Privacy Policy - Cookies

What are cookies?

A cookie is a small piece of text sent to the browser by a website the user visits. It helps the website remember information about your visit, such as your preferred language and other settings. Doing so can make their next visit easier and make the site more useful to them. Cookies play an important role. Without them, using the web would be a much more complicated experience.

Why do we use cookies?

Cookies are used for many reasons. They are used, for example, to remember the user's preferences regarding secure search, to calculate the number of visitors to a page or to make it easier for the user to register for services and to protect their data.

Site Functionality and Content

The user sharing feature is used by visitors to recommend the websites and content to social networks such as Facebook. Cookies store information about how visitors use the sharing function – although not at an individual level – in order to improve the website. If you do not accept cookies, no information is stored. For some of our website functions, we may use third-party vendors, for example, when you visit a page with embedded photos, videos or YouTube links. These videos or links (and any other content from third-party providers) may contain third-party cookies, and you can consult the policies of those third-party websites for information about their use of cookies.

How can I reject and delete cookies?

We will not use cookies to collect users' personal data, unless there is their express consent. However, you can choose to reject or block cookies by changing your browser settings – for more details, see the “Help” function in your browser. Note that most browsers automatically accept cookies, so if you do not want cookies to be used, you may need to delete or actively block cookies. For information on the use of cookies in mobile browsers and for details on how to reject or delete such cookies, please see your browser settings.
Please note, however, that if you reject the use of cookies, you will be able to visit our websites, but some of the functions may not work properly.

More information on the use of cookies can be found on the page: http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm

Review of Legal Notice

We reserve the right to make any changes and corrections to this statement. We invite you to return to this page periodically to review current and new, additional information.

Update on the Processing of Personal Data

We would like to inform you that for iStorm the protection of the personal data of our customers is of primary importance. For this reason, we take the appropriate measures to protect the personal data we process and to ensure that the processing of personal data is always carried out in accordance with the obligations set by the legal framework, both by the company itself and by third parties who process personal data on behalf of the company.

What is GDPR?

The General Data Protection Regulation (GDPR) is the new regulatory framework of the European Union (EU) in the field under consideration. The object of the law is to establish the conditions for the processing of personal data, to protect the rights and freedoms of natural persons and in particular the right to the protection of personal data.

What categories of personal data do we process?

We only process the personal data you provide us with your name, email, mobile/landline phone number, residential address, and occupation when we have a legitimate reason to do so.

What are the legitimate reasons for processing your personal data?

Legitimate reasons for processing your personal data are:

(a) the provision of the services you entrust to us and wish to receive from us such as for example the purchase of products and consequently the fulfillment of our contractual obligations in this context

(b) safeguarding and protecting our legitimate interests, both yours and ours. Thus, we use closed circuit television (CCTV) and security cameras in order to be able to protect the safety of individuals, materials, facilities

(d) the consent you provide under the specific conditions set by the legal framework, in order to receive updates on products, services, offers, etc., both CERAHELLAS and other companies of the Group to which CERAHELLAS belongs or third-party collaborating companies, which process personal data in accordance with the applicable framework.

Statement

By giving your consent, you responsibly declare that you are over 16 years old. If you are under 16, you may only use our website with the involvement and approval of a parent or guardian.

How and why do we use your personal data?

• Create Account

Personal data is collected when you create an account on CERAHELLAS, a website operated by CERAHELLAS. When creating an account you may be asked for more information, however the minimum for entering into and executing the contract will be marked as a mandatory field.

Also, by creating an account in our e-store you can edit the data to add or remove items. This information will be used to make the checkout process easier each time you visit our e- store and choose to be logged in.

• Execution of Order

Personal data is also collected when you place an order in our e-store, CERAHELLAS. To complete your order and create an account, you may be asked for more information, but it will be the minimum for the conclusion and execution of the contract. The information in question is marked as a mandatory field.

As part of completing the order, some of this data is transferred to partner companies. Therefore, they are transferred to transport companies for the transport and delivery of your goods. Transport companies may contact you to ask for clarifications and to inform you about the delivery of your products. In addition, the data is transferred during payment execution to payment providers. We, for our part, use high security systems to avoid leakage of data from malicious systems.

• Sending informative and advertising material/company news

During your visit to our website, CERAHELLAS, you have the option to fill out a contact form, providing your email address in order to subscribe to our Newsletter.

The data collected from our websites may be used to contact you for promotional and advertising purposes, to inform you about products and offers that may be of interest to you, by email, SMS, instant messaging or telephone, if you have given your consent, under the specific conditions set by the legal framework.

• Safeguarding our legitimate interests and the protection of persons and goods

When we use closed circuit television (CCTV) and security cameras in order to be able to protect the safety of individuals, property and facilities.

• Personalized information (profiling)

In order to provide you with the best possible experience, personal data collected from our websites may be used to send you personalized updates, provided you have given your consent, under the specific conditions set by the legal framework. The personalization based on your needs and preferences (profling) results from the information we derive from your personal data, such as occupation, area of residence, etc., based on the results of the

Customer Satisfaction Survey, based on the purchases you make, as well as based on of the personalized data we receive from the newsletter automation platform.

Storage Period

The period of data storage is decided based on the following specific criteria depending on the case:

When the processing is imposed as an obligation by provisions of the applicable legal framework, your personal data will be stored for as long as the relevant provisions impose.

When the processing is performed on the basis of a contract, your personal data is stored for as long as is necessary for the performance of the contract and for the establishment, exercise, and/or support of legal claims based on the contract.

For the purposes of promoting products and services (marketing activities), your personal data is kept until you withdraw your consent. This can be done by you at any time. The withdrawal of consent does not affect the lawfulness of the processing that was based on the consent during the period before its withdrawal.

You can also use the unsubscribe options by following (clicking) on the corresponding link (link), present in our electronic communications.

What are your rights in relation to your personal data?

Every natural person whose data is processed by CERAHELLAS enjoys the following rights:

Access right:

You have the right to be aware of and verify the lawfulness of the processing. Therefore, you have the right to access the data and receive additional information about its processing.

Right of rectification:

You have the right to study, correct, update or modify your personal data

Right to erasure:

You have the right to request the erasure of your personal data when we process it based on your consent or in order to protect our legitimate interests. In all other cases (such as indicatively when there is a contract, an obligation to process personal data imposed by law, public interest), the right in question is subject to specific limitations or does not exist as the case may be.

Right to restrict processing:

You have the right to request restriction of the processing of your personal data in the following cases: (a) when the accuracy of the personal data is disputed and until verification

is made, (b) when you object to the deletion of personal data and request instead of deletion the restriction of its use, ( c) when the personal data is not needed for the purposes of processing, but is nevertheless necessary for the establishment, exercise, support of legal claims, and (d) when you object to the processing and until it is verified that there are legitimate reasons that concern us and override the reasons for which you object to the processing.

Right to object to processing:

You have the right to object at any time to the processing of your personal data in cases where, as described above, this is necessary for the purposes of legitimate interests pursued by us as controllers, as well as to processing for the purposes of direct marketing and consumer profiling.

Right to portability:

You have the right to receive your personal data free of charge in a form that will allow you to access it, use it and process it with commonly used processing methods. You also have the right to ask us, if technically possible, to transfer the data directly to another data controller. This right of yours exists for the data you have provided to us and their processing is carried out by automated means based on your consent or in execution of a relevant contract.

Right to withdraw consent:

Finally, CERAHELLAS informs you that where the processing is based on your consent, you have the right to withdraw it freely, without prejudice to the lawfulness of the processing based on your consent, before you withdraw it. To withdraw your consent you can use the unsubscribe options, by following (clicking) on the corresponding link (link), present in our electronic communications.

Right of complaint to APDPH

You have the right to submit a complaint to the Personal Data Protection Authority (www.dpa.gr): Telephone Center: +30 210 6475600, Fax: +30 210 6475628, Email: contact@dpa.gr.

Security of Personal Data

CERAHELLAS implements appropriate technical and organizational measures aimed at the secure processing of personal data and the prevention of accidental loss or destruction and unauthorized and/or illegal access, use, modification or disclosure thereof. In any case, the way the internet works and the fact that it is free to anyone does not allow guarantees to be provided that unauthorized third parties will never be able to violate the technical and organizational measures in place by accessing and possibly using personal data for unauthorized and/or illegal purposes.

Preservation of your personal data

In general, we will delete the personal data we collect from you if it is no longer necessary to achieve the purposes for which it was originally collected. However, we may be required to store your personal data for a longer period due to legal provisions.

In addition, we will not delete all of your personal data if you have asked us not to contact you in the future. For this purpose, the company maintains records containing information about individuals who do not wish to be contacted in the future (for example via group e- mails). We categorize your requests as consent to store your personal data for the purposes of maintaining that record unless you instruct us otherwise.

Please direct questions regarding data protection and any requests to exercise your legal rights to www.cerahellas.com.gr.

Profile preparation

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects of a natural person, in particular to analyze or predict aspects related to his personal preferences and interests or movements.

We inform you that profiling for marketing purposes takes place when you consent to receive updates about our services and offers, tailored to your personal preferences and interests.

Secure Transactions

CERAHELLAS is committed to ensuring the security and integrity of the data it collects about its website users. CERAHELLAS has adopted procedures, which protect the personal data of users who provide it by any means. These procedures protect user data from any unauthorized access or disclosure, loss or misuse, and alteration or destruction. They also help to ensure that this information is accurate and used correctly. Your connection to this website is secure because it uses TLS technology. TLS technology relies on a key code to encrypt data before it is sent over the (TLS) connection. The security check between the data and the server is based on the unique key code ensuring the integrity of the communication.

We implement an appropriate level of security and have therefore implemented reasonable physical, electronic and administrative procedures to safeguard the data we collect from accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data transmitted, stored or they are processed in a different way. Our information security policies are closely aligned with widely accepted international standards and are regularly reviewed and updated, whenever necessary, to meet our business needs, changes in technology and regulatory requirements. Access to your personal data is granted only to the personnel or direct partners with the company who are required to have such information for the service of the orders. In the event of a data breach containing personal data, the company will comply with applicable breach notification laws.

Your legal rights

As a data subject, you have specific legal rights regarding the personal data we collect from you, our customers, not necessarily through CERAHELLAS.gr. Listed below are your legal rights under applicable data protection laws:

Right of rectification Right of limitation Right of access Right of portability Right to erasure Right to object
Right to withdraw consent Right to file a complaint
We will try to fulfill your request within 30 days. However, the deadline may be extended for specific reasons related to your specific legal right or the complexity of your request. In some cases, especially in the data collected from visitors to CERAHELLAS.gr, we may not be able to search for your personal data due to the identifiers you provide in your application. An example of personal data that we cannot look up when you provide your name and email address is data collected through browser cookies. In such cases, where we cannot identify you as a data subject, we are unable to comply with your request to exercise your legal rights as described in this article, unless you provide us with additional information that allows you to be identified. In order to exercise your legal rights, please contact us in writing via email at www.cerahellas.com.gr.