Privacy Policy

We appreciate your interest in data protection on our website. We want you to feel happy and safe when visiting our website and to consider the implementation of data protection as a customer quality feature. With the following data protection notices, we inform you about the manner and scope of the processing of personal data by the sole proprietorship of Thomas Hatzinikolaou with the distinctive title "sommavogatsikou", located at Vogatsikou Street 8, 546 22, Thessaloniki, with the purpose of women's clothing trade, 026744421 - DOU D' Thessaloniki, tel.: +30 2310 224 449 and e-mail address info@sommavogatsikou.com.

Personal data is information that is classified or can be classified directly or indirectly about you. As a legislative basis for data protection, the General Data Protection Regulation 679/2016, better known by the abbreviation GDPR - applies in particular.

Contents Overview

• 1. Overview

• 2. Login to our website

• 3. Contact form/ email communication/ phone calls/ customer surveys

• 4. Contests

• 5. Data processing for advertising purposes

• 6. Sending a newsletter

• 7. Online presence and optimization of websites

• 8. Recipients outside the EU

• 9. Your rights as data subjects

• 10. Communication officers

• 11. Name and contact details of the data controller as well as contact details of the operational data protection officer

1. Overview

By entering the "sommavogatsikou" website, various information is exchanged between your terminal and our forwarder. In this case there may also be processing of personal data. The information collected in this way will be used, among other things, mainly for the optimization of our website or for advertising in the internet browser of your terminal.

2. Login to our website

Purposes of data processing/ legal bases:

When entering our website, they are automatically sent by the internet browser of the terminal you are using and without any action on your part:

4. Contests

Purposes of data processing/ legal bases:

You have the possibility through our website, through our newsletter, through short electronic messages such as sms / Viber / related digital services (e.g. inbox) or in the future through a related application of "sommavogatsikou" to participate in contests. Unless otherwise provided in the specific data protection principles of the respective competition or if you have not granted us additional express consent, the personal data you have transmitted to us in the context of participating in a competition will be used exclusively for the processing of the competition (e.g. announcement of winners, notification of winners, shipping of the prize) and after a reasonable time of 90 days for any objections, challenges or objections from other participants will be deleted. The legal basis for data processing is first of all Article 6 paragraph 1 point b of the GDPR. In the event that consent is provided in the context of a competition, Article 6(1)(a) GDPR is the legal basis for consent-based data processing. If you have given consents in the context of a competition, you have the possibility to withdraw those consents at any time with effect for the future. More detailed regulations for these cases can be found in the specific data protection principles of each competition.

Recipients/ categories of recipients:

Transmission to third parties is only carried out if this is required for the processing of the competition (e.g. sending the prize via a partner company). Further transmission to third parties is generally excluded.

Duration of storage/ criteria for determining the duration of storage:

After the end of the competition, the announcement of the winners after a sufficient period of 90 days for any objections, disputes or objections from other participants, the personal data of the participants is deleted. In the case of prize material, the winners' data is kept for the duration of legal warranty claims, to enable subsequent restoration or exchange in the event of a defect.

5. Processing of data for advertising purposes

Purposes of data processing/ legal bases:

With your consent, we analyze usage behavior in the context of our online presence as well as in the newsletters we send you. The evaluation of usage behavior includes in particular the areas of the website you visit and which links you use there. With this data, we create personalized user profiles sorted by person and/or email address, so that the advertising offer of “sommavagatsikou” in the form of a newsletter, advertising messages on the website and print advertising can be better adapted to your personal interests and improved our online offers.

The legal basis for the aforementioned processing is Article 6 paragraph 1 point f of the GDPR or, in case of corresponding consent, Article 6 paragraph 1 point a of the GDPR. The processing of the data of existing customers for own advertising purposes or for advertising purposes of third parties must be understood as a legitimate interest.

Right to object:

You can object to data processing for the stated purposes at any time and free of charge, separately for each communication channel and with effect for the future. An e-mail or a postal letter to the contact details listed in point 14 is sufficient.

Recipients/ categories of recipients:

As a rule, we exclude the transmission of this data to third parties.

Duration of storage/ criteria for determining the duration of storage:

If you withdraw your consent to individual advertising media or object to certain advertising media, your data will be deleted from the respective email distributors.

If you object, the contact address in question will be blocked from further processing of advertising data. We point out that in exceptional cases the sending of advertising material may continue temporarily even after the objection has been received. This technically depends on the required implementation time of the advertising messages and does not mean that we do not apply your objection. Thank you for your understanding.

6. Sending a newsletter

Purposes of data processing/ legal bases:

On our website we provide you with the possibility to subscribe to the newsletter. If you consent to receiving our newsletter, we will use your email address and possibly your name to send you (where possible, separate) information about products, promotions, competitions and news, as well as about customer satisfaction surveys. We store and process this data for the purpose of sending a newsletter.

The contents of the newsletter include promotional actions (offers, discount offers, contests, etc.) as well as products and services of "sommavogatsikou".

With your consent, we analyze your usage behavior on the websites linked to www.sommavogatsikou.gr in the mobile applications as well as in our newsletters. The evaluation of usage behavior includes in particular the areas of the respective website, mobile application or newsletter that you stayed on and the links that you activated. With these data we create usage profiles that are classified by person and/or email address, in order for the advertising offer , in particular in the form of a newsletter, advertising messages on the website and print advertising, to better adapt to your personal interests and to improve our online offers. The legal basis for data processing in the context of sending the newsletter is consent in accordance with Article 6 paragraph 1 a' GDPR.

To ensure that you did not make a mistake when entering your email address, we have implemented a double opt-in process. So, after entering your email address in the prescribed field, we send you a confirmation link. Only if you choose that confirmation link will your email address be sent to our distributors.

You can withdraw your consent to the receipt of the newsletter, participation in customer satisfaction surveys and the creation of personalized usage profiles at any time with effect for the future, e.g. if you unsubscribe from the newsletter through our website. The link to the unsubscribe page is at the end of each newsletter. By unsubscribing from our newsletter, your consent to the creation of a personalized user profile and to receiving the personalized newsletter is also revoked. In this case your usage data is deleted.

Recipients/ categories of recipients:

If external distributors are used to carry out the sending of the newsletter, they must be contractually bound in accordance with Article 28 GDPR. Further transmission to third parties is generally excluded.

Duration of storage/ criteria for determining the duration of storage:

If you withdraw your consent to receive the "sommavogatsikou" newsletter, your email address is "locked" from receiving the newsletter. Your data is deleted after 6 months by the respective email distributors.

7. Online presence-communication and website optimization

7.1 Microdata (Cookies) – General instructions

On our websites we use so-called microdata (cookies) based on article 6 paragraph 1 item f of the GDPR. Our interest in optimizing our website must be considered as legitimate, within the meaning of the aforementioned provision. Microdata are small files that are stored on your terminal device (computer, laptop, tablet, smartphone, etc.) when you visit our website. Microdata does not harm your terminal device, does not contain viruses, trojans or other harmful programs. In the microdata, information is gathered which arises each time in relation to the specific terminal device used. This does not mean that we have direct knowledge of your identity because of them. The use of microdata is intended, on the one hand, to offer you a more comfortable use. For this reason, we use so-called session cookies to recognize that you have already visited individual pages of the website. These are automatically deleted once you leave our website. In addition, we use temporary microdata for ease of use, which are stored for a specified period of time on your terminal device. If you visit our page again to use our services, we automatically recognize that you have already visited us, which entries/settings you made, so that it is not necessary to make the same actions again.

On the other hand, we use microdata to statistically analyze the use of our website in order to optimize our offer as well as display information that is specifically tailored to you. This microdata allows us to automatically recognize on a subsequent visit to our website that you have visited us again. The microdata in question is automatically deleted after a predetermined period of time which, as a rule, does not exceed six (6) months. Most web browsers automatically accept microdata. However, you can set your web browser in such a way that microdata is not stored on your terminal device or that a hint is displayed continuously before a new microdata is stored. However, disabling microdata completely may result in the inability to use some features of our website.

You will find more information about the microdata used and your options to object to them in the Microdata Policy (Cookies), as well as here in articles 7 to 9.

7.2 Google Analytics

Purposes of data processing/ legal bases:

For the purpose of customizing and continuously optimizing our website, we use Google Analytics, a web analysis service of Google Inc. ("Google"). Our legitimate interest arises from the stated purposes. In this context, "pseudonymized" user profiles are created and microdata (cookies) are used. The cookie records the following information about the use of this website:

• internet browser type/version

• operating system used

• Referral of a url type address (i.e. the previous page you visited)

• Access computer name and Internet Protocol (IP) address

• forwarder request time.

The information is used to evaluate the use of our websites, to compile reports on website activities and to provide additional services related to the use of the website and the Internet for the purposes of market research and the configuration of said websites according to the needs. Internet Protocol (IP) addresses are made anonymous so that they cannot be matched by deleting one or more digits (so-called IP-masking).

You can prevent the installation of micro-data through a corresponding setting of your internet browser. However, we point out that in this case it may not be possible to use all the functions of this website. You can also prevent the analysis of the data generated by the microdata and related to the use of this website (including the internet protocol address) as well as the processing of this data by Google if you download and install this extension in the Chrome web browser of Google. Instead of the above browser extension, you can additionally, especially in mobile browsers, prevent analysis by Google Analytics by selecting this link. An opt-out cookie is thus created, which prevents the future analysis of your data when visiting this website. The opt-out cookie applies only to the specific web browser and only to our website and is only stored on your device. If you delete the microdata from that particular web browser, you will need to save the opt-out microdata again. More information about data protection in relation to Google Analytics can be found on the Google Analytics website.

Recipients/ categories of recipients:

The information generated with the microdata is transmitted to a Google server in the USA and stored there. Under no circumstances will your Internet Protocol (IP) address be merged with other data from Google. Also, the information in question may be transmitted to third parties if this is provided for by law or if the third parties process this data under authorization.

Duration of storage/ criteria for determining the duration of storage:

After "anonymizing" the internet protocol address it is no longer possible to connect to your person. Data generated for statistical purposes is deleted from Google Analytics after 50 months. In the reports compiled on the basis of Google Analytics there is no longer any reference to persons.

7.3 Website Targeting and Website Optimization

Purposes of data processing/ legal bases:

On our website, the information is analyzed and evaluated with the use of microdata in order to optimize our websites and the advertising views displayed on them. In this way, it is ensured in particular that only advertising that is tailored to your actual or assumed interests based on your usage behavior to date will be displayed on your terminal device. The information processed for these purposes contains, for example, information about the products in which you have shown interest. The legal basis for this data processing is Article 6 paragraph 1 point f GDPR. It is therefore in our and your best interest to optimize our websites for the best shopping experience and to avoid ad displays that are not of interest to you. The analysis and evaluation is carried out exclusively under a pseudonym and does not allow us to identify you. In particular, the information is not merged with your personal data.

Recipients/ categories of recipients:

Recipients of the data are the aforementioned service providers, who process your data on a contractual basis only for a specific purpose and in accordance with our instructions.

Duration of storage/ criteria for determining the duration of storage:

The Microdata used and the information contained therein are stored in accordance with the Microdata Policy (Cookies) and are deleted immediately in case of objection.

7.4 Re-targeting

Purposes of data processing/ legal bases:

We also use the re-targeting technologies of various providers. This allows us to shape our online offer in an interesting way for you. For this purpose, a microdata is created, with which data of interest is collected using a pseudonym. In this case, information about browsing behavior is collected for marketing purposes in anonymous form and stored in microdata files on your computer and analyzed by means of an algorithm. It is then possible to display on the websites of our partners targeted product recommendations and personalized advertising banners with our products that are of interest to you. Under no circumstances can this data be used to identify the website visitor. No direct personal data is processed, and user profiles are also not merged with personal data. This data processing is carried out on the basis of Article 6 paragraph 1 point f of the GDPR. With the above measures we use, we want to ensure that only advertising that is tailored to your actual or perceived interests will appear on your end devices. It is in both our interest and yours not to burden you with uninteresting advertising views.

If, however, you do not wish to be shown a personalized advertising banner of the "sommavogatsikou" online store, you can object to this collection and storage of data for the future, as follows:

• By selecting the symbol that appears in each advertising banner (e.g. "i") you will go to the respective provider's website. There, the systematic nature of the retargeting technology is clarified again and the option to cancel the registration (opt-out) is provided. If you unsubscribe from a provider, a so-called opt-out cookie is stored on your computer which prevents the advertising banner of the respective provider from being displayed in the future. Please note that such de-registration can only be done from your computer and the respective opt-out microdata may not be deleted from your computer and if for any reason it is deleted you will inevitably have to repeat the opt-out process.

• Alternatively you can use the objection possibilities presented in point 7.5 of these data protection terms.

Recipients/ categories of recipients:

We use retargeting technologies of various providers on our website, which process the above-mentioned data within this context. Further information about the microdata used by these providers can be found in the Microdata (Cookies) Policy.

Duration of storage/ criteria for determining the duration of storage:

The microdata used for retargeting purposes and the information contained in it are stored for as long as stated in the Microdata Policy and are then automatically deleted.

7.5 Further Digital Communication

We also periodically use short electronic messages such as sms / Viber / related digital services (eg inbox) in order to serve you better and respond more effectively to your needs.

7.6 Opt-out

You can block the retargeting technologies detailed in 7.3 and 7.4 by means of a corresponding micro-data setting in your internet browser (see also point 7.1). At the same time, you have the possibility to block personalized interest-based advertising with the help of the so-called Preference Manager or by activating the opt-out microdata available.

8. Recipients outside the EU

With the exception of the processing described in point 7, we do not provide your data to recipients based outside the European Union or the European Economic Area. The processing referred to in point 7 leads to the transmission of data to the forwarders of the providers of "tracking and targeting" technologies authorized by us. Some forwarders are located in the USA (information about this can be obtained in the respective reports for the specific recipients). The transfer of data is carried out in accordance with the principles of the so-called Privacy Shield as well as on the basis of the so-called Standard Contractual Clauses of the European Commission.

9. Your rights as a data subject

9.1 Overview

In addition to the right to withdraw the consents you have given us, you also have the following rights, provided that the respective legal conditions exist:

• right of access regarding your personal data that we store in accordance with Article 15 GDPR

• right to correct incorrect or incomplete data in accordance with Article 16 GDPR

• right to delete your data stored by us in accordance with Article 17 GDPR

• right to restrict the processing of your data in accordance with Article 18 GDPR

• right to data portability in accordance with Article 20 GDPR

• right to object in accordance with article 21 GDPR.

9.2 Right of access pursuant to Article 15 GDPR

You have the right to be informed upon request and free of charge, in accordance with Article 15 paragraph 1 GDPR, about the personal data we have stored about you. This includes in particular:

• the purposes of processing personal data

• the relevant categories of personal data we process

• the recipients or categories of recipients to whom the personal data concerning you is disclosed or is to be disclosed

• if possible, the period for which the personal data will be stored or, when this is impossible, the criteria determining that period

• the existence of a right to submit a request to the data controller for correction or deletion of personal data or restriction of the processing of personal data concerning the data subject or a right to object to said processing

• the right to file a complaint with a supervisory authority

• when the personal data is not collected from the data subject, any available information about its origin

• the existence of automated decision-making, including profiling, provided for in Article 22 paragraphs 1 and 4 GDPR and, at least in these cases, important information about the logic followed, as well as the importance and intended consequences of said processing for the data subject.

When personal data is transferred to a third country or an international organization, the data subject has the right to be informed of the appropriate safeguards in accordance with Article 46 GDPR regarding the transfer.

9.3 Right to rectification in accordance with Article 16 GDPR

You have the right to request from us without undue delay the correction of inaccurate personal data concerning you. Bearing in mind the purposes of the processing, you have the right to request the completion of incomplete personal data, including through a supplementary statement.

9.4 Right to erasure in accordance with Article 17 GDPR

You have the right to ask us to delete personal data without undue delay if one of the following reasons applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

• you withdraw your consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a) GDPR and there is no other legal basis for the processing,

• you object to processing pursuant to Article 21(1) or (2) GDPR and there are no compelling and legitimate grounds for processing pursuant to Article 21(2) GDPR,

• the personal data were processed illegally,

• personal data must be deleted in order to comply with a legal obligation,

• the personal data have been collected in connection with the provision of information society services referred to in Article 8 paragraph 1 GDPR.

Where we have made personal data public and are required to delete it, taking into account available technology and implementation costs, we will take reasonable steps to inform third parties processing your personal data that you require and have requested them to delete any links with this data or copies or reproductions of said personal data.

9.5 Right to restriction of processing in accordance with Article 18 GDPR

You have the right to ask us to restrict processing when one of the following conditions applies:

• you dispute the accuracy of the personal data

• the processing is illegal and you request the restriction of the use of personal data instead of deletion

• the controller no longer needs the personal data for the purposes of the processing, but such data is required by the data subject to establish, exercise or support legal claims

• or you object to the processing in accordance with Article 21(1) GDPR, pending verification of whether the legitimate reasons of the controller prevail over those of the data subject.

9.6 Right to data portability in accordance with Article 20 GDPR

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, as well as the right to transmit said data to another controller without objection from us; when:

• the processing is based on consent in accordance with Article 6(1)(a) or Article 9(2)(a) or on a contract in accordance with Article 6(1)(b) GDPR and

• the processing is carried out by automated means.

When exercising the right to data portability, you have the right to request that your personal data be transferred directly from us to another controller, if this is technically possible.

9.7 Right to object in accordance with Article 21 GDPR

Under the conditions of Article 21(1) GDPR you may object to data processing for other reasons arising from the particularity of the situation. The above general right to object applies to all data processing purposes described in these data protection conditions, which are processed pursuant to Article 6 paragraph 1 letter f GDPR. Contrary to the specific right to object regarding the processing of data for advertising purposes (cf. above, in particular points 9 and 7.6), we are obliged under the GDPR to apply this general right to object only if you tell us overriding reasons, e.g. h. a potential danger to life or health. In addition, there is the possibility to contact the competent supervisory authority for "sommavogatsikou" or the Responsible Data Protection Law Firm of Tsilonis-Voyatzoglou (Newlaw), Tsimiski 10, 546 24 Thessaloniki, tel. 2310 551 501, fax: 2310 261 503, e-mail: dataprotect(at)newlaw(dot)gr

10. Contact persons

10.1 Contact persons for inquiries or regarding the exercise of your data protection rights

For questions about the websites or the exercise of your rights when processing your data (data protection rights) you can contact the email address info@sommavogatsikou.com obtained from the Customer Service Department:

10.2 Contact person for data protection questions

If you have any other questions regarding the processing of your data, you can contact the operational data protection officer of the data controller, i.e. Tsilonis-Voyatzoglou Law Firm (Newlaw), Tsimiski 10, 546 24 Thessaloniki, tel. 2310 551 501, fax : 2310 261 503, e-mail: dataprotect(at)newlaw(dot)gr.

10.3 Right of complaint to the data protection supervisory authority

In addition, you have the right to complain to the competent data protection supervisory authority at any time. You can contact the data protection supervisory authority, in particular the Member State in which you have your usual residence or place of work or the place of the alleged infringement or the authority of the State in which the controller is established.

11. Name and contact details of the controller as well as contact details of the operational data protection officer

These data protection terms apply to the data processing carried out by the sole proprietorship of Hatzinikolaos Thomas with the distinctive title "sommavogatsikou", based at Vogatsikou Street 8, 546 22, Thessaloniki, with the purpose of trading women's clothing, VAT number 026744421 - DOU D' Thessaloniki, tel.: +30 2310 224 449 and e-mail address info@sommavogatsikou.com and is "Processor" for the website www.sommavogatsikou.gr. For further information or questions regarding the processing of data or to exercise any of his legal rights, the User may contact the Data Protection Officer Tsilonis-Voyatzoglou Law Firm (Newlaw), Tsimiski 10, 546 24 Thessaloniki, tel. 2310 551 501 , fax: 2310 261 503, e-mail: dataprotect(at)newlaw(dot)gr.