I. PROEM

The Privacy Policy of our present company with the name "Theodoridis Konstantinos" "yaPARTYsu" (G.E.MI 42231906000), which is based in Thessaloniki - Tagarades, Thessaloniki Postal Code. 383 Postal Code 57001- and is represented by law, the purpose of which is to inform you about the way in which we process your personal data when describing you on our website www.yapartysu.gr and/or when making purchases, either in the capacity of the user, or with that of the visitor, always with a view to ensuring a fair and transparent way of processing.

This Privacy Policy, as an integral part and a single set of Terms of Use of our website, may be amended and updated from time to time in accordance with the law and effective from the posting of each amendment.

II. PROCESSING OF PERSONAL DATA

A. DEFINITIONS:

• "Personal data": any information, direct or indirect, which can lead to the identification of a natural person (data subject).
• "Processing:" any activity, which concerns the collected personal data, including the collection, registration, organization, manipulation, storage, communication, access, use, transfer, deletion and destruction of the personal data.
• "Processing Controller": in this case the bank, which determines the purpose and manner of processing personal data.
• "Processor": the natural or legal person, public authority agency or other entity that processes personal data on behalf of the Controller.
• "Recipient": the natural or legal person, public authority, agency or other body to which the personal data is disclosed, whether it is a third party or not.

B. CATEGORIES OF PERSONAL DATA WE PROCESS:

In compliance with the provisions of Regulation EU 2016/679, Law 4624/2019, Law 3471/2006 as amended and in force, the relevant directives and decisions of the Personal Data Protection Authority (PDPA) and in general the applicable legislative and regulatory framework on the protection of personal data and especially in the context of electronic communications, we process only the data necessary to fulfill the respective processing purpose, which you communicate to us, either for the execution of the contract/transaction between us, or on the basis of obligation us by law, or - where required - with your consent.
In particular, when making your purchases, for the safe and proper execution of transactions between us, we collect:
• name, surname, e-mail address, contact phone number, shipping address of the order, any comments or your instructions, for submitting the order, completing your purchases and delivering the products, our communication through the Shopping Assistant-Service Center and/or the Contact Form, and/or informing you about the delivery of your order,
• Invoice data, for the case in which the issuance of an invoice is required,
• the history of your purchases (Order History) or, and the "Favorites" Collection, solely and solely for the convenience of making any subsequent purchases, or provided that you have given your express consent, for the sending of advertising material and carrying out promotional actions (sending a newsletter),

It is expressly clarified that in any case for the processing of your transactions using an online credit/debit card, your details - including those of your card - are subject to processing in a secure banking environment, with the application of all appropriate technical and organizational measures.
In addition, by accessing and/or using our website we automatically collect login data and information related to your browsing, which is non-personalised. Please see our Cookies Policy.

C. PURPOSE AND LEGAL BASIS OF PERSONAL DATA PROCESSING

We process the absolutely necessary personal data in each case:
i. in the context of the contract between us for the proper fulfillment of the transactional relationship, i.e. the submission of an order, the completion of your purchases and the delivery of products,
ii. to comply with our legal obligation
iii. on the legal basis of your express consent, to send advertising material and carry out promotional actions (newsletter), or to inform you of the time when our services will be available in your area.
iv. in case we have a legitimate interest in the context of the transaction between us (indicative issues of Customer Service, Contact Form, Shopping Assistant-Service Center).

D. PERSONAL DATA RETENTION PERIOD

Your personal data is processed exclusively by specially authorized and properly trained persons, who are committed to maintaining confidentiality, respecting privacy and the basic principles of transparency, security, trust, legally permissible and necessary.
Your personal data is subject to processing for the period of time required to fulfill the respective purpose of processing, and/or to our compliance with any legal obligation to keep records, our compliance with the provisions of the statute of limitation, and in any case for as long as you are an active user of our website and for a maximum period of twelve (12) months from your last activity on it.
Exclusively in a case where it is deemed necessary for the purpose of resolving any disputes, or in the context of legal actions, we have the possibility to keep your data, always in the light of the basic principles of transparency, security, trust, legally permissible and of the necessity of the processing.

E. PLACE AND METHOD OF KEEPING PERSONAL DATA

To ensure the protection of your personal data, we use appropriate technical means and organizational measures in compliance with the applicable legal framework by implementing important information security measures and procedures (protected storage environments and secure operation, controls and restrictions on access). This website has a 2048bit SSL protocol security certificate, which ensures the privacy and inviolability of data.
Your data is stored securely and with the application of the appropriate technical measures to those established within the EU. servers of the Company and its Partners in charge of providing hosting services and technical support of this website, and in some cases (e.g. documents) in a physical file with the necessary security measures within of our Facilities.
It is noted that this website may include links to other websites, under the sole responsibility of third parties in terms of their availability, content and services, terms of personal data processing and security of transactions, for which we bear no responsibility, yet and in case of damage to the user while browsing them

F. TRANSFER OF PERSONAL DATA

For the purpose of the proper execution of the transactional relationship and/or the provision of hosting services and technical support of this website, we may share your personal data with third parties, always under control and clear instructions and under the condition of the contractual commitment that the third parties parties, on the one hand, fully comply with their legal obligations, on the other hand, they do not perform any processing on your data, beyond that of the purpose of transmission.
In this case, the processors and/or recipients - as defined above - have access exclusively to data absolutely necessary for the fulfillment of their obligations towards us and the appropriate provision of the services they have been requested.
We will not make your personal data available to third parties, who do not carry the status of processor and/or recipient, without your prior information and your relevant consent.
Furthermore, on the basis of our legal obligation, your personal data may be disclosed without recourse to the competent judicial, police and other administrative authorities, upon their legal request and in accordance with the applicable legislative provisions.

G. RIGHTS

With regard to the processing of your personal data, you have the following legal rights:
• Right to be informed about how your personal data is being used.
• Right of access, in order to be informed about which of your data we are processing, for the time, manner and purpose of processing, and any recipients thereof.
• Right to correct any inaccurate, or complete incomplete, personal information.
• Right to deletion ("right to be forgotten"), as long as the data is no longer necessary for the purposes of the processing for which it was collected, subject to our reservation of non-deletion, in the event that its retention is required in fulfillment from our legal obligation, alternatively for the purpose of resolving any disputes, and/or in the context of legal actions.
• Right to limit the processing, in case of indicatively questioning their accuracy, illegal processing at the request of the subject and as long as he objects to their deletion.
• Right to object to the processing, in the event that it is carried out on the basis of fulfilling a duty in the public interest, or for the purposes of the legitimate interest of the Processor, including automated decision-making and profiling (if it is done for direct marketing purposes), with the our reservation in the event that the observance of the data is required either in fulfillment of our legal obligation, or for the purpose of resolving any disputes and/or in the context of legal actions.
• Right to portability, in order to receive the data you have provided yourself in a structured, commonly used and machine-readable format.
• Right to limit the processing, in case of indicatively questioning their accuracy, illegal processing at the request of the subject and as long as he objects to their deletion.
You also have the right to submit a complaint to the Personal Data Protection Authority (1-3 Kifisias Ave., Athens, P.O. 115 23, +30 210 647 5600, www.dpa.gr)

H. COMMUNICATION

For any question or question regarding the way we processed your personal data, or if you wish to exercise any of your rights, you can contact us at the details provided on this site. Except in exceptional circumstances, all actions related to the satisfaction of rights of Data Subjects will be free of charge for the subjects.

Every effort will be made to provide the requested information with a relevant written notification no later than one month from the receipt of your request or, in case of complexity, you will receive a written notification within the same time period to extend the above time period by two more months, if required.