Privacy Policy for “VET MEDICA – MILATHIANAKIS Κ& Μ eShop”
The persons (users) who visit the website www.petinvet.gr (from now on “The Website”can navigate its web pages and make use of its services and content either as ordinary visitors or as registered users and to edit their web pages. “Due to this access, this policy applies.
Every user who wishes to make an online purchase from www.petinvet.gr has the possibility to choose 2 ways to complete it: either as a visitor or as a registered user.
1. Legality and Purpose of Processing, Update and Update of Data
The company with the name “VET MEDICA – MILATHIANAKIS Κ& Μ” (from now on referred as COMPANY) is the person responsible for processing the personal data of the visitor/registered user and controls the processing of his data which complies with the General Personal Data Regulation 679/2016/EC (GDPR).
“the COMPANY” informs its website users of the following:
1.a For the processing of user data for the purpose of content navigation and online shopping on the “The Website”, the following legal bases are used:
Execution of a contract (Article 6.1.b GDPR): In order to achieve the purpose of the execution of the distance sales contract or to take measures at the request of the user prior to the conclusion of a contract, and in particular to enable the user to complete orders at “The Website” it is necessary to process the personal data provided by him during the registration and entry of his order in the order entry form and the recording and monitoring of his transactions. The purpose of this basic data processing is for each user, the completion of the specific order, the communication and the sending of informational messages concerning the stages of processing the order, the provision of clarifications related to the order and in general the analysis and information about purchases that he has carried out, the delivery of the order to the place of his choice, the confirmation and identification of it in any necessary case and the information about the existing stock at”The Website” per product and in the store. Also, the facilitation of registered users by creating a user account with completed pricing and shipping data, information on their purchases, management of their communication with “the COMPANY“ and the potential reward of them with points and privileges from their purchases in case they are also member of the customer loyalty program of “the COMPANY“ and makes purchases through “The Website”. Legitimate interests (Article 6.1.f GDPR): Some form of processing of personal data is necessary to improve the services of”The Website” , the evaluation of our products and services, the participation of our customers in online product presentations on our website, the detection of attempted fraud or misuse, any cooperation with judicial and regulatory authorities. In cases where you contact us with a question about our products and services before selling or receiving a service, we need some of your data to be able to respond to you because it is in our legitimate interest to make shopping easier for consumers them and in enjoying an excellent shopping experience from our stores. Also for regularly informing the visitor and/or the registered user via telephone, mail, e-mail, mobile phone message (SMS) or any other suitable means of communication in their contact details, obtained legally, in the context of the use of”The Website” for the products and services of “the COMPANY“ in the context of their business relationship (Article 11 par. 3 of Law 3471/2006) and as long as the user does not object to this communication. This information may include information about its products and/or offers and/or contests, communication to conduct research to improve the products and services provided to its users as well as other promotional actions and serving similar purposes . Also, “the COMPANY“ can communicate with the visitor and/or registered user through messaging services such as Viber, WhatsApp, etc., for reasons of better communication and cost control. Registered users also have the opportunity to choose the communication channels that “the COMPANY“ will be able to use to inform them through their personal account at “”The Website””. Changes to these preferences have time implementation up to 30 days, for technical reasons. Finally, “the COMPANY“ considers that its legitimate interests include the appearance and promotion of itself and its stores, as well as its products and services on electronic social networks (social media) and other public services, also giving the opportunity to others users of these networks to participate in promotions as well as to like our page and post comments about our products.
Legal obligation (Article 6.1.c GDPR): some user data is kept to comply with a legal obligation of “the COMPANY“ such as for tax and accounting purposes.
1.b. Every registered user has the right to access, correct and update the personal data that he discloses and must notify “the COMPANY“ as soon as possible of any change in the personal information he has declared when registering in the “the COMPANY“ online store for the best his service.
2 Processing and type of personal data – Rights of visitors/registered users
2a) Processing of Personal Data
“the COMPANY“ in the case of an online purchase will process the user’s personal data as stated by him during the creation of his account and/or in his order in the data registration form, in order to complete the specific order of through our online store. Each user of the online store “The Website” has the possibility to choose 2 ways in order to complete an online order and declare their personal data:
- As a simple visitor: In this case his personal data will be kept in the files of “The Website” for forty (40) days from the delivery or completion of his specific order and their processing will only concern the execution of the distance sales contract. However, the data proving the transaction will be kept for tax purposes (invoicing document) and his contact data will be used by “the COMPANY“ for commercial communication purposes, unless the user has stated that he does not wish such communication.
- As a registered user of the online store: In this case the registered user has created a user account in our online store and his personal data will be kept “The Website” until he requests their deletion. Once a year “the COMPANY“ will ask the registered user to confirm the correctness of the information it maintains and to update it if there are any changes. The registered user can at any time change or correct his data by logging into his account at “The Website” (login) with his username and password.
2b) Type of Personal Data
In particular, the personal data that each user (whether buying as a visitor or as a registered user) must provide in order to carry out any transaction through the online store (“The Website”) of “the COMPANY“ and to place orders for its products are as follows:
- his full name
- the shipping address of the products
- the billing address of the order (if it is different from the shipping address)
- the invoicing information (if payment by invoice has been selected)
- the number of a contact phone
- his electronic address (e-mail).
- In addition to the above, “The Website” also collects and stores the following personal data only for registered users:
- order history
- frequency of visits
- products in the cart or favorites list
- participation in promotions
In the event that products or services are requested to be delivered to a third party other than the visitor or registered user, the latter acknowledges that he will have full responsibility for the information and full consent of the person, designated as the recipient, for the disclosure of the personal of the data to the company ““the COMPANY“ for the sole purpose of delivering to it, the relevant products and fully assumes responsibility for any claims of this person against “the COMPANY“
The details of the credit card used by the visitor or the registered user are not stored in the storage media of “The Website” during the transaction, but are registered directly in a secure environment of the cooperating company that has undertaken the routing of the cards.
The visitor as well as the registered user is also informed that for the communication of “The Website” with him, in the context of article 11 par. 3 of Law 3471/2006, it processes the contact information he has declared. Also, that when updates are sent via SMS/viber/email etc. to the registered user regarding changes to the terms of use of “The Website” with a hyperlink, it is possible to record the IP address of their electronic device (mobile, tablet, computer etc) to prove that the registered user has received the update.
For the visitors of our website who want to use the option of evaluating and sending comments about our products and services through the special forms on our website “The Website”, the use of personal data is not required, but if any in the comments there is personal data that the visitors who evaluate the products voluntarily disclose, this data is protected according to this policy.
2c. Recipients of data
For the data necessary to serve each of the above processing purposes and within the scope of the responsibilities of each recipient, the recipients of the user’s data may be:
- The authorized employees of “the COMPANY“
- The tax authorities such as auditing, supervisory and independent authorities in case of a relevant audit.
- The company which provides management services for the clientele of the physical and online stores of “the COMPANY“ and which has undertaken, among other things, the registration, updating, updating and maintenance of the database with the data of the members as the processor on behalf of “the COMPANY“ and in accordance with its instructions and recorded orders and/or any other company provides in the future to “the COMPANY“ the same services in replacement or in cooperation with the above company.
- External partners providing internet services, order storage and management, product (express) transport or bulk shipping service, product installation services and sales data analysis services, e-commerce service providers, online content and action service providers such as live product presentations, service providers product evaluation and visitor satisfaction measurement as well as customer service telephone centers with which “the COMPANY“ cooperates and which are subject to the special strict conditions of personal data processing that have been agreed with ” the COMPANY“ as Data Processing Manager.
When registering, accessing and/or processing the personal data of the visitor and the registered user, the employees and employees of “the COMPANY“ undertake to fully comply with the provisions of the European General Regulation 2016/679 on Data Protection as well as with the applicable Greek legislation regarding the protection of personal data. “the COMPANY“ requires its employees, the maintainers of its website, as well as its third-party partners to take all necessary technical and organizational measures (including appropriate policies and procedures to prevent the disclosure of personal data of visitors/registered of its users who process and dispose of and implement procedures for managing and processing personal data in a manner that is lawful and protect it in accordance with the GDPR.).
2d) Data subject rights
Every visitor or registered user, as a data subject, may at any time exercise their rights, as provided for in the General Regulation on the Protection of Personal Data 679/2016 EU. and in particular articles 12 to 23 thereof and national legislation and in particular:
- i). the right to information and access to the data processed by “the COMPANY“
- ii) the right to restrict the processing of his data,
- iii) the right to correct or delete part or all of his personal data (right to be forgotten),
- iv) the right to object, that is to object to the processing of his personal data, and
- v) the right to portability of his data.
He can exercise the above rights as follows:
- For the right to access, partial or total deletion and correction/completion of personal data, “the COMPANY“provides the possibility to registered users of “The Website” to view, correct/complete their personal data through their personal account at “The Website” (“My data” menu) or to request access, partial or total deletion and correction of their data via electronic mail (email) to the e-mail address “info@petinvet.gr” you.gr”. The other users of “The Website” can exercise the above rights via electronic mail (email) to the electronic address “info@petinvet.gr”.
- The right to control the commercial communication from “the COMPANY“ in one or all data and communication channels (email, SMS on their mobile phone or Viber on their mobile phone) each registered user can manage through their personal account at “The Website” in the “Manage Personal Data” menu (registered users only) or via e-mail to the e-mail address “info@petinvet.gr”.
- For the right to portability of personal data, “the COMPANY“ provides the possibility (only to the registered users of “The Website”) to receive their personal data and/or transmit it to another controller in a structured , a commonly used and machine-readable format, which will be indicated by the competent supervisory authority, by submitting a relevant request to the email address “The Website”.
- In case of exercising any of the above-mentioned rights, “the COMPANY“ will take all possible measures to satisfy the request within (1) one month from its submission. In this case, the data subject is informed that the minimum necessary of his personal data will be kept, to safeguard his legal interests. It is clarified that in order for the exercise of the above rights to be considered valid, it is possible to require the identification of the applicant, in order to ensure that the personal data for which any of the above actions are requested actually belong to the natural person requesting the specific action.
- The deletion of the registered user of “The Website” can be done by email to the electronic address “The Website”.
2e) Personal Data Retention Time
The personal shopping data of the user who makes purchases as a simple visitor will be anonymized (40) days from the completion or cancellation of his specific order. The registered user’s personal data will be retained until the registered user requests the deletion of their account. Nevertheless, some necessary personal data concerning their purchases as well as the information about the processing of their data may remain as information for the visitor and the registered user to ensure the proof of the legality of the processing of their data by “the COMPANY“ and safeguarding the legal claims of the parties. The data and comments collected as a result of your communication with “the COMPANY“ either through the online contact form at “The Website” or by sending comments or evaluations for products or services of “the COMPANY“ or via email , or by phone, are kept by the company’s Customer Service Department and are anonymized for two (2) years from the date of communication.
2f) Special Category Data
For the purposes of this processing, “the COMPANY“. does not collect or require disclosure of sensitive personal data (special category data).
2g) Obligation for Transparency
For any other information regarding their data, as well as their processing and protection, each subject of personal data may contact the Data Protection Officer of (Data Protection Officer) at the email “info@petinvet.gr” and at the telephone line “+30 2810318880”. If, however, he considers that he is not satisfied with the answer or in general with the way of collecting, processing and managing his data, he is informed that he has the right to complain to the competent supervisory authority (Personal Data Protection Authority, www.dpa.gr, Kifissias 1-3 , PO Box 115 23, Athens, tel. 210 6475600, email complaints@dpa.gr).
2h) Technical and Organizational protection measures
“the COMPANY“ , the processors on its behalf and its additional / fulfillment assistants are contractually bound to apply the appropriate technical and organizational measures for, as far as possible, the best protection of personal data against accidental or illegal destruction or loss, alteration , illegal disclosure or access to them and generally their illegal processing (including remote access) as well as to ensure the possibility of restoring availability and access to them. These measures aim to ensure a level of security that corresponds to the risk that the specific data may undergo, always taking into account the type and criticality of the data, the development of technology, the cost of implementation and the nature, scope, context and the purposes of each specific processing, while implementing procedures for the regular testing, assessment and evaluation of the effectiveness of these technical and organizational measures. In any case, “the COMPANY“ the processors on its behalf and its additional / fulfillment assistants are contractually bound to maintain the confidentiality of personal data and not to share it or allow access to it to any third party without prior notification of their subject except in the cases expressly provided by law.
“the COMPANY“ declares that no other use of the users’ personal data will be made for purposes other than those mentioned in these terms without the prior information and, where necessary, the express consent of the subject.