1 Introduction
This Privacy Policy states how LIVARDAS S.A. handles and processes information that can be used for the direct or indirect identification of an individual ("Personal Data"), collecting from every visitor/user of its Website and when someone uses the contact form or order form. In any case, LIVARDAS S.A. has the right to change the terms of protection of personal data provided for visitors/users information and in accordance with the present or future legislation. If a visitor/user does not agree with the terms of protection of personal data provided in this section, must not use the services of livardas.gr. You can browse our online store without giving any personal information. Your personal information will be requested only when you want to contact with LIVARDAS S.A. or to submit an order.
Our website is in compliance with General Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the base of free movement of such data (“GDPR Regulation), which is a directly binding legislative act. The GDPR Regulation creates new rights for natural persons and strengthens some rights that already existed under the directive 95/46 / EC. Directive 95/46 / EC will be repealed on May 25, 2018, when the GDPR Regulation enters into force. In addition, our website is in full compliance with Law 4624/2019 (Government Gazette A137/29-8-2019), which has entered into force in Greece for the Protection of Personal Data.
In the text of this policy, "User" means the person who uses the services of the website of LIVARDAS S.A., "Visitor" means the person who visits the website (www.livardas.gr), and "Customer" means the persons who contract with LIVARDAS S.A. to purchase its products.
Any processing of personal data performed by LIVARDAS SA conducted in such a way as to ensure its confidentiality. All information is stored securely and can only be accessed by authorized personnel. LIVARDAS SA implements and develops the necessary technical and organizational measures to protect the Personal Data of Users, Visitors and Customers (all of them understood as personal data "Subject") from unauthorized or illegal processing and use, and against possible loss, destruction, damage, theft or illegal access.
2. Collection and Use of Personal Data
2.1. The legal basis of processing personal data
LIVARDAS SA collects only those personal data that are necessary in order to process your requests. Whenever additional, optional information is sought, you will be informed accordingly when collecting this data and we will first ask for your consent to process it. The current legislation allows us to process personal data only if we have the legal basis for processing. Therefore, when we process your personal data, we rely on one of the following processing cases:
Consent: We may request your consent to process your personal data. Your data will only be processed in this way, only if you explicitly agree with it {Article 6 (1a) of the GDPR}.
Performance of contract: In cases where the processing of your personal data is necessary for the fulfillment of our obligations based on the contract concluded between us. (Article 6 paragraph 1b of the GDPR Regulation).
Legal obligation: This is the case where we are obliged to process your personal data in order to comply with a legal obligation, as an indication: a) to keep records for tax purposes, b) to provide information to a public service, c) to comply with the requirements of a legislative or regulatory provision of a court decision {Article 6 (1c) of the GDPR Regulation}.
Protecting your vital interests: In case the processing of your personal data is necessary to protect your vital interests {Article 6 (1d) of the GDPR}.
Fulfillment of duty performed in the public interest or in the exercise of public authority: This occurs in cases where the processing of your personal data is necessary for the performance of a duty performed in the public interest {Article 6 (1e) of the GDPR Regulation}.
Legal interest: We may process your personal data in cases where this processing is a legal interest of our company during the execution of a lawful activity, in order to ensure the continuity of this activity. This processing, of course, will not go beyond your interests, freedoms and fundamental rights {Article 6 (1f) of the GDPR}.
LIVARDAS S.A. does not process your personal data, such as personal data relating to a person's race, nationality, political beliefs, trade union affiliation, religious beliefs, philosophical beliefs, physical or mental health, his sex life and orientation, data on criminal convictions and criminal offenses. The following sections cover the specifics of each of the abovementioned groups from which personal data is collected.
2.2. Data Collection of Subject
LIVARDAS S.A. collects the personal data, from the customer service call center, its External Partners, as well as from its website. The following sections cover the Subjects whose personal data is collected. LIVARDAS SA can collect and process personal data of Users through the website’s contact form and Customers through the order form and its External Partners. In case required by the current legal framework, we will request your explicit consent in order to process your personal data, as they are collected by LIVARDAS SA.
Your personal data processed by LIVARDAS SA are the following:
• Personal Data of Users: Name, landline telephone number, mobile phone number, home address, IP address, e-mail address (email).
• Personal Visitor Data: IP address, cookies
• Personal Customer Data: Name, home address, shipping address, Passport Number, landline number, mobile phone number and email address
3. Data Transmission
LIVARDAS SA does not disclose your personal data to third parties outside the European Union in countries where there is no appropriate data protection regime. However, in case such a data transfer will need to take place, LIVARDAS SA will take all possible measures to ensure that your data is treated securely as within the EU / EEA and in accordance with this Policy and applicable legislation. In addition, LIVARDAS SA will update the current Policy, in order to cover the cross-border data transfer and the related safeguards for the privacy of its platform users.
4. Data retention period
LIVARDAS SA will not retain the data of the Subjects beyond the time necessary for the fulfillment of the purposes for which they have been collected or as required by the current legislation. In case of concluding a contract with LIVARDAS SA, we keep personal data of costumers until the completion (according to the law) of a general limitation period of the requirements, that is, for a period of up to twenty years, from the termination of the relevant agreements. If, by the end of the above period, legal proceedings are in progress with LIVARDAS SA that directly or indirectly concern the Customers, the above-mentioned time of data collection will be extended until the issuance of an irrevocable judicial decision. In some cases, specific personal information may be retained beyond this time, due to possible legal obligations, legal interests of LIVARDAS SA. etc. such cases are, for example, those related to each branch of law (tax, civil, criminal, etc.). In case of non-establishment of the transaction relationship, the personal data of the User or Customer will be kept for a period of up to five (5) years from their collection. In case a shorter or longer data retention period is provided by law, the above data retention time will be reduced or increased accordingly. LIVARDAS SA can collect, record and process the Visitors data of its website. We may record your IP address and use cookies.
5. Use of the Website
According to the more specific provisions of article 8 of the Regulation, minors under the age of fifteen (15) are prohibited from disclosing their personal data to LIVARDAS S.A. through its website, without the prior consent of their guardian. We ask these people not to submit information to us. In the event that the Users of the website are included in the above category and continue to disclose their personal data to us through our website, it will be considered by LIVARDAS SA. that these persons have received the consent of their guardian.
6. Rights of Data Subject
The new GDPR Regulation gives you the following rights regarding the processing of your personal data:
Right of Access: You can request access to your personal data. This gives you the opportunity to receive a copy/copies of your personal data maintained by LIVARDAS SA.
Right of Correction: You can request to correct your personal data. In this way you are given the opportunity to correct any incomplete or inaccurate data maintained by LIVARDAS SA. In this case we will need to verify the accuracy of the new data that you will provide us.
Right of Deletion: You can request the deletion of your personal data. This allows you to request that we delete or remove personal data in the event that there is no reason to continue processing it.
Right to Restrict Processing: You can request a restriction on the processing of your personal data.
Right of Objection: You may object to the processing of your personal data, at any time, in cases where the processing of your data is based on the performance of a duty performed in the public interest or in the exercise of public authority (indent e of paragraph 1 of Article 6 of the Regulation), or if the processing serves the purposes of legal interests of LIVARDAS SA. or a third party (indent of paragraph 1 of Rule 6 of the Rules of Procedure).
Right to Data Portability: You can request the transfer of your personal data to you or to third parties. We will provide your personal data to you or to a third party of your choice, in a widely used, electronically readable form. Please note that this right only applies to automated information that you originally gave us your consent to use or whenever we used this information to execute a contract with you.
Right to Withdraw Consent: You have the right towithdraw your consent at any time, in cases where you have already given your consent to the processing of your personal data. However, this will not affect the legality of any processing that took place prior to the withdrawal of your consent. If you revoke your consent, LIVARDAS SA may not be able to offer you some of its products or services. You will be informed about this at the time of submitting your request.
Non automatic decision-making: Automatic decision making occurs when an electronic system uses personal data to make a decision without human intervention. In this case you have the right not to submit to decisions made solely through automated processing including profile training that produces legal results that concern you or that significantly affect you in a similar way, unless you give us your consent, or it is necessary for the conclusion or execution of a contract between us or if otherwise permitted by law. You also have the right to challenge decisions made about you through the above procedure.
LIVARDAS SA respects the rights you have to your personal data and makes it easier for you to exercise them. You can address any request, question or complaint about your personal data by calling 2310 463784 or by email at georgia.livarda@livardas.gr.
In any case, if you feel that the protection of your personal data has been violated in any way, you have the right to submit a written complaint to the Hellenic Personal Data Protection Authority (Kifissias 1-3, PC 11523, Athens) or electronically (www.dpa.gr).