Data Controller
In accordance with the General Data Protection Regulation (“GDPR”) (EU) 2016/679, we are committed to protecting and respecting your privacy. Please read this policy as it contains important information about how we use the personal data collected by us on our website or provided by you in the relevant forms. This Privacy Policy describes how we collect, use, process, and disclose personal data, including personal information about you (hereinafter, the “User”), in conjunction with your access to our website and its use. You are expected to carefully read this Privacy Policy, before providing personal data and providing consent for their processing. For the purposes of General Data Protection Regulation (“GDPR”) (EU) 2016/679, our company- WINERY & VINEYARDS SOKOS S.A., with registered seat in ERYTHRES, Attica, and tax registration number 092805039- is the Data Controller. Our Privacy Policy is designed to assist businesses, consumers and the general public, in understanding how we collect and use the personal information you provide to us, and to help you make informed decisions when using our web site and all of our related services therein.
Data collected and processed
When visiting the web site, you may provide us with two types of information: personal information you voluntarily choose to disclose that is collected on an individual basis, and Web site use information gathered on a collective basis as you and others browse our Web site. The data collected fall within the following categories:
A. Personal information about you (e.g. your name, email address, residence) that you provide us, so as to communicate with you and send you newsletter, offers, announcements and other advertising materials by means of direct messages (form of newsletter subscription).
B. Personal information about you (e.g. your name, email address, telephone number, residence) that you provide us, so as to communicate with you and reply to your individual message or request (contact form).
C. Personal information about you (e.g. your name, email address, telephone number, residence) that you provide us, so as to participate in an event or contest held by us.
D. Personal information about you, requested when you make a purchase from our e-shop (e.g. your name, email address, residence, telephone number, means of payment, special requests etc). The data requested in the forms are, in general, mandatory (unless specified otherwise in the required field) to meet the stated purposes. Accordingly, if they are not provided or are not provided correctly, we will be unable to process the request and provide the service requested.
We do not collect data as described in article 9 of the General Data Protection Regulation (“GDPR”) (EU) 2016/679. The User may, on his initiative, provide us with such personal data in the field of unspecified text. However, we ask that you not send us any sensitive Personal Data (e.g. data related to racial or ethnic origin, political opinions, religion, ideological or other beliefs, health, biometrics or genetic characteristics, criminal background, trade union membership, or administrative or criminal proceedings and sanctions).
Purpose of processing personal data
Generally, we use personal information for purposes of managing and expanding our business activities, providing customer service and making available other products and services to our customers and prospective customers. Occasionally, we may also use the information we collect to notify you about important changes to our Web site, new services and special offers we think you may find useful, given that you have given you consent.
Depending on the user’s requests, the personal data collected will be processed in accordance with the following purposes:
a) To send you our newsletter, offers, announcements and other direct advertising and informative material concerning the activities and products of our company.
b) To reply to your request or message.
c) To allow your participation in a contest or event held by us.
d) To manage purchases made via our e-shop, including payment management (where applicable) and the management of the user’s requests and preferences.
Data Retention
We will retain your personal data for the period necessary to fulfill the purposes outlined in this Privacy Policy and perform the services requested by you. A longer retention period may be required or permitted by law. As far as the newsletter subscription is concerned, the data are retained until the withdrawal of your consent.
Generally, the criteria used to determine our retention periods include:
Legitimate interest for processing your data
We will only process your personal data, if at least one of the following conditions applies:
The data processing required in fulfillment of the aforementioned purposes that require the user’s consent cannot be undertaken without said consent. Likewise, in the event that the user withdraws their consent to any of the processing, this will not affect the legality of the processing carried out previously. To revoke such consent, the user may contact us through the appropriate channels, by sending us a letter to the following address: . As far as the newsletter subscription is concerned, you may revoke your consent by clicking on the unsubscribe link or following the opt-out instructions included in the messages sent to you by us.
Data Disclosure
We will use and disclose personal data only if necessary or appropriate according to applicable law. For example:
Transfer of personal data
We only share your personal data when this is necessary so as to conduct our business or to fulfill an obligation imposed by law. We may share your information with: i) Our third-party partners, service providers, tour operators, suppliers, bankers and retail partners exclusively to the extent that is necessary for the purposes of operating and providing you with the products and services that you have requested; ii) Professional advisors and auditors for the purpose of meeting our audit and tax responsibilities; iii) Any third party in order to meet our legal and regulatory obligations, including statutory or regulatory reporting or the detection or prevention of unlawful acts, tax, regulatory or other public authorities.
We use third parties to facilitate our business, including, but not limited to, sending email and processing credit card payments. In connection with these business operations, our partners and other third parties may have access to your personal information for use in connection with business activities. Saved card details will never be shared with third parties and will only be used to process your order, using our payment partners systems. Sometimes we may ask for your telephone number. This number may be given to our courier for delivery services. These details allow us to process your order and to let you know the status of your order.
When we share personal data with other organizations and third-parties, we ensure that they keep them safe. Third parties are authorized to retain these data for the purposes listed above and are not allowed to use your personal data for other purposes. Such sharing or transfer of personal data will be protected by appropriate measures (e.g. appropriate contractual clauses, data processing contracts, intra-group disclosures of personal data, etc.). If the recipient operates outside the EEA, appropriate protections will be put in place to make sure your personal data remains adequately protected including appropriate contract clauses, such as standard contract clauses approved by European Commission. We may transfer your personal information to our data processor(s) or/and sub-processor(s) based in the EEA, for the purposes described in this policy. If we do this, your personal information will continue to be subject to appropriate safeguards set out in the law. All our data processors act on our behalf on basis of legal agreement and provide for the safety of your personal data.
User’s Responsibility
The User guarantees that they are of legal age (at least 18 years old), fully capable, and that the information furnished to us is true, accurate, complete and up-to-date. For these purposes, the User is responsible for the truthfulness of all the data communicated and is expected to keep the information updated, so that given data reflects their actual situation. The User will be responsible for false or inaccurate information provided through the website and for damages, whether direct or indirect, that this may cause to us or third parties.
Exercise of User’s Rights
The User may contact us at any time, so as to exercise his rights. The User can send us a letter to , so as:
The User will be appropriately informed by us about his request in 30 days upon receipt of the request made. Likewise, the User is informed that at any time he may file a complaint, regarding the protection of their personal data, before the competent Hellenic Data Protection Authority (www.dpa.gr).
Security Measures
Our company does not sell or otherwise pass details to third parties for marketing purposes. Marketing communications you subscribe to, will only be used by our company. We will process the User’s data at all times in an absolute confidential way, maintaining the mandatory duty to secrecy with regard to the data, in accordance with the provisions set out in applicable regulations. We adopt the measures of a technical and organizational nature required to guarantee the security of data and prevent them from being altered, lost, processed or accessed illegally, depending on the state of the technology, the nature of the stored data and the risks to which they are exposed.
What About Other Web Sites Linked to Our Web Site?
We are not responsible for the practices employed by Web sites linked to or from our Web site nor the information or content contained therein. Often links to other Web sites are provided solely as pointers to information on topics that may be useful to the users of our Web site. Please remember that when you use a link to go from our Web site to another Web site, our Privacy Policy is no longer in effect. Your browsing and interaction on any other Web site, including Web sites which have a link on our Web site, is subject to that Web sites own rules and policies. Please read over those rules and policies before proceeding.
Your Consent
By using our Web site you consent to our collection and use of your personal information as described in this Privacy Policy. If we change our privacy policies and procedures, we will post those changes on our Web site to keep you aware of what information we collect, how we use it and under what circumstances we may disclose it. If we change our privacy policy, we will post those changes to this privacy statement and other places we deem appropriate so users are aware of what information we collect, how it is used, and under what circumstances, if any, we disclose it. In some cases where we post a notice, we may also email users who have opted to receive communications from us, notifying them of the changes in our privacy practices. In any event, to register for our company services, you must legally be able to enter into contracts for goods and services that you may buy here. Generally, this means that you must be at least 18 years old.
Copyright
You accept that the images and designs used on our website are the property of WINERY & VINEYARDS SOKOS S.A. or their respective copyright owners, and are used by WINERY & VINEYARDS SOKOS S.A., pursuant to express authorization from copyright owners or their agents. You acknowledge that all copyright, trademarks and other intellectual property rights in and relating to WINERY & VINEYARDS SOKOS S.A. are vested in WINERY & VINEYARDS SOKOS S.A., or our partners where appropriate. You must not use, reproduce, modify or distribute our images or any part of those images in any manner, whatsoever.
