What are personal data
Personal data are data that can be used to identify a natural person and the protection thereof is important for us. Our aim is to show the maximum honesty and transparency possible regarding the personal data we collect as well as the way we process them pursuant to the EU General Data Protection Regulation (GDPR). Our e-shop MiaElia.com fully shares your concerns regarding your personal data.
How we collect or obtain personal data
Our e-shop MiaElia.com collects or obtains data from you through our websites as well as through forms, applications and devices, product websites on social media or in other ways. These personal data are either provided directly by users or collected (e.g. by using cookies in order to understand how our websites/applications are used) or by third parties.
The legal basis for the processing of the personal data of the users of MiaElia.com e-shop is:
- Users’ express consent and agreement to process their personal data (e.g. when you choose to receive a newsletter).
- Legal grounds: when processing is required by law or is necessary for the data processor in order to conform with a legal obligation
- Legitimate interest: In certain cases, we collect users’ data in order to achieve our company’s legitimate interests, provided that the data subjects’ interest, fundamental rights and freedoms do not take precedence over them
Purpose of personal data processing.
MiaElia.com E-shop processes your personal data for the following purposes:
- to contact users
- to inform users about the e-shop’s activities (e.g. newsletter)
- to conclude and execute contracts with users
- to exercise its legal rights and to conform with its legal obligations
- to upgrade the e-shop’s products and services as well as to optimize its website.
Subjects’ rights and choices
MiaElia.com e-shop respects its users’ right to the protection of their privacy. The subjects’ rights are as follows:
Right to information
Users have the right to receive concise, transparent and intelligible information about the way we use their personal data and the way they can exercise their rights.
Right to access
Users have the right to access the personal data concerning them that are kept by the e-shop (subject to certain limitations).
Right to rectification
Users have the right to request the rectification of their personal data if the latter are false or not updated or/and to complete them if they are not complete.
Right to erasure/right to be forgotten
Users have the right to request the erasure of their personal data pursuant to the provisions of article 17 of the GDPR. It is noted that this is not an absolute right, since the e-shop may be reserve legal or reasonable grounds to keep the personal data pursuant to article 17 of the GDPR.
Right to withdraw at any time their consent for the processing of their data that is performed on the basis of their consent
Users can withdraw their consent for the processing of their data by the e-shop when such processing is based on their consent. Withdrawal of their consent does not affect the legality of any processing performed on the basis of their consent before the withdrawal thereof.
Right to file a complaint with a supervisory authority
Users reserve the right to contact the Hellenic Data Protection Authority (HDPA) and file a complaint regarding the practices of data and privacy protection implemented by the e-shop.
Right to data portability
Users have the right to move, copy or transfer data from our database to another one. This applies only in the case of data processing under a contract or on the basis of their consent or when such processing is performed with automated means. This right is exercised subject to article 17 of the Regulation and cannot affect negatively the e-shop’s or any third parties’ rights and freedoms.
Right to object to direct marketing purposes, including profiling
Users may at any time delete their subscription to the website or social media or object to receiving notifications for direct marketing purposes or profiling
Right to restriction of processing
Customers reserve the right to request the restriction of processing of their data. This right means that the processing of users’ data is subject to limitations, and, thus, from now on it is possible to store but not to use or further process such data.
This applies to limited cases set out in the General Data Protection Regulation and are as follows:
- the accuracy of the personal data is contested by the data subject, for a period enabling the data processor to verify the accuracy of the personal data;
- the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
- the data processor no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims;
- the data subject has objected to processing pursuant to the data processor’s legitimate rights pending the verification whether the legitimate grounds of the data processor override those of the data subject.
The aforementioned subject’s rights are subject to the limitations set out in article 23 of GDPR. In order to process such requests, our e-shop MiaElia.com is obliged to request the confirmation of the subject’s personal details and identity before it may proceed to satisfy such requests.
Retention period of personal data
Our e-shop MiaElia.com retains users’ personal data for as long as needed and for the purpose for which it retains such data, (e.g. for as long as you have an account on our e-shop etc.) in the context of providing its services or conforming with our legal obligations.
Our e-shop MiaElia.com may retain some users’ personal data in order to conform with legal or regulatory obligations (e.g. tax and commercial law) as well as in order to be able to manage its rights or for statistical or historical reasons.
Data processor
Responsible for processing the users’ data, whether by automated means or not, whether himself or by appointing and authorizing any other person who will do so on his behalf, is Panagiotis Hatzidimitriou.
Changes to Protection of Personal Data Policy
This Protection of Personal Data Policy may be amended at any time. Therefore we recommend that you should refer to it regularly. In the event of any amendment, the date thereof will be mentioned. The Protection of Personal Data Policy, as it has been amended by the latest amendment, is considered always applicable.
Contact Details
For any questions or concerns about the way our e-shop MiaElia.com manages and uses personal data or if you wish to exercise any of the aforementioned rights, contact our office by sending an e-mail to info@miaelia.com or a letter to the following address:
Chatzidimitriou Panagiotis – Mia Elia
Trigonas, Lesvos, Greece
