Πολιτική Προστασίας

Protection policy

The security of your personal data is a high priority for our Company. We have created this Personal Data Protection Policy to inform you in accordance with Regulation (EU) 2016/679, Law 4624/2019 and the other provisions of the relevant Greek and EU legislation on the protection of personal data, in our capacity as a controller, including how your personal data is processed when you visit, register or generally use and make purchases on our Website, your rights and how to exercise them. This information is supplemented in cases of processing of personal data through cookies by the specific Cookies Policy.

The company responsible for the processing of your personal data is the company called "Olive Collection Epsilon Estate IKE" located in Heraklion Crete, Lofo Semeli, Malades P.C. 71500, tel. 0030-2810-319222, email info@olivecollection.gr (hereinafter the "COMPANY" or "we") and manages and operates the website https://olivecollection.gr and the e-shop operating therein (hereinafter the "Website" or the "olivecollection e-shop").

This Privacy Policy applies to all users/visitors of the "olivecollection e-shop", including both those who visit the e-shop without having registered and created an account and those who have registered and created an account and regardless of whether they carry out a transaction in the context of this (the e-shop) or not.

We ensure that we collect only the strictly necessary, appropriate and relevant personal data in view of the purpose of the processing for which they are intended and in order to provide the services offered through the "olivecollection e-shop" in an adequate and efficient manner. The type and amount of necessary personal data we collect depends and varies depending on the status of the data subject (ordinary visitor or registered user) and the type of relationship or transaction with him/her. In view of this, the data we collect and generally process are indicatively the following and may not concern you in their entirety, as explained above:

α. Identification data that include your name, your surname and data for your electronic identification for your login in case of creating an account on the Website (username and password). In case of issuing an invoice, the following are also required: Tax office, VAT number, business activity, name.

β. Contact Data which includes your contact details, your shipping address for products or billing that are not necessarily identifiable, your email address and your telephone number, landline or mobile. Also data we receive from communications with you, requests for assistance, complaints and queries and data of recorded telephone communications with you (e.g. telephone orders) in accordance with legal requirements for the purposes of providing evidence of a commercial transaction or other communication of a business nature.

c. Financial Data including your payment information, details of your bank account from which you make a transfer to us

δ. Transaction Data including e.g. details of completed sales of products to you including information about products or services you have purchased through the "olivecollection e-shop" in the past, returns etc.

ε. Technical data from your use and interaction with the "olivecollection e-shop" such as, but not limited to: the Internet Protocol (IP) address of your computer, the type of browser and your operating system, the speed of your connection and information about the software programs installed on your computer, basic information about your connection to the server and other information collected through cookies and related technologies (if you have consented to the use of any of them that are not technically necessary).

f. Advertising data that include e.g. information about your response to our Company's promotional activities, your choices, your search history, the product categories you prefer, links from which you have been redirected to the "olivecollection e-shop", as well as the ways of communication you use most, these data are mainly derived through advertising cookies and we derive data from them only if you have consented to their use (for more information about advertising cookies, please refer to the "olivecollection e-shop" website).

ζ. Data of your responses and reactions to surveys of the Company insofar as it is not anonymous data.

η. Data for the conduct (implementation, validity check of entries, communication with winners, awarding of prizes, etc.) and your participation in draws, competitions and promotional activities carried out by the Company.

θ. Data collected when you connect via social media. If you log in to "olivecollection e-shop" via a social media, the data we collect includes, but is not limited to, the username or any pseudonym you use within that social media as well as profile information or content that you have allowed the social media service to share based on your privacy settings, etc.

We explicitly state that we are not interested and do not collect:

Data on minors. The Company understands the importance of protecting the personal data of minors. The Website is neither directed nor intentionally designed to be directed to minors. It is the Company's intention not to knowingly collect or maintain personal data of minors who may access the Website. For this reason, the Company collects a statement from those who carry out transactions on the Website that they are over 18 years of age and expressly states that only persons over 18 years of age are allowed to log on to the Website. If it is found that any personal data has been collected from a minor despite the above, such data will be deleted immediately. Special categories of data/sensitive personal data. We ask that you do not send us or disclose sensitive personal data (such as information about your racial or ethnic origin, ideology or political, religious or philosophical beliefs, information about your physical or mental health, biometric data or genetic characteristics, sexual orientation, trade union membership or information about your criminal convictions) on or through the "olivecollection e-shop" or otherwise. If it is found that any sensitive personal data have been collected despite the above, such data will be deleted immediately.

We also expressly clarify the following:

Any possible interconnection of the Website e.g. through special hyperlinks (links, hyperlinks, banners) or otherwise with any other website belonging to third parties (e.g. social media, etc.) does not imply that the Company assumes any responsibility for the policy followed by these websites regarding the protection and management of personal data. You should ensure that you yourself are informed about the protection and management of your data by the above websites. In particular, in the "olivecollection e-shop" we also use independent payment service providers in order to enable you to make payments for the purchase of a product from the e-shop ("Payment Service") through them (i.e. if you do not choose a payment method directly to the Company e.g. cash on delivery or a transfer to the Company). If you wish to make a payment through a Payment Service, you will be directed to a Payment Service website. Any information/data you provide to a Payment Service will be subject to the Payment Service's privacy policy and not this Privacy Policy. We have no control, oversight and are not responsible for any use by a Payment Service of information/data collected through it.

Your personal data is collected from the following sources:

We collect data that you voluntarily provide us when using the services of "olivecollection e-shop" especially when placing a product order, creating an account on the Website, participating in surveys or promotional activities, etc. Data that we collect directly from you are in particular the data mentioned above under 3.a, 3.b, 3.c, 3.g, 3.h. We reproduce or collect certain information from your computer or device when you interact with the Website. This category includes data mentioned above under 3.e. above. We also collect data ourselves from the transactional relationship between us such as those mentioned above under 3.d. We also collect data from third parties (this applies in particular to the data mentioned above under 3.i, 3.f, 3.e) or data available to the public. Sometimes we receive information about you from third parties, depending on how you choose to interact with us, this happens e.g. through third party cookies (for more information please refer to our Cookies Policy) or when you log in to your "olivecollection e-shop" account using the social media login function. If you choose to pick up the order of products you have placed through the "olivecollection e-shop" from one of the delivery points contracted with the Company, which are specifically mentioned in the e-shop, we will receive from it a completed and signed order delivery form containing your full name, your order number, your declaration of receipt of the order and the date of receipt of the order.

It is expressly clarified that the collection of data directly from you as described above also includes the collection of your data by a third party acting on your behalf. Where you may provide us with personal data of third parties, where permitted, you should have previously informed them (indicatively and by reference herein) and obtained their consent where required. At this point we remind you that you must ensure that the personal data you provide to us is correct and accurate and you undertake to notify the Company in a timely manner of any changes or amendments to it.

The Company processes your personal data for the following purposes:

Α. To provide services to you, to perform the contract between us or to take pre-contractual measures at your request. This purpose includes, but is not limited to, the processing we undertake to enable us to fulfil orders for products that you place through our Website or by telephone, to enable us to track the progress of a product order that you have placed or to manage it in the event of an abnormal progression, to communicate with you, to manage your requests or complaints about your orders, for billing purposes, to provide support services and for general monitoring of your orders, to provide you with information about our products, to provide you with information about our products, to provide you with information about our products, to provide you with information about our products, to provide you with information about our products, to manage your orders, to provide you with information about our products, to manage your orders, to provide you with information about our products, to provide you with information about our products, and to provide you with information about our products.

Β. To manage your registration on the Website in case you choose to create an account on the Website.

Γ. To communicate with you.

D. For advertising purposes. This purpose includes the processing we carry out:

α. To send you newsletters, to your e-mail address, if you have requested to receive our newsletters by filling in the relevant form on the Website.

β. For the Company to inform you via emails about products that may be of interest to you, provided that you have given us your consent.

c. To conduct promotional activities e.g. sweepstakes/contests, if you have chosen to participate in them.

δ. To personalise the advertisements and information we show you (e.g. online). This processing involves profiling you by taking into account in combination the data mentioned in section 3 above (in particular browsing and shopping history, cookie information, etc.).

For analysis and research purposes. This purpose includes the processing we carry out to send or submit questionnaires to you in order to investigate and analyse your level of satisfaction with the Company's services, to upgrade/improve the services and the Company's overall business relationship with you.

F. For the purposes of the Company's compliance with the obligations imposed by the applicable legal and regulatory framework, as well as the decisions of authorities (public, supervisory, independent, prosecutorial, etc.) or courts (regular or arbitration).

Ζ. For purposes of the Company's or a third party's legitimate interests. Such purpose includes processing for purposes indicatively:

a. the establishment, exercise and support of the Company's legal claims

b. for purposes of fraud prevention, security, protection of rights, information systems, property of the Company and its related parties, its employees and users of the Website in general;

c. the Company's compliance with its obligations arising from its contracts with third parties

d. carry out corporate transactions in the context of which we may transfer or encumber assets of the Company.

In accordance with the requirements of the legal framework on personal data, we ensure that we have a valid legal basis for the processing of your personal data. Below you will find the legal bases for the processing of your data in detail, depending on the purpose of the processing (see the purposes in the cases A to G listed in section 5 immediately above):

For the purposes mentioned above under 5.A and 5.C, the legal basis for processing is the need to perform the contract between us. The provision and the corresponding processing of the data relevant for these purposes is necessary for the fulfilment of our obligations, e.g. in relation to your orders and for the provision of your support and service and any failure to provide this would result in the Company being unable to provide its services to you. The processing for the stated purpose under 5.C is based on the legal basis of our Company's legitimate interests in the case of the Company's communications with subjects with whom there is no contractual relationship.

For the purposes mentioned above under 5.D (a, b, c, d) and 5.B the legal basis for processing is your consent. It is expressly clarified that your completion of the registration form on the Website constitutes consent with an explicit affirmative action for the subsequent processing of the data necessary for this purpose, i.e. to achieve the purpose of your registration on the Website. The processing of your data for these purposes is at your discretion. You may exercise your right to withdraw your consent at any time, without consequences, except that you will stop receiving promotional messages, newsletters and you will no longer be a registered user of the Website. For how to withdraw consent, please see the section under 13 below. If applicable, we will also inform you about more specific ways of revocation depending on the way the consent is provided, e.g. in the promotional messages and newsletters you receive at the end of them there will be a hyperlink to revoke your consent and delete you from the lists of recipients of promotional messages, newsletters, etc. Also, you may at any time unsubscribe from the Website by selecting the deletion of your account on the Website.

For the purposes mentioned above under 5.F, the legal basis for processing is the need to comply with a legal obligation of the Company. The provision of the data and the processing thereof is mandatory, and failure to provide it would lead to a breach by the Company of an existing legal obligation.

For the purposes mentioned above under 5.G, 5.E and 5.D.e, the legal basis for processing is the legitimate interests of the Company or a third party (indicatively other companies of the group to which the Company belongs, companies cooperating with the Company, suppliers, employees, etc.). This processing has been preceded by a prior assessment that your interests or your fundamental rights and freedoms that require the protection of your personal data do not prevail over the interests of the Company or the third party.

Personal data are kept for the time necessary to fulfil the purpose of their processing, otherwise for the period of time required by the applicable legal and/or regulatory framework or the exercise of claims or the defence of the Company's rights and legitimate interests.

More specifically, the criteria on the basis of which we determine the retention period for the various categories of personal data are as follows:

a. the purpose for which the personal data are collected,

b. how long it will take to achieve this goal,

c. any legal obligation to retain the personal data for a specified period of time; and

d. the need to keep the data for the purpose of pursuing claims or defending our rights and legitimate interests.

In particular, if you have created an account on the Website, if you choose to delete it, your personal data collected for the purposes of creating and using this account will be deleted, with the exception of those that their retention is required by the applicable legal and/or regulatory framework or the exercise of claims and the defence of the Company's rights and legal interests.

Our COMPANY processes your personal data in a fair, lawful and transparent manner. We make sure that we have a valid legal basis for processing your personal data and are transparent with you about the processing of your personal data ("lawfulness, objectivity and transparency").

We collect personal data only for specific, specified and legitimate purposes. We process the personal data we have collected for the purposes we have identified or further only for purposes that are compatible with the original purposes we have identified ("purpose limitation").

The personal data we collect and process is only that which is adequate, relevant and strictly necessary for the purposes for which it is processed ("data minimisation") and we take all reasonable steps to ensure that the data is accurate and up-to-date as well as measures to promptly delete or correct personal data that is inaccurate in relation to the purposes of processing ("accuracy").

We do not retain personal data in a form that allows the identification of the data subject for longer than is necessary for the purposes of the processing ("storage period limitation").

We process personal data in a manner that ensures appropriate security, including, but not limited to, protecting it from unlawful or unauthorised processing and from accidental loss, destruction or damage, using appropriate technical or organisational measures ("integrity and confidentiality").

Our highest priority is to process your personal data securely. We take appropriate technical and organisational measures to ensure the security of your data, to safeguard the confidentiality of its processing and to protect it from accidental or unlawful destruction, accidental loss, alteration, unauthorised disclosure or access and any other form of unlawful processing, which are constantly reviewed and modified when necessary. However, please note that no website and no transaction in the Internet environment provides absolute security. We strive to ensure maximum security by using advanced encryption protocols, data pseudonymisation techniques, etc. In relation to the data used to identify you as a registered account user, namely your username and password, we remind you of your obligation to maintain their secrecy from third parties.

In the fulfilment of the Company's contractual and legal obligations, in order to serve its legitimate interests or those of third parties, as well as in cases where the Company has obtained your consent, the recipients of your data necessary for the purpose of the transfer may, for example, be:

The competent employees and members of the Company's management in the context of their duties (onaneedtoknowbasis).Third parties with whom we cooperate or provide services that support or facilitate the provision of services on behalf of our Company, such as, but not limited to:

a. email management and distribution tool providers - for example, if you sign up to receive olivecollection e-shop newsletters or other promotional emails, we will manage their delivery to you using a third party email distribution tool,

b. security and fraud prevention service providers - for example, we use providers to identify users of automated software that may disrupt our services or to prevent misuse of our services,

c. data aggregation and analytics software service providers that allow us to efficiently monitor and optimise the delivery of your orders,

d. software platform providers that help us communicate with you or provide you with customer support services - for example, we manage and respond to any messages you send us through our help centre using a third party communications management tool,

e. providers of online cloud storage and other core IT and/or support services,

f. providers of postal services and/or transport/ courier services,

g. companies promoting products and/or services - advertising companies,

h. customer satisfaction or market research companies in general,

i. call management companies (call centres)

j. companies that provide reviewingservices for the evaluation of the products included in the "olivecollection e-shop" as well as the service of online ordering for customers

k. delivery points contracted with the Company, which are specifically mentioned in the e-shop. If you choose to receive your order for products placed through the e-shop from a Delivery Point contracted with the Company, we will transmit to it the absolutely necessary data, namely your name and surname, the number and date of your order and the products you ordered, so that it can deliver your order to you.

Supervisory, independent, judicial, prosecutorial, police, public and/or other authorities within their competence, accredited mediators and mediation service centres, arbitration courts and alternative dispute resolution bodies. Lawyers, law firms, bailiffs, experts, surveyors, chartered accountants/auditors and providers of advisory services (including financial, etc.) within their remit.

We may transfer your data to third parties, potential or existing purchasers of all or part of the Company's business or assets (including rights) or those entitled to charge them. We may also collect information from you from some third parties e.g. advertisers, marketing networks etc. using cookies and similar technologies (for more information please see our Cookies Policy which contains a specific section on third party cookies). This can only be done if you have given your consent to the use of such cookies. Other third parties to transfer data to which you have given your consent.

For the terms of processing of your personal data by those of the above recipients who have the status of an independent controller, we recommend that you refer to their respective privacy notices.

The Company may transfer your personal data to third countries or international organisations outside the European Economic Area (EEA) only if:

(a) an adequate level of protection is ensured, in accordance with a decision of the European Commission, by the third country, a territory or one or more specific sectors in that third country or by the international organisation; or

(b) appropriate safeguards have been provided for their processing on the basis of Union and/or national legislation, usually in the form of standard data protection clauses adopted by the European Commission.

(c) If none of the above conditions apply, transmission may be made if the derogations mentioned in Union and/or national legislation are met, including the following, which are listed here by way of example:

if you have provided the Company with your express consent, if the transfer is required for the performance of your contract with the Company or for the application of pre-contractual measures at your request or for the conclusion or performance of a contract concluded for your benefit, the transfer is necessary for the establishment, exercise or support of legal claims.

You have the following rights:

α) Request to be informed about the categories of your personal data that we hold and process, their origin, the purposes of their processing, the categories of recipients, the time of their retention and your relevant rights (right of access).

b) Request the rectification and/or completion of your personal data in order to make it complete and accurate (right of rectification), by providing any necessary document showing the need for rectification or completion.

c) Request the restriction of the processing of your data (right of restriction).

d) Object to the processing of your personal data (right to object).

e) Request the deletion of your personal data from our records (right to be forgotten) under certain conditions, such as when the data is no longer necessary, you have withdrawn your consent, the data has been unlawfully processed, etc.

f) Request the transfer of your data from the Company to another controller (right to data portability).

g) Withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on consent prior to its withdrawal.

η) Right of Appeal to the Authority:You have the right to appeal to the Personal Data Protection Authority (1-3 Kifissia Street, P.C. 115 23, Athens) if you consider that your rights are violated in any way. For the competence of the Authority and how to file a complaint, you can visit its website (www.dpa.gr - My rights - File a complaint) where detailed information is available.

Please note the following in relation to the above rights:

We may need to ask you for additional information to confirm your identity in order to respond to your request. Your rights under c, d and e may not be met, in whole or in part, if they relate to data necessary for the establishment and/or performance of a contract. The Company shall in any case have the right to refuse your request for restriction of processing or erasure of your personal data if the processing or retention of the data is necessary for the establishment, exercise or maintenance of its legal rights or the fulfilment of its legal obligations. The exercise of the above rights shall act for the future and shall not relate to data processing already carried out.

To exercise your rights, you may contact the Company's data protection officer in writing at the following postal address : Lofos Semeli, Malades, Heraklion, Crete, Greece, P.O. Box 71500 or by e-mail at info@olivecollection.gr. You may also use the above mentioned contact details to address any questions or queries you may have regarding this Policy.

Specifically for your right to withdraw your consent, we clarify that you can exercise it as described in the immediately preceding paragraph of this section 13 and, where applicable, in more specific ways, such as by selecting the relevant unsubscribe hyperlink from a list of recipients that will be located at the bottom of each email you receive (e.g. newsletters or messages of a promotional/advertising nature).

Also through your account you have access to your data collected for your registration and in connection with the operation of your account and you have the ability to correct them as well as to remove your account and consequently unsubscribe from the Website which will result in the deletion of your data as specifically mentioned above in section 7 hereof.

Every effort will be made to respond to your request within thirty (30) days of receipt. This time limit may be extended for sixty (60) additional days, if necessary, taking into account the complexity of the request and the number of requests. You will be notified in any case of extension of the deadline within thirty (30) days of receipt of the request. The above service is provided free of charge. However, in the event that your requests are manifestly unfounded, excessive or repetitive, you may be charged a reasonable fee, after informing you and taking into account the administrative costs of providing the requested information or carrying out the requested action, or a refusal to respond to your request(s).

We may amend this Policy from time to time to ensure that it is always in line with legal requirements and the reality of the processing carried out by us. If we decide to make significant changes to this Policy, we will inform you by any appropriate means, including, but not limited to, by means of a notice on this Website (e.g. via banner, pop-up window) and/or by email, etc. To keep you informed of the latest/updated version of the Policy, in case we make minor changes or improvements to it, we recommend that you regularly check this page where it (the Policy) will be permanently posted.