The present "Privacy Policy", together with "Terms of Purchase" and the "Terms of use» constitute the entire binding agreement between our Company, the brand DIMITRIOS HATZIDIMITRIOU and d.t. "Hatzis carpets” based in Serres, at Vas. Vassiliou Street no. 10, , T.K. 62100, with A.F.M. 113352384 of D.O.Y. Serron, no. G.E.MI. 114380452000, tel. 2321051586 and e-mail address [email protected] (hereinafter "Business"), and its customers and are applied to every sale of products or services (hereinafter "Products or Services") following an Order in the online store carpetdimoda.Gr, where the goods mentioned therein are available for sale (hereinafter the "online store" or "eshop").

The protection of your personal data is important to us.

Please take a moment to read this Privacy Policy and learn how our Company is committed to protecting and lawfully using the Personal Data you share with us.

, under the firm DIMITRIOS HATZIDIMITRIOU and d.t. "Hatzis carpets” based in Serres, at Vas. Vassiliou Street no. 10, , T.K. 62100, with A.F.M. 113352384 of D.O.Y. Serron, no. G.E.MI. 114380452000, tel. 2321051586 and email address [email protected] (hereinafter "Business” or “we” or “our”), acting as Processor, collects, stores, uses and generally processes your Personal Data when you visit, register or use the Company’s websites (hereinafter the “Websites”) and its mobile applications (hereinafter the “Apps”), and in particular its online website (hereinafter “site” or “website”) and its online store (hereinafter the “Electronic Store” or “eshop”), as well as when you transact with its physical store.

This Privacy Policy also describes how we use, share and protect your Personal Data, the choices you have regarding your Personal Data, and how you can contact us. For your questions regarding this Privacy Policy, but also any issue related to the processing of your Data and the exercise of your rights, you can contact our Company by sending an electronic mail message (email) to the above-mentioned address.

1. A few words about the Company's Website

On the above website of the Company is the online store for the exhibition and sale of its products from a distance.

2. What is Personal Data?

The term "Personal Data" refers to information of natural persons, such as name, postal address, e-mail address, contact telephone number, etc., which identify or can identify you (hereinafter "Personal Data" or "Data" ).

3. What is Personal Data Processing?

Any act or series of acts performed, with or without the use of automated means, on personal data or sets of personal data, such as collection, registration, organization, structuring, storage, adaptation or alteration, retrieval, retrieval of information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction, constitutes processing of Personal Data.

4. Is the provision of your Data and its Processing by the Company mandatory?

Providing and processing your Data to the Company may be absolutely necessary to achieve the purposes specified in this Privacy Policy, or may be optional.

The mandatory nature of the provision of Data by you, which will then be processed by us, is indicated by an asterisk (*) next to Personal Data of a mandatory nature.

If you refuse to provide the information marked as mandatory on the Websites, it will be impossible to achieve the main purpose of collecting the specific Data. For example, it may become impossible for the Company to fulfill the sales contract or provide the other services available on the Sites.

The provision of additional Data to the Company, beyond those marked as mandatory, is optional and does not have consequences regarding the main purposes of data collection. Their concession serves to optimize the quality of our services.

5. What Data we collect and process about you

The exclusive purpose of collecting and processing Mandatory Data is the successful receipt and execution of Orders, which is analyzed in particular: their transmission and registration, their successful and complete processing from the moment of registration to delivery, compliance with tax legislation , the observance of the minimum Data required to prove the correct conclusion and execution of sales contracts or their possible abnormal development (e.g. Withdrawal), all issues related to the financial part of the transaction, and the provision of support services after sales services. The data we collect and process in the context of the above purpose are:

Data when creating a "user account" on the Websites, or registering as a Member:
1. Mandatory: e-mail address*, login password*
1. Optional: first name, last name, gender, date of birth, postal address, phone number.
Data related to transactions (Order registration, returns, etc.):
1. Mandatory in any case: e-mail address, login password, first name, last name, date of birth, postal address for sending Orders, telephone number, basic payment information. We note that under no circumstances do we gain knowledge of the details of the credit or debit cards you use, as this Data is processed by the cooperating Payment Institutions and is never shared with us.
1. Mandatory for wholesale sales: A.F.M., company name, distinguishing title, head office address, name of person responsible for ordering / handling the store. We also collect and process this Data in another type of transaction for which an invoice is to be issued.
1. Mandatory in some cases: Copies of documents you must provide us to prove your identity or age when – and only if – required by law (such as a copy of a police or student ID, which may include a photograph of your face) , or other personal information of yours that becomes necessary in special cases according to the Purchase Terms of the store (e.g. proof of possession of a bank account in your name in case of a refund, etc.).
1. Additional / accompanying information: Order notes, special instructions and your complaints or suggestions, products added to or removed from your cart, wish list, coupon redemptions, comments and reviews about the store and products ,
1. Optional Information: interests and shopping preferences, which help us recommend specific products and services that may be of interest to you or to create personalized offers, your social network username, if you interact with us through such a channel to register as a Member or help us respond to your comments, questions and any complaints.
1. With express consent for promotional actions: in the context, for the purposes and under the conditions detailed in par. 7 (see below). You have the possibility to withdraw your consent at any time, either by deselecting the corresponding box (checkbox) in the context of your account (if you are a Member), or by "unsubscribing" from the mailing list of newsletters and offers sent to you by email (unsubscribe), or by sending an email to the Company with a request to unsubscribe.
Browsing data (cookies): As far as cookies are concerned, see our titled page in more detail "Cookies Policy».

6. How we use your Data, to whom we pass it on

In any case without exception, your Data is used only for the provision of the services mentioned above, our multifaceted communication with you and the improvement of the visitor / Customer experience in the online store.

We do not use your data for any other purpose and we do not transmit it to third parties that are not related to the above purposes, nor do we transmit to said third parties more data than the minimum data required in each case. For example, in order to deliver the products of an order, we have to pass on to the external partner – carrier your name, your telephone number and the details of the place of delivery because without them the delivery cannot take place, but we are not going to pass on the bank details of your account (if there is a need to make it known to us), nor any of the optional information we mention above. Accordingly, we transmit to the Payment Institutions with which we cooperate the absolutely necessary data of the Order (total payable, method of payment), but no (other) elements or data.

Indicative report

For example, we process your Data for:

The management of the sale of our products/or services, e.g. communicating with you and informing you about the availability of products and the progress of processing Orders, the issuance and sending of your tax documents in electronic format (e-invoicing), the execution of Orders, the shipment of products, the management of your debts to the Company, making returns, providing guarantees, etc.
Serving you based on the current government measures (e.g. click inside, click away).
Compliance with the obligations imposed by the current legislation, e.g. tax legislation, e-commerce legislation etc.
Checking, improving and adapting to your preferences and choices regarding our products and/or services.
Sending, by electronic or traditional means, administrative, technological, organizational and/or commercial information about products and/or services of our Company, when this is necessary.
Our customer satisfaction survey, the promotion of our products and/or services, sending newsletters about our products and/or services.
Ensuring proof of transactions when recording our phone calls, in case you communicate with our call center representatives.

The processing of your Data is carried out either by the staff of the Company, or through IT systems belonging to third parties who are contractually bound to maintain the confidentiality and protection of your Data.

7. Processing for promotional and related actions

If you choose, you can allow us to use your information to carry out our business promotions. Cases:

Sending a newsletter or offers: We may use your personal data, preferences and transaction data to inform you via e-mail, internet, telephone and/or social media about relevant products and services , including personalized / personalized offers, discounts, etc.
Web push notifications: Depending on your browsing, you can receive notifications about our offers, news, your wish list and your shopping cart. Of course you have the possibility to withdraw this consent at any time.
Participation in a reward program, if any.
Participation in raffles, contests, etc., if any.
Participation in customer satisfaction surveys.

8. Processing for security, functionality, regulatory compliance and quality assurance purposes

We process your absolutely necessary Data in order to protect the security of our transactions and facilities. Indicative:

Protecting your account from fraud and other illegal activities: This includes using your Data to maintain, update and protect your account if you are a Member. We also monitor browsing activity on our site to quickly identify and resolve any issues and protect its integrity. For example, we check your password when you log in and use automated IP address tracking to detect potential fraudulent logins from unexpected locations.
Closed Circuit Television (CCTV) Operation: To protect our customers, premises, assets and associates from crime, we operate a CCTV system in our physical store, which continuously records image and sound. If we detect any criminal activity (attempted or completed) through the use of CCTV, we will process this Data for the purposes of suppression and legal protection of our legitimate interests and those of any affected store visitors. Our goal is to protect our customers, employees and partners from criminal activities.
Compliance with our obligations arising from the law, defense of our legal interests: we forward to our lawyers any data that may be deemed necessary for our compliance with our obligations towards the law or the defense of our legal interests, and then to the tax authorities , the Police, the Prosecutors and the Courts as and whenever we are asked.
Communications required by law or necessary to notify you of transaction-related issues: if and when required, we use your Personal Data to send you updates about privacy notices, product recall notices, and legally required information about your orders. These service messages do not contain advertising content and do not require prior consent when sent by email or text message (SMS).

9. What is the legal basis for the processing of your Data by the Company?

Data protection legislation, which sets out various reasons why a Business may collect and process your Personal Data.
Your consent, where required or requested, and you grant it. For example when you choose to receive newsletters. When collecting your personal data we will always inform you which data is necessary in relation to a particular service.
The Company's obligations stemming from the law (e.g. tax legislation, e-commerce legislation, etc.).
The legitimate interest of our Business, that is, when it is affected by law, or in a way that is reasonably expected as part of the operation of our business and does not materially affect your rights, freedom or interests.

10. Who are the recipients of your Data, who processes it inside and outside our Company

Access to your Data is provided to the strictly necessary staff of the Company, who are bound by confidentiality and the companies cooperating with us or third party service providers who are necessary to process your Data as Processors on our behalf and in accordance with our orders , among them and in particular Alphabet Inc. / Google (to serve our email and run our advertising programs), Meta Inc. / Facebook (as long as you interact with our online store using Facebook and Instagram services, and to communicate with you via Messenger and Whatsapp and to run our advertising programs), Rakuten Group Inc. (our communication with you via Viber), the providers of our customer service environment (Hubspot Inc.) and online invoicing, as well as our IT infrastructure provider (in terms of the webservers where the online store is installed). In all these cases infrastructures installed within the EU are used.

We point out that our online store has been built with products from Automattic Inc. (creator of CMS WordPress, Woocommerce and the other platforms we use to build it) and works with additional micro-programs (plugins) that give it some elements of its functionality. We make every effort to choose programs that do not process your data, however in some cases this is not only legitimate but also desirable (e.g. the firewall plugin we use continuously and in real time records the IP addresses of all website visitors , as well as all Members' entries and exits to their account, in order to predict and prevent malicious attacks).

11. Notification by you

When you use certain social media features on our Sites or Apps, you may create a public profile that includes information such as your username, profile picture, and other Personal Data that you may choose. You may also share content with your friends or the general public, including information about your interaction with our Business. In all cases where you use the tools we provide you to manage sharing on the Company's social media, we encourage you to control the information you make publicly available and that no more of your Personal Data is shared than is absolutely necessary. necessary.

12. How do we ensure that Processors respect your Data?

The Processors on our behalf have agreed and contractually committed to the Company:

to maintain confidentiality,
not to send your Data to third parties without the permission of the Company,
take appropriate security measures,
to comply with the legal framework for the protection of Personal Data and in particular Regulation 979/2016/EU (otherwise known as GDPR).

13. International Data Transfer

The Personal Data we collect (or process) in the context of our Websites and Apps will be stored on servers located in the European Union. However, some of the Data recipients with whom the Company shares your Personal Data may be located in countries other than the one in which your Personal Data was originally collected. The legislation in those countries may not provide the same level of data protection compared to the country that originally provided your Personal Data. However, when we transfer your Personal Data to recipients in other countries, including the US, we are committed to protecting your Personal Data as described in this Privacy Policy and in accordance with applicable law.

We take measures to comply with applicable legal requirements for the transfer of Personal Data to recipients in countries outside the European Economic Area that do not ensure an adequate level of protection. We use various measures to ensure that your Personal Data transferred to these countries is adequately protected under data protection rules. These include the signing of the Contract Clauses, the certification that the recipient has adopted the European binding rules or observes the Privacy Shield between EU-US and Switzerland-US, etc.

14. How long do we keep your Data?

We retain your Personal Data for as long as necessary to fulfill the purposes set out in this Privacy Policy (unless a longer retention period is required by applicable law). In relation to your Personal Data related to product purchases, we retain this data for a longer period in order to comply with our legal obligations (such as tax and commercial law and for warranty purposes). In practice, this means that we will keep your personal data for as long as you have an account with our Company, and possibly beyond that until the statute of limitations for any claim on either side since your last transaction with us. At the end of this retention period, your data will be completely deleted or anonymized so that it can be used for statistical analysis and business planning in a way that will not be linked to your personal goals.

Some examples of Customer data retention periods:

Orders

When you place an Order, we will retain the Personal Data you have provided to us for five (5) years to enable us to comply with our legal and contractual obligations. In the case of certain products, such as electrical goods, we will retain the data for ten (10) years.

Guarantees

If your order included a warranty, the relevant Personal Data will be retained until the end of the warranty period.

Newsletter

Your declaration of consent to send a newsletter is kept for as long as the Company sends you a newsletter, and in any case no more than six (6) months from the cessation of its sending.

15. Is Your Data Safe?

Recognizing the importance of the security of your Personal Data, we have taken all appropriate organizational and technical measures to secure and protect your Data from any form of accidental or unlawful processing, and we are committed to keeping your Personal Data secure.

We use the most modern and advanced methods to ensure maximum security.

Our online store uses SSL/TLS protocols for secure online trading. This encrypts all Data you provide, including your credit card number, name and address, so that it cannot be decrypted or changed in transit over the internet.

The information used to identify you as a Member is the Login Code (Username) and the Personal Secret Security Code (Password). Each time you enter your information in the relevant fields, you are granted access to your personal account. The specific process is achieved safely through encryption during their transfer to the Internet and the Company's servers.

By the same standards, you are given the possibility to change your Personal Secret Security Code (Password) as often as you wish. After entering the desired code, the new code is coded and stored in the Company's systems. For this reason, you are the only one who knows your password and you are solely responsible for keeping the password confidential from third parties.

These measures are reviewed and amended when deemed necessary.

16. What are your rights?

Right of access to your Personal Data

You have the right to be informed by us if we are processing your Data. If we process your Data, you can ask to be informed about the purpose of the processing, the type of your Data we keep, to whom we transmit it, for how long we store it, whether automated decision-making takes place, but also about your other rights, such as correction , deletion of data, restriction of processing and filing a complaint with the Personal Data Protection Authority.

Right to correct inaccurate Personal Data

If you find that there is an error in your Data you can submit a request to us to correct it (eg correct a name or update a change of address).

Right to erasure / “right to be forgotten”

You can ask us to delete your data if it is no longer necessary for the aforementioned processing purposes, or you wish to withdraw your consent in the event that this is the only legal basis.

Right of “portability”

You can ask us to receive the Data you have provided in readable form, or ask us to pass it on to another controller.

Right to restriction of processing

You can ask us to restrict the processing of your Data pending the consideration of your objections to the processing.

Right to object and withdraw consent to the processing of your Data

You can object to the processing of your Data and we will be obliged to stop processing it unless there are compelling and legitimate reasons that override your right. If it is your Data that we process voluntarily, based on your own declaration of consent to its collection, processing and use, you can withdraw your consent at any time and we will immediately stop the processing. The statement is prospective.

Opting out of receiving communications for promotional purposes

You can choose not to receive marketing communications from the Company by modifying your options in your user account (my profile) on our Sites. You can also choose not to receive marketing communications by changing your email and sms registrations, if applicable by clicking on the relevant "delete" link, by deactivating the relevant boxes (checkbox), by sending us an email, or by following the instructions indicated on our website from time to time or included in the messages we send you. Alternatively, you can contact us using the contact details listed in the “Contact” section, or by completing the contact form.

Right to object if the processing is carried out for legitimate reasons to protect our legitimate interests

In cases where we process your Personal Data to protect our legitimate interest, you can ask us to stop for reasons related to your personal situation. We will comply if we determine that your request overrides our legitimate interest to continue processing.

17. How can you exercise your rights?

You can exercise your rights by sending us an email, or by following the instructions from time to time stated on our website or included in the messages we send you, or by contacting us using the contact details listed in the “Contact” section, or by filling in the contact form .

In any case, we will consider your request and respond to you on the actions we have taken or intend to take as soon as possible.

Exceptionally:

If you wish to correct your Data in the Member account, you can log in to it and make any changes / corrections without the need to submit a Request.
If you wish not to receive web push notifications from our Company (if we enable such an option) you can disable the option from your browser settings.

Authentication:

To protect the confidentiality of your Data, before proceeding with any request you make based on this Privacy Policy we will ask you to verify your identity, unless the communication is from the email you have registered in your account. If you have authorized a third party to make a request on your behalf, we will ask them to demonstrate that they have your permission to act for this purpose.

18. When do we respond to your requests?

We respond to your requests free of charge without delay, and in any case within one (1) month of receiving your request. However, if your request is complex, or vague, or incomprehensible, or includes a large number of sub-requests, or presents other similar difficulties in processing it, we will inform you within the month if we need to obtain an extension of another (2) two months within of which we will answer you, as soon as you send us the clarifications that we will request from you as the case may be.

If your request is manifestly unfounded, or excessive, or repetitive in nature while we have already responded, the Company may impose a reasonable fee, taking into account the administrative costs of providing the information or performing the requested action, or refuse to proceed with the Request.

19. What is the applicable law when we process your Data?

Applicable Law is Greek Law, as formulated in accordance with the General Regulation for the Protection of Personal Data 2016/679/EU, and in general the applicable national and European legislative and regulatory framework for the protection of Personal Data.

Competent courts for any arising disputes related to your Data are the Courts of Serres.

20. Where can you go if we breach the applicable law to protect your Personal Data?

If you consider that the processing of your Personal Data by our Company violates the applicable law and regulatory framework, you have the right to file a complaint with the Personal Data Protection Authority (1-3 Kifisias Ave., 11523 Athens, tel. 2106475600, email address [email protected]).

21. How will you be notified of any changes to this Policy?

We update this Privacy Policy whenever necessary. If there are significant changes to the Privacy Policy or the way we use your Personal Data, we will post an update to this text on our website before the changes take effect and, if necessary, we will notify you by any means necessary.

We encourage you to periodically read this Policy to know how your Data is protected. This privacy policy was last modified on 06/15/2022.

22. Questions and Comments

We hope this Privacy Policy has helped you understand how we handle your Personal Data and your rights to control its processing by our Company.

If you have any questions that have not been covered, or comments and concerns you may have about our Privacy Policy, please email us and we will be happy to answer any questions.