WEBSITE PERSONAL DATA PROTECTION POLICY

This is intended to inform you of the Privacy Policy of the Website www.foodwelove.gr and to inform you about the way in which our company with the name “I AND A FOODWELOVE IKE”, based in Maroussi, Attica, Themidos Street 15, PC 15124, tel. 0030 2106142781, e-mail address info@foodwelove.gr (hereinafter referred to as the “company” or the “Website” or “Website” or “us”), acting as Processor collects, stores, uses and generally processes your personal data when you visit or use the website www.foodwelove.gr

1. What data do we collect and for what purpose?

We take care to collect only your absolutely necessary Data, which are appropriate and clear for the intended purpose. This Data includes the following:

  • • Data when creating a user account on the Website
    • – Required: e-mail address *, password (login password) *
  • • Details of your transactions with us, either through our physical store or through our online store
    • – For example, we collect details about remarks, comments or any complaints you make, details about the purchases you made, products added to your cart, wish list and how and when you contact us.
  • • Shopping interests and preferences, which help us to suggest specific products and services that interest you
    • – For example, which products you show preference to receive a personalized offer from us. We will request and use only the Data we have collected to suggest products or services of your interest and to further enhance your shopping experience with us. Of course, it is always your choice to share such information with us.
  • • Traffic data of our website.
  • • Information collected from the use of cookies in your browser. Learn more about how to use it here.
  • • Copies of the documents you provide to prove your age or identity, when required by law (such as a copy of a police or student ID).
    • – For example these copies may include details of your full name, address, date of birth and picture of your face (photo). If you provide a passport, the details will also include your place of birth, gender and nationality.
  • • Your social media username, if you interact with us through these channels, to help us respond to your comments, questions or comments.

2. How do we use your data

We want to offer you the best possible shopping experience. To achieve this it is necessary to obtain a complete picture of you, combining the Data we have collected. ΣWe then use your Data to offer you offers for products and services that you may be interested in.

The legislation for the protection of personal data allows us to do the above in the context of our legitimate interest and the need to understand our customers, in order to provide them with high level service.

  • • Product orders: The Company processes your Data to fulfill its contractual relationship, to process the order of products and / or services, to provide customer service, to comply with legal obligations, to exercise its legal rights from these transactions. If we do not collect your Data upon completion of the order we will not be able to process your order and comply with our legal obligations. Your Data may need to be transferred to third parties for the supply or delivery of the product or service you have ordered. In addition, we may retain your Data for a reasonable period of time in order to fulfill our contractual obligations, such as product returns, in accordance with the provisions of the Law.
  • • Creating a User Account: The Company processes your Data to provide you with the account functions and to facilitate the purchase of its products and / or services.
  • • Contact: The Company uses your Data to respond to your requests / inquiries, refund requests and / or any complaints you may have. The information you share with us, enables us to manage your requests and respond to you in the best possible way. We may also maintain a record of your inquiries / requests to us to better respond to any future communication. We do this based on our contractual obligations to you, our legal obligations but also our legitimate interests to provide you with the best possible service and to be able to improve our services based on your personal experience.
  • • In some cases we need to share your Data with a third party that provides a service (such as courier delivery). Without this transfer of your personal data, we would not be able to complete your order or satisfy your request.

For the disclosure of information about our products, services and events, as well as for other promotional purposes

  • • Sending a newsletter / offers: With your consent, we will use your personal data, preferences and transaction details to inform you via e-mail, internet, phone and / or social media about related products and services, including personalized / personalized offers, discounts, etc. Of course you have the option to revoke this consent at any time.
  • • To show you the most interesting content on our Website, we will use the Data we hold about your favorite products. This is done based on your consent to place cookies on your device. For example, we may display a list of recently viewed products or offer recommendations based on your purchase history and any other data you have shared with us.

For the protection of rights, assets or security, ours or those of others

  • • Protect your account from fraud and other illegal activities: This includes using your Data to maintain, update and protect your account. We also monitor browsing activity with us to quickly identify and resolve any issues and protect the integrity of our website. All of the above are part of our legal interests. For example, we check your password when you log in and use automated IP address tracking to detect potential false logins from unexpected locations.
  • • Processing payments and preventing fraudulent transactions: We do this based on our legitimate business interests. This also helps protect our customers from fraud.

For our compliance with our obligations arising from the law

  • • To comply with our contractual or legal obligations to exchange data with law enforcement. For example, following a court decision to exchange data with judicial services.
  • • To send you communications required by law or to send you necessary information regarding changes in the services we provide. For example, updates on these privacy notices, product recall notices, and legally required information about your orders. These service messages will not contain promotional content and do not require prior consent when sent by email or text message (SMS). If we do not use your personal data for these purposes, we will not be able to comply with our obligations under the Law.

3. For what purpose do we process your Data?

We collect your Data for the purposes of the provided products and / or services of our Company and especially for:

a) Managing the sale of our products and / or services, e.g. communication and information regarding the availability of products and the progress of your order, the execution of your order, the shipment of the products, the payment of your order to the Company, the realization of returns and the provision of guarantees.

b) Compliance with the obligations imposed by the current legislation e.g. tax legislation, e-commerce directive,

c) Controlling, improving and adapting to your preferences and choices regarding our products and / or services;

d) The delivery, by electronic or traditional means, of administrative, technological, organizational and / or commercial information for products and / or services of the Company.

e) Our customer satisfaction research, the promotion of our products and / or services, the communication of newsletters for our products and / or services.

4. What is the legal basis for the processing of your Data by the Company?

  • • Data protection legislation sets out several reasons why a company may collect and process your personal data, including: the terms of our contractual relationship
  • your consent, where required. For example, when you choose to receive a newsletter. When collecting your personal data, we will always let you know what data is necessary in relation to a particular service.
  • • the Company’s obligations arising from the law (eg tax legislation, e-commerce legislation, etc.)
  • the legal interest of our Company. In certain cases, we collect your Data in a way that is reasonably expected as part of the operation of our business and that does not substantially affect your rights, freedoms, or interests. For example:

o We will use your shopping history to send you or make personalized offers.

o We also combine the customer history of multiple customers to identify trends and ensure that we can keep up with market demand or develop new products / services.

5. Who are the recipients of your Data?

Access to your Data has the absolutely necessary staff of the Company, which is committed to maintaining confidentiality and our partner companies or third-party service providers, who process your Data as Processors on our behalf and in accordance with our directions.

Data Disclosure by the Company

The Company shares your Data with:

  • • Third party service providers that process personal data on behalf of the Company, for example (indicatively mentioned) for credit card processing and payments, transfers and deliveries, hosting, management and maintenance of our data, email distribution, research and analysis, promotion of the brand and products, Google, Facebook, and management of certain services and items. When we use third party service providers, we enter into agreements that oblige them to implement appropriate technical and organizational measures to protect your personal data.
  • • Other third parties, to the extent required for the following purposes: (i) compliance with a government request, court decision or applicable law, , (ii) prevention of illegal uses of our Website or breaches of its Terms of Use and policies, (iii) our protection against third party claims, and (iv) helping to prevent or investigate fraud (eg counterfeiting)
  • • To other third parties when you have given your consent

6. Do we send your Data outside the EU?

The personal data we collect (or process) in the context of our Website will be stored in Greece. However, some of the recipients of the Data with whom the Company shares your Personal Data may be located in countries other than the one where the initial collection of your Personal Data took place. Legislation in those countries may not provide the same level of data protection as the country that originally provided your Personal Data. However, when we transfer your Personal Data to recipients in other countries, including the US, we are committed to protecting your Personal Data as described in this Privacy Policy and in accordance with applicable law.

We take steps to comply with applicable legal requirements for the transfer of personal data to recipients in countries outside the European Economic Area that do not provide an adequate level of protection. We use various measures to ensure that your Personal Data transferred to these countries enjoys adequate protection in accordance with data protection rules. These include signing the Contract Clauses, certifying that the recipient has adopted European binding rules or complying with the EU-US and Switzerland-US Privacy Shield.

7. When do we delete your Data?

We retain your Personal Data for as long as necessary to fulfill the purposes set forth in this Privacy Policy (unless a longer retention period is required by applicable law). Generally, this means that we will keep your personal data for as long as you have an account with our Company. Regarding your Personal Data related to product purchases, we retain this data for a longer period of time in order to comply with our legal obligations (such as tax and commercial law and for warranty purposes). At the end of this retention period, your data will be completely or anonymously deleted, for example by aggregation with other data, so that it can be used in an unrecognizable way for statistical analysis and business planning.

Some examples of customer data retention periods:

  • Orders

When you place an order, we will retain the personal data you provided to us for five years so that we can comply with our legal and contractual obligations, unless the Law provides for a longer limitation period for the exercise of the relevant rights.

  • • Guarantees

If your order included a warranty, the relevant personal data will be retained until the end of the warranty period.

  • Newsletter

Your statement of consent for sending a newsletter is kept for as long as a newsletter is sent to you by the Company and in any case not more than six months from the cessation of sending it.

We collect the Data collected by Cookies in accordance with the Cookies Policy.

8. Is your data safe?

The security of your personal data is a high priority for us.

Recognizing the importance of the security of your Personal Data, we have taken all appropriate organizational and technical measures to secure and protect your Data from any form of accidental or improper processing. We use the most modern and advanced methods, to ensure maximum safety.

The website www.foodwelove.gr uses the SSL protocol, for secure online commercial transactions. This encrypts all the Data you provide, including your credit card number, name and address, so that it cannot be decrypted or changed when you transfer it over the Internet. A padlock will appear in your browser so you can see when an SSL connection is taking place.

Additionally, the details used to identify you as an account user are two: the Usernameandthe Personal Security Password. Eachtimeyou enter your details, you are given access to your personal account. This process is achieved securely through encryption during their transfer to the Internet and the servers of the Company. By the same token, you are allowed to change your Personal Security Password as often as you wish. After entering the desired code, the new code is coded and stored in the Company’s systems. For this reason, you are the only one who knows your password and you are solely responsible for maintaining the confidentiality of the password by third parties.

These measures shall be reviewed and amended as necessary.

9. What are your rights?

You have the rights:

  • • Accessto your Data
  • • Correctionof your inaccurate Data.
  • • Deletingyour Data (“right to be forgotten”)
  • • Portabilityof your Data.
  • • Restrict the processing of your Data.
  • • Object / revoke consentto the processing of your Data

10. How can you exercise your rights?

To exercise your rights, you can send us your request to the postal address of our Company (15 Themidos, Marousi Attica, PC 15124) or to the email address info@foodwelove.gr

11. When do we respond to your Requests?

We respond to your requests free of charge without delay, and in any case within (1) one month from the time we receive your request. However, if your Request is complex or there is many Requests made by you, we will inform you within the month if we need to receive an extension of another (2) two months within which we will respond to you.

If your Requests are manifestly unfounded or excessive, in particular due to their recurring nature, the Company may impose a reasonable fee, taking into account the administrative costs of providing the information or performing the requested action, or refusing to follow up on the Request. justifying the answer to you.

In case you do not receive an answer within the above deadline or the answer you received was not satisfactory or your issue has not been resolved, you can contact the Personal Data Protection Authority (www.dpa.gr).

12. Where can you refer to for the development of your Requests?

For more information you can call us to the following phone number: +30 2108061219/ 6983896870.

13. What is the applicable law during the processing of your Data by us?

Applicable Law is the Greek Law, as formulated according to the General Regulation for the Protection of Personal Data 2016/679 / EU, and in general the current national and European legislative and regulatory framework for the protection of personal data. The competent courts for any disputes arising related to your Data are the Courts of Athens.

14. How will you be notified of any changes to this Policy?

We update this Policy whenever necessary. If there are significant changes to the Policy or the way we use your Data, we will post this update on our website before the changes take effect and we will notify you in any appropriate way.

We encourage you to read this Policy from time to time to know how your Data is protected.

This Website Privacy Policy was updated on March 1, 2021.