. 134051636000 , email: thecartgr@gmail.com , (hereinafter the "Business" or "We").

3. What kind of data do we collect - What are the purposes and legal bases for processing personal data?

 

3.1 Categories of data

Depending on how you interact with us we process the following categories of personal data:

Identity, contact and address data such as name, telephone number, e-mail address, product delivery address etc.

Financial and transactional data such as order and return details, payment methods, etc.

3.2 Purposes and legal basis for processing

i) When you place an order/purchase, we request and process all information necessary for the execution of the transaction (e.g. product delivery, invoicing, communication). If you do not provide us with this information, the contract between us cannot be concluded. The legal basis for the processing is the performance of the contract between us (Article 6(1)(b) GDPR), to which you become a party by accepting the Terms of Use of the Website before completing the purchase. You can find out and read the relevant Terms here ( https://thecart.gr/terms.php?id=1 ). Furthermore, we retain certain transaction data for purposes of compliance with legislation, e.g. tax legislation, for the period of time stipulated by law. The legal basis for the processing is compliance with our legal obligations (Article 6 (1) (c) GDPR).

(ii) When you wish to subscribe to our newsletter, we only ask you to provide a valid email address. We do not collect any further data beyond your email address. The purpose of the processing is to send you updates on our products and offers. The legal basis for the processing is your consent (Article 6 (1) f. a GDPR), which you provide by clicking on the relevant field before subscribing to our newsletter. You can unsubscribe from our newsletter list at any time by following the instructions contained in each email you receive.

(iii) We may also use the contact details of our existing customers who have purchased our products, and who have already given their consent to us retaining the personal information they provided when placing their order, for marketing purposes (e.g. sending emails about our latest offers and deals). Our Business has a legitimate interest in processing this data for the purpose of promoting its products. However, you have the right to object to this processing and to unsubscribe from our mailing list at any time by following the instructions contained in each email you receive.

3.3 Information we collect automatically

(a) When you visit the Website, certain information is automatically collected by our server and recorded in log files. This data may include information about your device and browser, your network connection, your IP address, etc. The temporary storage of the IP address is necessary to enable delivery of the website to the user's computer. We store the above data to ensure the functionality of the website, security, availability, integrity and confidentiality of the information from accidental or illegal acts or incidents. The legal basis for the temporary storage of data and logs is Article 6 par. 1 f. f' GDPR.

(b) We also collect information automatically by using cookies or similar technologies. For more information about cookies, please visit the Website's Cookies Policy ( https://thecart.gr/terms.php?id=4 )

4. Who do we share your personal data with?

Access to your data is restricted to:

Suppliers of the Company who are required to have access to data in order to provide us with their services (e.g. courier companies). These suppliers are bound by specific confidentiality agreements.

Authorised employees of the Merchant who are required to have access to your data (e.g. employees who respond to messages you send via the contact form). All Merchant employees who have access to customer data are bound by specific confidentiality agreements.

The Greek State. Data is disclosed to the State to comply with our obligations under the law (e.g. tax legislation) or requests from national authorities.

Third party providers that place Cookies. Some Cookies are placed by third parties who partner with us in providing their services. Accordingly, these partners have access to information collected through the use of these technologies (For more information, please visit our Cookies Policy ( https://thecart.gr/terms.php?id=4 )

5. How long do we keep your data?

 

The length of time your data is stored depends on the purpose for which it was collected. In case of purchase of products, the data we collect are kept for the period of time required for the execution of the contract between us and for the fulfilment of the tax and other obligations of the Company, in accordance with the applicable legislation. The contact details of our customers are kept for a reasonable period of time for the purpose of sending informative material for product promotion purposes, unless you submit a request to be removed from our list of recipients.

6.Security measures - Transfer of data outside the EU

The Merchant takes care to provide all necessary technical and organisational security measures to protect personal data from unauthorised access and leakage at all times. We provide you with the highest level of security both when carrying out your purchases and when submitting your requests via our Website.

Our servers are located within the European Economic Area (EEA). For efficiency reasons, servers of our partners (e.g. third party cookie placing providers) may be located outside the EEA. Please be advised that data is transferred with adequate safeguards as required by law and is stored securely.

7.Connection to third party websites

Our Website may have links, hyperlinks, banners or tabs by clicking on which you will be directed to third party websites. Please refer to the respective Privacy Policies, as our Company is not responsible for the processing of personal data carried out by these websites.

8.What are your rights in relation to your data?

Our Firm seeks to ensure that you are able to exercise your legal rights in relation to your personal data. To this end, we inform you that for as long as we hold your data you are entitled to exercise all your statutory rights free of charge. However, in the event that your requests are manifestly unfounded, excessive or repetitive, the Merchant may charge you a reasonable fee. In particular, you have the right to request:

•     access to your data
•     correct, update or complete it when it is inaccurate or incomplete
•     delete them if they are no longer necessary for us in accordance with the above-mentioned processing purposes and there is no longer a legitimate reason for keeping them
•     their portability, where the legal basis of the processing is the consent or performance of the contract between us
•     restriction of data processing
•     withdrawal of your consent at any time. The withdrawal of your consent operates for the future without affecting the lawfulness of the processing based on your consent before its withdrawal.
•     objection to processing where the legal basis for processing is our legitimate interests

You can exercise the above rights by sending an email to: thecartgr@gmail.com

Finally, you have the right to lodge a complaint with the competent Data Protection Authority (https://www.dpa.gr/) if you believe that your rights have been violated.

9.Amendments to the Privacy Policy

We reserve the right to modify this Policy to comply with any applicable legal requirements or whenever we deem it necessary. With respect to your data, the Policy posted at the time of your visit to our Site will apply. In the event of a modification, we will also change the date of the "Last Updated" at the top of the text.

10.Communication.

If you have any questions or comments regarding the protection of your data, please do not hesitate to contact us at: thecartgr@gmail.com