1. Our company
FALF, hereinafter referred to as Company, sets as a priority the protection of your personal data. The purpose of this statement is to inform you about the privacy policy followed by the online store www.falf.gr. The collection, use and processing of your information by us is based on your consent or the provisions of the General Data Protection Regulation 679/2016 and Law 4624/2019. Further, it shows you how we shield your information and data, ensuring reliability and confidentiality.
The person responsible for processing your data is Falf.
2. Personal data
We will use your personal data to manage your registration as a user, to manage purchases of products from either our online or physical store, to answer your questions and, if you wish, to send you personalized information.
3. Processing of Personal Data
We are legally entitled to process your data for a number of reasons. The main reason is that we need to process it for the implementation of the contract you have with us when registering and when making a purchase or when you receive any of our services. In addition, we also use it for reasons such as our interest in answering your questions or the consent you give us to send you our newsletter.
4. Why do we use your personal data
Depending on the purpose for which we process your data from time to time we may need to process one or more of your data, which will generally be, where applicable, as follows:
1. Your identification details, full name
2. Your postal address, we collect postal address of our customers for purposes of delivery and completion of orders.
3. Email address. We collect our customers’ email address for purposes of order confirmation and promotion.
4. Other contact details. We collect other contact information, such as our customers’ telephone number, in order to provide our services better and faster.
5. Billing Information. We collect our customers’ information that is necessary for the billing of our services, for example, information such as Social Security Number, Tax ID, etc.
5. Collection of personal data
We collect your personal data:
• When you express your interest in our services,
• when you make purchases from our e-shop or from our store,
• when we provide our services,
• when you visit our website or subscribe to our newsletter.
We do not make your personal data available to anyone and we only share it with third parties who facilitate the provision of our services to you.
6. Lawful basis for the processing of your personal data by our company
The processing of your personal data carried out for the sale of our products and services is necessary for the overall management of your order by our company. This management includes the detection of online fraud and fraud related to modern means of payment, the prevention and management of payment (non-payment) incidents and the maintenance of the company’s rights in relation to its commercial activity.
The processing of your personal data carried out for marketing and/or promotional/profiling purposes is based solely on your consent.
In some cases, the processing of your personal data is necessary for the purposes of our legitimate interests or for the purposes of complying with national and/or European legislation.
7. With whom we do share your personal data.
As part of our activities, we may use third party providers who provide services on our behalf. As such, we may need to share your personal data with them and only if we have first informed you and obtained your explicit consent to do so. In any case, we only share with them the personal data that is necessary for them to provide the services we request and we require from them to protect your data and not to use it for other purposes.
8. Retention time of personal data
The retention period of your data depends on the purposes for which we process it:
• For the execution of the order of our products, we will retain your personal data for a reasonable period of time after the completion of the order and to fully satisfy your requests related to the order in question.
• For marketing/promotional purposes, we will retain your personal data for the duration of our business relationship, unless you indicate that you no longer wish to receive updates for these purposes.
• Customer Service: We will process your data for as long as necessary to satisfy your request or application.
We will keep your personal data for the period of time necessary to achieve the relevant purpose and then duly stored and protected for the period of time during which liability may arise from the processing, in accordance with the applicable legislation.
Once the limitation period for any claim has expired, we will proceed to the deletion of your personal data.
9. Your Rights
Right of transparent information, notice and arrangements for exercising your rights (Article 12 GDPR), i.e. your right to be informed about how your personal data is used {as detailed in this Privacy Policy}.
• Right to be informed about your personal data and have access to them depending on whether the data is collected from you or not.
• Right of access to the personal data we have collected about you.
• Right of rectification of your personal data we have collected.
• Right to delete your personal data we have collected.
• Right of restriction of processing your personal data we have collected.
• Right to be notified of any rectification or erasure of your personal data or restriction of processing of them.
• Right to request the portability of your personal data. This means that you will have the right to receive the personal data you have provided to us in order to transfer it directly to another legal entity without any hindrance from us.
• Right to object to the processing of your personal data by us.
• Right not to be subject to a decision based solely on automated processing, including profiling.
• Right to withdraw your consent already given ,i.e. to withdraw your consent at any time for processing based on the consent. The lawfulness of the processing of your personal data is not affected by the withdrawal of consent until the time you requested it.
• Right to lodge a complaint with the competent supervisory authority, the Greek Personal Data Protection Authority.
10. What happens when you provide us with third party data or if a third party provides us with your data?
As part of our business, we may use third party providers who provide services on our behalf. As such, we may need to share your personal data with them and only if we have first informed you and obtained your explicit consent to do so. In any case, we only share with them the personal data that is necessary for them to provide the services we request and we require them to protect your data and not to use it for other purposes.
11. Changes to privacy policy
We may modify the information contained in this Privacy Policy when we deem it necessary. If there are significant changes to the Policy, we will notify you in various ways through the Platform or may even send you a notice to your email address when such change is important to your privacy so that you can review the changes, evaluate them and, if it is necessary to object to or unsubscribe from a service or an activity. In any case, we encourage you to check this Privacy Policy from time to time to see if we have made changes or how your personal data is protected.
12. Ways of communication
You may contact us for any questions about the processing of your personal data or the use of cookies by us or to exercise your rights by sending an e-mail to info@falf.gr.