PERSONAL DATA PROTECTION DECLARATION

The privacy and the security of your information is important to us. Smart Shoes policy is to respect and protect the privacy of the users of this website. We will not voluntarily disclose individually identifiable information about our customers or other users of our website to any third party without first receiving that user’s permission.

We collect, store and use your personal data only in accordance with the contents of this privacy statement and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and the national data protection regulations.

With this privacy policy, we would like to inform you to what extent and for what purpose personal data is processed in connection with the use of our on-line store.

Personal data

Personal data is information about an identified or identifiable natural person. This includes all information about your identity, such as your name, e-mail address or postal address. Information that cannot be associated with your identity (e.g. statistical information, such as the number of users of the online offer) is not considered personal information.

You can use our online offer without disclosing your identity or personal data. We will then only collect general information about your visit to our website. However, personal data is collected from you for some of the services offered. This data will then only be processed by us for the purposes of using this online offer, in particular for providing the desired information.

When collecting personal data, only the data that is absolutely necessary must be provided. Further information may also be provided on a voluntary basis. In each case, we point out whether it concerns obligatory fields or voluntary data. We will then inform you about the specific details in the corresponding section of this privacy policy.

Your personal data is not processed according to an automated decision-making process in connection with the use of our online offer.

Processing of personal information

Your data will be stored by us on specially protected servers within the European Union. These servers are protected against loss, destruction, access, modification or distribution of your data by unauthorised persons by means of technical and organisational measures. It is only possible for a few authorised persons to access your data. They are responsible for the technical, commercial or editorial support of the servers. Despite regular checks, however, it is not possible to completely protect against all risks.

Your personal data is transmitted in encrypted form via the Internet. We use SSL encryption (Secure Socket Layer) for data transmission.

Therefore, personal data are only collected, processed and, where applicable, transmitted if the corresponding legal basis exists (Article 6 GDPR), while the data are collected, processed and transmitted in compliance with the data processing rules (Article 5 GDPR).

The following information is the basis for the effective exercise of your rights as defined by the General Data Protection Regulation. Please review this statement to learn more about the type of information we collect about you through our online store and how we use this information:

1. IDENTITY OF THE DATA CONTROLLER

1.1- In accordance with the General Data Protection Regulation, the controller of the processing of personal data recorded for the online store at Smart Shoes operating at www.smartshoes.gr for the purpose of executing distance selling contracts of products, is the sole proprietorship under the name “Smart Shoes”, with the distinctive title “Smart Shoes.”, VAT number 079789944 – D.O.Y. Kymis, with the registration number CTMI xxxxxx and with the following contact details:

Smart Shoes

Ioannis Karampourniotis

96 Sachouri Street

P.O 34001, Karistos, Evia Island

Telephone: 22240 23520 

E-mail: [email protected]

2. TYPE AND METHOD OF COLLECTION OF PERSONAL DATA

2.1- Personal data is that information relating to a person whose identity is or may be known. The personal data that can be collected while browsing the Site is the following: (a) data provided by you, the data subjects, through the Site, e.g. name, address, phone numbers, email addresses, when communicating via our contact form via the Website, when you subscribe to our newsletter to be informed about our latest news, events and offers when you register for competitions or complete surveys, b) data you provide to us for direct advertising, c) data about your computer, your visits, and your use of the Site, such as your IP addresses, the date and time of your visit to the Website, the type of web browser, and your operating system, the source that referred you to the Site, the length of your visit, the pages you viewed, and the course of your web browsing, (d) data contained in or relating to any communication you may have with us either directly or through our Site (including the content of communication and metadata relating to communication), e) data such as those specified in the ” Cookies” section below, f) data we collect through transactions and offline interaction.

These include information you provide when you buy gift cards, completing surveys, signing up for competitions.

3. PURPOSE OF THE PROCESSING AND LEGAL BASIS

3.1-Insofar as we obtain consent for the processing of your personal data, Art. 6 Para. 1 (a) GDPR serves as the legal basis for data processing.

Insofar as your personal data are processed because this is necessary for the fulfilment of a contract or within the framework of a contract-like relationship with you, Art. 6 Para. 1 (b) GDPR serves as the legal basis for data processing.

Insofar as we process your personal data to fulfil a legal obligation, Art. 6 Para. 1 (c) GDPR serves as the legal basis for data processing.

Art. 6 Para. 1 (f) GDPR may also be used as a legal basis for data processing if the processing of your personal data is necessary to safeguard a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not require the protection of personal data.

Within the framework of this privacy policy, we always point out the legal basis on which we base the processing of your personal data.

The storage of personal data, voluntarily registered on the website of www.smartshoes.gr, serves to the extent necessary for the purposes of the internal system for the efficient provision of our professional services

([a] necessary for the performance of contracts for the sale of products at a distance). The online shop (e-shop), i.e., processes personal data exclusively for the purpose of processing and, by extension, executing orders. None of the data entered is collected or stored in any way for the purpose of temporary storage or registration in an account for future use and the accessibility of your personal data to third parties is prohibited.

In addition, the storage of personal data in certain cases serves [b] and the protection of the legitimate interests of the online shop (we use information such as, for example, IP address, location information, user devices, etc. to detect or prevent fraud or abuse of the website).

At the same time, [c] the processing of personal data may be based on compliance with an obligation imposed by law, such as regulatory compliance for tax purposes.

In any case, [d] personal data are collected, processed and possibly transmitted by www.smartshoes.gr with the express consent of the data subjects, such as, for example, when using them to send personalized updates for the purpose of marketing the products of the online store and improving the relationship between the online store and the data consumer, but also for business analysis purposes.

4. STORAGE PERIOD

For order processing, we work together with various companies that are responsible for payment processing and logistics. We ensure that our partners also comply with data protection regulations. We pass on your data (name and address) to a respective transport company that delivers the ordered products to you. The legal basis for this is Art. 6 Para. 1 (b) GDPR. The processing of your personal data is necessary to fulfil the contract with you.

The data will be stored by us for as long as it is necessary to fulfill the contract. In addition, we store this data for the fulfillment of post-contractual obligations and on the basis of commercial and tax retention periods for the legally prescribed period. As a rule, this retention period is 10 years to the end of the respective calendar year.

4.1- In accordance with the principle of storage limitation, the online store smartshoes.gr stores personal data for the period of time specified by law regarding the permitted storage periods.

In particular, [a] when processing is carried out on the basis of a contract, your personal data are stored for as long as necessary for the performance of the contract and for the establishment, exercise, and/or support of legal claims based on the contract

and [b] for the purposes of marketing activities, your personal data are kept until your consent is withdrawn. This may be carried out by you at any time.

Also, [c] we will retain your account data for as long as you maintain it and have not requested its deletion. Your data that you give us for the purpose of providing you with services, [d] will be retained for as long as necessary to enable us to continue to provide you with those services.

At the same time, it is underlined that any data, which may be subject to the terms for the protection of personal data, is covered by the strong SSL 256-bit encryption algorithm and is stored temporarily, and in no case abusively, on a caching platform with the same encryption method.

In addition to the legal retention periods, personal data is stored for longer periods and for as long as necessary to fulfil a specific processing purpose or to assert, exercise or defend legitimate claims – in particular in accordance with Article 17 para. 3 e) of the General Data Protection Regulation.

5. RIGHTS OF DATA SUBJECTS

5.1- To protect the interests of data subjects, the following rights apply:

Your rights under European and Greek Personal Data protection legislation are:

Right to Information

There must be a clear reason why Smart Shoes must collect or use your personal data. Thus, you have at any given time the right to obtain information about your personal data, the way we process them and where we have them stored, always in compliance with the current regulation and free of any charge. A summary of this information will usually be provided to you when we collect your personal information, but in any case, you can also receive detailed information from our website.

Right of Access

Personal Data Regulation gives you the right to request, view and receive a copy of any personal information we hold about you. However, in order to respond to your request, we may need additional information (i.e. to identify the subject and to make sure that the personal data is not sent to the wrong person). Where possible, you will be able to access the information we hold through the account. We will arrange to respond to any relevant request within a period of one month, unless for objective reasons we may need more time, in this case we will inform you. 

Right to Rectification

You can ask from us the correction – update of your personal data in case they are inaccurate or incomplete. If we have passed the information on to others, we will take steps to notify them and take the necessary corrective action. If we find that the information does not need to be changed, we will contact you within one month to explain our decision.

Right to Erasure

We strive to ensure that the data we receive will not be retained and will not be processed for longer than necessary. However, since you have the right to request the deletion of your personal data, Smart Shoes will delete them immediately. This will happen particularly in the following cases:

• They are no longer necessary for the purpose for which they were originally collected
•  You agreed to the collection and editing initially and later changed your mind
• We have stated that we will use them to serve our own “legitimate interests”, which have now disappeared and there is no other reason to retain your data
•  You have sound reason to believe that we used your data illegally
• You have a well-documented opinion that we have an obligation by the law to stop processing and stop holding your data
• The data refers to a minor for whom there is no legal possibility for the processing of their data

However, in some cases where applicable legal obligations (i.e. tax) require mandatory data retention, data deletion may be prohibited. In these cases, we will explain why we cannot delete your personal data and for how long. While we can also refuse to delete data if there is no clear reason or if the request was excessive.

If we have passed the information on to others, we will take steps to notify them so they will take the necessary corrective action.

We will arrange to respond to any relevant request within a period of one month, unless for objective reasons we may need more time, in which case we will inform you. Please refer to our website in the relevant section to select the appropriate form. But if we have any objections, we will explain our decision to you.

Please note that if we comply with a request, we may still be required to retain some information such as that you made the request and that we have responded. We may also need to retain some data such as contact details in a log protocol so that we do not communicate for advertising purposes in the future.

Right to Restriction of Processing

You have the right to request the restriction of processing of your personal data from smartshoes.gr. Smart Shoes will immediately proceed to the limitation of the processing of these, at least, in order to consider your request, to limit, correct or stop the processing of data. If this is not possible, we will explain why we cannot restrict the processing of Personal Data.

Right to Data Portability

For the processing of personal data for which we use computer systems, either by contract or with your consent, you have the right to request that we provide you with these in one of the most widely used forms of reading, for example in an XML file.

Right to Object

You have the right to object to the processing of the Personal Data which we carry out:

• for the fulfillment of a task assigned to us and performed in the public interest
• because processing is necessary for the purposes of legitimate interests
• for advertising / marketing purposes
• for scientific or historical research and statistics

We will not be able to respond to your request if:

• there is an imperative and legal reason which prevails
• there is an urgent need to establish, exercise or support legal claims

We will contact you within a month to explain our decision.

6. POSSIBILITY OF RECALLING THE CONVERSION

6.1- The data subject reserves the right to withdraw (opt-out) his/her consent to individual or all processing activities at any time. This right of the data subject may be exercised easily by contacting the controller at the above-mentioned e-mail address (info@smartshoes.gr) in order to express his or her wishes. Edits made up to the time of the recall are not affected by it.

7. RIGHT OF APPEAL TO THE AUTHORITY IN CHARGE

7.1- If a data subject considers that the processing of personal data concerning him or her infringes the provisions of the General Data Protection Regulation, he or she has the right to lodge a complaint with the Greek data protection authority (Personal Data Protection Authority), located in Ampelokipi (Athens), at 1-3 Kifissias Street, P.O. Box 11523.

8. DATA PROCESSING SAFETY

The online store smartshoes.gr implements appropriate technical and organisational measures to ensure the protection of personal data processed under the Data Processing Agreement. The measures are adapted to the types of processing, scope, context, categories of personal data, the cost of implementation, the purposes of the processing as well as risks, of varying probability and severity.

In this context, high standard technical and organisational measures are implemented and the necessary technical procedures have been developed to implement the personal data protection rules under the General Data Protection RegulationGeneral Data Protection Regulation</span lang=”EL”> (GDPR</span lang=”EL”>; GDPR – Regulation (EU) 2016/679).

Therefore, we inform you that in our online store your personal data is secure, not shared with third parties, not used for surveys, not shared by any means on undesirable websites and used only to the extent necessary to fulfill your orders.

In addition, it is noted that any visitor or user of our online store – smartshoes.gr, is invited to read the above terms carefully and, to make use of the online services of the online store, only if he/she fully accepts these terms in full.