Privacy Statement
According to the new EU General Data Protection Policy (GDPR) through this page we wish to inform you about the Personal Data collected during the use of this website, how they are collected, how they are used, how long they last, and finally let you know about your rights.
Definitions
Personal data
It is all information related to a person identified or identifiable. An identifiable person is a person who can be identified, directly or indirectly, in particular by reference to an identifying element such as name, identifier, location data, electronic identifier or one or more factors specific to the physical, physiological, genetic, intellectual, economic, cultural or social identity of that natural person.
Edit
We mean any function or set of operations performed on personal data or in sets of personal data, whether by automated means or not, such as collecting, recording, organizing, modifying, storing, adapting or modifying, retrieving, consulting, using, disclosing through transmission, dissemination or other mood, alignment or combination, restriction, erasure or destruction.
Privacy is extremely important for the site and through this policy we will describe how we will respect any collection through use.
Website ID
The website www.yandzcreations.com is owned by:
Zafiria Kalogirou – Y&Z Creations
Manufacture & Trading of Handmade Items
Artemonas – Sifnos, Cyclades
P.C. 84003
Greece
The site is not required to have a Data Protection Officer. If you have any questions, concerns or concerns regarding the protection of your privacy, please do not hesitate to contact us either through the contact form or by sending an e-mail directly to info@yandzcreations.com.
Data Collected by the Website
When you visit the site we collect:
IP Address
The IP address is captured temporarily whenever you access our site in our server’s logs in the firewall logs. The purpose of this log is to ensure that the site and all its services are functioning properly, that the server is protected from malicious attacks and that any abuse is avoided. We want to make it clear that under no circumstances does this recording make you personalized as IP addresses do not directly identify users (visitors).
Statistical Usage Information
The collection of statistical information is made through cookies, which are small text files that are necessary to improve the experience of using the website. These files are stored on your device and may recognize you uniquely every time you visit our site. Deleting these files is very easy.
For more information on the above, read the Cookie Policy.
Data via Contact Form
When you send us a message through our contact form, we collect the information you give us through the form, asking you to consent to sending this information to us for the intended purpose.
Data via Email
Whatever information you provide voluntarily by sending a request via e-mail. We use this information to respond to your request.
Data in online shopping
To make an online purchase, we ask you:
- Name
- Surname
- Address
- Postcode
- Country
- City
- Province / Area
- Phone number
We use the above information to process your payment, deliver the products you buy, and then process your order.
We may be able to contact you by e-mail or telephone with you to clarify issues related to your order.
If you wish to pay your order via Credit / Debit or Prepaid Card, we would like to inform you that the company does not store or enter into its system card: numbers, CCV2 as well as card expiration dates. Responsible for the data you submit is the affiliated bank.
Through the ePOS Paycenter Redirection service, our eshop is supported and protected by the “Verified by Visa” (for Visa card) and “Mastercard SecureCode” (for Mastercard and Maestro) cardholder certification services.
The above payments are made through the partner bank’s electronic payment platform, which uses TLS 1.1 encryption with Secure Sockets Layer (SSL) encryption protocol. Encryption is a way to encode the information until it reaches its intended recipient, which will be able to decode it using the appropriate key. Information about the card (card number, CVV2, expiration date) is transmitted / transmitted over the Internet in encrypted form (SSL 128-bit encryption) and is not accessible to third parties. The systems and processes used by the partner bank prevent third parties from accessing their data and information systems.
Why we collect them
The collection of all the above data is limited to what is strictly necessary for your safe and efficient service. It aims to improve the experience of using the website, communicating with you directly and answering your questions or requests and detecting unwanted messages and security breaches.
Your consent to the Privacy Policy of this site is mandatory in its basic features
- communication form
- user registration
- online shopping
For the purpose of demonstrating the user’s consent to the processing of personal data, the data and the time at which he gave his / her consent are recorded.
Sensitive Personal Data
The site will never ask you to enter data about religious beliefs, political and philosophical beliefs, sexual orientation, or ethnic origin.
Data Sharing
We are likely to share data that you submit to our website’s contact form or by direct mailing with our partners. This is only possible if an inquiry is required to create an offer to provide the service you request. Under no circumstances are personal data communicated, but only the details that describe your request.
Cases in which this data may be communicated to third parties are indicative but not limited to:
- Webmasters
In a very rare case, a third-party technician may have limited time and controlled access to resolve software problems that are used on the page. - For accounting purposes, for keeping our books and records of relevant accounting records.
- In postal services to serve your order (ACS, Hellenic Post & DHL services)
- Upon a court or public prosecutor’s office or request from a police authority to conduct an investigation.
We will not, in any other way, transmit, sell, rent or disclose personal information to visitors to any third party for any reason.
How long do we keep your data?
We will retain your data for as long as necessary for the purpose for which it was submitted, taking into account legal requirements under applicable law. If you delete your account or a corresponding request, the information will not be accessible through your account. If, however, you have made a public announcement prior to deletion with respect to our site, this information will remain publicly available. This information may be backed up by our company.
Security measures for data protection
Data stored on our site is stored on servers that are protected by strong security measures.
Our website uses the Secure Socket Layer (SSL) protocol to help protect your privacy.
Based on this technology, every personal item is registered, coded before it comes online, and then the authenticity of the message and the server is investigated.
The site uses an SSL-256bit certificate that appears as a padlock to the left of the address bar every time you enter pages to be transacted, confirming that your transaction is protected.
User passwords on our site are stored encrypted.
We periodically back up our data so we can get back in case of technical failure.
Your Rights
The provision of personal data to our site is on a completely voluntary basis. If you choose not to provide the requested information, basic features of the webpage may not be available. In some cases, only those who have submitted us the required personal data are able to sign up for the site, make online purchases, contact us through the Contact Form, or show interest or receive newsletters.
We have the ability to maintain control of your data. Your choices include displaying and editing your data, removing your subscription from newsletters, deleting your account and all of its relevant information, and finally downloading information about the data that is retained.
You can access and modify your personal data at any time by logging into your account.
If some of the information you’ve given us changed, e.g. if you change your email address, if you want to change other contact information or if you want to cancel your registration, please update us by updating your details on My Profile or My Account pages or by sending an email that describes changes to: info@yandzcreations.com
Generally, you have the following permissions:
The right to request access to your personal information
You have the right to access some of the personal data you provide on our site.
You can access and modify your personal information at any time through your account management page.
By writing to us at: info@yandzcreations.com, you can request details of the information we have and process about you and the purposes for which are used.
The right to modify and / or delete your personal information
You have the right to correct, edit, or delete your stored personal data.
You can access these features at any time through your account management page.
If you wish, you can delete your account by clicking on the “Delete Profile” button.
You can also send your request to: info@yandzcreations.com. Without undue delay in receiving your request, we will comply with your request. If, for whatever reason, we cannot comply with your request and will contact you.
The right to terminate the processing of your personal data
In special circumstances, you have the right to terminate the processing of your personal data. You can contact us at: info@yandzcreations.com
The right to data portability
You have the right to receive your personal data in a structured, widely used and readable form (“data portability”) and you have the right to transfer this data to another data controller.
You can access your data export through your account management page through the two choices:
- Export profiles to a CSV file
- Export profiles to XLS file
You can request the transfer of your data by contacting us at: info@yandzcreations.com. Without undue delay in receiving your request, we will comply with your request. If, for whatever reason, we cannot comply with your request and will contact you.
The right to prohibit the processing of your personal data and to unsubscribe
You have the right to ask us not to process your personal data when processing is based on our legitimate interest. You can exercise your right to prohibit the processing of your data at any time by sending your request to: info@yandzcreations.com.
For all other types of messages you may receive from us, such as maintenance announcements or management alerts, downloading these messages can only be terminated by deleting your account. These messages are a mandatory part of our users’ accounts and the relevant use of the site.
In any other case, please contact info@yandzcreations.com to delete your account.
The right to withdraw your consent at any time
At any time you are entitled to withdraw your consent to the processing of your personal data. However, the withdrawal of consent does not affect the legitimacy of the consent-based processing prior to its withdrawal.
You can revoke your consent to our privacy policy at any time through your account management page.
Contact us at info@yandzcreations.com to withdraw your consent.
Terms and / or limitations of your rights
There may be terms or limitations to your above-mentioned rights. Therefore, we are not in a position to guarantee your right to transfer or delete the data, as it depends on the specific conditions of the processing activity.
Privacy Policy Updates
We regularly review and, where appropriate, update our Privacy Policy. If we want to use your personal information in a way that we have not previously mentioned, we will contact you to provide you with information about it and, if necessary, ask for your consent.
At the end of this text you can see when it was last reviewed. We will update the date of this document every time a change is made.
June 2019