Privacy Policy

Welcome to the website www.kitolab.gr!

At Kitolab we have taken all necessary measures in order to comply with the fundamental principles of protection of the personal data of our users, to ensure the protection of their privacy and the confidentiality of information concerning the visitors / customers of the website, in the context of our compliance with the provisions of Directive 2016/680.

Immediately below we provide you, in the form of questions and answers, with some basic information about how we collect, use, store and generally process your personal data and how we keep your data safe.
This Privacy Policy applies to all electronic services provided by us on the Internet and in particular to all social media belonging to our corporate group, mobile and tablet applications, social media pages such as Facebook, Instagram or the applications we have or run from time to time.

For more information on how to use cookies, see the Cookies Policy. For all other information about our services, see our Terms and Conditions. If you would like more information about how we collect, use and store your personal data, you can contact us at any time by sending an email to info@kitolab.gr, or by calling or sending a letter to the Kitolab privacy team based in Kilkis 20 Tsirogianni Street, PC 61100.
The website www.kitolab.gr belongs to and is managed by the sole proprietorship of Mavropoulos Christos, resident of Kilkis, with VAT number 151387280. Kilkis.

WHO IS THE RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA

Under data protection law, the data controller is responsible for securing your data, providing accurate information about your data usage, and enforcing your data rights.
The website www.kitolab.gr belongs to and is managed by the sole proprietorship of Mavropoulos Christos, resident of Kilkis, with VAT number 151387280. Kilkis. For the purposes of the General Data Protection Regulation 2016, the person in charge of data processing is defined as above.

WHAT PERSONAL DATA DO WE COLLECT?

We collect your personal data, what you provide to us through your registration and connection as a customer (new or registered) to our email address, as well as what you provide to us when placing an order or registering for marketing communications, or when use the other services offered by our website (www.kitolab.gr).

The data we collect includes only the absolutely necessary personal data that you provide to us. We point out that some fields are required, as this is data we need to be able to provide the service or give you access to this feature. Please note that if you choose not to provide this information to us, you may not be able to complete your registration as a customer or you may not be able to enjoy these services or features.

The provision of any of your personal information is not necessary for your simple browsing of our website. In particular, when you register as a customer, you are asked for: your name, your last name, your email address and your password. In case you wish to place an order and purchase of our product, you are asked for the following personal data: name, surname, your address (street, postal code, city and country), your e-mail address.

If you wish to issue an invoice in addition to the above information, you must also complete your VAT number, the competent Directorate of Financial Services (DOY) to which you belong as well as your activity (individual, business, etc.). In case you choose to use a credit / debit / prepaid card as a payment method, you will need to provide us with the card number as well as the number and expiration date of your credit or debit card if you complete the purchase of our Company's product. We also collect data about your shopping habits and the pages and products you have seen from the use of our website in order to suggest products that meet your choices and desires, while in case you subscribe to our newsletter (newsletter) We collect information about the purchases you have made in connection with the sending of the newsletters by us.

FOR WHY DO WE COLLECT YOUR PERSONAL DATA

As mentioned above depending on the way you interact with our website, e.g. depending on the services, products or functions you want to receive, we will process your personal data, ie your identity details (name, surname), financial information and transaction information (TIN, TAX, payment card number), commercial your habits (if you have subscribed to our newsletter, what product selections did you make through our website) for certain purposes as they are listed immediately below.

To manage your registration as a customer
If you decide to register as a customer on our website, we must process your absolutely necessary data (name, surname, e-mail address and password) to identify you as a user of our website and give you access to the various functions, products, available to you due to your status as a registered customer. You can cancel your registration at any time by contacting us through Customer Service.

To complete our contractual obligations from the conclusion of the product sales contract
If you decide to order and ship the selected product (s) and to complete the order and ship the products you will be asked for information regarding your identity details (name, surname), your address (street, Postal code, city and country), your e-mail address. If you wish to issue an invoice in addition to the above information, you must also complete your VAT number, the competent Directorate of Financial Services (DOY) to which you belong as well as your activity (individual, business, etc.). In case you choose to use a credit / debit / prepaid card as a payment method, you will need to provide us with the card number as well as the number and expiration date of your credit or debit card if you complete the purchase of our Company's product.

All the above information is necessary for the purpose of completing the sales contract and mainly to:
To fulfill our contract with you, including the possibility of paying the purchase price of our products, without requiring your physical presence at the store, but also to deliver our products to the place you indicate.

1. To contact you about the ordered product (s) for which a contract has been concluded if there are problems with the order, or further clarifications are required for their shipment, as well as to confirm his / her shipment in case of difficulty in finding it your address.
2. Manage the payment of the products you buy, regardless of the payment process used. If you choose to activate your card data storage feature for future purchases, we must process the data indicated for activating and deploying this feature. Consent to enable this feature allows automated payment data to be displayed in subsequent purchases, so you do not have to re-enter it in each new process and this data will be considered valid and active for subsequent purchases. You can modify or cancel your cards at any time through the section corresponding to the payment information,
3. Manage possible returns after you have made a purchase and manage requests for product availability information, product bookings through the website.
4. For the purposes of issuing tax documents and specifically invoices, if you choose to issue them, it is required, according to Greek law, to provide us with the VAT number and the Tax Office to which you belong as well as your status as an individual or company and its type in order to be completed properly the above tax document.
5. To ensure that you can use, if we have your consent, other available functions or services, such as the use of the Gift Card or Gift Check, which you can also use in our store.

For your service in the context of submitting a relevant request to Customer Service
When contacting our Customer Service team, we may collect additional data to help us resolve any questions you may have about your order, delivery, payments, marketing, your website, or any other questions you may have.

For marketing purposes
This purpose includes the processing of your data only if you subscribe to our Newsletter. In this case and with your explicit consent, we will process your personal data to manage your registration, including the sending of personalized information about our products or services through various means (such as email or SMS). Accordingly, keep in mind that this data processing involves analyzing your profile as a customer or buyer to determine what your preferences are and therefore which products and services best suit your style when sending information to you. For example, based on your purchases and browsing history (ie Depending on the products you clicked on), we will make suggestions for products that we think may be of interest to you, and if you are a registered user, we will provide you with the feature "Basket recovery".

In any case, you have the opportunity to unsubscribe from the newsletter at any time and at no cost through the "Newsletter" section of the Website, as well as through the instructions provided in each update.
By participating in any promotion, you authorize us to process the personal data you have shared with us according to the promotion and we may share it through various media such as social networks or the Website itself. In each promotion you participate, you will be provided with the terms and conditions where we will provide you with more detailed information about the processing of your data.
We will also use your personal information to send you sales and marketing announcements that we believe you may be interested in if we have your explicit consent to this activity or if you are already a customer where we have a legitimate interest in contacting you. You can opt out of sales and marketing communications from us at any time.

For the purpose of improving the services we provide
If you enter our website, we inform you that we will process your browsing data for the purpose of understanding how you interact with the website and possible improvements to it. In addition, we sometimes conduct quality surveys and actions in order to know the degree of satisfaction of our customers and buyers and to identify those areas in which we can improve.

HOW WE LEGALIZE TO COLLECT AND PROCESS YOUR PERSONAL DATA

We legitimize the collection, processing and use of your personal data as follows:

1. Regarding the management of your registration as a customer, we process your absolutely necessary personal data (name, surname, email address, password), which you provide to us and which are necessary for the execution of the terms governing the use of the website . Your registration as a customer is not necessary for your simple browsing of the website, but it is required to manage your registration in case you wish to use the services of the website (shopping cart). The use of your data is necessary for our legitimate interest to ensure that the service we provide is done correctly, and is based on your consent as you can browse our website without registering as a customer.
2. Regarding the information you provide to us for the execution of the order and the purchase of the product, these are absolutely necessary for the execution of the purchase contract, so that we can process your payment and send you an order confirmation, in the context of the fulfillment of the contract. Some process-related data processing is only enabled because you request or approve it, such as storing payment (card) data for future purchases. In these cases, the processing of your data is based on your consent. We have a further legitimate interest in conducting the necessary checks to detect and prevent possible fraud when making a purchase. We understand that the processing of this data is a positive sign for all parties involved when paying for a purchase and especially for you, as this allows us to take steps to protect you from fraudulent attempts by third parties.
3. In case you submit a request in the context of customer service, we undertake the processing of personal data that you provide to us with your own will and consent. In any case, we consider it in our legitimate interest to respond to requests or questions raised by you through the various existing communication channels. When you contact us, specifically for the management of events related to your order or the product / service obtained through the Website, the processing of your data is necessary for the execution of the purchase contract. When your question relates to the exercise of your rights which we inform you of below or to claims relating to our products or services, we are entitled to process your data in order to comply with our legal obligations.
4. In the context of the processing of your personal data for marketing purposes we are entitled to process your data for marketing purposes due to the prior consent you give us e.g. when you agree to receive personalized information through various media, when you authorize us to send notices or when you accept the legal terms and conditions in order to participate in a promotional activity. In order to provide you with personalized information, we consider it in our legitimate interest to create a profile with the information we have about you (such as your browsing, preferences or shopping history) and the personal data you have provided to us, thus improving the experience. as a user of the website and gaining access to information according to your preferences.
5. Regarding the information we use to improve our services for them, we consider that we have a legitimate interest to improve the analysis of the usefulness of our Website as well as to diagnose the degree of user satisfaction, as we understand that the processing of this data is also beneficial for you because its purpose is to improve the user experience and offer a higher quality service.

The processing of personal data is done in accordance with the provisions of the General Regulation of Personal Data Protection (GKPD 2016/679), any more specific national and European legislation for certain areas, the current Greek legislation for the protection of personal data, as well as for the protection personal data and privacy in the field of electronic communications (Law 3471/2006, as applicable) and the decisions of the Personal Data Protection Authority (APDPH).

HOW LONG DO WE KEEP YOUR PERSONAL DATA

Depending on the purpose for which we collect and process your personal data, we provide you with the required retention time of your personal data.

1. To manage your customer registration, we process your personal information for as long as you remain a registered customer. You can unsubscribe at any time.
2. For the purposes of performing the contract, we process your data in principle until the completion of the contract. Furthermore, we hold your data for the management of cases of their return in accordance with the terms and conditions mentioned in the relevant point, management of complaints or claims related to the purchase of the specific product or service. In case of using the possibility of storing your payment data via card, we keep your data until you ask for it to be deleted.
3. For Customer Service purposes we will process your data for as long as it takes to satisfy your request or request.
4. For Marketing purposes we will process your data until you delete or cancel your subscription to the Newsletter.
5. For the purpose of improving our website, we will process and maintain your personal data during the usability tracking period of our website or for a specific quality survey or until we anonymize your browsing data.

No matter how we process your data during the period that is absolutely necessary to achieve the respective purpose, we will then keep it properly stored and protected for the period during which liability could arise from the processing, according to the current legislation. Once the limitation period for each claim has passed, we will proceed with the deletion of personal data.

WHAT ARE YOUR RIGHTS IN THE USE OF US OF YOUR PERSONAL DATA

You may exercise, as appropriate, the following rights:

• Right of access means the right to know what data we use, why we use it and who receives your data.
• Right of correction means your right to correct at any time any deficiencies or inaccuracies in your personal data.
• Right of deletion means your right to delete your personal data if you do not require their processing to fulfill our obligations to third parties.
• Right to restrict processing, ie your right to question the accuracy of the data.
• Portability right means your right to request and receive your data in a structured and commonly used format.

These rights are exercised free of charge for you, by sending an email to info@kitolab.gr, or by calling or sending a letter to the personal data protection team Kitolab based in Kilkis, 20 Tsirogianni Street, PC 61100, unless they are repeated frequently and due to volume have administrative costs for us, so you may be charged with the relevant costs after your information.

If you exercise any of these rights, we will take all possible measures to satisfy your request within thirty (30) days of receiving the relevant request, after informing you either of its satisfaction or of the objective reasons that prevent the his satisfaction.
In addition, you may at any time object to the processing of your personal data by revoking your consent, which will result in the inability to complete the contract of sale and delivery of the movables. Finally you have the right to lodge a complaint with the competent regulatory authority, in particular before:
- the Hellenic Authority for the Protection of Personal Data (http://www.dpa.gr/portal/page?_pageid=33,15510&_dad=portal&_schema=PORTAL), which is based in Athens, 1-3 Kifissias Street, (PC 115 23).

For any issue regarding the processing of your data you can contact info@kitolab.gr, or call or send a letter to the personal data protection team Kitolab based at the administration offices in Kilkis 20 Tsirogianni Street, PC 61100.

IF WE SHARE YOUR PERSONAL DATA WITH THIRD PARTIES

In order to fulfill the purposes stated herein, it is necessary to give access to your personal data to the natural or legal persons who work with us and to third parties who provide us with support in the services we offer you, namely:

1. Your data will be transmitted to parts of our company and to the staff that staffs them in order to be responsible for the completion of our transactional relations, the completion of orders, the issuance of the required document that will accompany the order and the delivery of the ordered things, as well as for the promotion of services for which there is a consensus. Examples include the accounting department, the marketing department, the order acceptance department, the computerization department.
2. Furthermore, your data may be transmitted and made available by legal entities and / or natural persons with whom, from time to time, we maintain business relations for the correct fulfillment of our contractual obligations (for example, a transport company for delivery. of the ordered products, etc.) as well as to public authorities or financial institutions (banks) if requested by them for a legal reason. However, you should be aware that, in this case, these legal and / or natural persons will process your personal data solely for the purpose of providing services to us and not for their own benefit, acting as processors.

The transfer of Data to third parties, other than those mentioned above, and to the parties here, is possible only: (a) if it is necessary for the execution of the contract or (b) if it is necessary by law or rule of law or court decision or prosecutor's order
In every transmission we always take every measure so that the data that will be transmitted will always be the minimum necessary and that the conditions for legal and fair processing will always be met with adequate guarantees and always maintaining the security of your data.

HOW IS THE SECURITY OF YOUR DATA ENSURED

In order to be consistent in the observance of the fundamental principles of protection of your data and to avoid any violation of your privacy and confidentiality, we resort to the use of all modern and appropriate for the purposes of processing technical and organizational measures. Indicatively, we have encrypted your data as well as anonymized using an SSL security certificate. We check the operation, response and updating of the above means and techniques at regular intervals.