Privacy policy

Who we are

The “garden-up.gr” website is the property of the company with the name “AFES NIKITA OE”, which is based in Sindo Thessaloniki, at 2 Davaki Street, P.O. 57400, with number GE.MI. 147926506000 and A.F.M. 801052094, which will henceforth be referred to, for the sake of brevity, as the “Company”. The Company is responsible for processing the personal data being processed, to which you should contact for any issue related to your personal data.

Acceptance of terms

The following terms concern the policy of privacy protection and protection of personal data applied by the Company in relation to its services and products. The following terms and conditions are mandatory for all users of the Company’s services and/or products, as well as for all visitors to the above website, who will henceforth, for the sake of brevity, be referred to as “Customers”, regardless of whether they in ordering services or products of the Company. If the following terms of use are not accepted, the Company’s services and/or products cannot be offered.

Age limit

The Company’s services and products are aimed at people over 16 years of age. If you are under 16 years of age, you may use the services and products offered by the Company, only with the prior express, specific and written consent of your legal guardian. The Company takes care of checking the age of the minor, but is not in a position to check any false statement of the Customer regarding his age and for this reason bears no responsibility in case of his false statement.

What you need to know about personal data

The legislative framework for the protection of personal data within the European Union has changed. From May 25, 2018, the General Data Protection Regulation (GDPR), (EE) 2016/679, which repeals the national legislation of the member states of the European Union, applies. Thus in our country, the previous law on the protection of personal data, Law 2472/1997, is repealed, and the provisions of the above Regulation apply. The Company has already initiated the process of complying with the new legislative framework under development, taking all the necessary organizational and technical measures imposed by the above Regulation for the best possible safeguarding of the interests of the data subjects and the protection of their personal data.

What personal data we collect

The Company, depending each time on the purpose and necessity (see in detail below), collects the following personal data of the Customer: name, electronic address (email), landline phone, mobile phone, postal address (Street, number, city, country, postal code), IP address (IP address – Internet Protocol address).

For what purposes we process personal data

The above information is collected and processed in the context of the provision of the offered services and/or products of the Company. The identification details are collected for the purpose of identifying the Customer, so that the recipient of the delivered documents is exclusively the Customer or the person specially authorized by him to receive them.

What is the legal basis for processing the data

Legal basis of the processing for the collection of the name, surname, electronic address (email), landline telephone, mobile telephone and postal address (Street, number, city, country, postal code) is the processing and sending of customer’s order.
The legal basis for the processing of the IP address (IP address – Internet Protocol address) is the customer’s consent.

Why do we need personal data?

We need your personal data to use it exclusively and only for the purposes detailed above. In the event that there is a new processing purpose incompatible with the corresponding original one, you will be informed again and your consent will be sought again if this is required.

Your personal data will in no case be used for purposes other than the above. Also, your personal data is not processed for commercial exploitation purposes.

What is the effect of processing on subjects

The processing of personal data by the Company does not have any effect on the data subjects, as the data collected are absolutely necessary and necessary for the provision of the services and/or products offered, Also, the data we process belong to the category of simple personal data, while they do not, as a rule, belong to special categories of data (sensitive personal data). In case of the existence of special categories of data (within the texts to be translated), all the necessary organizational and technical measures are taken to ensure their protection and even greater care and attention is shown during their processing.

All personal data is and is treated as private and confidential. For their protection, but also for safeguarding their privacy, we take care to take all the necessary organizational and technical measures.

How we use personal data

We collect, register, store and organize your personal data only for the intended purpose. Your personal data is kept private and confidential and is not shared with third parties without your prior, express, specific and written consent. They are not forwarded to third parties except to the competent public bodies and services provided by law as well as to the Company’s external accountants, however, to the extent that this is required for the execution of the respective tasks.

How you have access to your personal data

In case you wish to access your personal data, you can send us your relevant request to the email address info@garden-up.gr By contacting our Company, you can request the correction, completion or updating of your personal data, so that they are always up to date, correct and accurate.

Who has access to personal data?

Only authorized employees and partners of the Company have access to your personal data in the context of the above defined purposes and to the extent that this is required for the performance of their duties. No third party has access to your personal data without your prior, express, written and specific consent.

With whom we share personal data

Your personal data is not transmitted to third parties except in the following cases:

For the issuance of the legal tax documents, the necessary and necessary personal data are transmitted to an external accounting office, where only the specially authorized employees of the accounting office have access.

In addition, the tax details of the subjects are transmitted to the competent tax-financial authorities, as there is a relevant obligation of our Company by law.

Recipients, on a case-by-case basis, of personal data, where and to the extent this is required, are also third-party partner companies, which you can see here.

How long we keep personal data

The Customer’s personal data is kept for a period of twenty years from the end of the service provided, as this is imposed by the legal interest of the Company, in the case of any civil or other claims against the Company and the defense of its legal interests.

The Customer’s tax information is kept for as long as required by tax legislation and in any case for a maximum period of twenty years from the issuance of each document, as they can be searched within this period, both by the competent financial authority, as well as from the Customer.

After the above period, the personal data of the customers is completely deleted.

The personal data, which may be included in the texts to be translated, are anonymized immediately after the end of the service provided, and the texts are kept without any personal data, as this is required by the legal interest of the Company.

How we protect personal data

To protect your personal data, we apply all the necessary organizational and technical measures provided for by Greek and European legislation.

Particularly:

Regarding organizational measures, our Company:

It applies guidelines for the protection of personal data (Privacy Policy Guidelines) with the aim of optimally securing and safeguarding the interests of the Clients who are data subjects.

It implements a policy of graded access, so that every employee has access to the information that is absolutely necessary and necessary for the performance of their duties.

Keeps a record of processing activities.

It applies Privacy Friendly advertising and marketing policies.

It ensures the protection of personal data during the design of its services and products, but also by definition (Privacy by Design and Privacy by Default).

It informs with maximum possible transparency, simply and comprehensibly, in every possible way the subjects of the data – its Customers about the processing it carries out on personal data, the respective purposes, the legal basis of the processing, their rights and the way to exercise them in case they choose – and indeed simply, directly and without obstacles.

It trains its employees in matters of personal data protection, so that all employees are equipped with the necessary knowledge that will contribute to the protection of personal data and the privacy of Customers on a daily basis.

It informs the employees and commits them to faithfully observe the Company’s Privacy Policy Guidelines, which has been given to them, so that they know how to protect the security of the personal data of each subject and to avoid any wrong actions, which can put personal data at risk.

It commits employees to the preservation of privacy and the protection of personal data with contracts of confidentiality, confidentiality and safeguarding of personal data.

What technical security measures do we apply?

Access to the Company’s services is carried out exclusively by authorized Users using a username and personal security code.

We apply a policy of secure passwords, which are individual and must be changed at regular intervals.

The encryption method is applied to the codes, and they are stored encrypted.

Access – data exchange is done with security certificates (SSL Certificates), so that the data is encrypted.

All the Company’s local computers use state-of-the-art antivirus. In addition, they have passwords, while they are put to rest after a short period of non-use by their operator. The software used by the Company is the latest – stable versions of Windows, which are regularly updated for security reasons.

All the Company’s servers are kept in a private network where only the Company’s technical staff have access.

All servers in our infrastructure always use state-of-the-art technologies.

All the servers of our infrastructure are protected with a firewall and antimalware of the latest technology.

The software programs we use have official and updated licenses.

All the software of our servers are constantly updated with security updates.

Throughout our infrastructure, backups are downloaded to separate servers that secure the data, with security codes and encryption. Backups are daily.

The method of anonymization is applied where possible.

What are the rights of data subjects

Data subjects have the following rights in relation to their personal data:

Update

Information

Access

Correction

Deletion (and right to be “forgotten”)

Restriction of processing

Data portability

Objection

Non-automated individual decision-making (profiling)

How you can exercise your rights

You can exercise your rights (access, rectification, restriction of processing, information, portability, opposition, deletion or to formulate your complaint or complaint) by sending a relevant request to our e-mail, at info@garden-up.gr. We will take care of the fastest possible response to your request.

Right of appeal to the Personal Data Protection Authority

If an issue has arisen regarding the processing of your personal data and after you have previously addressed the Company as the Data Controller, you can then appeal to the Personal Data Protection Authority. For the Authority’s competence and how to submit a complaint, you can visit its website at www.dpa.gr, where detailed information is provided.

Which cookies do we collect and for what purpose?

What are cookies?

Cookies are small files that contain data, which a website asks your browser to store on your computer or mobile device (smartphone, tablet, etc.). By storing them on your device, cookies allow the respective website to “remember” your actions (eg username, password, etc.), as well as your preferences. Each cookie performs a different function, as other cookies are necessary even for the operation of a website, while others, e.g. ads cookies are used for advertising purposes.

Specifically, our Company uses basic cookies such as the login session cookie (transient cookie), which is stored in temporary memory while the User browses our Company’s website and is then deleted as soon as the User closes his browser ( browser). Session cookies do not collect information from the User’s computer.

Also, our Company uses third-party cookies, such as the cookies of the Google Analytics, Google Tag Manager and Google AdWords services, always with the express consent of the User. More information about the above cookies can be found at the following link: https://policies.google.com/technologies/types.

Which law applies and which Courts have jurisdiction

If any dispute arises related to this privacy and personal data protection policy, the applicable law is Greek, while the competent Courts for resolving the dispute expressly agree and accept that they are the Courts of the city of Thessaloniki.