PRIVACY AND PERSONAL DATA PROTECTION STATEMENT

At Bavelas (“Company”, “we”, “us”, “our”) we recognize that the protection and security of your personal data is extremely important and is committed to operating with its protection in mind.
This Personal Data Protection Privacy Policy (“Statement”) presents the way in which the Company uses your personal data collected through the website https://bavelas.eu as well as the measures it has taken for the protection and safe keeping and generally processing of this data. The Statement applies to you if you purchase products, receive services from us, participate in our events or promotions, or interact in any other way with us, including by using our corporate website or communicating with us through social media.
Please take a moment to review the relevant Statement and let us know if you have any further questions, clarifications and/or information you may need.

1. Who we are

The purpose of this Statement is to inform you about the type of personal data collected by the Company, the purpose and method of processing (collection, storage, use, transmission), the adopted protection and security measures we have taken, as well as the rights that the subjects of personal data have against this processing, which in any case is carried out in a reliable and transparent manner. Given the collection and processing of personal data, the Company maintains a strong commitment to processing them in accordance with the General Data Protection Regulation (GDPR), the Greek data protection laws and any other relevant law and code of conduct for data protection (hereinafter collectively will be referred to as “Personal Data Protection Laws – GDPR”).
bavelas is supervised by the Personal Data Protection Authority (PDPA) for the collection and processing of the data it carries out.

2. Data We Collect.

Information collected automatically when you visit and interact with our Website
Our Website has informational and commercial-promotional content about the services and products of our company. Just browsing it (without making a purchase or sending a request) does not require the visitor to provide/enter personal data. However, just by visiting and browsing the Website, certain information may be collected automatically, which can identify you directly or indirectly, such as:

• the internet protocol (IP) address of your computer,
• the type of browser and operating system,
• the web pages you visited immediately before and after your visit to the page,
• the speed of the connection and information about the software programs installed on the computer,
• basic server connection information and
• information collected through HTML cookies, Flash cookies, web beacons and other similar technologies (see below in the Cookies section).\

Regarding the information that is automatically collected from your browsing on our website, please refrain from visiting it if you do not wish for the collection and processing of this information.
Making a purchase
You may be asked to provide personal information for special purposes, such as when you make a purchase, at which point your details are entered into our company’s membership register, and collected including:
– contact information such as your name, mailing address, email address and telephone number.
-credit card number or other payment account number, billing address and other payment and billing information (“Payment Information”)
– records and copies of your correspondence if you contact us.
– information necessary to fulfill special requests
In this context, we may contact you at the e-mail address you have already notified us, recommending you products and services based on the information we received during your previous entries to the online store or during your order.
Lawful bases of processing
We collect and process the personal data you provide us in the context of the following legal bases:

• Legitimate interest as required to fulfill the services provided
• Contractual and pre-contractual stage
• Legal Obligation for our compliance with applicable laws and regulations
• Your consent, which you can withdraw within your rights

We do not process personal data without your consent or without you being our customer in the context of purchasing a product or using one of our services or without having given the Company your data yourself.
We do not collect or process personal data of children under the age of 15.
We only collect the personal data that is necessary for the correct and complete provision of our products and services, such as name, surname, telephone, e-mail, address, details of transactional behavior, etc. At this point it is pointed out that you are responsible for the accuracy of the data that you provide us.
Purposes of Processing
With regard to customers, suppliers and consumers: the purposes of processing personal data are the maintenance of customer and supplier records, the promotion of products and services (Marketing), statistical scientific market research and public relations and other auxiliary functions and complaint management consumers. To achieve the above purposes, we collect and process non-sensitive personal data of our customers, consumers and especially those who submit complaints or complaints to us, our principals and assignees, our partners and consultants, our suppliers and participants in market research, polls and competitions. The non-sensitive personal data we collect and process is data relating to identification data (personal data) and data relating to the goods and services offered by the individual. The above personal data are made public by the subjects themselves, either in order to make it possible for them to be serviced and/or updated by our company, or in order to participate in promotional actions and competitions organized by our company.
We collect, process and store your data in the context of legitimate interest for the purpose of analyzing our business performance
We collect, process and store your data to handle any complaints you may have
We collect, process and store your data for the delivery of gifts resulting from your participation in any of our promotions

3. Transfer and disclosure of your personal data.

We do not sell or transfer your personal data to third parties except in the context of what is defined in this Privacy Statement/Policy as well as in the context of the requirements of the law. In particular, in order to provide our services, we may share your personal data with certain third-party companies, which act on our behalf (as processors) in order to provide you with an optimal service (such as transport companies, service companies communication and marketing, companies providing accounting, consulting or auditing services, etc.). The Company ensures the processing of your personal data by the partners-third companies with contractual clauses limiting the purpose of processing and compliance with the GDPR technical and organizational measures for the correct and safe processing of your personal data.
We do not transfer your personal data to third countries and/or outside the European Union.
Our website (https://bavelas.eu/) collects, but does not transmit to third parties, information that describes your previous browsing on the internet) such as cookie files (cookies are files stored in your web browser and contain information about your past online activity). More specifically, we use cookies for many different reasons, with the sole purpose of creating a safer and more user-friendly environment for our visitors, as well as providing advertising content tailored to their interests and needs. We also use “cookies” to understand how our visitors browse the website in order to improve its structure and content. More information about cookies can be found here.

4. Protection measures.

We take all necessary information protection and security measures. More specifically, we have developed and implemented optimal technical and organizational security and information protection mechanisms with the aim of protecting their integrity, availability and confidentiality.

5. Duration of data retention

We collect and retain your personal data for as long as required by law as part of our contractual relationship with you.
If you consent to the use of your data for marketing actions, we retain your data until you request otherwise or withdraw your consent.

6. Your Rights.

We recognize and guarantee your following rights:

• Right to transparent information, to exercise your rights (Article 12, 13, 14 GDPR),
• Right of access (Article 15 GDPR) to the personal data we have collected from you
• Right to rectification (Article 16 GDPR) of inaccurate personal information we hold about you
• Right to deletion (“right to be forgotten”) (Article 17 GDPR) of the Member-User account and the information we have about you. We should note that exercising the right to delete an active subscriber implies the inability to continue to provide the services you have requested from us
• Right to restrict the processing of your personal data (Article 18 GDPR) where possible
• Right to object (Article 21 GDPR) to the processing of your personal data
• Right to withdraw your consent already given (Article 7 GDPR), i.e. to withdraw your consent at any time for processing based on consent. The lawfulness of the processing of your data is not affected by the withdrawal of consent until the point at which you requested the withdrawal.
You have every right to exercise your rights by sending an email to info@bavelas.eu or by letter to the address kakavaki 6, 11744 Athens. providing additional information to identify and confirm your details.