Privacy & Cookie Policy
1. Introduction
The Company takes the protection and security of personal data very seriously. This policy sets out our responsibilities relating to the processing and security of your personal data, specifically the key points about how The Company collects, uses and discloses personal data and ensures compliance with the applicable laws and regulations, especially the (EU) 2016/679 Regulation (General Data Protection Regulation-“GDPR”).
Your use of The Website signifies that you have read, understood and accepted all of the terms of this policy.
This Privacy and Cookies Policy is subject to change at any time without notice. Therefore, you should check our Privacy and Cookies Policy at regular intervals, as the use of our services implies your acceptance of it.
2. Who are we?
The website accessible at www.etalon-refinish.com (hereinafter referred to as “The Website”) was created by the company with the following details (hereinafter referred to as “The Company”, “we” or “us”):
-Name: “ALEXANDROS G. ASLAMAZIS AND CO. LP”
-Distinctive title: “ALEXPORT”
-Headquarters: 26 Pontou Str., 54628, Thessaloniki
-Limited Partnership, Thessaloniki Business Registry no. 118319504000
-Telephone: 0030 2310 501814, Monday to Friday, 09:00-17:00
-Email info@alexport.gr
In accordance with the legal framework for data protection, mainly the EU General Data Protection Regulation (GDPR), The Company is responsible for processing the data you provide to The Website (“data processor”).
3. What is personal data?
Personal data is any information about an identified or identifiable natural person, also known as the “data subject”. Personal data includes information such as their:
-name
-address
-ID card/passport number
-Internet Protocol (IP) address
-telephone number
4. What data do we process for you and for what purpose?
Data that we collect automatically
As soon as you visit our website, our server records your IP address, together with the date and time of connection and keeps them in special files (log files). As a website we cannot identify you based on your IP. The legal basis and purpose for which we collect your IP address, is:
-Our legal obligation to collect this information, in order to protect your data from malicious uses. In addition, we may be obliged to provide such information to police or judicial authorities, always under strict terms and conditions (Article 6, Par. 1c GDPR).
-Our legitimate interest in processing this data in order to ensure the security of networks, information and services from accidental events or illegal or malicious actions (Article 6, Par. 1 f GDPR).
Data that we collect automatically
When you communicate with us, e.g. via email or telephone, or when you fill our contact form or subscribe to our newsletter, you may be asked to voluntarily provide us with personal data that include (but are not limited to) your name, home or/and business address, email, telephone number, professional activity etc. We process the data you provide to us on the legal basis of:
-the consent you have given expressly and voluntarily (Articles 6 Par. 1 a, 7, 9 of GDPR). You have the right to revoke your consent at any time with effect for the future.
-the execution of a contract (Article 6, Par. 1 b GDPR).
-legal obligation or legitimate interest (Article 6, Par. 1 c and f GDPR-see above).
We may use the information that you have shared with us through The Website or through other contact channels for the following purposes:
-to respond to your enquiries,
-to provide the services or information you request,
-to manage our relationship with you and facilitate any necessary follow up,
-to enter into, or perform a contract with you (e.g. in case you wish to order products or services from us),
-to transfer products to you,
-to prepare invoices and process payments,
-to contact you with information that might be of interest to you.
Additional uses of your personal information will be described to you prior to the time of collection and will take place only with your consent.
Newsletter
By subscribing to our newsletter, you give your consent to receive emails from The Company. The aim of our newsletter service is to keep you updated about new projects, products and services, as well as to provide you with general information about The Company. The subscription to our newsletter service is not mandatory. The only personal data that will be collected are your name and e-mail address, which will be processed only to send you the newsletter.
The legal basis for the process is your consent (Article 6 par. 1 a of the GDPR).
The Company reserves the right to modify or discontinue the newsletter, at any time with or without notice. The Company also reserves the sole right to unsubscribe users from its newsletter service, without notice. In these cases, The Company will not be liable to you or any third party.
Our newsletter is provided by AWeber. The data protection regulations of AWeber can be found here: https://www.aweber.com/privacy.htm.
You can revoke your consent to receive the newsletter and the associated processing of data at any time.
5. How long do we keep your data?
In line with Article 17 GDPR, we will keep your data only as long as necessary for the respective purposes for which we process your data. For example, to comply with contractual obligations, data acquired from you can be kept for as long as the contract is in force.
6. Who do we share your data with?
Your data will not be transmitted to any organization outside The Company. As a data controller, The Company has taken all the necessary security measures to prevent access to your personal data to anyone other than the people authorized to do so and only for the purposes of processing.
In order to serve and pursue our legitimate interests, we may disclose your data in a lawful manner to external partners of The Company, including, but not limited to, legal advisers, accountants, tax consultants, technical advisers, postal service providers, IT, etc. These persons only receive the strictly necessary data for the work they undertake, process them only upon The Company’s authorization and solely for the purposes stated in this Privacy and Cookie Policy. We ensure that the above mentioned persons respect and apply all European and national legislation on the protection of personal data, even by signing the relevant contractual terms. In these cases, the legal base for the processing will be our legitimate interests (Article 6, Par. 1 f of the GDPR).
As stated above (4) in special occasions your data may also be forwarded to public authorities, competent tax authorities or/and to insurance funds, to judicial and independent authorities, as part of our compliance with the relevant legislation. In these cases, the legal base for the processing will be our legal obligation (Article 6, Par. 1 c GDPR).
7. Minors
The Website’s content is intended solely for individuals over the age of 18. We do not knowingly collect any information about individuals under this age limit. If you are under 18 years old, you are not allowed to submit your information to us in any way.
As it is not technically possible to effectively check the user’s age in all cases, we pledge, in the event that the submission of personal data concerning minors is reported and verified, to delete all relevant information immediately. This deletion is without prejudice to our legitimate right to keep the data in some cases, e.g. in order to exercise or support our legal claims.
8. Security
The Company collects, maintains and processes your personal data in a secure way. Your personal data are being processed exclusively by staff that is authorized for this purpose and is obliged to protect your personal data. Furthermore, all appropriate organisational and technical measures are taken to ensure data security and protection against accidental or unlawful destruction, accidental loss, alteration, prohibited dissemination or access and any other form of unlawful processing.
9. Your rights
Personal data must be processed in line with the individual’s rights. Specifically, according to the GDPR, the users (“data subjects”) have the following rights:
Right of access (Article 15 GDPR)
You can ask us for information regarding any data of yours that we keep at any time. This information concerns, among other things, the data categories we process, for which purposes we process them, the origin of the data if we did not acquire them directly from you and, if applicable, the recipients to whom we have sent your data. You can obtain a copy of your data from us free of charge. If you are interested in additional copies, we reserve the right to charge for the additional copies.
Right to rectification (Article 16 GDPR)
You can request that we correct your data. We will initiate appropriate measures to keep the data of yours that we continuously process correct, complete, and up to date, based on the latest information available to us.
Right to deletion-“right to be forgotten” (Article 17 GDPR)
You can request that we delete your data provided the legal requirements have been met. In accordance with Article 17 of basic EU data protection regulations, this can be the case if:
-the data are no longer required for the purposes for which they were acquired or otherwise processed
-you revoke your consent, on which the processing is based and there is no other legal ground for the processing;
-you object to the processing of your data and there are no legitimate reasons for the processing or you object to data processing for the purposes of direct advertising
-the personal data have been processed illegally
-the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject
-the personal data have been collected in relation to the offer of information society services referred to in Article 8 par. 1 of the GDPR.
Right to restriction of processing (Article 18 GDPR)
You can request that we restrict the processing of your data if
-you contest the correctness of the data, for a period of time we need to check the correctness of the data
-the processing is unlawful but you do not wish to have your data deleted and request a restriction of use instead
-we no longer need your data, but you need them to assert, exercise or defend against legal claims
-you have objected to the processing (Article 21 of the GDPR), though it has not yet been decided whether our legitimate grounds override yours.
Right to data portability (Article 20 GDPR)
You reserve the right to receive the personal data you have provided us with in a structured, commonly used and machine-readable format, as well as the right to transfer them further without objection, given that the processing is being carried out on the grounds of consent. In the context of the exercise of this right, you may also request direct transfer from us to the third entity without your own intervention. This right is exercised under the restrictions of the right to erasure (see above) and its exercise shall not adversely affect the rights and freedoms of others.
Right to objection (Article 21 GDPR)
You reserve the right to object to the use of your data processed unless the Company demonstrates imperative and legitimate reasons for processing which outweigh your interests or are necessary for the establishment, exercise or support of legal claims.
10. How to exercise your rights
If you intend to exercise any of the above mentioned rights, you have to contact the company by sending an email to info@alexport.gr. For each of the above rights you exercise, The Company is obliged to respond and provide you with the information you request within one (1) month, or, in the event of objective difficulties, complex requests or large volume of requests, within a total of three (3) months.
In the event that the exercise of your above mentioned rights is manifestly unfounded or excessive, in particular because of the repetitive nature of your requests, Τhe Company has the right to impose a reasonable charge for the provision of additional information (which is initially free of charge) or to refuse to continue processing the request.
In the event that The Company has reasonable doubts concerning your identity when you submit a request to exercise any of your above rights, Τhe Company may request the provision of additional information necessary to confirm your identity before processing the request.
If you believe that we do not comply with the legislation about personal data protection, you have the right to file a complaint to the Hellenic Data Protection Authority, 1-3 Kifissias Street, 11523, Athens, Greece, email: contact@dpa.gr, tel.: 210 6475600.
11. Cookies
As almost every website does, we use cookies, in order to understand how you use our website and to improve your experience. A cookie is a small bit of information that a website stores on your computer. When you revisit the website, your browser sends the information back to the site.
The Website uses “essential cookies” and “performance cookies” (Google Analytics).
Essential cookies ensure functions without which you would not be able to use this website as intended. Essential cookies cannot be disabled using the function of this site.
“Performance cookies” (Google Analytics)
The Website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The Company uses Google Analytics in order to analyze user behavior and optimize The Website. We use cookies for the sole purpose of analyzing the traffic and improving the performance of The Website. Google Analytics cookies are used to store certain information, such as the duration of the visit to The Website, the type of browser used, the location from which the visit originated and their frequency.
We use the following cookies:
| Cookie Name | Expiration Time | Description |
|---|---|---|
| _ga | 2 years | Used to distinguish users. |
| _gid | 24 hours | Used to distinguish users. |
| _gat | 1 minute |
Used to throttle request rate. If Google Analytics is deployed via Google Tag Manager, this cookie will be named _dc_gtm_ |
| AMP_TOKEN | 30 seconds to 1 year | Contains a token that can be used to retrieve a Client ID from AMP Client ID service. Other possible values indicate opt-out, inflight request or an error retrieving a Client ID from AMP Client ID service. |
|
_gac_ | 90 days | Contains campaign related information for the user. If you have linked your Google Analytics and Google Ads accounts, Google Ads website conversion tags will read this cookie unless you opt-out. |
12. Links to other sites
This Privacy and Cookie Policy applies only to The Website and not to third party websites. We may provide links to other sites that we believe may be of interest to our visitors. With these links, (“hyperlinks”), you will leave The Website and be transferred to other websites managed by third parties with whom our company has no contract or other relationship. The ability to go to a third party website is provided to make it easier to find other useful information on the internet.
However, due to the nature of the internet, we cannot guarantee the privacy standards of the websites to which we link. Therefore, for any problem that may occur during their use, the user must directly address the respective websites and webpages, which are responsible for the provision of their services.
13. Social plug-ins and buttons
These buttons link to third-party websites (Facebook, Instagram, Twitter, Youtube, Pinterest etc.) that collect and process personal data in accordance with their own policies. The Company is not responsible for the content or data processing performed by these websites, and it is the user’s responsibility to read and accept their own privacy policies. We have set these plug-ins to make The Website more functional, as well as to advertise our products and services.
It is our legitimate interest to appear on these social platforms and to try to promote our products and services. If you express your preference on our webpage (e.g. you “follow” The Company’s page) on an online social networking service, this means, according to the practices of the respective social networks, that you will see messages, advertisements or material posted by The Company on our respective social media page and that The Company will obtain information of your public profile in the same social media. If you submit a question through the corresponding page or make a post, it will be visible to all “friends” or “followers” of our page on that specific social network and we can use the features provided by the same network to respond to you. If you send us a personal or direct message (PM or DM), you should know that its content will be accessible, on a case-by-case basis, by certain employees of The Company, as well as third parties assigned with the management of our social media pages and activity.