Information on data protection
Below we explain how we collect personal data when you use our website. Personal data are data that relate to you personally (e.g. name, address, email addresses, user behaviour, etc.).
The collection and processing of personal data by the Company, subject to the terms of the present Policy, the relevant provisions of the Cypriot {n. 138 (I) / 2001 and 112 (I) / 2004} and {Community legislation Directive 95/46 / EC} Law to protect the individual from the collection and processing of personal data, as supplemented by the decisions of the Commissioner for the Protection of Privacy and the relevant provisions of the EU law.
The Company reserves the right to modify the content of the present Privacy Policy once in a while, without prior notice and at its sole discretion. Accordingly, each time you browse the Website and / or use the ‘To AsimenioKouti’ you are bound by the terms of the applicable Privacy Policy and you should review this text every time you use the Website to make sure you agree with this.
If you have any questions or objections to the collection and processing of your personal data, or even if you want to delete them, you can Contact Us.
Security
For reasons of security and to guard against the transfer of personal data and other confidential information (e.g. during orders or enquiries to the controller), this website uses SSL or TLS encryption. Encrypted connections can be identified in your browser address bar by the prefix "https://" and the symbol of a lock.
Legal Basis
Under art. 13 GDPR we are obliged to inform you of the legal basis of our data processing activity. Unless expressly specified in the data protection statement below, the legal basis for obtaining permission is art. 6 para. 1a) and art. 7 GDPR, the legal basis for processing for performance of our services and the implementation of contractual measures is art. 6 para. 1b) GDPR, the legal basis for processing for the fulfilment of our legal obligations is art. 6 para. 1c) GDPR and the legal basis for the vouchsafing of our legitimate interests is art. 6 para. 1f) GDPR.
COLLECTION OF PERSONAL DATA WHEN YOU VISIT OUR WEBSITE
If you use our website simply for informational purposes – i.e. if you do not register or provide us with any information in any other way – we will collect only the personal data that your browser transmits to our server. If you visit our website, we collect the following data, which we require in order to ensure the website displays properly and to guarantee its stability and security (legal basis is art. 6 para. 1 sentence 1 f GDPR):
- IP address
- Date and time of request
- Time difference from Greenwich Mean Time (GMT)
- Content of request (specific page)
- Access status/http status code
- Volume of data transmitted
- Website from where the request originates
- Browser
- Operating system and its interface
- Language and version of browser software
In addition to collection of the aforementioned data, your use of our website will result in cookies being stored on your computer. Cookies are small text files saved on your hard drive and assigned to your browser and via which the party that has placed the cookie (in this case us) can collect specific information. Cookies cannot execute any programmes or infect your computer with any virus. Their purpose is to make our website more user-friendly and effective.
Temporary cookies or session cookies are cookies that are deleted when the user leaves the website and closes their browser. Permanent cookies are cookies that remain stored on your computer even after you have closed your browser. This enables details such as your log-in status to be saved so that the website recognises you when you return. Permanent cookies can also be used to save information about the user's interests, which is then used to measure reach or for marketing purposes.
By saving your settings, cookies help to simplify the order process (e.g. by recording the content of your virtual shopping basket for when you next visit the website). Insofar as individual cookies placed by us are used to process personal data, the processing is carried out under art. 6 para. 1 b) GDPR either for the performance of the contract or under art. 6 para. 1 f) GDPR to safeguard our legitimate interests in ensuring the optimum functioning of our website and a user-friendly experience and effective browsing session.
You can adjust your browser settings in accordance with your preferences by e.g. rejecting cookies. However, if you do so, you may not be able to use all the functions of this website.
OTHER FUNCTIONS AND SERVICES AVAILABLE ON OUR WEBSITE
As well as the purely informational use of our website, we also offer various services that require you to provide additional personal data, which we will use to provide the services concerned and for which the aforementioned data processing principles apply.
If in order to provide specific functions on our website we use the services of third parties, or if we intend to use your data for commercial purposes, information on the processes involved will be provided below.
Some of our applications use geo-localisation, a tool that identifies the user's location. This is done solely via anonymised IP addresses and only at the geographical level. The information thus obtained cannot in any circumstances be used to identify the user's place of residence.
Contacting us
When you contact us (e.g. via the contact form or by email, phone, or social media) your details will be used solely for processing your enquiry. The legal basis for the processing of your data is our legitimate interest in responding to your query as per art. 6 para. 1 f) GDPR.
Once your query has been satisfactorily dealt with, your data will be deleted, provided it can be assumed from the circumstances that the matter has been sufficiently clarified and there is no statutory obligation to retain the data concerned.
Using our online shop
If you wish to purchase items in our online shop, you will need to provide the personal data required for the processing of your order in order to form a valid contract. The data you provide will be used to process your order, for which we may pass your payment details to our payment service provider. The legal basis for this is art. 6 para. 1 sentence 1 b GDPR.
You will also have the option to create a password-protected customer account, which we can then use to save your data for future purchases. When you create an account under My Account, the data you provide will be saved for future use. You can manage and amend your data yourself and see your order history.
Under trade law and tax law regulations, we are obliged to save your address and payment and order details for ten years, although after two years the use of these data will be restricted. This means that your data will be used solely for the purposes of complying with our statutory obligations.
In order to prevent unauthorised access to your personal data, especially financial data, the order process is encrypted using TLS technology.
Newsletter and news services
Regardless of whether or not you place an order, you can subscribe to our newsletter, which we use to keep users up-to-date with our latest offers.
When you register for our newsletter, we use a double opt-in process. This means that, following your registration, we send an email to the address you have provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm registration within 48 hours, your information will be automatically deleted. We will also save your IP address and the date and time of your registration and confirmation. The purpose of this process is to be able to prove you registered for the newsletter and to clarify any potential misuse of your personal data.
In order for us to send you the newsletter, you will need to provide us with your email address as well as your first and last name to allow us to address you personally. You don't have to give your real name: a pseudonym will suffice. Once we have received your confirmation, we will save the data you have provided for the purpose of sending you the newsletter. The legal basis for this is art. 6 para. 1, 1a GDPR.
You can at any time revoke your permission for the sending of the newsletter and can also cancel your subscription.
Couriers
When dispatching ‘To AsimenioKouti‘goods, couriers operate as our service provider in the delivery of business-to-customer messages with the aim of updating the customer on the status of their delivery and of sharing the shipment’s tracking number. For this purpose, the customer’s personal data necessary for a successful shipment - such as the name, address, e-mail address, telephone number - is shared with our partner courier and processed in line with the General Data Protection Regulation (GDPR).
TO WHAT EXTENT DO WE SHARE PERSONAL DATA WITH THIRD PARTIES?
We will share your data with third parties if we are compelled to do so under statutory regulations or by legal processes (e.g. a request from an investigative authority) or if you have expressly consented to such sharing.
Any other sharing of your personal data by us will be done solely with service providers or partner organisations who assist us, subject to our instruction, in processing orders, providing customers with information, and/or supplying services (contract processing as per art. 28 GDPR). Such organisations could be hosting providers, delivery agents payment service providers, fraud prevention services, and credit rating agencies. Such organisations are for their part bound by the applicable data protection regulations. Contract processing under art. 28 GDPR is subject to especially stringent data protection regulations. Such organisations are obliged to use such data solely for the performance of their duties on our behalf.
Where we process data in a non-EU or non-EEA country or such processing takes place as part of our use of third-party services or as part of the disclosure or sharing of data with third parties, this will only happen 1) where required for the fulfilment of our (pre)contractual obligations, 2) where you have provided your consent, 3) where there is a legal obligation to do so, or 4) where it is in the service of our legitimate interests. Subject to statutory or contractual permissions, we will process (or allow to be processed) data in a non-EU or non-EEA country only where the special conditions of art. 44 GDPR are met, i.e. only if processing is carried out subject to special guarantees such as those provided by official data protection schemes that provide protection equal to that offered by the EU or where officially recognised special contractual obligations (i.e. standard contractual clauses) are in force.
COOKIE CONSENT
We use these cookies to anonymously track your activities to provide you with an optimal experience on our site and to provide personalised advertising. We may share this information with third parties such as advertising partners like Google, Facebook or Instagram. Please note that based on your settings, you may no longer be able to use all the functions of the site.
WEB ANALYSIS/TRACKING
In order to optimise its web services, ‘To AsimenioKouti’undertakes regular analysis of user behaviour. Using web tracking, we can for example see how often our websites are visited and which content is especially popular. For this purpose we collect and store anonymised data and use it to create pseudonymous usage profiles. We also use cookies that enable internet browsers to be recognised.
Tracking and the evaluation linked to it is done.
- to ensure the security of our website and therefore of your data (legal basis: art. 6 para. 1 f) GDPR)
- to provide our services and comply with our contractual obligations (legal basis: art. 6 para. 1 b) GDPR)
- to measure the success of advertising campaigns and optimise the display of advertising (legal basis: art. 6 para. 1 f) GDPR)
- evaluation of statistics for the use of our services (legal basis: art. 6 para. 1 f) GDPR)
You can at any time opt out of the tracking of your data and their use for analytical evaluation by adjusting your browser settings by e.g. declining to accept third-party cookies or any cookies or you can follow the recommendations provided for each individual service.
Google Analytics
This website uses Google Analytics, a web analysis service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland ("Google"). Google Analytics uses cookies. Cookies are text files that are saved on your computer and that enable your use of the website to be analysed. The information thus created on your use of this website (including your abbreviated IP address) will generally be transferred to a Google server in the US and saved there.
This website uses Google Analytics only with the extension _anonymizeIp(), which ensures IP addresses are anonymised via abbreviation and precludes direct personal identification. It ensures that, within member states of the EU or in other states signatory to the Treaty on the European Economic Area, your IP address will be subject to prior abbreviation by Google. Only in exceptional circumstances will your full IP address be transferred to a Google server in the US and abbreviated there. In such circumstances, processing takes place under art. 6 para. 1 f) GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with further services related to website use and Internet use. The IP address transferred from your browser by Google Analytics will not be merged with other data held by Google.
You can prevent cookies being stored on your computer by adjusting your browser settings, but if you do so, you may not be able to make full use of all the functions on this website. You can also prevent Google from capturing and processing the data produced by cookies and based on your website use (incl. your IP address) by downloading and installing the plug-in available at https://tools.google.com/dlpage/gaoptout?hl=de
For more information on how Google Analytics handles user data, see Google's data protection statement at: https://support.google.com/analytics/answer/6004245?hl=de
USE OF SOCIAL PLUG-INS
In order to be able to communicate with customers, potential customers, and users on social networks and platforms and to provide them with information about our services, we maintain an online presence on such networks and platforms. When you access these networks and platforms, their terms and conditions and data protection notices apply.
When you visit our website, none of your personal data will initially be shared with the plug-in provider. The plug-in provider can be identified by its initial letter in a box or by its logo. You can use this button to communicate directly with the plug-in provider. Only when you click on the marked field and thereby activate it does the plug-in provider receive the information that you have visited our website. In the case of Facebook, they have stated that the IP address is anonymised immediately after capture. Activating the plug-in will therefore involve your personal data being shared with and saved by the plug-in provider concerned. As the plug-in provider especially collects data via cookies, we recommend that you delete all cookies via your browser's security settings.
We have no control over the data collected or the data processing that takes place. Nor do we know the full extent of the data collection, the purpose of the processing, or how long data are kept for. Nor do we have any information regarding the deletion of data collected by the plug-in provider.
The plug-in provider will save the data it collects about you as a usage profile and will use this profile for advertising and market research purposes and/or to optimise the design of its website. This evaluation will especially be used – even for users who are not logged in – to display targeted advertising and to notify other users of the social network about your activity on our website. You have the right to opt out of the creation of this user profile. To exercise this right you should contact the plug-in provider concerned. The plug-ins allows us to offer you the option of interacting with other users of the social networks so that we can improve our service and make it more relevant to you as a user. The legal basis for the use of the plug-ins is art. 6 para. 1 sentence 1 f GDPR.
The data are shared regardless of whether you have an account with the plug-in provider or whether you are logged in. If you are logged in with the plug-in provider, the data collected on our website will be assigned directly to your account with the plug-in provider. If you click on the button and link to the provider's website, the plug-in provider will save this information in your user account too and share it publicly with your contacts. We recommend logging out after you have used a social network, especially before you click on the button, as you can in this way avoid your data being assigned to your profile at the plug-in provider.
For more information on the purpose and scope of data collection and processing by the plug-in provider, see the providers' data protection statements as indicated below. There you will also learn more about your rights in this regard and how you can adjust your settings to protect your privacy.
Addresses of plug-in providers and URLs with their data protection notices:
We use the following plug-ins and apps on our websites: Facebook, Google+, Twitter, Pinterest, YouTube, Instagram, Snapchat, WhatsApp
facebook.com plug-in and app as used by us and operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. Facebook's data protection statement: https://www.facebook.com/about/privacy/
Google+
Google+ plug-in as used by us and operated by Google. Google's data protection statement: https://policies.google.com/privacy?hl=cy
Twitter's plug-in as used by us and operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA ("Twitter"). Twitter's data protection statement: https://twitter.com/privacy
Pinterest's plug-in as used by us and operated by Pinterest Inc., 635 High Street, Palo Alto, CA, USA ("Pinterest"). Pinterest's data protection statement: https://about.pinterest.com/privacy
YouTube
YouTube's plug-in as used by us and operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("YouTube"). YouTube's data protection statement: https://www.google.com/intl/de/policies/privacy/
Instagram's plug-in as used by us and operated by Instagram, LLC Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). Instagram's data protection statement: https://instagram.com/about/legal/privacy/
WhatsApp plug-in as used by us and operated by WhatsApp Inc., 650 Castro Street, Suite 120-219, Mountain View, Kalifornien, 94041 USA ("WhatsApp"). WhatsApp's data protection statement: https://www.whatsapp.com/legal/?l=cy
YOUR RIGHTS
You have the right to be informed of the personal data held about you.
If you make your request verbally, please understand that we may request proof that you are who you say you are.
Unless prevented by statute (art. 16 - 18 GDPR), you are further entitled to the correction or deletion of your data and to the restriction of their processing.
You also have the right to opt out of data processing under statutory regulations. The same applies for the right to data portability (art. 21 GDPR).
Where we process your data on the basis of your consent, you have the right to revoke you permission at any time with future effect. This will not have any implications for the lawfulness of any processing carried out on the basis of your consent prior to its revocation (art. 7 para. 3 GDPR).
You have the right under art. 20 GDPR to receive personal data that you have provided to us and to have it transmitted to others.
You have the right to complain to a data protection supervisory authority about the processing of your personal data by us (art. 77 GDPR).
DELETION OF DATA
Data we process will in accordance with art. 17 GDPR be deleted or their processing restricted. Unless expressly stated as part of this data protection statement, the data we store will be deleted as soon as they are no longer required for their original purpose and if no statutory retention obligations apply. Where data are not deleted because they are required for other statutorily permissible purposes, their processing will be restricted. This means data will be locked and not processed for other purposes. This applies for example to data that for reasons relating to trade law or tax law must be retained.
LINKS TO EXTERNAL WEBSITES
Our website of as well as this data protection statement contain links to external websites over whose content ‘‘To AsimenioKouti’’ has no control. can therefore provide no guarantee of the content, quality, nature, or reliability of these external websites. In providing a link we imply no support for or approval of the information or services offered on the site(s) concerned. Solely the provider or operator of the linked-to site is responsible for that site.
AMENDMENT OF THIS DATA PROTECTION STATEMENT
We reserve the right to amend or enhance this data protection statement as required. Any amendments will be published here. Please revisit this website regularly to ensure you remain up-to-date with the latest version of the statement.