Privacy Policy

The protection of your personal data is important to us!

Please take some time to read this Privacy Policy and find out how the company with the name “GRIGORIS PLATANOS KE PETROS BAIS O.O.” and with the distinctive title “EDSOIS FOTORAMA” based in Neo Heraklion Attica, 48 Anatolis Street, P.O. 14121, tel. 2109222383 and 2117701408, e-mail address info@ekdoseisfotorama.com (hereinafter the “Company” or “we” or “our”), acting as Processor, collects, stores, uses and generally processes your personal data when you visit, register or use the Company’s websites (hereinafter the “Websites”) and its mobile applications (hereinafter the “Apps”) as well as when you transact with its physical stores.

This Privacy Policy also describes how we use, share and protect your personal data, the choices you have regarding your personal data, and how you can contact us. For your questions regarding this Privacy Policy, as well as any issue related to the processing of your Data and the exercise of your rights, you can contact the Company’s Data Protection Officer (DPO) at 48 Anatolis Street, Heraklion Attica , T.K. 14121 or to the email address info@ekdoseisfotorama.com.

1. A few words about the Company’s Websites

www.fotorama.com.gr constitutes the website of the Company. In case you wish to make transactions or make an appointment, you should call 210-9222383 or 211-7701408 or send an e-mail to the e-mail address fotoramagram@gmail.com. We will be happy to assist you!

2. What is personal data?

The term “personal data” refers to information of natural persons, such as name, postal address, e-mail address, contact telephone number, etc., which identify or can identify you, hereinafter “Personal Data or Data”.

3. What is Personal Data Processing?

Any act or series of acts carried out with or without the use of automated means, on personal data or sets of personal data, such as collection, registration, organization, structuring, storage, adaptation or alteration, retrieval , information retrieval, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction.

4. It is mandatory to provide your Data

Providing the Data to the Company may be necessary to achieve the purposes specified in this Privacy Policy or may be optional.

The mandatory or optional nature of the provision of Data is indicated by an asterisk (*) next to mandatory personal data.

If you refuse to provide the information marked as mandatory on the Websites, it will be impossible to achieve the main purpose of collecting the specific Data, and it may, for example, make it impossible for the Company to fulfill the sales contract or provide the other services available on the Websites.

The provision of additional Data to the Company, beyond those marked as mandatory, is optional and does not have consequences regarding the main purposes of data collection, but its provision serves to optimize the quality of the services provided.

5. What Data we collect about you

We take care to collect only your absolutely necessary Data, which is appropriate and clear for the intended purpose. This Data includes the following:

Data during our communication with you will be requested
– Mandatory: electronic address (e-mail)*

– Optional: first name, last name, phone number.

Traffic data of our website or other websites that you have visited before us
Information collected from the use of cookies in your browser. Learn more about how we use cookies here.
– For example these copies may include details of your full name, address, date of birth and your face image (photograph). If you provide a passport, the data will also include your place of birth, gender and nationality.

In order to provide the best possible website experience, we collect technical information about your internet connection and browser, as well as the country and phone code where your computer is located, the web pages displayed when you visit, the advertisements in which you click and whatever search terms you entered. Learn more about it.

We comply with the law and do not allow children to register on our Sites and Apps when they are under 16 years of age. We will seek parental consent for children participating in Company experiences and events.

6. How we use your Data

We want to give you the best possible shopping experience. To achieve this it is necessary to obtain a complete picture of you by combining the Data we have collected. We then use your Data to offer you offers for products and services that are likely to be of interest to you.

The legislation for the protection of personal data allows us to do the above in the context of our legitimate interest and the need to understand our customers in order to provide them with a high level of service.

Of course, if you ever want to change how we use your Data, you will find details in sections 14 & 15 ‘What your rights are’ and ‘How you can exercise your rights’ below.

Remember, if you choose not to share Data with us or decline certain communication rights, we may not be able to provide some services you have requested. For example, if you have asked us to call you, we cannot serve you if you have withdrawn your general consent to receive updates from us.

Finally, we inform you that the processing of your Data is carried out either by the specially authorized personnel of the Company, or through IT systems and electronic devices by the Company and exceptionally by third parties, who, having contractually committed to the observance of confidentiality and the protection of With your data they carry out tasks necessary to achieve the purposes strictly related to the use of our Websites, its services and the sale of products through our Websites. Information on this can be found below in section 9 “Who are the recipients of your Data? How your Data is shared”.

Below you will find details of how we use your Data and why:

To provide information about the Websites, Apps and services you request

• Creating a User Account: The Company processes your Data in order to provide you with account functions and to facilitate the purchase of products and/or services.
• Contact: The Company uses your Data to respond to your requests/queries, refund requests and/or complaints. The information you share with us enables us to manage your requests and respond to you in the best possible way. We may also keep a record of your queries/requests to us to better respond to any future communications. We do this based on our contractual obligations to you, our legal obligations and our legitimate interests to provide you with the best possible service and to be able to improve our services based on your own personal experience.

To operate, improve and maintain our business, products and services

• Development and improvement of systems and services for the products we provide to you. We do this based on our legitimate business interests.
  We want to provide you with offers and suggestions that are most relevant to your interests. To help us form a better and more general understanding of you as a customer, we combine your personal data collected throughout the relationship between us, for example your purchase history in both our physical stores and our online store. For this purpose, we also combine the Data we collect directly from you with Data we receive from third parties to whom you have given your consent to transfer this data to us. For example, by combining this data, this will help us customize your experience and decide what inspiration or content to share with you. We also use anonymized data from customer purchase history to identify trends in different regions of the country. This can then guide which products we display in specific stores.
  To send you research and evaluation requests so that we can improve our services. These messages will not contain advertising content and do not require prior consent when sent by email or text message (SMS).
  We have a legitimate interest in doing so as it helps our products or services to be more relevant to you. Of course, you are free to opt out of receiving these requests from us at any time by updating your preferences in your online account.
  For our compliance with our obligations arising from the law

  To comply with our contractual or legal obligations to share data with law enforcement. For example, following a court order to share data with judicial services.
  To send you communications that are required by law or that are necessary to inform you of changes to the services we provide to you. For example, updates on these privacy notices, product recall notices, and legally required information about your orders. These service messages will not contain advertising content and do not require prior consent when sent by email or text message (SMS). If we do not use your personal data for these purposes, we cannot comply with our legal obligations.

7. For what purpose do we process your Data?

We collect your Data for the purposes of the products and/or services provided by our Company and in particular for:

a) your service based on the applicable government measures (e.g. click inside, click away),

b) compliance with the obligations imposed by the applicable legislation

c) sending, by electronic or traditional means, administrative, technological, organizational and/or commercial information about the Company’s products and/or services.

9. What is the legal basis for processing your Data by the Company?

Data protection law sets out various reasons why a company may collect and process your personal data, including: the terms of our contractual relationship
your consent where required. When collecting your personal data, we will always inform you which data is necessary in relation to a particular service.
the Company’s obligations arising from the law (e.g. tax legislation, e-commerce legislation, etc.)
the legal interest of our Company. In certain cases, we collect your Data in a way that can reasonably be expected as part of the operation of our business and that does not materially affect your rights, freedom or interests. For example:
– We will use your purchase history to send you or make available personalized offers.
Who are the recipients of your Data – How is your Data shared?
Access to your Data is given to the absolutely necessary personnel of the Company, who are bound by confidentiality, and the companies cooperating with us or third-party service providers, who process your Data as Processors on our behalf and in accordance with our orders.

Disclosure of Data by the Company

The Company shares your Data with:

Third parties, to the extent necessary for the following purposes: (i) compliance with government request, court order or applicable law, (ii) preventing illegal uses of our Websites or violations of our Website Terms of Use and our policies; (iii) our own protection against third-party claims, and (iv) helping to prevent or investigate cases of fraud (e.g. counterfeiting)
To other third parties when you yourself have given your consent
Notification by you

When you use certain social media features on our Sites, you may create a public profile that includes information such as your username, profile picture, and city. You may also share content with your friends or the general public, including information about your interaction with the Company. We encourage you to use the tools we provide to manage Company social media sharing to control the information you make available through Company social media assets.
The following is the policy we apply to those with whom we share your Data in accordance with the above:

We provide only the information needed to perform their specific services.
They can only use your Data for the exact purposes we set out in our contract with them.
We work closely with them to ensure that your privacy is respected and protected at all times.
If we stop using their services, any of the data you hold will be deleted or anonymized.

To improve your customer experience on our Sites and Apps, we use the following companies, who will process your Personal Data as part of their contracts with us:

For more information about sharing your Data with third parties please contact our Company’s Data Protection Officer.

10. How do we ensure that Processors respect your Data?

The Processors on our behalf have agreed and contractually committed to the Company:

to maintain confidentiality,
not to send your Data to third parties without the Company’s permission,
take appropriate security measures,
to comply with the legal framework for the protection of personal data and in particular Regulation 979/2016/EU (otherwise known as GDPR).

11. International Data Transfer

The personal data we collect (or process) in the context of our Websites will be stored in Greece. However, some of the Data recipients with whom the Company shares your Personal Data may be located in countries other than the one in which your Personal Data was originally collected. The legislation in those countries may not provide the same level of data protection compared to the country that originally provided your Personal Data. However, when we transfer your Personal Data to recipients in other countries, including the US, we are committed to protecting your Personal Data as described in this Privacy Policy and in accordance with applicable law.

We take measures to comply with applicable legal requirements for the transfer of personal data to recipients in countries outside the European Economic Area or Switzerland that do not ensure an adequate level of protection. We use various measures to ensure that your Personal Data transferred to these countries is adequately protected under data protection rules. These include signing the Contractual Clauses, certifying that the recipient has adopted the European binding rules or adheres to the EU-US and Switzerland-US Privacy Shield.

12. How long do we keep your Data?

We retain your Personal Data for as long as necessary to fulfill the purposes set out in this Privacy Policy (unless a longer retention period is required by applicable law). Generally this means that we will keep your personal data for as long as you have an account with our Company. At the end of this retention period, your data will be completely deleted or anonymized, for example by aggregating with other data, so that it can be used in a de-identified way for statistical analysis and business planning.

13. Is Your Data Safe?

We are committed to safeguarding your Personal Data.

Recognizing the importance of the security of your Personal Data, we have taken all appropriate organizational and technical measures to secure and protect your Data from any form of accidental or unlawful processing. We use the most modern and advanced methods to ensure maximum security.

14. What are your rights

You have the right to access your personal data.

This means that you have the right to be informed by us if we are processing your Data. If we process your Data, you can ask to be informed about the purpose of the processing, the type of your Data we keep, to whom we give it, how long we store it, whether automated decision-making takes place, but also about your other rights, such as correction, deletion of data, restriction of processing and filing a complaint with the Personal Data Protection Authority.

You have the right to correct inaccurate personal data.

If you find that there is an error in your Data you can submit a request to us to correct it (eg correct a name or update a change of address).

You have a right to erasure/right to be forgotten.

You can ask us to delete your data if it is no longer necessary for the aforementioned processing purposes or you wish to withdraw your consent in the event that this is the only legal basis.

You have the right to portability of your Data.

You can ask us to receive the Data you have provided in readable form or ask us to pass it on to another controller.
You have the right to restrict processing.

You can ask us to restrict the processing of your Data pending the consideration of your objections to the processing.

You have the right to object and withdraw consent to the processing of your Data.

You have the right to object and withdraw consent to the processing of your Data

You can object to the processing of your Data and we will stop processing your Data unless there are other compelling and legitimate reasons that override your right. If you have given your consent to the collection, processing and use of your personal data, you can withdraw your consent at any time with future effect.

In case we rely on our legitimate interest.

In cases where we process your personal data based on our legitimate interest, you can ask us to stop for reasons related to your personal situation. We must then do so unless we believe we have a compelling legitimate reason to continue processing your Personal Data.

15. How can you exercise your rights?

To exercise your rights, you can submit a request to the Data Protection Officer at the Company’s postal address (GRIGORIS PLATANOS KE PETROS BAIS O.O., Neo Heraklion Attica, 48 Anatolis Street, P.O. 11146) or to its email address (info@ekdoseisfotorama.com) under the heading “Exercise of Right” and we will make sure to look into it and reply to you as soon as possible.

Identity check

To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Privacy Policy. If you have authorized a third party to make a request on your behalf, we will ask them to demonstrate that they have your permission to act for this purpose.

16. When do we respond to your Requests?

We respond to your Requests free of charge without delay, and in any case within (1) one month of receiving your request. However, if your Request is complex or there are a large number of your Requests we will inform you within the month if we need to obtain an extension of another (2) two months within which we will respond to you.

If your Requests are manifestly unfounded or excessive in particular due to their repetitive nature, the Company may impose a reasonable fee, taking into account the administrative costs of providing the information or carrying out the requested action, or refuse to proceed with the Request .

17. What is the applicable law when we process your Data?

Applicable Law is Greek Law, as formulated in accordance with the General Regulation for the Protection of Personal Data 2016/679/EU, and in general the applicable national and European legislative and regulatory framework for the protection of personal data.

The competent courts for any arising disputes related to your Data are the Courts of Athens

18. Where can you go if we breach the applicable law to protect your Personal Data?

You have the right to submit a complaint to the Personal Data Protection Authority (postal address Kifisias 1-3, PO Box 115 23, Athens, tel. 210. 6475600, e-mail address contact@dpa.gr ), if you consider that the processing of your Personal Data violates the applicable national and regulatory legal framework for the protection of personal data.

19. How will you be notified of any changes to this Policy?

We update this Privacy Policy whenever necessary. If there are significant changes to the Privacy Policy or the way we use your Personal Data, we will post an update to this on our website before the changes take effect and we will notify you in any convenient way.

20. Questions and Comments?

We hope this Privacy Policy has helped you understand how we handle your Personal Data and your rights to control the handling by our Company.

If you have any questions that have not been covered, or comments and concerns you may have about our Privacy Policy please contact our data protection officer who will be happy to assist you:

Email to the email address: info@ekdoseisfotorama.com or
Letter to the Data Protection Officer at Anatolis 48, Neo Heraklion Attica, Greece.