Details

Written by Super User

Category: Privacy Policy

Published: 25 January 2019

Hits: 379

The company Elea Publishing, headquartered at Kon/nou Rousou 2 – 17122 Nea Smirni, and contact email address This email address is being protected from spambots. You need JavaScript enabled to view it., as the data controller, is committed to protecting the personal data disclosed to it exclusively by you and to processing it only for the purposes mentioned herein, as well as to conducting all processing in accordance with the General Data Protection Regulation (GDPR) and any other relevant national law.

Concepts of the General Data Protection Regulation Personal Data Any information relating to an identified or identifiable (one whose identity can be determined directly or indirectly) natural person, which the Regulation refers to as the data subject. Indicative examples of personal data include your name and surname, your residential address or email address, VAT number, social security number, genetic or biometric data, health data, or other data revealing racial origin, political opinions, religious beliefs, and any other element that can lead to the identification of an individual. The distinction between simple and special categories of data (known under the previous legal regime as sensitive) entails different levels of protection.

Processing Any operation or set of operations performed on personal data (e.g., collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction). Therefore, any action performed on an individual’s data, provided they have been included in a structured set accessible by specific criteria, constitutes processing and must comply with the Regulation.

Data Controller Any natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data (in this case, our company).

Processor Any natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller (e.g., accountants, transport companies, IT technicians).

προτέρων ενημέρωση ή έγκριση σας εφόσον αυτή απαιτείται.

What Personal Data We Collect, How It Is Collected, and For What Purpose The personal data we collect (surname, first name, address, city, postal code, phone number, email) are those you provide to us and are the absolutely necessary details for us to communicate with you:

1. To serve your request (e.g., responding to questions you ask us)
2. For direct and effective communication with you
3. To send informational and promotional programs as well as provide unique offers, if you wish
4. To execute our contract (e.g., sale, invoicing, product shipment)
5. To issue the necessary documents required by tax legislation
6. Any other obligation arising from national and European legislation (e.g., archiving for tax/accounting purposes)

We commit that we will not process your data for other reasons without prior notification or your approval if required.

Disclosure to Our Employees - Security - Integrity of Personal Data Your personal data is made accessible to our employees, who are contractually bound to maintain the confidentiality of the data you provide and to process it according to our instructions and guidelines based on the technical and organizational measures taken to comply with the Regulation. The sole purpose of this processing is to promote, serve, support, and execute your transactional relationship with us, as well as to fulfill our professional obligations, always under conditions that fully ensure graded access to your personal data and the certainty that there is no unauthorized or illegal processing/modification, accidental loss, destruction, or damage. We do not allow unauthorized persons to access your personal data, and every reasonable measure has been adopted for their security. Your personal data is entered into our electronic and information systems as well as the databases we maintain, existing in both paper and electronic form. We have effectively implemented, both at the time of determining the means and manner of processing and at the time of processing, appropriate technical and organizational measures designed to protect your data, in such a way as to meet the requirements of the GDPR and ensure that, by default, only personal data necessary for the specific purpose of processing is processed. We have created procedures to control potential personal data breaches to prevent any violation, resulting in the immediate handling of any breach incident and the optimal protection of your privacy, rights, and freedoms.

Recipients of the Data You Provide Us Our company guarantees that it will not disclose, transfer, or otherwise make available or provide access to the personal data it holds to third parties, except for its direct partners. Disclosure or provision of access is carried out only to serve the purpose defined either by our contract or through the consent you have given us for informing you about our products and offers for promotional purposes. The above is subject to our company’s legal obligations to the competent administrative or judicial authorities based on current national and/or European legislation or our legitimate interests.

Partners - Processors in Relation to Us Those who have access to the personal data we hold are provided with it either: a) Directly by the Company itself (e.g., a company providing postal services, courier, transport company) or b) Indirectly in execution of a contract concluded between us and our partners to comply with a legal obligation (e.g., accounting office) or c) Due to their access to our Company’s IT Systems (e.g., IT technician).

Therefore, the processing of your data is carried out by businesses or individuals collaborating with us (e.g., accounting office, transport company, IT technician), who process the data we provide them as processors on our behalf and according to our instructions and guidelines regarding the means and manner of processing and the purposes we have defined and communicated to you above. Their employees also gain graded access to the data we provide, ensuring that only the absolutely necessary data for the provision of the assigned service is provided.

How the Security of Personal Data Processing by Processors is Ensured Processors are obliged to: a) Protect and safeguard the confidentiality of the personal data provided to them according to our instructions and guidelines. b) Not destroy, alter, copy, disclose, communicate, transfer, or provide access to the personal data they have been given access to and process on our behalf, to any third party without our written permission. c) Take appropriate technical and organizational measures to ensure the confidentiality, integrity, and security of personal data. d) Comply with all laws related to personal data protection, especially the GDPR.

What is the Legal Basis for Processing the Personal Data We Process a) Your consent where required b) The execution of our contract c) Our compliance with a legal obligation (e.g., insurance, tax legislation, etc.) d) Our legitimate interests

Retention and Processing Period of Personal Data We commit to keeping your personal data in a secure location for as long as is absolutely necessary to achieve the specific intended purpose. In any case, the criterion for determining the storage time is compliance with the deadlines set by law, the principle of storage limitation, and data minimization. If the processing is based on your prior consent, we will be able to process your personal data only until you request their deletion from our database, thereby withdrawing the consent you gave us.

Withdrawal of Consent You have the right to withdraw the consent you gave us for the processing of your personal data at any time, either by using the corresponding unsubscribe link on our homepage or by sending an email to our email address This email address is being protected from spambots. You need JavaScript enabled to view it.. However, you should know that the withdrawal of consent does not affect the legality of the processing based on your consent before its withdrawal.

Your Rights We explicitly state that we do not make decisions or create profiles based on automated processing during the processing of the data we hold. We remind you that we are always at your disposal, awaiting your active participation in correcting your personal data after any changes. You have the right at any time, subject to our compliance with any legal obligation or to serve our legitimate interests, to:

• Information about the type of data we process, how and for what purposes we process it, the legal basis for processing, any recipients, the storage period, and the possibility of submitting requests for access, correction, deletion of data, or restriction of processing, objection to processing, and the right to data portability, as detailed below.
• Access to your data, i.e., confirmation of whether or not personal data concerning you is being processed, the purposes of processing, the categories of data we process, any recipients, the storage period, and the right to submit requests (Art. 15).
• Correction of inaccurate/incomplete personal data concerning you (Art. 16).
• Deletion (right to be forgotten), when your personal data is no longer necessary for the purposes for which it was initially collected, or you have withdrawn your consent on which the processing was based, or it has been unlawfully processed, or you have objections to the processing (Art. 17).
• Restriction of processing for as long as it takes to examine your objections to processing (e.g., due to inaccurate data, unlawful processing, establishing your legal claim, or verifying the controller’s overriding legitimate interest) (Art. 18).
• Data Portability directly to another controller or even to you in a structured, commonly used, and machine-readable format (Art. 20).
• Objection to the processing of your data, especially for commercial promotion purposes. After contacting us, we will stop processing your data unless there are other legal reasons that override your right (Art. 21).
• Withdrawal of previous consent.
• Filing a complaint with the Hellenic Data Protection Authority (postal address: Kifisias 1-3, P.C. 115 23, Athens, fax: 210.6475628, email: This email address is being protected from spambots. You need JavaScript enabled to view it. or through the web portal (www.dpa.gr-complaint submission), if you believe your rights are being violated.

• How You Can Exercise Your Rights You can contact us either at the postal address (Kon/nou Rousou 2 – 17122 Nea Smirni) or at our email address This email address is being protected from spambots. You need JavaScript enabled to view it., where you should mention your full name, the reason for your contact, and the way you prefer us to communicate with you to handle your request (by mail or electronically). We will respond to you within one month of receiving your request, and after confirming your identity, we will reply free of charge or ask for a little more time (a maximum of two more months) if your request is complex or there are many requests we need to address and cannot serve you immediately.

  If your requests are manifestly unfounded or excessive, especially due to their repetitive nature, a reasonable fee may be required, taking into account the administrative costs for providing the information or the announcement or performing the requested action. In this case, please note that we have the right to refuse to follow up on your request.

  For information regarding the progress of your request, you can contact the above email address.

  Be Informed About Changes to the Data Protection Policy This policy will be modified whenever there are significant changes in the way we process your personal data or in our obligations arising from national or European law. Please check for any modifications periodically.