PRIVACY POLICY
Introduction
Personal Data means any information that can identify an individual, either directly or indirectly. This may include information such as a name, contact details, identification number, location data, online identifiers, or any other information relating to a person's identity.
The collection, processing, and protection of personal data on this Website are carried out in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.
The data controller is “ΙOAKEIMIDOY IOANNA (ΙΟΝΑ)”, with registered office at Gravias 21, Kavala, Greece, VAT No.164110045, Tel. +30 251 400 8364, Email: info@ionastudio.gr (the “Company”).
The Company is committed to protecting the privacy and personal data of all Website users.
Types of Personal Data and Collection Methods
The Company collects and processes personal data that is relevant, necessary, and appropriate for the operation of the Website, and does not collect sensitive personal information. Simply browsing the Website does not require or involve the collection of personal data.
Depending on the purpose, the Company may collect the following types of data:
*Identity Data (full name, residential address), provided during order submission, contest participation, etc.
*Contact Data (telephone number, email address, etc.), provided either mandatorily or optionally, e.g. during order submission, newsletter subscription, or participation in Company activities.
*Demographic Data (age, gender, product preferences, etc.).
*Technical Cookie Data (preferred language, number of visits to the Website, duration of visit, Website interactions, etc.).
*Financial Data, but only in cases of refunds (if purchases were made with a debit/credit card and the refund is to be issued to that card).
The above data is provided directly and collected during order placement, newsletter registration, or participation in Company activities (such as contests).
Purpose of Processing
The Company requires the aforementioned Personal Data in order to sell products, provide information, conduct contests, and meet marketing needs. These data allow the Company to complete transactions and inform users/data subjects of future offers and products.
The Company will only contact users/data subjects for informational purposes, and only if they have subscribed to the Website’s newsletter. Under no circumstances will the Company collect Personal Data that is not necessary to provide the aforementioned services.
Place of Processing - Source of Data - Data Retention
All Personal Data collected is stored within Greece.
Personal Data is provided directly to the Company by the users/data subjects themselves, with their consent.
Personal Data used for transactions and marketing will be retained until the user/data subject requests its deletion or withdraws consent for its processing/storage.
Recipients of Personal Data
The Company reserves the right to disclose personal data to representatives or subcontractors for the purposes of supporting, promoting, or fulfilling the transactional relationship, but always under conditions that fully safeguard that the data is not subject to unlawful processing and is used strictly for the above purposes.
For example, the Company may disclose Personal Data to:
*Courier companies listed in the Terms & Conditions, for the delivery of purchased products/orders,
*Credit card providers for payment processing following purchases from the Website,
*Third parties (natural or legal persons) providing marketing and promotional services on behalf of the Company,
*Third-party partners providing technical services, such as hosting or IT support.
All such recipients act as processors on behalf of the Company and are therefore not permitted to process the data beyond the purposes stated above.
Data Subject Rights
The data subject has the right to contact the Company at any time to exercise the following rights:
Right to Information/Transparency: To know who is processing their data, what data is collected, and for what purpose.
Right of Access: To access their data processed by the Company and confirm lawful processing in line with the law and their preferences.
Right of Rectification: To correct inaccurate information or complete incomplete data.
Right of Erasure (“Right to be Forgotten”): To request deletion of data where there is no lawful reason for the Company to retain it. Exceptions apply: the Company is not obliged to delete data where processing is necessary (a) for compliance with a legal obligation, (b) for the fulfillment of another lawful purpose/legal basis, or (c) for the establishment, exercise, or defense of legal claims.
Right to Restriction of Processing: To request limited processing when data accuracy is contested, processing is unlawful, data is no longer needed by the controller, or the subject objects to automated processing.
Right to Data Portability: To request transfer of data to another controller.
Right to Object: To object to the processing of their personal data, provided public interest is not affected.
Right not to be subject to Automated Individual Decision-Making, including Profiling: To object when a decision concerning them is based solely on automated processing, including profiling, that produces legal effects or significantly affects them.
Right to Lodge a Complaint with the Hellenic Data Protection Authority (HDPA):
Address: 1-3 Kifisias Ave., 115 23 Athens, Greece
Tel.: +30 210 6475600
Email: contact@dpa.gr, complaints@dpa.gr
Website: www.dpa.gr
Contact
For any questions or information regarding this Privacy Policy or to exercise their rights, users/data subjects may contact the Company by email at info@ionastudio.gr.
