Privacy Policies

Ι. INTRODUCTION

In general

Respect for your privacy and the management, protection and security of your personal data are a priority for kirkishop (or “Company“, “kirki” “we“, “us“). The Company has established this Data Protection Policy, which includes the Cookies Policy as a single text and an integral part of it (hereinafter the “Data Policy” or the “Policy“), in order to inform you who visit or purchase from www .kirkishop.gr (hereinafter “e-shop“, “Electronic Store” or “Website” or “kirki“), or you become our member or subscribe to the list of recipients of our Newsletters, or in any other capacity you use the services of kirki or participate in its promotional or other actions, or use social media (Social Media) of kirki, or otherwise, (hereinafter “you”, “your”),

about the type of data it collects or generates about you and,
the purpose of collecting and processing your data and,
the way in which this data is processed and,
their recipients and the purpose of processing on their part,
about your rights and choices in your personal data and,
how to contact us for any issue that may concern you in relation to your personal data.

Amendments:

This version was updated on 05/15/2019. This Policy supersedes any prior notices we may have provided in the past regarding our information practices. This Data Protection Policy is governed by both the relevant provisions of Greek and Community law regarding the protection of the individual from the processing of personal data. Any possible future change of the above regulatory framework will be the subject of this. We therefore reserve the right to change this statement and to implement any change to your data and our practices regarding the collection and processing thereof, in accordance with what is provided by law, and/or to modify or replace the whole and/or part of this Policy at our sole discretion.

If there are material changes to this Policy or our practices regarding your data change in the future, we will notify you by posting the changes on our Website. However, in case you want any clarification or information regarding the changes, or you have any disagreement, reservation or question related to them (changes), you can contact us at the details mentioned in the Section below. Please note that any information/clarification provided to you in accordance with the above, regarding possible changes to this Policy, does not constitute a replacement, substitution or any modification of this Policy.

The continuation of your navigation on our Website, or the use of our Services and/or the purchase through our Online Store, implies the automatic and unconditional acceptance of the modified terms of this policy on your part. In the event that you do not agree with the modifications, you must not take any action or use the Website or purchase, much less the provision of personal data, and you are entitled to terminate the contracts between us and request the deletion of your Account and data your. In any case, for any information or clarification, you can contact us, while maintaining your rights regarding your personal data, as analyzed and described in Section V below.

This Data Protection Policy includes:

Information about the Controller of your personal data as well as the contact details of the Personal Data Protection Coordinator (DPC), for any matter related to your data.
The type of data we collect about you and the methods of collection.
The purpose of collecting and processing your personal data and the legal basis for the processing.
The security measures we take to protect your personal data,
The retention period of your personal data.
Your rights and how you can access them, as well as your choices regarding the collection and processing of your data.
The protection and storage of your data.

ΙΙ. PERSONAL DATA PROTECTION OFFICER & COORDINATOR

Who is the Controller?

The person responsible for processing your personal data is the company with the name “ENDYMATON”, based in Douriou Ippou & Laertou, Vathy, Ithaca, in Greece (tel. 2674 033454 thereinafter the “Company”).

Contact the Company’s Privacy Coordinator

You can contact the Company’s Data Protection Coordinator (DPC) at email [email protected] and phone 2674 033454.

Questions and Comments

You can contact us at the contact details mentioned above and submit your comments, questions, observations or any complaints regarding this Policy and the general collection and processing of your personal data. You have the right to submit any complaint regarding your personal data protection issues that may arise from the Company’s processing thereof, to the Greek Personal Data Protection Authority, which is the supervisory Authority in our country. You will find relevant details at the following link www.dpa.gr. However, we consider it our obligation and duty to manage any concerns you may have regarding your personal data that we process, so we will be happy for you to contact us.

ΙΙΙ. DATA COLLECTION AND PROCESSING

Personal data or information of a personal nature means any information concerning an identified or identifiable natural person (“data subject”), the identifiable natural person being one whose identity can be ascertained, directly or indirectly. This data does not include any anonymous data.

WHAT data we collect about you and HOW we collect it

When browsing our Online Store or kirki’s Social Media, placing an order, opening an Account, subscribing to our Newsletter recipient list or as a member of the kirki loyalty program, participating in promotional activities of kirki such as contests, social media interaction (e.g. comments, Likes, etc.) or otherwise, we collect various types of personal data about you, either directly from you, or from third parties or that we collect or create through our own means (including automated means).

Demographic Data: age, gender, place of residence, which are collected directly from the subject on a case-by-case basis or deduced from the subjects’ transactions in our Online Store, etc.
Data through Cookies: Browser, IP address, products you have placed in the cart and have not completed the purchase, the country of origin of your order, the products you are looking at in the Online Store, the Wishlist with your favorites, your origin from others websites.
Marketing data: which includes your preferences about receiving promotional material from us and third parties and your preferences about your communication with us, where we have your consent, your opinion about products you have purchased from us.

We do not, to our knowledge, collect any information from any person under the age of 15. Our services are directed exclusively to people who are at least 15 years of age or older. If you are under 15 year of age, do not use or provide any information to us, do not register as a Member or receive our newsletters, do not make any purchases, and do not give any information about yourself to us, including your name, address, or contact information (phone, email, etc.). If we find that we have collected or received personal data from a person under the age of 15, we will delete it immediately unless consent has been given by a parent or guardian. If you believe we may have information from or about a person under the age of 15, please contact us.

Learn more…

Your Obligation to inform us of changes to your personal data.

It is important that the personal data we hold about you is up to date and accurate. Please inform us as soon as possible of changes regarding your personal data for as long as your business relationship with us lasts.

We collect the following personal data DIRECTLY FROM YOU:

When submitting your order, whether it is online or by phone, you must provide us with your name, shipping address of the products, your email, contact phone number (mobile) and payment information (credit/debit card, etc.). The registration of the card details, their confirmation, the binding of the amount and the final charge are made in a secure environment (SSL) of Piraeus Bank. The website www.kirkishop.gr under no circumstances knows, does not handle and does not store your card details.
When signing up for the Company’s newsletter (Newsletter), you provide us with your email address.
When you register for contests that our Company conducts from time to time, you provide us with your personal information specified on a case-by-case basis.

When you communicate with us on our Company’s social media (Facebook, Instagram, etc.) and with the customer service department (except in cases of telephone ordering), you provide us with your personal information such as identity, communication, or transaction data, which we use on a case-by-case basis exclusively to serve your request.

We collect by AUTOMATED MEANS the following data and information about you.

By using cookies and other similar technologies we collect and/or create data about your preferences, such as the products you visit, the duration and frequency you observe certain products, the types of newsletters you open or not, their content and your interaction with us after each newsletter sending, your Wishlist, the type of products you buy, the search terms you have entered or the links you have clicked on in the Online Store, the products you place in the cart and do not complete the purchase them, the country of origin, language etc.
From your Account we create the history of your orders and your purchases, and from them we deduce your preferences, the frequency of your purchases by type, the value of the products you buy or are interested in, the season in which you buy, the region your residence etc.
Δεδομένα σχετικά με τις συσκευές μέσω των οποίων επισκέπτεστε το Δικτυακό μας Τόπο, όπως για παράδειγμα τη διεύθυνση πρωτοκόλλου διαδικτύου (IP), στοιχεία εισόδου, τύπο και έκδοση του προγράμματος περιήγησης, λειτουργικό σύστημα και πλατφόρμα και άλλη τεχνολογία στις συσκευές που χρησιμοποιείται για να προσπελάσετε το Δικτυακό μας Τόπο κτλ.
Data about the page you logged in from and the page you went to when you left,

We collect from third parties the following data and information about you:

We may receive your personal information such as name and email address from a third party friend of yours who referred you to us in order to receive a gift certificate from us or to send you a gift they have selected for you.
In the event that you subscribe to our service through a social networking platform, we may collect your above personal data directly from the information you have provided on the platform (as long as the social networking platform has the relevant right to share your personal data with us).

Your personal data may be shared with us by third party independent organizations where there is a legal basis for processing and they have a relevant right to do so. In these cases, you must be informed about the processing of your personal data from the relevant Data Protection Statement of these third parties. These organizations may include social media such as Facebook, Instagram, Viber, Twitter.

HOW we use your personal data.

All of your above personal data which, as mentioned, or which you provide to us on a mandatory or voluntary basis, or which we collect from third parties or are generated by automated means, we use for the following legal purposes. Please note that in the event that Community or national law restricts or prohibits certain actions of the Company for which we use your data, we will stop using the information concerning you for these purposes.

In particular, your personal data is used by us for the following purposes:

To receive your orders, process them, and ship the products to you.
Communicating with you about issues related to the sale of our products to you.
To manage, process and process your payments including the security of our financial transaction.
To create, store and maintain a database of our customers and to analyze it.
To send you commercial communication via
Newsletter, SMS, or other multimedia (VIBER) regarding news of our Company, products, offers and promotions.
To analyze your behavior and understand your preferences.
To understand and analyze the results of our advertising and promotions.
To process your requests such as for example withdrawal, product replacement, etc.,
To satisfy your rights regarding your personal data.
For transaction security.
For business analysis and improvements, such as for marketing and optimizing our products, for optimizing your experience and your service from us in our Online Store, for managing customer loyalty programs (Loyalty), as well and to customize your experiences in our Online Store.
For other purposes for which we will notify you, or will be identified as the case may be, at the point where the information about you is initially collected

BY WHAT RIGHT do we use your personal data?

The Legal Basis for using information about you is one of the following (we provide more detailed explanations in the Learn More section):

The performance of a contract to which you are a party.
For communication either at a pre-contractual stage or regarding issues concerning your transactional relationship with the Company, such as when purchasing one of our products in order to inform you of any unavailability thereof, for notification of order execution, for communication regarding the shipment of the product, to inform you of changes to our terms of use or to the Privacy Statement and other policies adopted by the Company.
In order to fulfill our obligations arising from the Sales Agreement, such as for example our payment, the issuance of documents, the correct delivery of the products to you, etc., the Company may process your personal data, such as for example your address and contact details.
To participate in a competition or draw as part of our promotions if you accept the terms of participation.
In particular, the Company may process your personal data such as your email and password
for the purpose of the security of your transactions (e.g. your identification when logging into your Account), your email or your phone for communicating with you in in case of a problem with your Account, your phone number to contact you in case of a problem/stuck while executing your order.
the legitimate business interest that is not overridden by your interests in protecting the information.
To run and protect our business and website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and data retention)
To prevent and deal with fraud and other illegal activities in order to protect the public and the safety of staff, including the video surveillance system.
To provide you with access to your personalized account where you can track your transactions (your past and pending purchases with us), products you are interested in, wish lists you have created, complete your purchases faster, etc. The details and content of the user profile are visible to you at all times.
To offer you services that are useful, easy to use and enjoyable, including personalized communication with you in the way you wish and have indicated, and products that are of interest to you and are of benefit to you, according to your preferences.
To better understand your shopping habits so that we can develop and improve our products and services and tailor the website content to your needs and preferences.
To measure the effectiveness of the Company’s presentation and visibility on third-party websites.
To analyze the effectiveness of our sales promotion and help deliver more relevant messages, information and offers to you and other customers
For the purposes of market research, evaluation and analysis of your opinion about our products and our commercial policy, reputation, recognition of our trademarks and other distinguishing features.
To collect and recover money owed to us.

To use data analysis tools in order to improve our website, products/services, customer relations.

When we rely on the legitimate interests of the Company as a legitimate processing basis for the collection and retention of your personal data (including cases of automated decision-making and profiling) we must assess whether the interests, fundamental rights or freedoms prevail over such processing that enforce the protection of your personal data.

We have taken these issues into account and where we believe there is a risk that any of your interests, fundamental rights or freedoms will be affected, we will not process your personal data

σας δεδομένα, εκτός εάν στηριζόμαστε σε κάποια άλλη νόμιμη βάση επεξεργασίας.

complying with a legal obligation to which we are bound,

In the context of its activities, the Company is obliged to process your personal data in order to comply with its obligations arising from the law, such as for example in maintaining the financial data of transactions for tax reasons, in using your email for sending to it confirmation of execution of your order, etc.

if none of the above applies, your consent (which we will ask for before we process the information).

Your free and informed consent is the legal basis for the use of your email and/or mobile phone to send you direct commercial communication in the form of Newsletters to your emails, or updates on kirki news and offers by text SMS/VIBER on your mobile phone, when you are not our customer for example or wherever else it is applicable.

your email or mobile phone for the purpose of commercial communication via informative emails, SMS, VIBER etc. in the context of our customer relationship if you purchase from us, for the development of our business activity, the optimization of commercial and technical systems, statistical analysis for product improvement, optimal customer service, etc.

To inform you about events, special offers, promotions and other related matters regarding the Company and our products and services, according to the means of communication you have indicated.
To inform you about offers or promotions of third parties working with us, provided you have given us relevant consent, according to the means of communication you have indicated.
To advertise our company and products on social media to you and others who may also be interested in what we offer.

In addition based on your consent, we process the following:

Purpose of Processing

Data we process for this purpose

Legitimate Processing Base

Existing Customers until Monday, April 15, 2019

We process your data for the purpose of:

To give you access to your account details.
See the history of your orders and purchases.
To use the services/functions of your Account Wishlist, favorites, address management, etc.

A) Identity Data that you provide to us to create your kirki account:

Mandatory:

e-mail
Password

Optionally:

Physical address

B) Transaction Data (type of purchase, value, date of purchase, place of delivery, etc.)

C) Cookie data for Wishlist

a) our legitimate interest in the security of your account and your identification where required, which is also for your benefit in preventing fraud or a security incident;

Member Registration – Create Account – Manage Account at kirki (after April 15, 2019):

We process your data for:

To identify you each time you request access to your Account.
To give you access to the functions and services of the Member Account.
See the history of your orders and purchases.
Use the services/functions of your Account Wishlist, favorites, address management, etc.
Management of subscription to the kirki Newsletter recipient list.
The sending of newsletters (Newsletters) general and based on behavior and preferences, as these are recorded through the mechanism of Cookies as well as from the history of your transactions.
Sending direct commercial communication via email, sms, viber or other multimedia, push notifications, etc.
Conducting promotional actions, eg organization of contests.
The investigation of the customer’s degree of satisfaction with the provided products-services of kirki.

A) Identity Data that you provide to us to create your kirki account:

Mandatory:

Name Surname
Contact phone number (mobile)
Password
Date of birth

Optionally:

e-mail
Physical address
Date of name holiday

B) Transaction Data (type of purchase, value, date of purchase, place of delivery, etc.)

C) Cookie data for Wishlist

The legal basis for processing is:

a) your consent to register as a member of the kirki loyalty program. You voluntarily provide your data.

b) our legitimate interest in the security of your account and your identification where required, which is also for your benefit in preventing fraud or a security incident.

c) contract execution governing the creation – management and operations of your Account.

Receive, Manage and Execute your order through the kirki e-shop or by phone:

placing an order by the customer
order entry
product pricing
managing payments, fees and charges
delivery of products to the customer
withdrawal or return of product for another reason
processing and generally managing orders
Contact with customer for updates, notifications regarding the order
Enabling mechanisms to prevent fraud against you or us.
To ensure your use of gift certificates, etc.

A) Identity Data

Name
Last name

B) Delivery Data

Product delivery postal address (street, number, zip code, city, country)

C) Contact Data,

Mobile phone
e-mail

In case the call is recorded, you will be informed in advance with a relevant audio message.

D) Financial Data:

payment and card details

E) Transaction/Purchase Data

The legal basis for processing is:

a) the execution of the contractual relationship that the Company undertakes to fulfill towards you in the context of the sales contract. For example, it processes delivery and purchase data to ship products to you or financial data to receive payment for the value of products and transportation services.

b) compliance with its legal obligation. For example, it uses your email to send the confirmation of receipt of the order that it is obliged to send on a fixed medium, or it processes the Transaction Data, Financial Data and Identity and Contact Data to fulfill the right of withdrawal, order cancellation that you may exercise in accordance with law etc. or compliance with tax regulations and provisions.

c) legitimate interest

We process your email and password if you purchase through your Account to identify you or your mobile phone to contact you if there is a problem with online payment or any other problem when completing your order or our general transaction , processing that also benefits you in case someone tries to defraud you, for example by using your payment data,

d) consent to certain data processing that you have voluntarily provided.

Customer service and management before or after the sale including:

Communication from the customer on the Company’s means of communication (conventional means, email or call center, or on multimedia communication e.g. viber or on another means e.g. Social Media)
Communication from the Company at the customer’s request to the information provided by the customer.
Customer service in general for issues related to the company, the e-shop, products, services, his order, his Account, or the contests he implements, guarantees he may provide, the company’s social media.
Complaints or clarifications
Exercise of rights
In general management and optimization of the user experience and service in the e-shop

Processing for this purpose includes;

(a) the absolutely necessary data that you give us when submitting your request, i.e

Identity Data
Contact Data
Purchase Data

Information you provide to us related to your request

(b) data we develop about you.

In case the call is recorded, you will be informed in advance with a relevant audio message

The legal basis for processing is:

a) compliance with the Company’s legal obligation to adopt pre- and post-sale customer service tools/means for our response to your queries related to the exercise of your rights.

b) the company’s legitimate interest to respond to your requests that you submit to us through various communication channels, to optimize its customer service and management services and to provide its customers with the ability to communicate with it as well as to manage any of their issues in the best possible way based on their needs which is for the benefit of the subject and which is reasonably expected by the subjects.

Each user may object (opt-out) at any time from access to their personal information for this purpose, such as e.g. for the data of the record of his purchases for his service, by declaring it to the customer service staff or otherwise or by communicating with the Company in all means of communication for any of the above.

c) performance of a contract if you contact us specifically to manage issues related to your order

d) the customer’s consent to receive communication from the Company for this purpose, when he himself asks the Company to contact him.

Advertising & Marketing

Manage subscription to the kirki Newsletter recipient list.
Sending newsletters (Newsletters) general and based on behavior and preferences, as these are recorded through the mechanism of Cookies.
Sending direct commercial communication via email, sms, viber or other multimedia, push notifications, etc.
Conducting promotional actions eg organization of contests
Investigation of the degree of customer satisfaction with the provided products-services of kirki.

For the purpose of advertising & marketing, the company processes:

Identity Data

Contact Data

Transaction/Purchase Data

Cookie data,

and/or a combination of the above.

Our Company for this purpose processes your email and mobile phone in combination with the products you saw in our store or those you left in the cart,

The legal basis for processing is:

a) the Company’s legitimate interest in processing its customer data provided to us in the context of a purchase or other transaction with us for the purpose of direct commercial communication for related products or purposes. In particular and additionally we process your email and mobile phone to send emails, SMS/VIBER with new arrivals, fashion news, offers and other promotions of kirki, in case you become our customer by purchasing from our store and provided of course that you have not objected to the sending of such commercial communication. In those cases where we have collected your email and/or mobile phone in the context of your purchase, in the context of our legal interest which consists in the promotion and promotion of our products, we can use the above data to optimize the browsing experience you and to display advertisements relevant to your preferences on social networking sites.

In the event that you are our customer and have accepted the Cookies that record what you have seen in our store or what you have forgotten in your cart or Wishlist and in your favorites, we may send you an email to remind you what you have been seeing and what you have left in your cart.

In these cases you can opt-out by pressing the unsubscribe button in the email or in any case by contacting us.

b) consent in cases where you voluntarily provide us with your data, when you authorize us to send you newsletters via email, sms, viber and other multimedia, when you accept the sending of push notifications, when accepting both Remarketing Cookies and sending to email / sms/viber to send you a message about the products you saw during your visit to our store or left in your cart.

In addition, and since you have accepted the Cookies related to Remarketing, we will contact you in the next medium, showing you the products you saw in the kirki e-shop or left in your cart.

Business analytics and improvements for:

Uninterrupted operation of the e-shop
technical perfection and security of transactions
optimization of technical systems
dealing with technical issues
report writing and data maintenance

The information we process for this purpose is a combination of information you provide to us (for example, Account registration information, data we receive through cookies and similar technologies.

The legal basis for processing is:

a) compliance with a legal obligation for information security and confidentiality

b) legitimate interest in the security of networks and the prevention of fraud and unauthorized access to data, for our business continuity, the upgrading of our systems and our partners, for the development of our business activity and the management and optimization of technical systems, our commercial processes, processing that overrides the rights and freedoms of subjects who reasonably expect that for this purpose the processing can take place.

You have the right to object to the above processing on a case-by-case basis. It is pointed out, however, that the Company is entitled to demonstrate compelling and legitimate reasons for the processing which override the interests, rights and freedoms of the subjects.

Statistical analysis to evaluate and improve the services and processes of the e-shop, which includes:

Evaluation and improvement of business processes
Better response and management of the e-shop
Research and/or analysis to better understand the needs of e-shop customers
Research and evaluation to improve existing products and/or services and develop new ones
Evaluation for the creation of new programs, offers, etc.
Adoption of new commercial and business models, programs and partnerships.
Promotion of the Company, our products and our services.
Distribution and marketing of our products in other countries.
Availability and marketing of new products and services.
Advertising and promotion of our Company.
Improving your experiences
Delivery of relevant content
Quality surveys
Statistical analyses

All the data we will collect in the context of the previous processing purposes (Transaction Data, Cookies, Purchases, Campaign Effectiveness, etc..)

as aggregated and only statistical data, taking all the necessary guarantees that do not allow the identification of the subjects. Also, data collected by the respective cookies that carry out this type of processing will be used.

The legal basis of this processing is

the legitimate interest of the Company

a) for the further compatible processing of aggregated data for the purpose of statistical analysis for the improvement of its products and services, observing all the necessary guarantees for the collection and processing of data that do not identify a specific subject and do not affect the rights and freedoms of the data subjects .

b) for the availability of our products on the market, for the analysis of the usability and functionality of the e-shop, for the degree of satisfaction of our customers, for the preferences of our customers regarding the offered items, for the improvement of our business performance to improve our collaborations, always respecting your rights, freedoms and interests regarding your personal data.

Who do we SHARE your personal data with and WHY?

In the context of the operation of the e-shop, the fulfillment of our contractual obligations and the best service to you, our Company reserves the right to cooperate with third-party companies-service providers, which provide us with support and gain access only to your data absolutely necessary for the service they offer us (e.g. your registration in the e-shop and the management of your account, the execution of the purchase agreement between us and the general provision of our services to you, the functional and computerized organization of the website www. kirkishop.gr the optimization of our products and services etc.). These third party service providers are contractually bound not to use your information in any way other than to help us provide you with the products and services we agree to.

In particular, our Company cooperates with:

(a) With a third company which, as the processor on behalf of and on behalf of our Company, hosts and manages our e-shop.

(b) With a third party company which, as a processor on behalf of and on behalf of our Company, has developed, maintains and manages the kirki For You Loyalty program platform.

(c) With a third-party Call Center company, which acts on behalf of and on behalf of the Company’s customer service services, as the processor, having undertaken the reception of your telephone orders and in addition the management of our communication for reasons related to the participation you in the e-shop.

(d) With third-party courier companies who, as processors on behalf of and on behalf of our Company, manage and process the shipments of your orders and collect the money on our behalf in the event that you pay by cash on delivery. They also carry out the receipt and delivery to you of products that you return due to cancellation or return.

(e) With third party email marketing companies that act in our name and on our behalf to send you newsletters.

(f) With advertising and marketing companies

(g) With data analysis companies

(h) Survey Companies

(i) Financial Organizations for the collection of the purchase price and Organizations for detection and prevention of fraud.

(j) Information systems supply and support companies,

We reserve the right to share your personal data with a third party to whom we reserve the right to choose to transfer all or part of our business. In addition, in the event of a merger or acquisition, or other change in our business, the new owners, shareholders, managers, etc. have the right to use your personal data in the same way as defined in this privacy statement.

Your stored data may be shared with the competent judicial, police and other administrative authorities upon their legal request and in accordance with the applicable statutory provisions. In addition, in the event of a legal provision, official order or official preliminary examination, the Company has the right without objection to make the relevant data available to the respective service.

TRANSMISSION of your personal data to THIRD COUNTRIES

The Company generally maintains your personal data within the European Economic Area. In the event that data is to be transferred to third countries outside the European Economic Area for which there is no adequacy decision of the European Commission or to International Organizations, all appropriate guarantees provided for in the current legislation for the protection of personal data regarding the transfers to third countries and the relevant information will be posted on the company’s website, at www.kirkishop.gr.

What happens if you do not provide us with the personal data we request or ask us to stop processing your personal data.

In order to register or continue to enjoy the benefits of the kirki For You loyalty program we need to keep your mobile phone number, your name and your date of birth as a minimum. However, if you voluntarily provide us with more of your personal data we will be able to provide you with improved services and serve you better. As mentioned above for your participation in the loyalty program, we collect information about your transactions with us.

If you ask us to stop processing your personal data then we will not be able to provide you with the benefits of the kirki For You program.

Automated individual decision-making, including profiling

We use software to track your consumer behavior if you are registered as a member of the kirki loyalty program, when you browse our online store or for the purchases you make in our network stores in this capacity. This technology helps us create a profile for you based on your preferences in our products. Your customer profile helps us send you targeted offers and gifts based on your past transactions. If you do not agree with the profiling of you you can in any case exercise your rights and object to automated processing or limit it (For more information see below).

The legal basis of processing for automated individual decision-making, including profiling, is for us the legitimate interests of the company, taking into account whether your fundamental rights and freedoms are infringed by said processing. For more information on the legal bases of processing see above.

. PROTECTION AND MANAGEMENT OF YOUR PERSONAL DATA

SECURITY of your personal data

appropriate technical and organizational measures to protect the personal information we hold against unauthorized disclosure, use, conversion or destruction. Where appropriate, we use encryption and other technologies that can help secure the information you provide. We also ask our service providers to comply with strict requirements regarding the protection and security of personal data.

In particular, the information you submit to the Company is managed exclusively by specially authorized staff of the Company who are under our control respectively and only at our command. To carry out the processing, the Company selects persons or third-party partners with corresponding professional qualifications who provide sufficient guarantees in terms of technical knowledge and personal integrity for the observance of confidentiality. The Company, through the corresponding contractual commitments and its partners, takes all the necessary security measures to protect and ensure the privacy, confidentiality and integrity of personal data. In any case, the security of those in the platform environment is subject to reasons beyond its sphere of influence, as well as reasons due to a technical or other weakness of the network not controlled by the Company or reasons of force majeure or fortuitous events.

You must not disclose the information/codes you have provided to open your Account, which is personal and non-transferable. Our Company carries out regular quality and security checks on the systems and algorithms it uses, in order to correct the factors that lead to inaccuracies in the data.

Retention time of your personal data

We will retain your personal data for as long as you continue to interact with us (e.g. you maintain a kirki Account, are registered to receive commercial communications from us, make a purchase from our online store, contact our customer service points, receive part in a competition, etc.). At the same time, we keep your personal data for purposes of legal interest which consists of our legal coverage in case of any conflict regarding the sales contract, the maintenance of your Account, our commercial policy or any other transaction between us, for the period of time during which could result in liability from the processing, in accordance with the applicable legislation. Your Financial Data may be kept by our Company within the framework of its legal obligation to comply with its tax obligations. We keep your other data until you ask us to delete it, or what we keep and process in the context of your consent, until you withdraw it, or until you object to its processing by us based on our legitimate interest.

To determine the retention time of your personal data, we take into account the nature of your data, the amount, the purpose of its processing, its security, etc. You have the right to ask us to delete your data. To exercise your right, please visit the relevant Section in this Policy.

We reserve the right in some cases to anonymize your data for research or statistical purposes, at which point it is no longer associated with an identifiable person, so we reserve the right to use this information indefinitely. In any case, your data is stored securely

Member Registration /
Managing your Account

Until the deletion of your Member Account, or up to 3 years from your last access to it. In the event that you attempt to create an Account, but do not complete the process, any data you may have submitted will not be retained.

Shopping – Order receipt, order fulfillment

If you purchase products, we will retain your transaction details for as long as necessary to complete the sale and to comply with any legal obligations (for example, for tax and accounting purposes). We will process your data for the time necessary to administer the purchase of the products you have acquired, including any returns, withdrawals, complaints or claims related to the purchase of the particular product or service.

Send Newsletter/ SMS/ VIBER

As long as you have granted us your consent, until its revocation or up to 2 years from the last time you opened a Newsletter/SMS/VIBER respectively, whichever comes first. In the event that the sending of our direct marketing is based on legitimate interest, the processing of your data for this purpose continues until you object to the sending of such messages or up to 2 years from the last time you opened a Newsletter/SMS/VIBER respectively, whichever comes first.

Customer service

If you contact customer service, a record will be created (including details of your inquiry and our response) and will be kept for as long as your request remains open and in any event for up to 12 months. Temporary files may not be useful until more permanent files are available and will only be maintained on a temporary basis.

Usability and quality analysis

We will process your data during the period in which we perform an action or a specific quality survey or until we anonymize your browsing data

. YOUR RIGHTS AND CHOICES

With regard to your personal data that we hold and process, you have the following rights:

ask us to access them to confirm that we are processing them in accordance with the law and/or your own instructions and preferences;
ask us to correct incomplete, out-of-date or inaccurate data we hold about you; Of course, we also reserve the right to ask you to update your information at regular intervals.
ask us to delete them, as long as the law does not oblige us to the contrary.
ask us to limit their use, under certain circumstances;
to object to their use, under certain circumstances;
withdraw your consent to their use;
have the right to data portability, under certain circumstances;
file a complaint with the country’s supervisory authority.
not to be subject to a decision made solely on the basis of automated processing, including profiling, under certain circumstances.

We offer you easy ways to exercise these rights, such as “unsubscribe” links, or via our customer service hotline at 210 3002765 (local charge, Monday-Friday 09:00-21:00 and Saturday 09:00- 20:00, excluding public holidays), by sending an email to [email protected], by sending a simple mail to the Post Office 10th km. of the Athens-Lamia National Road, 14342, Nea Filadelfia, to the attention of the Personal Data Protection Coordinator.

Some mobile applications we offer may also send you unsolicited messages about, for example, new products or services. You can turn off these messages through the settings on your phone or in the app.

You have the possibility, through your Account, to configure your personal choices in the processing of your data by us for our commercial communication, i.e. to declare in which media you want us to communicate our news and our promotional actions, as well as your preferences in Cookies.

To exercise your rights regarding the use of cookies and other similar technologies, you can go to [email protected]

We may, for the security of your information, request certain information about you for the purpose of identifying you. Your right is exercised free of charge, however, when you exercise your right abusively, we may ask you for a fee, in accordance with the conditions set by law. In any case, we respond to your requests within one month from the date of receipt of the request, except in exceptional cases where our response time to your request may be longer.

Learn more:

Access (a. 15)

You can ask us to:

confirm whether we are processing your personal data.
to give you access to any data not available to you
to provide you with other information about your personal data, such as what data we have, why we use it, who we share it with, whether we transfer it abroad and how we protect it, how long we keep it, what rights you have, how you can submit a complaint, where we obtained your data to the extent not already provided in this Policy.

Correction (a.16)

You can ask us to correct inaccurate personal data.

We may seek to verify the accuracy of data before correcting it.

Delete (a.17)

You can ask us to delete your personal data:

at any time when they are no longer needed for the purposes for which they were collected or
when you are deleted from the eshop (which will be deleted immediately anyway) or
have been processed illegally

We are not required to comply with your request to delete your personal data if the processing of your personal data is necessary:

to comply with a legal obligation
to fulfill another legitimate purpose or other legal basis or
for the establishment, exercise or defense of legal claims.

Limitation (s 18)

You can ask us to restrict (i.e. keep but not use) your personal data when:

their accuracy is disputed (see Correction) so that we can verify their accuracy, or
the processing is illegal, but you do not want them to be deleted or
is no longer necessary for the purposes for which they were collected, but we still need them to establish, exercise or defend legal claims, or there is another legitimate processing purpose or other legal basis

Portability (a.20)

When the processing is based on consent, and is done by automated means, you can ask us to provide your personal data in a widely used structured, machine-readable format, or you can ask for it to be transferred directly to another controller. However, this right, based on the law, only concerns those data that have been granted by the subject himself and not those that are inferred by the data controller on the basis of the data that the subject has granted him

Objection (a.21)

You can object at any time to any processing of your personal data, which has as a legal basis the legitimate interest of the Company or the fulfillment of a duty performed in the public interest.

Opt-out

You have the right to withdraw your consent where consent is required as a basis for processing. The removal is done for the future. However, this right of yours does not negate the legality of the processing of your personal data based on your consent until it is withdrawn.

Rights in relation to automated individual decision-making, including profiling

You have the right not to be subject to a decision made solely on the basis of automated processing including profiling, which produces legal effects concerning you or which significantly affect you in a similar way.

This right of yours does not apply if the decision in question is necessary for the conclusion or performance of a contract between us or is based on your express consent.

Supervising Authority

You have the right to lodge a complaint with your local supervisory authority regarding the processing of your personal data. In Greece, the supervisory authority for data protection is the Personal Data Protection Authority – APDPX (www.dpa.gr).

Postal Address: Kifisias Avenue 1-3, P.O. 115 23, Athens

Call Center: +30 210 6475600

Fax: +30 210 6475628

Email: [email protected]

ID card

We take the confidentiality of all files containing personal data seriously and reserve the right to ask you for proof of your identity if you make a request about such files.

Cost

We will not charge you a cost for exercising your rights in relation to your personal data, unless, as required by law, your request for access to information is unfounded or excessive, in which case we may charge a reasonable fee under the conditions. We will notify you of any charges before we complete your request.

Schedules

We aim to respond to any valid requests no later than one (1) month after receiving them, unless it is particularly complex or you have submitted several requests, in which case we aim to respond within three months. Will let you know

Privacy Policies

Brands

Top Categories

Shop

The company

Customer Service

Join Our Community