Privacy Policy

Maintaining the privacy of our consumers is our absolute priority. The management and protection of personal data is governed by the specific Convention and the relevant provision of both Greek and Community International Law for the protection of individuals from the processing of personal data. In addition to these decisions on the Protection of Personal Data, which we respect and adhere to, any future modification of the above regulatory framework will be the subject of this contract. In order to provide the best and highest quality services, we collect personal information upon your express consent and after you have fully familiarized yourself with your rights, as provided for in the provisions of GDPR Regulation 679/2016 and the present interpretative Greek law on the protection of personal data. Our primary concern is the provision of high-standard services with respect for the rights, fundamental freedoms and privacy of our website users, so we take all necessary and necessary measures based on the law, adopting modern technological procedures, advanced technical equipment and software. visitors and users of the website’s services during their browsing of websites may be required to voluntarily provide information and data about them in order to register for services, place orders for products or services, receive updates and enjoy services offered on the tafarlisfurs website. Personal data is only collected by us if you register for our services as a member and is limited to your full name, email address, address (street, number, city, postal code), contact telephone number and invoice numbers (VAT numbers). You expressly agree to the collection and processing of the above personal data, without which we cannot offer you our services and you can revoke or modify them at any time (Article 7 of EU Regulation 679/2016). We reserve the right to change the terms of personal data protection without notice, following the applicable regulatory framework. Please, as you periodically check these terms for any changes, your continued participation in our services implies acceptance of any possible modifications. Personal data includes all information about the subject of the data, together with the exceptions provided by law. Personal data (Simple and Sensitive) according to Article 4 Paragraph 1 of EU Data Protection Regulation 679/2016, is: any information related to the identification of a natural person (“data subject”) whose identity can ascertained, directly or indirectly, in particular by reference to an identifying name, identification number, location data, online identifier or one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of the natural person. Simple personal data is all non-sensitive. The processing of personal data of visitors and users is the set of operations carried out with or without the use of automated means such as collection, recording, organization, structure, storage, adaptation or modification, retrieval, information retrieval, use, disclosure by transmission, dissemination or any other form of disposal, connection or combination, restriction, deletion or destruction (in accordance with Article 4 Paragraph 2 of Regulation 679/2016 EU). The processing of user data by the company is private. Our Company takes appropriate organizational and technical measures to protect user data, where it protects them from accidental or unlawful destruction, accidental loss, modification, unauthorized disclosure or access and any other form of unfair treatment. The Company, acting in accordance with the principles of legality, objectivity, accuracy, transparency, integrity and privacy, limitation of purpose, minimization and limitation of the storage period, processes the user data it legally obtains (Article 5 of EU Regulation 679 /2016), subject exclusively to the consent of the subjective user of the data. The company declares that it legally processes the user data it collects in a legal and legitimate way, for specified, explicit and legal purposes, which are subject to fair and legal processing due to these purposes. Objectives that justify the processing are, among others, the execution of the orders of the users of this website, the requested information of the users through a newsletter and in general the more effective provision of the offers of the Company’s services to them.

The processing is limited to the necessary extent by collecting more data than is necessary for processing purposes at a time and is accurate and, if necessary, up-to-date and kept in a form that allows identification of the subject only during the period necessary for the collection and processing (articles 5, b, c and e, Regulation 679/2016 EU). Our Company files contracts with the users – users of this website, within the institutional framework and for the smooth handling of orders. Users can access them if specifically requested. Unique, restrictive cases referred to in the law (No. 6 (1) of Regulation 679/2016 EU), in which our Company can process the simple data of users without their consent, are the following:

  1. The processing is necessary for the performance of a contract in which the data subject is participating or for taking action at the request of the data subject prior to the conclusion of a contract.
  2. The processing is necessary to comply with a legal obligation of the administrator.
  3. The processing is necessary to safeguard the vital interest of the subject or other natural persons if he is physically or legally incapable of giving his consent.
  4. The processing is necessary for the performance of a task carried out in the public interest or the exercise of the public authority entrusted to the administrator.
  5. The processing is necessary for the legitimate interests pursued by the manager or a third party, unless this interest overrides the interest or the fundamental rights and freedoms of the data subject for which the protection of personal data is required, the data subject he is a child.

In addition, the processing of data by our Company is also permitted when: the user, after being informed of the type of data, the purpose and extent of the processing, the recipients or categories of recipients have consented, or the processing is necessary for the performance of the contract , in which the user participates, or to take measures at the pre-contractual stage, at the request of the subscriber even without the user’s consent (Article 5, paragraph 2 of Law 4771/2006). The design and selection of technical means and information systems, as well as the equipment to provide users with our Company’s services, are based on the processing of as little personal data as possible. The authorized storage and processing of the above is indicative of the user’s information, the processing of his order, the provision of the requested services and any action based on the user’s contract with our Company. Users’ sensitive personal data, as described in the law, is not collected by the Company in any way. As an exception to this rule, the Company may collect and process sensitive personal data under the strict, legal conditions (Article 9 paragraph 2 of Regulation 679/2016 EU).

The consent of the data subject is any indication of will, free, specific, explicit and in full knowledge of the data, the subject stating that he agrees by a statement or by a clear positive action, to which the personal data concern. This information includes, at least for the processing, the data or categories of data concerned by the processing, the recipients or categories of recipients of the personal data, and the name and address of the controller and his representative. Consent can be withdrawn at any time, without retroactive effect (Article 7 paragraphs 1 to 4 of EU Regulation 679/2016). The document type is not required for consent to the processing of simple user data, so consent can also be given electronically in any convenient way. Users of this website at the stage of data collection are properly and clearly informed about the purpose of the processing and the recipients of their data. Users enjoy legal rights to their personal data, including the right to information, access to their data and objections to the specific provisions of the law (Articles 12-15 of EU Regulation 679/2016). In particular, the data subject has the right to demand from the controller without undue delay to correct inaccurate personal data concerning him and to request the deletion of this data (Articles 16-17 of Regulation 679/2016 EU). Users also have the right to transfer their data to another processor without objection from our Company (Articles 18-20 of Regulation 679/2016 EU).

The credit card details are not stored in our company’s storage media during the transaction but are published directly in a secure environment of the partner bank payment service that has undertaken the routing of the cards. Our Company respects the Secure Sockets Layer (SSL) protocol, which is currently the global standard on the Internet for authenticating websites to network users and encrypting data between network users and web servers. An encrypted SSL communication requires that all information sent between a client and a server be encrypted by the sending software and decrypted by the receiving software, thus protecting personal information in transit. In addition, all information sent under the SSL protocol is protected by a mechanism that automatically verifies whether the data has changed in transit. To provide better services and an improved user experience, the tafarlisfurs website uses cookies. Cookies are small text files that a website stores on the user’s/visitor’s computer or mobile device (Smartphone, tablet, etc.) when they visit it through the browser. In this way, the website remembers the user’s actions and preferences (such as login, language, font size and other display preferences) for a period of time, so there is no need to re-enter these preferences each time the website is visited or flips through its pages. The use of one or more cookies further helps to understand user behavior to optimize the services provided by us. Cookies help track, traffic and website traffic. In no case will cookies store your personal information or information that will allow any third party to contact the website visitor via email, phone, etc. In addition, cookies do not have access to documents or files on the user’s computer visitor. The cookies used are the following:

  1. Necessary cookies: Necessary cookies are necessary for the proper functioning of the website and allow users to browse and use the functions of this website in a busy way (eg session cookies). These cookies do not identify or store your individual identity and are deleted when you leave the website. Without these cookies, the website cannot function effectively. In addition, without these cookies, functions such as logging into an account created by the user, purchasing products online and online payments are impossible.
  2. Performance cookie returns are related to the collection of information about the behavior of users when navigating the website and the storage of information about usage and performance statistics, etc. The purpose of these cookies is to collect information that improves the website and browsing.
  3. Usability cookies store information about the use of this website that appears on a subsequent visit, thus facilitating the user. This data is not available when the third party visits the user.
  4. Third-party cookies, such as Google Analytics. Google Analytics is a web analysis service provided by Google, Inc. (“Google”). Google Analytics uses cookies to analyze how users use the site, demographics, accessibility technologies and more. These cookies are governed by Google’s Privacy Policy located here.

Our Website Services may include links to third-party websites in the future to which our users may be directed. Please note that we are not responsible for the privacy practices of such third-party websites. We encourage our users/visitors to read the data protection statements/policies of any third party websites they link to from our website. Visitors-users of the tafarlisfurs website when they provide their information in the context of their transactions with the store, membership registration and any other case, are informed, consent and accept the processing of their personal data for the needs of smooth processing the transaction and the appropriate provision of the services of this website.

The voluntary registration by the users of our online store of personal data entitles our Company to process this data for the execution of orders and the provision of the required services to users. Visitors to the tafarlisfurs website by this entry provide their legal consent to the processing of their personal data provided by the Company under the law.