Privacy Policy

Controller

 

  The company under the name "ORESTIS KARAGIANNIS & SONS OE" and with the distinctive title "LOGIGRAF" (hereinafter the Company), which has its headquarters in Efkarpia, Thessaloniki, on Riga Feraiou Street no. 25 with PC 56429 tel. 2310680806 and email: info@logigraf.gr processes personal data of its partners – suppliers – customers.

 

  This policy sets out the principles applied by the Company when processing such data (categories, legal basis, purpose, protection measures, rights, etc.) and aims to inform the subjects about the processing. It is posted on our Company's website (http://www.logigraf.com.gr) and may change / update from time to time. You will be informed of all important changes, while each time the current version will be posted on the site.

 

  We assure you that all information we collect about you is confidential, used only for the legitimate purpose that is kept, protected and not disclosed.

 

 

Definitions

 

  According to Law 2472/1997 and Regulation (EU) 2016/679 (GDPR) the following definitions are understood:

 

 (1) "Personal data": any information relating to and relating to the data subject.

 

 (2) "Sensitive data" means data concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, social welfare and sexual life, or data relating to criminal prosecutions or convictions.

 

 (3) "Data subject": the natural person to whom the data refer, such as identity card number, full name, father's name, mother's name, home address, telephone, tax identification number and more general data concerning his or her physical, physiological, mental, economic, cultural, political or social identity.

 

 (4) "Processing of personal data" ("processing"): any operation or set of operations which is carried out, by the State or by a legal person governed by public law or private law or an association of persons or by a natural person with or without the aid of automated means, and which is applied to personal data, such as collection, recording, organisation, retention or storage;  modification, export, use, transmission, dissemination or any other form of disposal, alignment or combination, interconnection, blocking (blocking), deletion, destruction.

 

 (5) 'Personal data file' ('filing system') means a set of personal data.

 

 (6) "Controller": anyone who determines the purpose and means of the processing of personal data, such as a natural or legal person, public authority or agency or any other body.

 

 (7) "Third party" means any natural or legal person, public authority or agency, other than the data subject, the controller and the persons authorised to process the personal data, acting under the direct authority or on behalf of the controller.

 

 (8) "Consent": any free, explicit and specific declaration of will, expressed in a clear and informed manner, by which the data subject agrees to his or her personal data being processed, after having been informed by the controller. Such information shall include information at least on the purpose of the processing, the data to be processed, the recipients or categories of recipients, as well as the name, name and address of the controller and of any representative. Consent may be withdrawn at any time, without retroactive effect.

 

 

Data we process

 

  We process the following categories of personal data (in whole or in part, depending on the type of cooperation / contract) of our partners – suppliers – customers:

 

A. In the case of sole proprietorships / traders:

  1. Basic identification data such as full name, father's name, address, telephone numbers, e-mail address, site, VAT number, Tax Office, distinctive title – type of business, registered office address, bank account.

  2. Financial data (invoices, payments, customer records, orders).

 

B. For retail customers:

  1. Basic identification data such as full name, father's name, address, telephone numbers, e-mail address, VAT number, Tax Office (in case an invoice is requested), distinctive title – type of business, registered office address.

 

 

How we collect data

 

  The collection of personal data is carried out:

 

➢ To create the account on page logigraf.com.gr : the information you give us when creating an account is used in order to create and maintain your account.

 

➢ For the execution and completion of orders: when an order is placed for products through our website or by phone, we use the information you give us to process the transaction, complete the order and provide the products you have ordered.

 

➢ To respond to your potential queries.

 

➢ To improve the existing contract between us and to provide you with information about products, special offers and promotions.

 

 

Purpose of processing

 

  We process your personal data for the purpose of drawing up, executing, operating and terminating the contract concluded between us and in general the management of the relationship between us (contract, invoices, payments) but also for the compliance of our company with the law (Income Tax Code, etc.) and the assertion of its legal claims or the rebuttal of claims against it before the Courts,  Authorities, etc. The processing of personal data is done for the following reasons:

  1. Legitimate interest in the operation of our Company
  2. Compliance of our Company with obligations imposed by law (tax – legal)
  3. For the performance of the contract between us (operation, preparation, termination),
  4. The processing and collection of personal data takes place after your consent has been given.

 

 

Data Sharing

 

  The company does not disclose personal data to third parties, but only authorized members and employees of the company with absolute confidentiality can process the data.

Exceptionally, personal data may be disclosed:

  1. To public authorities for the purposes of our Company's compliance with obligations arising from the law.
  2. To third parties who provide services to our Firm, such as lawyers / law firms, tax consultants, companies providing accounting services, accountants, companies providing human resources services. These persons, perform the processing on behalf of our company, are bound by guarantees of absolute compliance with the applicable legislation (European and National).
  3. Before the Courts for the exercise and defense of the Company's rights.

 

 

Principles of processing

 

  Our Company, indicatively and not restrictively:

 

➢ It processes only the personal data that are absolutely necessary for the above purposes, as described in detail above and only for these purposes.

 

➢ Takes appropriate organizational and technical measures to secure your personal data by design and by default.

 

➢ Has and applies procedures and systems for the confidentiality of the processing of personal data, as well as for their protection against accidental or unlawful destruction, accidental loss, alteration, prohibited dissemination or access and any other form of unlawful processing.

 

➢ Has informed the data subjects (citizens and employees) in accordance with Regulation (EU) 2016/679 (GDPR).

 

➢ Adheres to the principle of minimizing personal data.

 

➢ Takes care of the exercise and satisfaction of the rights of the subjects.

 

➢ It has prepared the documents, policies and procedures that prove its compliance with the principle of accountability (privacy policy, cookies policy, recording of the type, categories and flows of personal data, compilation of processing records, impact assessment, etc.) as referred to in the GDPR.

 

 

Online Advertising – Google Adwords Conversion

 

  We use Google Adwords services to draw attention to our attractive offers with the help of promotional material (the so-called Google Adwords) on external websites. We can determine in relation to the data of each advertising campaign how successful the individual advertising measures are. Our goal is to display advertisements that interest you and to make our website more interesting for you. The advertising material is provided by Google through the so-called "Ad Servers". For this purpose, we use ad server cookies, through which certain parameters can be measured to measure success, such as the insertion of advertisements or clicks by users. You can opt out of this tracking process in several ways:

  a) by adjusting your browser software accordingly, in particular by blocking third-party cookies, you will not receive advertisements from third party providers;

  b) disabling conversion tracking cookies, setting your browser to block cookies from the domain www.googleadservices.com, https://www.google.de/settings/ads, a setting that is deleted when you delete cookies;

  c) disabling interest-based advertising of providers that are part of the "About Ads" campaign via the http://www.aboutads.info/choices link, a setting that is deleted when you delete cookies.

  d) permanently disabling Firefox, Internet Explorer or Google Chrome in your browsers at http://www.google.com/settings/ads/plugin;

  e) setting your cookie preferences accordingly.

 

  For more information on the purpose and subject matter of data collection and processing by Google, please refer to our privacy policy. There you will also find more information about your rights and setting options to protect your privacy:

https://www.google.de/intl/policies/privacy. Google is subject to the EU-U.S.A., https://www.privacyshield.gov/ EU-US-Framework.

 

 

Data retention period

 

We retain personal data for the period of time during which the Tax Office, EFKA and other public authorities have the right to control our Company.

When the processing of personal data is no longer necessary, the data will be destroyed in a secure and proven manner.

 

 

Rights of our customers as defined by the Applicable Legislation (European and National)

 

  You retain the following rights:

  1. Right of access: To know the personal data we hold and process, the purposes for which they are processed and the time of their retention.
  2. Right to rectification: Request the rectification and/or completion of your personal data so that it is complete and accurate. The need for correction or supplementation should be proved.
  3. Right to restriction of processing: To request on your behalf the restriction of the processing of your data.
  4. Right to object: To declare on your behalf the refusal or objection to further processing of your personal data.
  5. Right to data portability: To request the transfer of your personal data from the records kept by our Company to any other controller of your choice.
  6. Right to be forgotten: Request the deletion of your personal data.
  7. Right to complain to the Authority: To file a complaint on your behalf with the Personal Data Protection Authority (www.dpa.gr), if it is considered by you that your rights are violated in any way.

 

  In relation to the exercise of the above rights by you, the following are noted:

  1. Exercising the right to data portability does not imply the deletion of your data from our records, in accordance with what has been mentioned above and in accordance with the terms of the Regulation.
  2. The Company has the right to refuse to satisfy the request for restriction or deletion of personal data or to object to the processing, if the processing or retention of the data is necessary for the exercise of its legal rights or the fulfillment of its obligations.
  3. The exercise of the rights acts for the future and does not apply retroactively.
  4. To exercise your rights, you can contact our Company in writing, electronically at com.gr e-mail address, by phone at the number 2310 680806 or by email at info@logigraf.gr address.