Privacy Policy

Privacy Policy cretashop.gr

This Website collects some personal data from its users.

Owner and data controller : cretashop.gr

Contact email : [email protected]

Types of data collected

Among the types of Personal Data collected by this Website, alone or through third parties, are: Cookies, User Data, name and email address.

Complete information about each type of personal data collected is provided in the specific sections of this privacy policy.

The Personal Data may be provided freely by the User or, in the case of User Data, may be collected automatically while using this website.

Unless otherwise specified, all data requested by this website is mandatory and non-provision of this data may make it impossible to provide the services of this website. In cases where the specific website explicitly states that certain information is not mandatory, users are free not to disclose this data without any consequences for the availability or operation of the service.

Users who are unsure of the required personal data are welcome to contact the site owner.
Any use of the Cookies – or other tracking tools – by this Website or by third party service providers used by this Website serves the purpose of providing the Service required by the User, in addition to any other purpose described in this document and the Policy cookie.

Users are responsible for any personal data of third parties obtained, published or disclosed through this Website and confirm that they have the consent of the third party to provide the Data to the Owner.

Method and place of processing of the Data

Processing methods

The Owner shall take appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of the Data.
Data processing is performed using computers and / or IT tools, following organizational procedures and ways that are strictly related to the purposes stated. In addition to the Owner, in some cases, the Data may be accessible to technical support providers, email providers, hosting providers, contact providers, who are designated, if necessary, as data processors by the owner. The updated list of these parts can be requested by the User at any time.

Legal basis of the processing

The Owner may process Personal User Data if one of the following applies:

• Users have given their consent for one or more specific purposes. Note: According to some laws, the Owner may process Personal Data until the User objects to such processing (“opt-out”), without having to rely on consent or any of the following legal bases. Is this not the case, however, when the processing of personal data is subject to European data protection legislation?
• is the provision of Data necessary for the fulfillment of an agreement with the User and / or for any pre-contractual obligations?
• is the processing necessary to comply with a legal obligation to which the Owner is subject?
• is the processing related to a project performed in the public interest or to the exercise of power held by the owner?
• the processing is necessary for the purposes of the legitimate interests pursued by the owner or third parties.

In any case, the owner will be happy to help clarify the specific legal basis that applies to the processing and in particular whether the provision of Personal Data is a legal or contractual requirement or is required for the conclusion of a contract.

Locus

The Data is processed at the Operating Office of the Owner and at any other point where the parties involved in the processing are located.

Depending on the user’s location, data transfers may involve the transfer of user data to a country other than their own. To learn more about where such transferred data is processed, users can check out the section that contains details about the processing of personal data.

Users also have the right to know the legal basis of data transfers to a country outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the UN, and the security measures taken. by the Owner for the protection of their Data.

If such a transfer takes place, users can learn more by checking the relevant sections of this document or by asking the owner using the information provided in the Contact section.

Shelf life

Personal data must be processed and stored for as long as required by the purpose for which it was collected.

Therefore:

• Personal Data collected for purposes related to the performance of the contract between the owner and the user is retained until the contract is completed.
• The Personal Data collected for the purposes of the Owner’s legitimate interests are retained as long as necessary to fulfill those purposes. Users can find specific information about the legitimate interests pursued by the Owner in the relevant sections of this document or by contacting the Owner.

The Owner may be able to keep the personal data for a longer period of time, whenever the User has given his consent for such processing, provided that this consent is not withdrawn. In addition, the Owner may be required to retain the Personal Data for a longer period of time, whenever required to fulfill a legal obligation or upon order of an authority.

Once the retention period expires, the Personal Data will be deleted. Therefore, the right of access, the right of deletion, the right of correction and the right of data transfer can not be exercised after the end of the retention period.

Purpose of processing

User Data is collected to enable the Owner to provide its Services, as well as for the following purposes: Analytics, Data Traffic Optimization and Distribution, User Communication, Interaction with external social networks and platforms, and Advertising.

Users can find more detailed information about the purposes of this processing and the specific Personal Data used for each purpose in the relevant sections of this document.

Detailed information on the processing of personal data

Personal Data is collected for the following purposes using the following services:

1.Analytics

The services included in this section allow the Owner to monitor and analyze traffic to the Website and may be used to monitor user activity.

Google Analytics (Google Inc.)

Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the data collected to track and monitor the use of this website, to generate reports about its activities and to share them with other Google services.

Google may use the data collected to create contextual and customized ads for its own ad network.

Personal data collected: Cookies and User Data.

Edited by: United States –  Privacy Policy  –  Opt Out . Privacy Shield participant.

2.Communication with the User

Contact form (on this website)

By filling in the contact form with their data, the User authorizes this Website to use this information to respond to requests for information or any other request, as indicated by the contact form.

Personal data collected: email address and name.

Newsletter (on this site)

By subscribing to the newsletter, the User’s email address will be added to the contact list that will receive emails containing commercial or advertising information about this website.

Personal data collected: email address.

3. Interaction with external social networks and platforms

This type of service allows interaction with social networks or other external platforms directly from the pages of this website.

The interaction and information received through this Website are always subject to the Privacy settings of the User for each social network.

This type of service may still collect traffic data for pages where the service is installed, even when users are not using it.

ShareThis (Sharethis Inc.)

ShareThis is a service provided by ShareThis Inc., which displays a graphical element that enables interaction with social networks and external platforms as well as the sharing of the contents of this Website.
Depending on the configuration, this service may display graphics that belong to third parties, such as social network administrators where they share interactions. In this case, the third parties providing the widget will be notified of interactions and usage data on the pages where this service is installed.

Personal data collected: Cookies and Usage data.

Place of processing: United States –  Privacy Policy .

Facebook Like Button and Social Widgets (Facebook, Inc.)

The Facebook Like button and social widgets are services that allow interaction with the social network Facebook provided by Facebook, Inc.

Personal data collected: Cookies and Usage data.

Place of processing: United States –  Privacy Policy . Privacy Shield participant.

Twitter Tweet Button and Social Widgets (Twitter, Inc.)

The Twitter Tweet button and social widgets are services that allow interaction with the Twitter social network provided by Twitter, Inc.

Personal data collected: Cookies and Usage data.

Place of processing: United States –  Privacy Policy . Privacy Shield participant.

4. Optimization of data traffic and Distribution

This type of service allows the website to distribute its content using servers located in different countries and to optimize their performance.

The personal data that is processed depends on the characteristics and the way in which these services are implemented. Their function is to filter the communications between this website and the user’s browser.

CloudFlare (CloudFlare Inc)

CloudFlare is a data traffic and distribution optimization service provided by CloudFlare Inc.

The way the CloudFlare service is used is to filter all the traffic through this Website, ie the communication between this website and the user’s browser, while also allowing the collection of detailed data from this website.

Place of processing: United States –  Privacy Policy .

5. Advertising

This type of service allows the use of the User Data for the purpose of communicating ads that appear in the form of banners and other ads on this Website, possibly based on the interests of the Users.
This does not mean that all personal data is used for this purpose. Information and terms of use are presented below.
Some of the services listed below may use Cookies to identify Users or use the retargeting technique, ie display ads tailored to the user’s interests and behavior, including those crawled outside of this Website. For more information, check the privacy policies of the relevant services.

Linkwise

Linkwise is the first and largest Affiliate Network in Greece.

Personal data collected: Cookies and Usage data.

Place of processing: Greece –  Privacy Policy .

Users’ rights

Users may exercise certain rights regarding the data processed by the Owner.

In particular, users have the right to do the following:

• Withdrawal of their consent at any time . Users have the right to withdraw their previously given consent for the processing of their personal data.
• Object of processing their data . Users have the right to object to the processing of their data if the processing takes place on a legal basis other than their consent. More details are provided in the special section below.
• Access to their data . Users have the right to know if they are processing data by the Owner, to be notified of certain aspects of the processing and to obtain a copy of the data being processed.
• Verification and correction .  Users have the right to verify the accuracy of their Data and request their update or correction.
• Limit the processing of their data . Users have the right, under certain conditions, to restrict the processing of their Data. In this case, the Owner will not process his Data for any purpose other than their storage.
• Delete or delete their personal data . Users have the right, under certain conditions, to ensure the deletion of their Data by the Owner.
• Download their data and transfer to another controller . Users have the right to receive their data in a structured, widely used and machine-readable format and, if technically feasible, to pass it on to another controller without hindrance. This provision applies provided that the Data is processed by automated means and that the processing is based on the User’s consent, to a contract to which the User is a party or to its pre-contractual obligations.
• Filing a Complaint . Users have the right to file a claim with the competent data protection authority.

 

Details of the right to object to the processing

When personal data is processed in the public interest, in the exercise of official authority vested in the owner or for the purposes of the legitimate interests pursued by the owner, users may object to such processing by providing a reason relating to the particular their situation to justify the objection ..

However, users should be aware that if their personal data is processed for the purpose of direct commercial exploitation, they may oppose such processing at any time without providing any justification. To find out if the owner processes the personal data for direct marketing purposes, users can refer to the relevant sections of this document.

How to exercise these rights

For any requests for exercise of the User rights you can contact the owner through the contact details provided in this document. These requests can be made free of charge and will be settled by the Owner as soon as possible and always within a month.

Additional information on data collection and processing

Legal action

The Personal Data of the User may be used for legal purposes by the Owner in the Court or in the stages leading to possible legal actions arising from the improper use of this Website or the relevant Services.
The User states that he is aware that the Owner may be required to disclose personal data at the request of the public authorities.

Additional information about the user’s personal data

In addition to the information contained in this privacy policy, this Website may provide the User with additional and relevant information regarding specific Services or the collection and processing of Personal Data upon request.

System logs and maintenance

For operational and maintenance purposes, this Website and any third party service may collect files that record interaction with that Website (system logs) and other personal data (such as IP address).

Information not included in this privacy policy

More information about the collection or processing of Personal Data can be requested from the Owner at any time. See the contact information at the beginning of this document.

How to handle “Do Not Track” requests

This site does not support “Do Not Track” requests.
To find out how Do Not Track requests are handled by any of the third party services used, read their privacy policies.

Changes to this privacy policy

The Owner reserves the right to make changes to this Privacy Policy at any time by notifying its users on this page and possibly on this website and – if technically and legally feasible – sending notice to Users via any contact information are available to the Owner.

In the event that the changes affect the processing procedures performed based on the User’s consent, the Owner will collect new consent from the User, where required.

Legal information

This privacy statement is based on the provisions of a number of pieces of legislation, including 13/14 of Regulation (EU) 2016/679 GDPR (General Data Protection Regulation).

This privacy policy applies solely to this website. 07/09/2020

Cookies

To ensure the proper functioning of the website, we sometimes place small data files on your computer, the so-called “cookies”. Most major websites do the same.

What are cookies?

Cookies are small text files that a website stores on your computer or mobile device when you visit that website. This way, the site remembers your actions and preferences (such as password, language, font size and other display preferences) for a period of time, so you do not have to enter those preferences every time you visit the site or browse its pages.

How do we use cookies?

The Website uses cookies in order to facilitate the user’s navigation on it and to provide a unique browsing experience to the user. The cookies used by the Website are divided into four main categories.

1. Basic Cookies

These cookies are necessary for the operation of the Website.

2.Cookies Performance Analysis

We use these types of cookies to monitor the performance of our websites and how their users can use them. These cookies provide us with information that helps us provide better articles and services to users. They also help us identify areas of our website that are not working properly or that need maintenance.

3. Functional Cookies

Functional cookies are used to make the website remember your preferences on our websites. This can be anything from remembering your choice to display the website or saving your choice to close pop-ups.

4. Behavioral Cookies – Advertising / cookies of third parties

Our partners use cookies to provide personalized ads.

Behavioral advertising is based on the activity you did while browsing the web for a specific period of time.

These cookies do not collect the personal data of the user who always remains anonymous.

How to control cookies

You can control and / or delete cookies according to your wishes. Details can be found here:  aboutcookies.org . You can delete all cookies that are already on your computer, as well as configure most browsers to prevent the installation of cookies. However, in this case, you may have to adjust some preferences yourself each time you visit a webpage, and some services may also not work.