Privacy policy

Declaration of confidentiality & protection of Personal Data in accordance with regulation (EU) 2016/679 and Law 4624/2019

1. General information

1.1 In the context of its activities, the sole proprietorship under the name “HANIOTAKI PARASKEVI VLASSIS” keeps and processes Personal Data that we collect from you or for you when you visit our physical or electronic or contact us in writing or orally or through our website www.bambinoshop.gr or from other sources in order to support, promote and execute our contractual relationship, protect transactions and inform you about the services provided.

1.2 In our business we understand the importance of protecting the privacy of our customers and we make every effort to store and process carefully and in accordance with applicable law the information you share with us. For this reason, we have prepared this Declaration of Privacy and Protection in order to inform you in accordance with Regulation (EU) 2016/679 and the provisions of the relevant Greek legislation on personal data protection (Law 4624/2019) on how collection, use and disclosure of your personal data.

1.3 For the purposes of the Privacy and Protection Statement, personal data means any information concerning you with which your identity is verified or can be verified. This information includes, for example, your name, your address, etc.

1.4 This Statement:

• provides an overview of the categories of personal data that our sole proprietorship under the name “HANIOTAKI PARASKEVI VLASSIS” collects, their purposes of processing, their duration, their sources and their recipients,
• offers a summary of the practices by which we collect, use, disclose, transfer and store your personal data,
• confirms the technical data security measures, the internal management procedures as well as the physical measures we take to protect them
• informs you about the type and manner of exercising your rights
• addressed to individuals whether they are existing or potential customers and partners

1.5 This Privacy and Protection Statement applies to:

• for our physical store at the address at 62 Martyron Ave. no. 29 in Heraklion, Crete.
• for the website www.bambinoshop.gr
• for any Web site or OnLine application,
• for every OnLine and Offline promotion of our individual business as well
• for each Service or function provided by us and referred to in the Statement.

1.6 Before disclosing any personal data that concerns you, we encourage you to take the time and carefully read this text, which describes the privacy policy and protection of personal data, to learn more about how we collect, we store, use, transmit and protect the information / personal data we receive.

2. Who we are

2.1 The sole proprietorship with the name “HANIOTAKI PARASKEVI VLASIS” and the d.t. “BAMBINO” based in Heraklion, Crete on L. 62 Martyron no. 29, holder of the VAT number 076185750 of the Tax Office of Heraklion and of no. Γ.Ε.ΜΗ 076906427000 and is active in the field of trade of baby – children’s items, children’s clothing and accessories.

2.2 For the purposes of this Privacy Statement and Personal Data Protection Policy, the sole proprietor is designated as the Controller, i.e. the legal entity that alone or together with others determines the objectives, conditions and manner of processing personal data, is defined the sole proprietorship with the name “HANIOTAKI PARASKEVI VLASIS”. The sole proprietorship under the name “HANIOTAKI PARASKEVI VLASIS” acts, mainly, as Head of Processing or jointly Head of Processing and, as the case may be, as Executor of Processing, in accordance with General Regulation (EU) 2016/679. 4624/2019.

3. Sources of personal data

During the provision of our services and the exercise of our business activity, we collect and process different types of personal data, which we receive from our customers in person or through written, telephone or electronic communication through the website we manage (www.bambinoshop.gr ). We may also collect personal data which we lawfully obtain from other natural or legal persons who have the legal right to share such data with us as well as from publicly and commercially available sources (as permitted by law) and social services. third-party networking when you choose to connect to these services.

4. Categories of personal data

4.1 We collect and process various categories of personal data. These categories are as follows:

• Identity data: name
• Contact details: postal and e-mail address, landline and mobile phone, etc., billing address (city, postal code), shipping address (city, postal code).
• Billing data: number and type of credit / debit card and VAT number (where required), method of payment (deposit, cash on delivery, etc.), invoicing details, registered office, occupation, etc. (in case of issuance of ICT)
• Device and web browsing data: device ID, MAC address, Internet Protocol (IP) address, operating system version, time and duration of stay on site
• Information and order history: no. order, order registration date, product, product code, product quantity, order status, delivery date, delivery method, withdrawal data from distance selling contract
• Special categories of data collected in accordance with the legal requirements directly from you: health data (e.g. allergy to avoid buying an unsuitable product, etc.)

4.2 The processing of your data for the purposes set out below is fully governed by the principles of legality, objectivity, transparency, purpose limitation, data minimization, accuracy, limitation of storage, integrity, confidentiality and accountability as set out in Article 5. of the General Regulation (EU) 2016/679 and Law 4624/2019.

5. How to collect personal data

We collect personal data in various cases such as:

• During your visit to our physical or online store www.bambinoshop.gr
• When you participate in marketing programs or events (subscribe to newsletters in order to receive offers and other promotional material via e-mail)
• When transmitting information from third parties.
• When operating electronic devices

6. Purposes of processing & Legalization of processing

6.1 The Regulation allows us to process personal data, as long as the processing is legal, i.e. it meets one of the conditions of article 6 of the General Regulation (EU) 2016/679 and law 4624/2019. When processing your personal data, we rely on one of the following legal processing bases:

6.1.1 In the management of your registration as a user of the website www.bambinoshop.gr

The processing in this case is done to achieve the following purposes:

• Your identification so that we can identify you as a user of the site to give you access to the various functions, products, privileges and services that are available to you due to your status as a registered user. You can delete the registered user account at any time by contacting us via email at info@bambinoshop.gr or by phone at 2810.250877.

6.1.2 In the fulfillment and execution of the contract for the sale of goods between us

The processing in this case is done to achieve the following purposes:

• Your identification and communication with you during the process of processing / sending / delivery of your order through our website, for reasons of transaction security and your information regarding it
• The general management of your order (invoicing, delivery to a courier company, etc.)
• Proper preparation and timely satisfaction of your special requests related to your order
• The management of various requests / complaints / grievances and your possible withdrawal from the distance selling contract

It is pointed out that in case the user declares as a recipient a third party, the user expressly and unreservedly declares that he has the consent of the third party and bears full responsibility for his information, for the disclosure of his personal data to the company for the purpose of delivery to that of the products of the order and assumes full responsibility for any claims of this person against the company.

6.1.3 In the compliance of our company with its legal obligations imposed by the current legal, regulatory and supervisory framework at national and European level and decisions of any Authorities (public, supervisory, etc.) or Courts.

The processing in this case is done to serve the following purposes:

• Issuance and maintenance of legal – tax documents (eg receipts, invoices, etc.) in accordance with applicable law
• Compilation, issuance and maintenance of legal documents, in accordance with applicable law

6.1.4 In the service of the legal interests of our company or a third party. This processing is always carried out after balancing the interests of our company with your fundamental rights and freedoms that require the protection of your data

This processing is always carried out after balancing the interests of our company with your fundamental rights and freedoms that require the protection of your data.

• The defense of our legal interests from the contract of sale of goods
• The defense of the legal rights and interests of the sole proprietorship under the name “HANIOTAKI PARASKEVI VLASSIS” in case of legal disputes
• Improving our services to adapt our products and services to your requirements in order to remain completely satisfied
• Conducting market research and analyzing questionnaires and customer comments
• The evaluation of our services and the creation of statistical data based on it
• Customer complaint management
• Informing customers and satisfying their requests after their departure or sending and receiving the order

6.1.5 In your consent

When you register on our website www.bambinoshop.gr we may ask you to provide your explicit consent for the processing of your specific data for a specific purpose. Particularly:

• of identity and contact data for sending updates in the form of e-mails / sms / newsletter / letters, for your information about programs / offers / discounts and / or other promotional activities of our company.
• your health data to provide improved services and specialized services where required (eg allergy notification to avoid purchasing an unsuitable product, etc.)
• In case the data we process concern persons (children) under sixteen years of age, the consent or approval of the processing is required from the person exercising parental care of the minor. The sole proprietorship under the name “HANIOTAKI PARASKEVI VLASIS” does not bear any responsibility if the statement of the person that he exercises the parental care of the child is false or inaccurate

We make it clear that you always reserve the right to revoke consent to the above processing purposes at any time without, however, affecting the legality of the processing based on your consent prior to its revocation. You do not need to justify your decision and you will not suffer any negative consequences or penalties from it (except for the cessation of the benefits that may have resulted from your consent, eg cessation by us of sending information – promotional material). For this purpose you can send a relevant request to the e-mail address (e-mail) info@bambinoshop.gr .

7. Data retention period

7.1 The sole proprietorship under the name “HANIOTAKI PARASKEVI VLASIS” will maintain (in printed and / or electronic form) and will process your data for as long as necessary to fulfill the purpose for which they have been collected or under applicable law or until after the limitation period of any relevant claims has passed.

7.2 To determine the appropriate period of retention of personal data, we consider the quantity, nature and sensitivity of the personal data, the potential risk of damage from unauthorized use or disclosure of your personal data, the purposes for which we process the data personal, if we are able to fulfill these purposes by other means, the limitation period of any legally enforceable claims and our applicable legal or contractual obligations.

 8. Disclosure of personal data / recipients of data

When fulfilling the contractual and legal / regulatory obligations of our company, the service of its legal interests as well as in cases where we have received your consent, the recipients of your data may be the following:

8.1 Affiliates – partner companies

Your information may be shared with affiliated companies of the sole proprietorship under the name “HANIOTAKI PARASKEVI VLASIS”. We may also share your personal data with our business partners. These providers may use your information to provide you with the services you have requested and / or, if you give your consent, to provide you with promotional and advertising material.

8.2 Authorized employees of our company.

In order to provide you with the best possible service, we provide access to your personal data or to certain specific categories of your personal data, to our authorized personnel. Our authorized agents are responsible for evaluating your claims, managing the contract of sale of goods, fulfilling the obligations arising from it as well as the relevant obligations imposed by law, by public authorities or courts.

8.3 Service providers or individuals / entities to whom our company entrusts the execution of specific tasks on its behalf (performing the processing).

The above persons include, but are not limited to, lawyers, law firms, notaries and bailiffs, accountants, providers of IT products and / or services and / or support of all kinds of information and electronic systems and networks, including online systems and platforms, , companies for storage, archiving, management and destruction of files and data, telephone service companies, postal and courier companies, banking institutions, financial institutions, etc. Legal and / or natural persons will process your personal data, solely for the purpose of providing services to our company and not for our own benefit, acting as processors and committing in writing to the confidentiality and protection of your personal data and to take the necessary organizational and technical measures to secure their condition

8.4 Public authorities.

We may disclose your personal information to public authorities under specific legal provisions to comply with the law or to comply with a mandatory legal process (such as a search warrant or other court order or decision). These principles include Courts, judicial authorities, law enforcement or regulatory, governmental authorities.

8.5 Other third parties.

When required by law or when we have to protect our services to confirm or enforce our compliance with the policies governing our services and to protect the rights, property or security of the sole proprietorship under the name ” HANIOTAKI PARASKEVI VLASIS “or any relative – cooperating company, business partner or our client. We may also disclose personal data when required to conduct checks on the protection of personal data and security and / or to investigate or respond to a complaint or security threat.

8.6 Other third parties in relation to corporate transactions.

We may disclose your information to third parties in the event of a merger or transfer or in the event of bankruptcy or in the event that we cease to have the address or management of our store.

9. Data transmissions

Our servers, on which your data is stored and protected, are located within the European Economic Area (EEA). However, our external partners and / or service providers to our business may be located or use servers in other countries. Whenever we transfer your personal data outside the EEA, we make every effort to ensure an equal degree of protection for it, following a specific policy.

Particularly:

• If required, we transmit personal data only to countries that the European Commission deems to provide an adequate level of protection for personal data.
• Where we use specific service providers, we reserve the right to use specific contracts approved by the European Union, which provide personal data with the same protection as in Europe.
• Where we use providers based in the United States, we reserve the right to transmit data to them if they participate in the Protection Shield which requires them to provide similar protection for personal data shared between Europe and the United States. Contact us at info@bambinoshop.gr for any clarification about the specific mechanism used by us when transmitting your personal data outside the European Economic Area.

10. Your rights

10.1 According to General Regulation (EU) 2016/679 you have the following rights:

• Right to information and access (Νο 15): to know the categories of your personal data that we hold and process, their origin, the purposes of their processing, the categories of their recipients, their retention time, your relevant rights, the right to file a complaint to the competent supervisory authority, the existence of an automated decision-making, including profiling and receiving a copy of your data.
• Right of correction (Νο 16): request the correction of any deficiencies or inaccuracies in your data and / or their completion, so that it is complete and accurate.
• Right to restrict processing (Νο 18): request under certain conditions the restriction of the processing of your data.
• Right of objection (No 21): to oppose at any time under any circumstances any further processing of your personal data that we hold.
• Right to delete («right to oblivion» – No 17): to request under certain conditions the deletion of your personal data from the files we keep.
• Right to data portability (No 20): to request under certain conditions from our company your data in a structured and commonly used format, in cases where this is technically possible, in order to transfer it to another processor.
• Right to withdraw your consent (No 7 par. 3) in cases where the processing of your data is based on it.

10.2 Please note the following in relation to your above rights:

• Your rights under 3), 4) and 5) may not be satisfied, in part or in full, if they relate to data that are necessary to defend the legal interests of our company or the fulfillment of its obligation arising from the law or decision of public authorities or Courts.
• The sole proprietorship under the name “HANIOTAKI PARASKEVI VLASIS” has in any case the right to refuse your request for restriction of the processing or deletion of your personal data if the processing or keeping of the data is necessary for the establishment, exercise or support of legal its rights or the fulfillment of its obligations.
• The exercise of the above rights is valid for the future and does not involve data processing already performed.

11. How to exercise rights / file a complaint and protest

11.1 For the exercise of your rights, you can send a registered letter to the following contact address of our company: L. 62 Marryron no. 29, PC 71304 – Heraklion Crete – Greece or message via email at info@bambinoshop.gr.

11.2 Also, you always reserve the right to contact the Personal Data Protection Authority, which can accept the submission of relevant complaints / grievances either in writing in its protocol (1-3 Kifissias Ave., PC 115 23, Athens, call center 210-6475600 / fax 210-6475628) or electronically at the email address complaints@dpa.gr. For more information visit www.dpa.gr..

11.3 The sole proprietorship under the name “HANIOTAKI PARASKEVI VLASIS” will make every effort to respond to your request within thirty (30) days of submission. This deadline may be extended for an additional sixty (60) days, if deemed necessary, taking into account the complexity of the request and the number of requests. The sole proprietorship under the name “HANIOTAKI PARASKEVI TOU VLASSIOU” will inform you in any case of extension of the deadline within thirty (30) days.

11.4 The above service is provided by our company free of charge. However, if you request that the reply be sent by post, you may incur shipping costs. Before shipping, we will inform you about its exact cost.

11.5 The sole proprietorship under the name “HANIOTAKI PARASKEVI VLASIS” may refuse to respond to a request which is manifestly unfounded, excessive or repetitive.

11.6 For the correct, efficient and secure processing of your request, it is required that the details of the submitter of the request be identified. For this reason, the sole proprietorship under the name “HANIOTAKI PARASKEVI VLASIS” may ask you for additional information for your identification as well as the sending of proof documents.

12. Security measures

12.1 The security of your personal data is a high priority for us. Therefore, we protect your data, which is stored with us through technical and organizational measures to effectively prevent loss or misuse by third parties.

12.2 In case the Personal Data is not provided by you in any other way, we inform you that the sole proprietorship under the name “HANIOTAKI PARASKEVI VLASIS” adheres to a strict Personal Data Protection Policy for the processing of your personal data notified to its staff and associates and its implementation is regularly monitored.

12.3 In principle, we collect only what information is necessary for the intended purpose. Then we check the purpose of processing if it is legal and if the way of data collection is compatible with the principles of data processing (No 5 of the Regulation and law 4624/2019). Especially if the processing of personal data is necessary for the purposes of the legal interests of our company or a third party, we proceed to weight balancing according to the requirements of the Regulation.

12.4 The sole proprietorship under the name “HANIOTAKI PARASKEVI VLASIS” makes every effort to ensure that your data is secure. Implements appropriate organizational and technical measures for the security of your data, ensuring its confidentiality, processing and protection against accidental or unauthorized destruction, accidental loss, alteration, prohibited dissemination or unauthorized access and any other form of unauthorized processing. Our IT department follows international standards and practices to ensure network security and data encryption. In order to ensure the long-term protection of your data, technical security measures are regularly monitored and, if necessary, adapted to the relevant prevailing technology standards.

12.5 The sole proprietorship under the name “HANIOTAKI PARASKEVI VLASIS” realizing the importance of the security of your personal data and fully respecting your fundamental rights and freedoms makes every effort to comply with the requirements of the 2016/6 Regulation (EU) Greek legislation (law 4624/2019).

12.6 In any case, you should not ignore the fact that despite all the reasonable measures we take to protect your personal data, no information system and network and no transmission via the Internet, is completely secure. Despite the efforts made by our company security can not be absolutely guaranteed against all threats.

12.7 In case of loss or breach of personal data we have a specialized team which follows a clearly defined procedure to deal with the incident, in order to remedy the breach as soon as possible, to limit the possible consequences and to comply with our obligations under the law.

12.8 In addition, we restrict access to your personal data to those employees, agents, contractors and other third parties who need to be aware of it in order to perform their professional duties. Your personal data will be processed exclusively in accordance with our instructions and we are committed to complying with the relevant terms of confidentiality.

13. Amendments to this statement

13.1 This Privacy and Personal Data Protection Statement may be amended periodically to include our current privacy practices. For this reason, please check from time to time and especially before placing any product order, to ensure that you are aware of any changes.

13.2 The most recent version of the Statement will always be available at www.bambinoshop.gr Whenever we make changes, we will record the date of modification or revision at the beginning of this Statement.

13.3 You can check the “effective date” at the beginning of the text to confirm when the Privacy Statement was last updated. Look for the printed form of this Statement at the cashier of our physical store. This version was updated on 18-10-2021. This Statement supersedes all previous disclosures we may have made in the past regarding our information practices. We reserve the right to change this statement and to make any changes to the information previously collected, in accordance with the law. If there are any significant changes to this statement or our information practices change in the future, we will notify you by posting the changes on our website.

14. Contact

For any questions regarding this Privacy Policy or data protection and security in general, please contact us at the contact details below:

Sole proprietorship under the name “HANIOTAKI PARASKEVI VLASIS” and the d.t. “BAMBINO”.

62 Martyron Av. 29, Heraklion, 713 04, Greece

Phone: 2810.250877

e-mail: info@bambinoshop.gr

Contact person: Paraskevi Haniotaki