Compliance with GDPR
PERSONAL DATA PROTECTION POLICY AND COMPLIANCE WITH GDPR
We treat the protection of your personal data responsibly and believe that your data should only be collected and processed when absolutely necessary. Therefore, the bags-art.com website has been designed with the appropriate business and internal systems and complies with European data protection legislation (Regulation 679/2016 EU – GIP).
This Policy has been adopted by the seller, George Kyrtsia of Ioannis and Efthymia. The headquarters of our company is located at the address: Gogou Bakola, Arta, Tax Identification number 159540200, Arta Tax Office. The seller is responsible for protecting you every time you use bags-art.com either as a regular user, or as a consumer-buyer, or as a Member and to inform you of all the information you need, in accordance with Articles 12, 13, 14 and 15 of the GDPR applicable from 25 May 2018 at European level, as well as to satisfy a possible request for deletion of personal data in accordance with Article 17 of the same Regulation as above.
1. What personal data does bags-art.com collect and what are their purposes of processing?
Personal Data is any information that relates to you, or may be attributed to you. Our site may collect only personal data, such as name, surname, postal code, city, country, telephone, mobile, as well as data that has a technical character, such as email, IP, username, password for our e-shop etc., which are processed according to what we analyse below. In the event that we receive your personal data belonging to a specific category (eg data related to your state of health), we undertake to process it with even greater care and only with your explicit consent, or in a manner permitted by the relevant legislation.
We may collect your data either by telephone (eg telephone order), online (eg registration as a member, online ordering), or in person (eg if you visit our store) in accordance with the following:
In particular, bags-art.com collects and processes the following personal data and
information about you:
1.1. Browse the Website – Cookies
Like most websites, our website collects and processes personal data by browsing bags-art.com, registering as a Member in our Online Store, subscribing to the Newsletter Service, placing a purchase order in our Online Store, and information that concerns you, either through cookies or directly from you who provide them to us.
Google Analytics: We also use Google Analytics (GA) to track user activity. We use this data to determine the number of people who use our site, to better understand how they find and use our website and to see their progress within the site.
Although GA records data such as your geographical location, your device, your web browser and your operating system, none of this information is made personally known to us. GA also records your computer’s IP address, which could be used to identify you, but Google does not give us access to it. We believe that Google is a third party data processing provider, as mentioned below.
Also, with your explicit consent, we may analyse your usage behaviour on our website to provide you with personalised information. The evaluation of the usage behaviour includes in particular the areas of the website in which you stayed and the links that you activated (eg shopping cart). With this information we create user profiles that are classified by person and / or e-mail address, in order for the advertising offer, especially in the form of newsletter, advertising on the website and print advertising, to better adapt to your personal interests and to improve online our offers.
Cookies: For your browsing the Website / Online Store, your registration is not required, in which case you provide us directly with your personal data or other information that concerns you. However the site while you are browsing its website, bags-art.com and your transaction with us through our services, collects personal data and other information about you through our own Cookies (First Party Cookies) or third parties we work with (Third Party Cookies), which data we may use for advertising and promotional purposes, for statistical purposes, for market research purposes in order to optimise our products and services, profiling, to measure the effectiveness of the website, to improve and upgrade its content, to adapt it to demand and needs of users, as well as to measure the effectiveness of the presentation and promotion of bags-art.com on third party websites.
In addition, they are used by us to connect you to your account, to memorise products stored in your cart, to connect you to your Account without having to open a new account every time you want to make a purchase in the store for the verification of problems in our server etc.
Cookies are small text files that are temporarily installed on your computer or electronic device and transmitted to our server when you visit bags-art.com, through the browser you use. None of the Cookies used by the Website collects information and is not aware of any document or file on your computer.
The information that cookies collect for the above purposes may include the type of browser you are using, the type of computer, its operating system, the web service providers, the sites you visit and the links to third party websites. you may select through our Website, the products and ads you see, the IP address of your PC accessing our Website, User Name, User ID & Password, operating system and browser settings, demographics for you such as gender, age, place of residence and your other shopping habits and online behaviours.
By browsing the Website and making purchases through our Online Store, you consent to the processing by bags-art.com of the information it collects from you using the Cookies.
You can, however, edit your preferences through the special settings of our site for Cookies.
1.2. Member Registration – Account Opening
During the Member registration process, bags-art.com collects the personal data that Users voluntarily declare during their registration as Members of our Online Store, in order to open an Account. In particular, in this case we collect the email and password, name, surname, address, postal code, city, which are encrypted, as we analyse below. The above personal data is used by the website in order to open an Account through which you can see the history of your transactions, while at the same time you give your consent by providing this information to the seller to keep the password, in order to allow your access to your Account each time you log in to it with your password.
If you are under 16, you MUST have your parents’ consent before registering with bags-art.com.
1.3. Subscribe to the Newsletter service
We will not send you any Newsletter, for any purpose of advertising or promoting our products, unless you choose to subscribe to our Newsletter service. If you register, bags-art.com will collect your e-mail address and send you informative material regarding the products of our Online Store, any offers on products, gift vouchers and points, advertisements regarding products, commercial collaborations etc.
If you do not wish to receive the bags-art.com Newsletters and promotional material in general, you may at any time request your removal from our list of recipients, either in accordance with the instructions provided in the Newsletter or by submitting a request at bags.art@hotmail.com. From the emails sent to you by our online store within the Newsletters service, through Cookies, the percentages of opening messages that you receive from us during the Newsletters sending service and the number of clicks on specific links are recorded.
If you are under 16, you MUST have your parents’ consent before subscribing to our email newsletter.
1.4. Purchase Products from the bags-art.com Online Store
In order to complete and execute each online order, whether you choose to buy as a regular visitor or as a Member of bags-art.com, it is necessary for you to provide your personal information, which mainly concerns the payment preferences, your contact details and the place delivery of your products. Our company uses this data for the execution of the contract between us, for the execution of your order with the sale of the products and their delivery to the address you state to us, as well as for the realisation of the payment on your behalf. By providing your personal information at the stage of the order and for the execution of the contract between us, we will send to the e-mail you have given us the notification of receipt and execution of the order by the transport company with which we cooperate. We can also use both your e-mail and your phone to send you a message in case we encounter a problem in the execution of your order or to be contacted by the employee of the transport company who will deliver the products to you in in case of any problem or for any other communication with you or notification.
1.5. Payment by credit card
If for the payment of the product(s) you buy from bags-art.com, you choose the credit card, you must provide us for the purpose of payment the type and number of card, expiration date, CCV, filling in all the required fields in the (secure) order form. We accept credit cards. You can pay by credit, debit and prepaid cards of Visa, Mastercard, Maestro, Diners, Discover. All payments made using the card are processed through the electronic payment platform of “Alpha e-Commerce” of Alpha Bank and uses TLS 1.2 encryption protocol encryption with 128-bit (Secure Sockets Layer – SSL). Encryption is a way of coding the information until it reaches its recipient, who will be able to decode it using the appropriate key. Bags-art.com processes your card details exclusively for the completion of the transaction, that is for the repayment for the purchase of the products from our online store. We do not store the card number, so for every purchase in our online store that you wish to pay by credit card, you must re-declare your card details. In this case, you are redirected to a payment service provider’s website. Your credit card information is managed securely and at your own risk by the payment service provider, as we provide below.
1.6. Employee Details – Curriculum Vitae
Our website collects, maintains and processes personal data of employees of the online store, such as name, home address, date of birth, ID number, Tax identification number, insurance number (AMKA) etc., in order to execute the employment contract, the execution of payroll and in accordance with the requirements of the relevant labor and tax legislation.
Also, our company may from time to time receive CVs of our potential associates, where they provide us with personal information about them, professional qualifications, work experience, etc. We collect this data, updating it whenever necessary, always observing the appropriate organisational and technical security measures and for as long as necessary for the execution of the contract between us or if this is justified in view of our possible future cooperation.
For security reasons in public areas or in storage and work areas of our online store, there is a system of guarding and / or monitoring them, through the use of external security systems (eg cameras / CCTV). We always ensure that this processing is necessary for security reasons, the recording is not done in a targeted manner in the workplace (office) of a specific employee, while the fact of the existence of these systems has been legally notified to employees.
2. Legal basis for processing your data
As can be seen from what we have already described, we never process your data without this processing being necessary and based on either 1) the execution of a sales contract between our online store and you as a customer, or 2) our legitimate interests in maintaining of our relationship with you as our customers, or 3) in your prior consent to receive updates on the activity and products of our online store.
In particular, the seller will in no case receive from you more personal data than necessary for each purpose it collects, nor will it disclose your data to third parties, unless this is absolutely necessary for our execution of a service, the provision of which you have requested and is related to the contract of sale between us, (eg delivery of a product) or processing by a third party is necessary for the purposes of our legal interests (eg conducting a credit check) or if you have previously given your consent, and / or when required by law (eg to execute a court decision, prosecutor’s order, etc.).
Finally, our company does not sell, rent or transfer your personal data to third parties, with the exception of the application of relevant legal dictates and to the competent authorities only, and does not collect and process personal data of minors, unless it has the explicit consent of their parents.
3. Recipients of your data
Bags-art.com may transfer the personal data it collects about you in accordance with the terms hereof, to third parties, but always under conditions that fully ensure that your personal data is not subject to any illegal processing, other than the purpose of the transfer and always in accordance with bags-art.com ‘s prior written agreement with them. These bodies are always carefully selected by us and comply with the relevant legislation. In addition, your data may be transmitted to countries within the European Economic Area where all security requirements are met. In the event that we need to transfer your data outside the EEA, this will only be done in accordance with international security requirements and with a view to maximum protection of your data.
The data kept in our file may be disclosed to the competent judicial, police and other administrative authorities upon their legal request and in accordance with the applicable legal provisions. In addition, in the event of a legal order, service order or formal preliminary examination, the company has the right to make the relevant information available to the relevant service.
In particular we may transmit your data in accordance with the following:
• At Google, as mentioned above, especially for using Google Analytics & Google Adwords for the Google Display ad network and the Google Search network.
• On Facebook and Instagram to display targeted ads if you are a user of the respective application and accept the corresponding terms.
All of the above bodies are based in the US and comply with the transnational agreement known as the EU-U.S Privacy Shield.
• In advertising companies and advertising service providers in general: bags-art.com does not discloses personal data without the consent of the subjects. However, bags-art.com may share with third party advertising service providers statistical information regarding the products purchased, demographics, data regarding the technical characteristics of the mobile devices used to access the Users in our Online Store, etc., from which cannot be identified by you.
• To third parties providing at bags-art.com services related to the operation of the Online Store such as developers, data analysts, suppliers, providers of data security services and information of the subjects, strictly for the purpose of processing their services to us.
• In service providers for hosting our customer database, technical support and management.
• To data security service providers.
• In companies providing security services and / or space monitoring, through the use of systems external security (eg cameras / CCTV).
• In credit institutions, for access to our platform and the completion of the order directly from these credit institutions, as we have already described.
• To transport companies, for the delivery of your order
• To special successors: In case bags-art.com undergoes a business change, such as a merger, Joint Venture, acquisition by another company, or sale of all or part of its assets, may transfer all User information and data, including personal information, to the successor organisation. If significant changes occur in bags-art.com’s privacy practices as a result of the business transition, bags-art.com will notify you before your personal data is transferred.
Bags-art.com informs you that the above categories of recipients of your personal data and information are the processors on our behalf in accordance with the new Regulation and therefore as such do not process your data beyond the above purposes of transmission and always act according to our explicit orders and instructions.
In any case, the employees of bags-art.com who have access to your personal data according to the above, are specific and properly trained, while the access of unauthorised persons to your data is prohibited.
4. Conservation Period
Your data will be kept in our database only for as long as we have a contractual or legal right or it is necessary to keep it. Since this cannot be determined in advance, the retention period may vary from User to User. In the event that, for any reason, our contractual relationship is terminated, we may retain some of your data for as long as is still required (eg if the product you purchased is covered by a warranty) and in any case until the limitation period of any of our relevant claims has passed.
Of course, all data we hold about you will be deleted if you choose to delete your Account from bagsart.com or if you ask us to do so, unless we have to keep all or some of it for a longer period of time, period by law (eg regarding sales tax documents to you) or to safeguard your vital interest (eg health-related reasons).
In case you simply request the deletion from our newsletter, your data will be deleted immediately. Also, when you visit our online store without registering as a member (guest visitor), some of your data (eg IP address) may be stored in our database for up to 6 months (eg for reasons related to any defect possibly identified in a product or any other problem that may arise with your transaction). While we may hold your data for a period of time necessary for the operation of our business, we will never contact you without your express consent or without it being absolutely necessary for the execution of any of your orders or for the confirmation.
As described below, fully respecting the special features of some of our products that you can buy, your previous orders are given access to our database only to those employees / partners who are necessary for the execution and completion of each order, while we encrypt the data of those customers who bought us online without being registered users, according to the above.
Finally, according to the law, the logs from the security cameras are deleted from our systems every 15 days, unless an incident of violation has been detected or unless otherwise required by law, in which case they may be kept for longer periods.
5. Your rights
We are committed to enabling you to exercise all your rights under the GDPR, which are the rights to update, access, correct or delete your data and restrict processing.
In any case you want to exercise any of your rights regarding any personal data we hold that you can contact bags-art.com in writing to bags.art@hotmail.com. You can make a request to us for free access to your data, however depending on the amount of data that bags-art.com holds for you, we may charge you the cost of our business to provide information about your data or any other information we hold about you.
In case you wish to delete your Account, or the non-receipt of our newsletters or other advertising actions, you should contact us again by phone +306945354645 or email bags.art@hotmail.com and we will act as soon as necessary.
6. Security of your Data
Once bags-art.com receives your information, security procedures and measures are in place to prevent unauthorised access to it.
Storing Files in Physical Form: Our company can keep files in physical, paper format, which contain your personal data (such as contracts, invoices, consent forms, etc.) We keep these files in secure places protected by locks and which are accessible only to those employees or associates we need for the purposes described in their employment contract. Finally, for the destruction of physical files we use a document destroyer, in order to exclude the possibility of anyone gaining access to them, without being authorised by us.
Electronic Storage: Some of your personal information will be stored in the database of the website we maintain. Our network is protected against viruses (antivirus) and firewall.
File transfer: All web traffic (file transfer) between this site and your browser is encrypted.
Encryption is essentially a way of encrypting information until it reaches its intended recipient, who can decrypt it using the appropriate key.
Card Details: In addition, we do not store your card details that you use over the web. Your card details are not visible at bags-art.com, as you are automatically transferred to a secure banking environment to complete your order. At the same time, you should take every possible measure to prevent third parties from gaining access to your account, such as not disclosing your password.
We will report any illegal breach of this website or any third party data processing entity database to all those directly concerned, as well as to the authorities, within 72 hours of the breach, provided that the personal data stored is obvious. in a recognisable form, have been stolen.
7. Changes to the privacy policy
This privacy policy may change from time to time in accordance with legislation or industry developments, without notice. That’s why we invite you to check this page regularly.
8. Contact us
Before you browse the Website or make any transaction with us, such as subscribing to the Newsletter Service, opening a Member Account or purchasing from our Online Store, we invite you to consult this Policy and make sure that you agree to the terms and conditions set forth, we collect and process your personal data.
However, in case you wish any clarification or information regarding the terms of this Policy, or you have any disagreement, reservation or question, you can contact our company, at +306945354645, or by sending an email to bags.art@hotmail.com.