Privacy Policy

Safeguarding consumers ' personal data is our absolute priority. The management and protection of personal data is governed by the terms of this Agreement and the relevant provisions of both Greek and EU and international law on the protection of individuals from the processing of personal data, as well as the decisions of the Personal Data Protection Authority, which we respect and observe. Any future change to the above regulatory framework will be the subject of this agreement. In order to offer you the best and highest quality services, we collect personal information after your explicit consent and after you have received full knowledge of your rights, as provided for in the provisions of regulation 679/2016 GDPR and this interpretative Greek law on the protection of personal data. The primary concern of our company is the provision of high quality services with respect to the rights, fundamental freedoms, privacy, as well as the privacy of the communication of the users of our website, which is why we take all appropriate and necessary measures within the framework of the law, adopting modern technological processes, advanced technical equipment and software.

Visitors and users of the services of this website while browsing on their websites, you may be asked to provide voluntarily information and related data in order to enroll in services, to take orders for products or services, receive updates, and enjoy the services offered by the website i-grafitis.en The personal information collected by us only when you register to our services as members and are limited to full name, address (street, city, zip code). At the same time, we ask for some information such as a mobile phone number (in case we need to contact you directly). You hereby give your explicit consent to the collection and processing of your above personal data, without which we cannot offer you our services, and you can revoke it or modify it at any time (Article 7 of regulation 679/2016 EU). We reserve the right to change the terms of protection of personal data without notice, in accordance with the applicable regulatory framework. Please check these Terms periodically for any changes, as your continued participation in our services implies your acceptance of all possible modifications.

The personal data includes any information about the data subject, with the exceptions provided for in the law. Personal data (simple and sensitive), in accordance with Article 4 par. 1) of Regulation 679/2016 EU on the protection of personal data, is: any information relating to an identified or identifiable natural person ("data subject")· identifiable natural person is one whose identity can be ascertained, directly or indirectly, in particular by reference to id, item id, such as a name, identification number, to location data, to an online identifier or to one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person. Simple personal data is all non-sensitive. The processing of personal data of visitors, users, is any operation or series of operations carried out with or without the use of automated instruments on personal data or on sets of personal data, such as collection, registration, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, the deletion or destruction ( in accordance with art. 4 par. 2 of regulation 679/2016 EU). The processing of user data by our company is confidential. Our company takes appropriate organizational and technical measures for the security of users ' data and their protection against accidental or unfair destruction, accidental loss, alteration, prohibited dissemination or access and any other form of unfair processing.

The company, acting on the principle of legality, objectivity, accuracy, transparency, integrity and confidentiality, purpose limitation, minimization and limitation of the storage period, processes user data, which it legally obtains and keeps on record, strictly under the conditions of the law (art. 5 of regulation 679/2016 EU), solely with the consent of the user – data subject. The company declares that it lawfully processes the data of users which it collects in a fair and lawful manner for defined, clear and lawful purposes and which are processed lawfully and lawfully in view of these purposes.

The purposes that justify the processing are, inter alia, the execution of the orders of the users of this website, the requested information of the users through a newsletter and the generally more effective provision to them of the offered services of the company. Processing is limited to the extent strictly necessary, collecting no more data than any time required in view of the purposes of the processing, is accurate and, where necessary, shall be updated and maintained in a form which permits identification of subjects only during the period required for the attainment of the objectives of the collection and the processing thereof (art. 5, CA. B, C and e, regulation 679/2016 EU). Our Company files the contracts with the consumers-users of this website, within the institutional framework and with a view to the smooth processing of orders. Consumers can access them if specifically requested.

Unique, restrictively enumerated in the law (no. 6 par. 1 regulation 679/2016 EU) cases in which our company may process the simple data of users without their consent are the following:

(a) processing is necessary for the performance of a contract to which the data subject is a party or for measures to be taken at the request of the data subject prior to the conclusion of a contract;,

B) processing is necessary to comply with a legal obligation of the controller;

C) processing is necessary to safeguard the vital interest of the subject or another natural person, if this is physically or legally unable to give consent.

d) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(E) the processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, unless those interests are overridden by the interests or Fundamental Rights and freedoms of the data subject which require the protection of personal data, in particular if the data subject is a child.

Further, the processing of data by our company is also allowed when: the user after informing about the type of data, the purpose and extent of the processing, the recipients or categories of recipients has consented, or the processing is necessary for the performance of a contract, to which the user is a party, or for taking measures at the pre-contractual stage, at the request of the subscriber even without the consent of the user (art. 5, par. 2 n.3471/2006).

The design and selection of technical means and information systems, as well as equipment to provide users of our company's services, are based on the processing of as little personal data as possible. The permitted storage and processing according to the above include indicatively the information of the user, the processing of his order, the provision of requested services and any action within the framework of the user's contract with our company. Sensitive personal data of users, as described in the law, are not collected by the company under any circumstances. As an exception to this rule, the company may collect and process sensitive personal data, under the strict, restrictive conditions referred to in the law (art. 9 par. 2, of regulation 679/2016 EU).

Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data concerning him or her. Such information shall include information at least about the purpose of the processing, the data or categories of data concerned by the processing, the recipients or categories of recipients of the personal data, as well as the name, patronymic and address of the controller and any of its representatives. Consent may be revoked at any time, without retroactive effect (art. 7 par. 1-4 of regulation 679/2016 EU). Written form is not required to provide consent to the processing of simple user data, therefore consent can be given electronically, in any appropriate way.