The Protection of your personal data is important to us!
Devote some time to read the present Privacy Policy and be informed about the way with which the company entitled “ ALOE VERA–HELLAS LTD” and with the distinctive title “ALOE VERA” that headquarters in the industrial area of Heraklion in Crete with the phone number 2810381818 and e-mail contact address info@aloevera–hellas.gr from now on the “Company “ or “we” or “us”), functioning as the person in charge of processing, collecting, storing, using and processing your personal data when you visit, register or use the website of the company (from now on the “Webpage”») as the person in charge of processing, as well as when you make transactions with our real shops.
The present Privacy Policy also describes the way of use, sharing and protection of your personal data, the choices that you have concerning your personal data, as well as how you can communicate with us.
For questions regarding the present Privacy Policy and every issue related with the process of your data and the exercise of your rights, you can address to the officer in charge of protecting data (DPO) of the company in the address industrial area of Heraklion in Crete or in the address of the e-mail (email) info@aloevera–hellas.gr
www.aloevera-hellas.gr comprises the webpage of the Company where the electronic shop of exposure and sale of the products of the Company from which you can purchase our products.
The term “personal data”, refers to information of an individual, such as full name, postal address, e-mail address, contact phone number e.t.c., which define or can define your identity from now on “Personal Data or Data”.
Every action or series of actions that takes place with or without the use of automated means, in personal data or private data sets, such as the collection, entry, organization, structure, storage, the adjustment or the change, recovery, the information search, the use, disclosure by transmission, dissemination or any other form of availability, the correlation or the combination, the limitation, the deletion or the destruction.
The grant of the data to the company can be necessary so that the purposes that are defined in the present Privacy Police be achieved or it can be optional.
The obligatory or optional nature of the grant of the data is highlighted with an asterisk (*) next to the obligatory personal data.
If you refuse to grant the data that is highlighted as obligatory in the webpage, it will be impossible the basic purpose of the collection of specific data to be achieved and might for example be impossible for the company to complete the selling of the products that are available in the webpage.
The grant οf additional data to the company, besides those that are highlighted as obligatory, is optional and has no consequences related to the basic purposes of collecting data but its grant serves in the optimization of the quality of the offered services.
We collect only your necessary data, which is suitable and absolutely clear for the purpose that they are intended. This data include the following:
Data during the creation of a user account in the webpage
– Obligatory: e-mail address (e-mail)*, password (login password)*
– Optional: name, surname, sex, date of birth, postal address, phone number.
Data from your transactions with us, either through our real shops or through our e-shop.
For example, we collect notes from our conversations with us, details related with any complaints or comments you make, details related with the purchases that you make, products that were added in your cart or were removed from it,, a list of products that you wish to purchase (wish list), redemption of coupons, websites that you visit and how and when you contact us.
Interest and purchase preferences that help us suggest specific products and services that interest you.
For example, in which products you show us your preference so as to receive a personalized offer from us.
We will ask and use only the data that we collected to suggest products or services of your interest and improve even more the experience of your purchases with us. Of course it is up to you to share such data with us.
Data of visiting our website or other websites that you browsed before ours.
Information that is collected from the use of cookies in your browser programme.
Learn more about the way of using cookies here.
Copies of the documents that you provide us with to prove your age or your identity when the law demands it (such as a copy of your ID or your student ID ).
For example, these copies can include details about your full name, your address, your date of birth, as well as the photo of your face (photograph). If you provide us with a passport, the data will also include the date of birth, the sex and your nationality.
Payment information
Your comments and the reviews of our products.
To offer the best possible experience of the website, we collect technical information related with your connection to the internet and the web browser, as well as the country code and the phone number where your computer is located, the websites that appear during your visits, the advertisements in which you click and any other search terms you logged in. Learn more about it.
The user name of the social networking media, if you interact with us through these channels to help us answer to the questions or your comments.
CHILDREN
We comply with the legislation and do not allow children to register in the website when they are under 16 years old. We will ask for the parent’s consent for the children that participate in the experience and events of the Company.
We want to offer the best possible experience during your purchases. To achieve this it is essential that we obtain a full picture of you, combing the data that we have collected. Then we use your data to make offers about our products that might interest you.
The legislation about the protection of your personal data allows us the things above in the framework of our legal interest and the need to understand our customers so as to provide them with a high level or service.
Of course, whenever you wish to change the way we use you data, you will find details in the sections 14 & 15 “What are your rights” and “How you can exercise your rights” below.
Remember, if you choose not to share your data with us or refuse some contact rights, we might not be able to provide some services that you have asked. For example, if you asked us to inform you when a product will be available again, we cannot serve you if you have withdrawn your general consent to receive information from us.
Finally, we inform you that the processing of your data takes place either by a specially authorized personnel of the company, or through informatics systems and electronic devices from the company and by exception by third parties that having been conventionally bound to the compliance of confidentiality and the protection of your data, carry out work that is essential for achieving the purposes that are strictly connected with the use of our websites, its services and the sale of products through websites. You will find related Information in section 9 “Who are the receivers of our data? How is your data shared?”
Below you will find details about how we use your data and why:
For the provision of data about the websites, the Apps and the services you ask for
Product orders: The company processes your data in order to fulfill its conventional relationship, to process the product, to provide customer services, to comply with legal obligations, to contradict, raise or exercise legal demands. If we do not collect your data during the completion of your order by our real shop or by our e-shop, we will not be able to process your order and comply with our legal obligations. It might be necessary your data to be transferred to third parties for the supply or the delivery of the product you have ordered. In addition, we can keep your data for a reasonable period of time in order to fulfill our conventional obligations, such as return of products as the related legislation states.
Creation of user account: The Company processes your data in order to offer you the account functions and make the purchase of products.
Contact: The company uses your data to answer to queries/questions that you submit, refund requests or/and complaints. The information that you share with us, enables us to manage your requests and answer to you with the best possible way. We can also keep a file of your questions/requests to us so as to respond better to any future contact. We do this based on our conventional obligations to you, our legal obligations as well as our legal interests so as to provide the best possible service and be able to improve our services based on your personal experience .
Sometimes, we will need to share your data with a third party that offers a service (such as courier delivery or a technician that visits your house ). Without sharing your personal data, we wouldn’t have the ability to satisfy your request. More information about the way we share your personal data with thirty parties follows.
For sharing information related with the products, the services and our events, as well as other promotion purposes.
Dispatch of a newsletter (newsletter)/offers: With your consent, we will use your personal data, the preference and the data of your transactions to inform you through e-mail, the internet, mobile phone or/and through social networking media about products and services, including personalized /individualized offers, discounts, e.t.c.. Of course you have the ability to recall this consent any time.
Participation in competitions: The Company processes your data, in case you wish to participate in competitions that it conducts, to inform you if you are the winner of the competition and to deliver your present.
For the function, improvement and maintenance of the business activity, the products and our services
Development and improvement of the systems and services about the products we offer to you. We do this based on our legal interests.
We want to offer you offers and suggestions that are related with your interests. To help us form a better and more general understanding of you as a customer, we combine your personal data that was collected in our relationship, for example the history of your purchases in our real shops as well as our e-shop. For this reason, we also combine the data that we collect directly from you with the data that we receive by third parties to which you have granted your consent to transfer this data to us. For example, combining this data, will help us to adjust your experience and to decide which inspiration or content you will share. We also use anonymous data from the history of the customers’ purchase to spot the trends in areas of the country. This can then lead to which products appear in specific shops.
To be able to view the most interesting content in our website, we will use the data that we keep for your favourite products. This takes place based on your consent about accepting cookies in your device. For example, we might show a list of products that you looked at recently or offer recommendations based on your purchase history and any other data you have shared with us.
To send you search and evaluation requests in order to improve our services. These messages will not include advertising content and do not demand previous consent when they are sent with an e-mail or with a text message (SMS). It is our legal interest to do so, as it helps our products and service be more related with you. Of course, you are free to refuse to receive requests from us any time, informing about your preferences in your internet account.
For the protection of rights, properties or safety of us and third parties
Protection of your account by fraud and other illegal activities: This includes the use of your data for the maintenance, update and protection of your account. We also watch your browsing activity with us and we spot and resolve quickly any possible problems and protect the integrity of our website. All the above comprise part of our legal interest. For example, we check your password when you login and we use an automated monitoring of IP address to locate any possible fake logins by unexpected locations.
Process of payments and prevention of fraudulent transactions: we do this based on our legal business interests. It also helps in the protections of our customers by fraud.
For our compliance with our obligations that stem from the law
To comply with our conventional or legal obligations to exchange data with the enforcement of the law. For example, after a court decision for the exchange of data with court services.
To send you contacts that are demanded by law or that are essential to inform you about the changes in the services we provide you with. For example, notificationsa about privacy warning, notifications about the recall of a product and legally demanded information related with your orders. These service messages will not include advertising content and do not demand previous consent when they are sent with e-mail or text message (SMS). If we do not use your personal data for these reasons, we cannot comply with our legal obligations.
We collect your data for the purposes of the offered products or/and service of our company and especially for:
The legislation about the protection of the data defines the different reasons for which a company can collect and process your personal data, among which: the terms of our conventional relationship, your consent wherever it is demanded. For example, when you choose to receive a newsletter. During the collection of your personal data, we will always inform you which data is essential in relation to a specific service.
The obligations of the company that originate the law (e.g. tax legislation, legislation about e-commerce e.t.c.)
The έννομο interest of our company. In specific cases, we collect your data in a way that is εύλογα expected as part of the functions of our business and does not basically affect your rights, freedom or interests.μας και που δεν επηρεάζει ουσιαστικά τα δικαιώματά σας, την ελευθερία ή τα συμφέροντά σας. For example:
– We will use the history of your purchases to send you or provide you with personalized offers.
– We also combine the history of the purchases of many customers to locate trends and secure that we can keep up with the demand in the market or develop new products.
Access to your data has only the absolutely necessary personnel of the company, which is committed to comply with confidentiality and the partnered businesses with us or third party providers that process your data as executors on our behalf and according to our orders.
Sharing of data by the company
The company shares your data with:
Third party service providers that process personal data on behalf of the company, for example (are mentioned indicatively) for the process of credit cards and payments, transfers and deliveries, hospitality, management and preservation of our data, email delivery, research and analysis, management of promoting actions of the brand and the products, Google, Facebook, as well as the management of specific services and data. When we use third party services we sign contracts that oblige them to implement proper technical and organizational measures for the protection of your personal data.
Other third parties, to the point that is demanded for the following reasons ς: (i) compliance with a state request, court decision or current law in effect, (ii) prevention of illegal use of the website or violations of the terms of use of the website and our policies, (iii)our protection from claims by third parties, and (iv) contribution to the prevention or search of cases of fraud (π.χ. forgery)
To other third parties when you have given your consent
Sharing from you
When you use some data from social networking media in our website, you can create a public profile which includes information like the user name, profile photo and city. You can also share the content with your friends or the general public, including information about your interaction with the company. We encourage you to use the tools that we offer you for the management of sharing in the social networking media of the company with a view to checking the information that you make available through the data of the social networking media of the company.
What follows is the policy that we follow with those that we share your data according to the above:
We offer only the information that is necessary for execution of specific services.
They can use your data only for the specific purposes that we define in the contract with them.
We collaborate closely with them to ensure that your privacy is respected and protected any time.
If we stop using their services, any of the data that you have will be deleted or will be made anonymous..
For more information concerning the sharing of your data to third parties please contact the officer in charge of the protection of data of our company.
The executors of the process on our behalf have agreed and are conventionally bound with the company:
to keep confidentiality,
not to send to third parties your data without the permission of the company
to receive proper safety measures,
to comply with the legal framework for the protection of personal data and especially the Regulation 979/2016/ΕΕ (or else GDPR).
The personal data we collect (or we process) in the framework of our website will be stored in Greece. However, some of the receivers of the data with whom the company shares your personal data could be in other countries except the one in which the initial collection of your personal data took place. The legislation in these countries might not provide the same level of data protection in comparison with the country that initially provided your personal data. However, when we transfer your personal data to receivers in other countries including the USA, we are bound to protect your personal data as described in the present Privacy Policy and according to the legislation in effect.
We take measures for the compliance with the current legal requirements for the transfer of personal data to receivers in countries outside the European Financial Place or Switzerland that do not secure an adequate level of protection. We use different measures to secure that your Personal data that is transferred in these countries receives adequate protection according to the rules of data protection. These include the signing of conventional clauses or the certification that the receiver has adopted the European binding rules or complies the Protection Shield (Privacy Shield) between EU-USA and Switzerland-USA.
We keep your personal data for as long as it is necessary to fulfill the purposes that are set in the present Privacy Policy (except if a longer period of preservation is demanded by the legislation in effect). Generally this means that we will keep your personal data for as long as you have an account in our company. Regarding your personal data that is related with the purchase of products, we keep this data for a longer period of time in order to comply with our legal obligations (such as the tax and commercial legislation and for reasons of providing guarantee). At the end of the preservation period, your data will be deleted fully or anonymously, for example with the concentration of other data, so as to be used in a non-recognizable way for statistical analysis and business programming.
Some examples of periods of keeping customer data
Orders
When you place an order, we will keep the personal data that you gave us for 5 years so as to comply with our legal and conventional obligations.
Guarantees
If your guarantee includes a guarantee, the relevant personal data will be kept until the end of the guarantee period.
Newsletter
Your consent statement for the dispatch of a newsletter (newsletter) is followed for as long as the newσletter is sent to you by the company and no more than 6 months from the interruption of its dispatch.
We are bound to secure your personal data.
Recognizing the significance of the safety of your personal data, we have taken all the appropriate organizing and technical measures for the safety and protection of your data from any type of random or unfair process .We use the most up-to-date and advanced methods so as to secure the maximum possible safety.
Our webpage uses the TLS protocol, for safe online commercial transactions. This way all the data you provide is encoded including the number of your credit card, your name and address, so as not to be deciphered or change during their transfer on the internet.
In addition, the elements that are needed for your recognition as a user account are two:: the entrance code (Username) and the personal secrete security code (Password). Every time you enter your data, you are granted access to your personal account. The specific procedure is accelerated with safety through encoding during its transfer on the internet and the servers of the company. Based on the same standards, you have the ability to change your Personal secret safety password (Password) as often as you wish to. After the entry of the desirable password, the new password is encoded and stored in the company’s systems. For this reason, the only person who knows your password is you and you are responsible for keeping the password secret to third parties.
These measures are revised and modified when it is considered necessary.
You have the right to access your personal data.
This means that you have the right to be informed by us if we process your data. If we process your data, you can ask to be informed about the reason for the process, the type of the data that we keep, to whom we give it, for how long we store it, if an automated decision making takes place, and for your other rights, such as correction, deletion of data, limitation of the process and submission of the a complaint to the Personal Data Protection Authority.
You have the right to correct inaccurate personal data.
Ιf you notice that there is a mistake in your data you can submit a request to correct it (e.g. correction of the name or notify about the change of address).
You have the right for deletion/the right to oblivion
You can ask us to delete your data if it is not necessary any more for the process reasons mentioned above or if you wish to recall your consent in case it is the only legal basis.
You have the right for portability of your data
You can ask us to receive in a recognizable form the data that you have provided us with or to ask as to transmit it to another person in charge of process.
You have the right to limit the process .
You can ask us to limit the process of your data for as long as the examination of your objections regarding the process is pending.
You have the right to object to or recall the consent of the process of your data.
You can oppose to the process of your data and we will stop the process of your data if there aren’t any other imperative and legal reasons that prevail against your rights. If you have given your consent on the collection, process, and use of your personal data, you can recall your consent any time with future effect.
Choosing not to receive Marketing Contacts
You can choose not to receive marketing contacts of the company by changing your choices in the user account (my profile) of our websites. You can also choose not to receive marketing contacts by changing the email registrations by pressing on the link deletion of following the instructions that are included in the message. Alternatively, you can contact us using the contact information in the section “Questions and Comments “» below.
In case we rely on our legal interest.
In cases we process your personal data based on our legal interest, you can ask us to stop for reasons related with your personal state. We must then do it if we do not believe that we have an imperative legal reason to continue processing your personal data.
To exercise your rights you can submit to us a relative request to the officer in charge of Data Protection (Data Protection Officer) to the address of the company Industrial area of Heraklion on the corner of D&Th or in the e-mail address (info@aloevera–hellas.gr) entitled with “Exercise of right “ and we will examine it and answer to you as soon as possible .
By exception:
If you wish to correct your data in your user account, you can login and make any correction/change without submitting a request.
If you wish to recall your consent for the dispatch of a newsletter you can do it by choosing the “For deletion from “dispatch of newsletter list “ by clicking here” that is at the bottom of every newsletter.
Identity check
To protect the confidentiality of your information, we will ask you to verify your identity before you proceed to any request you submit based on the present Privacy Policy. If you have authorized a third party to submit a request on your behalf, we will ask him to prove that he has your permission to act for this reason.
We answer requests freely without any delay, and in any case within (1) one month by the time we receive your request. If however, your request is complex or if there are a high number of your requests, we will inform you within the month if we might need to receive an extension of (2) two more months within which we will answer you.
If your requests are obviously ungrounded or extreme especially due to their repeated character, the company can impose the payment of a reasonable fee, taking into consideration the management costs for the provision of update or execution of the asked action or the refusal to proceed to the request.
The applicable Law is the Greek Law, as is formed according to the General Rule about the Protection of Personal Data 2016/679/ΕΕ, and generally the national and European legislative and regulatory framework that is in effect for the protection of personal data. .
Competent courts for any emerging differences related with your data are the Courts in Athens.
You have the right to submit a complaint to the Personal data protection authority
(Address Kifisias 1-3, P.C. 115 23, Athens, phone number 210. 6475600, e-mail address (e-mail) contact@dpa.gr), if you consider that the process of your personal data violates the national and regulatory framework of law about the protection of personal data.
We inform the current Privacy Policy when it is necessary. If there are any important changes in the Privacy Policy in the way with which we use your personal data, we will publish in our website the update of the current one, before the changes come into effect and we will inform you with any convenient way.
We encourage you to periodically read the current Policy to know how your data is protected. The current Privacy Policy was last modified on 23rd May 2018.
We hope that the current Privacy Policy helped you understand the way with which we handle your personal data and your rights, to control the handling by our company.
If you have any questions that have not been covered, or comments and concerns regarding our Privacy Policy please contact the officer in charge of Data Protection that will be glad to help you:
Email in the e-mail address: info@aloevera-hellas.gr or
A letter to the officer in charge of the Data Protection (Data ProtectionOfficer) to the address Industrial area of Heraklion on the corner of D&Th .
