Personal Data Protection Policy

Thank you for visiting the website of the company VRANAS D IOANNIS (hereinafter the enterprise).   

Before using our website, we kindly ask that you carefully read this Personal Data Protection Policy.  

Introduction   

As the controller, the enterprise provides you with information on how it collects and processes information which concerns you.  Personal data means any information relating to natural persons who are identified or identifiable. Protecting your personal data is very important to the enterprise, which takes measures to this end when you visit its website.  This Personal Data Protection Policy sets out the type of information we may collect when you visit our website and informs you about how we use such information. When you voluntarily provide us with information such as your name, address or e-mail address, we treat such information with the utmost confidentiality. Subject to specific provisions contained in this Personal Data Protection Policy, no personal information is rented, sold, publicly uploaded or disclosed to other companies, organisations or websites.  

As noted in the Terms of Use of the website and the Cookies Policy, the services provided via the website are addressed to the general public, are not aimed at children and we do not knowingly collect personal information from children under the age of 16. 

This Personal Data Protection Policy applies to all website users. This policy applies to the collection and use of your personal data by the enterprise.  

Which information we collect from you  

When you visit the enterprise’s website, we may collect data from you. Certain of these data may be personal data. These data include your search history, your IP address, your display resolution, the browser software you used, your operating system and settings, time of access and your referring URL. If you are using a portable device, we may also collect data that identify your device, settings and location.  

The enterprise reserves the right to collect non-personal data which identify users [type of browser, type of computer, operating system, internet service providers, etc.] and/or monitor Internet Protocol (IP) addresses using appropriate technologies (cookies). Cookies are small text files which are stored on each user’s hard drive and which cannot access documents or files on the user’s computer. They are used to facilitate the user’s access when using specific services and/or pages of the website, as well as for statistical reasons. For further information concerning the cookies used by the website, please refer to the Cookies Policy. 

 If you are interested in having us contact you by using the contact form, we must collect your name and e-mail address. If you choose to subscribe to our enterprise’s newsletter, we will collect your e-mail address.  { include a relevant link to the Newsletter Policy and prepare the point of registration appropriately, i.e. to distinguish between companies and natural persons. In the case of natural persons, there must be a consent text indicating the purpose, time of retention, whom we share personal data with, rights, with boxes to be ticked for acceptance + dispatch of consent }   

How we collect your personal data  

We collect your personal data directly from you. You provide us with your personal data when you fill out the registration/contact forms available on our website ({indicate in detail, e.g., contact form, newsletter subscription application, membership application, application to participate in an action, programme, training seminar, etc.}).  

Use - disclosure of personal data  

We use your personal data to respond to your requests for specific purposes {indicate: purposes of collection of personal data via the registration/contact forms available on the website, e.g., continuous notification via the newsletter, contact with regard to issues concerning users, etc.}. The personal data we collect through the website are disclosed/transferred | not disclosed/transferred to third parties for { indicate the purpose of any disclosure/transfer of personal data to third parties. Indicate potential processors of personal data, public authorities, providers of cloud storage services, etc. }.  

Storage - protection of personal data  

The data center where your personal data are stored is located in {country where the enterprise's/body's data center is located}. {also indicate the location of storage of backup copies and whether cloud applications are used}.  

Period of retention of personal data   

The period of retention of your personal data is set as follows: 

1. If you fill out the contact form, your personal data will be retained until 31/12/2030.  

2. If you subscribe to our newsletter, your personal data will be retained until 31/12/2030. Naturally, you can inform us via e-mail at any time that you no longer wish to receive a newsletter, in which case your data shall be erased.  

3. Indicate the data retention periods for each collection purpose available on the website.  

After the period required under each legal-tax obligation (where applicable) has elapsed, your personal data will be erased.  

Your rights concerning the processing of personal data   

You have the right to obtain information concerning your personal data we have stored at any time, in accordance with the legislation in force, and without any charge. We may request proof of your identity before providing you with such data. In certain cases, we may not allow access to specific personal data. This includes cases where your personal data are associated with the personal data of other individuals or are being retained for legal reasons. In such cases, we will explain why you cannot obtain such data.   

You have the right to request rectification or update of your data, and the enterprise will rectify them immediately.  

You have the right to request the erasure of your personal data, and the enterprise will erase them immediately. However, in some cases and where the applicable legal and tax obligations require mandatory retention of data, the erasure of data may be prohibited. In such cases, we will explain why we cannot erase your personal data and the duration of this prohibition.  

You have the right to request that the enterprise cease processing your personal data, and the enterprise will immediately cease processing them. If this is not feasible, we will explain why we cannot cease processing your personal data.  

You have the right to request the restriction of processing of your personal data by the enterprise, and the {enterprise/body} will immediately restrict their processing. If this is not feasible, we will explain why we cannot restrict the processing of your personal data.  

You have the right to request the transmission of your personal data to a different body/organisation, and the enterprise will transmit them immediately.  However, in some cases, due to document obligations undertaken by the enterprise, your request may not be accepted.   

In the event of a proven leak of your personal data by the enterprise resulting in damage, whether or not material, you have the right to lodge a complaint with the competent supervisory authority (Hellenic Data Protection Authority). In order to exercise your above rights or if you have any queries concerning the personal data protection policy or require assistance on exercising or understanding your privacy options, please contact our privacy team at the e-mail address info@colorato.net, by post at:  COLORATO VRANAS D. IOANNIS, 1, AMYNTAIOU STREET, GR-54636 Thessaloniki, or call us at +302310246808 or +302310222236.  

Changes to the personal data protection policy   

The enterprise may amend this Personal Data Protection Policy. Please check the version of the policy to see when this Policy was last revised. Any revision will take effect as soon as we upload the revised Policy.  If we make substantial changes to this Policy expanding our rights to use your personal data which we have already collected from you, we will notify you and provide you with options on the future use of such data.