Privacy Policy

Personal Information is the information that identifies you or that could reasonably be used to identify you and that is submitted to or collected by the website, and is maintained by Theodorou Group in an accessible form. Examples of personal information are your name, postal address, email address and telephone number.

What types of information are collected electronically?

Personal Information You Submit:

The information collected by the group for communicating with the group is:

• Full name
• E-mail
• Company
• Mobile phone
• Address

For the collection of customer data in the e-shop for customer orders, data such as:

• Customer Information
• Password
• Full name
• E-mail
• Mobile phone
• TIN/DOU
• Credit card
• Address

UPDATE ON COOKIES:

Although cookies are not directly regulated by the GDPR, their illegal use may expose the organization to legal risks. After all, the Personal Data Protection Authority is responsible for organizations’ compliance with cookie legislation. In any case, it does not mean illegal use of the famous “functional” cookies, i.e. those that are necessary for the operation of the website. Where in this notice we use the term cookies, we mean non-functional ones. It goes without saying that, with the term cookies, we also refer to any cookies installed by third parties on the website (usually, advertising companies).

The first step we ensure by introducing cookies on our website is the appropriate information and consent of the user. Specifically:

1. the installation of cookies takes place only after the consent of the user. Therefore, it is illegal to insert the cookie first and inform the user afterwards that he can disable it (OBTAINING CONSENT PRECEDES INSTALLATION).
2. obtaining consent requires prior and appropriate information, an affirmative answer to vague questions (e.g. we use cookies, do you accept them?) does not constitute adequate information, therefore, an affirmative answer (“I accept”) is not considered as giving consent
3. the user is informed in a way that ensures that he is sufficiently informed. The inclusion of the cookie policy in the Terms and Conditions and the Privacy Statement do not constitute sufficient information. That is why we address the user with a readable, comprehensible and short text.
4. consent is only provided through an opt-in system, not through an opt-out. “By using our website you accept the use of cookies” style updates are not legitimate.
5. withdrawing consent is as easy as providing it and a procedure is provided for removing the installation of cookies, even if the user had given his consent for their installation, in an easy and accessible way for the user (WITH REVOCATION IS POSSIBLE CONSENT)

Passive Collection of Certain Other Technical and Navigation Information:

The Site may collect information about your visits to it without you actively submitting such information. This information may include, for example, the type and language of the browser you use, your operating system, your IP address, the URLs of the websites you visited before and after you visited the website, the search brought you to the site, and the pages and advertisements you see and the links you click on within our site.

Also, passive collection of customer data is done by our company and through Google Analytics for our sites.

You can always limit the scope and type of personal information Theodorou Group receives about you by choosing not to enter any personal information in forms or data fields on its website. Some of our online services can only be provided to you if you provide the necessary personal information. At other points you will be asked whether or not you wish to be included in our contact lists for offers, promotions and additional services that may be of interest to you, so that you can express your express objection in case you do not wish to continue these actions.

The Theodorou Group uses a platform for sending mass mails and Newsletters, Mailchimp, in which it maintains a base with the targets of its customers. Mailchimp does not have access to the data of these subjects, since there is a protective password from the company to safeguard this data. The platform in question is the largest automated marketing platform in the world, helping millions of its customers – from small e-commerce shops to large online retailers – identify their audience, “close” their customers and build a brand name. In addition, Theodorou Group is obliged to provide your personal information in response to official relevant requests from government authorities, to deal with national security situations or as otherwise required by law.

Personal information is accessible to a limited number of Theodoros Group employees, who are competent and suitable for the processing of said data. We educate our employees about the importance of maintaining privacy and how your data is properly and securely handled and managed.

It is Theodorou Group’s practice to secure any website that collects personal information. To this end, it has collaborated with specialized consultants and has trained staff. However, the privacy of personal information transmitted over the Internet cannot be guaranteed. We urge you to be careful when transmitting personal information over the Internet, especially personal information related to your health. Theodorou Group cannot guarantee that unauthorized third parties will not gain access to your personal information. Therefore, you should weigh both the benefits and the risks when submitting personal information to Theodorou Group websites.

Theodorou Group does not keep the data on servers outside the Greek Territory.

Theodorou Group does not knowingly collect or use any personal data of children (we define “children” as minors under the age of 18) on the Theodorou Group websites We do not, to our knowledge, allow children to order our products, contact us or to use any of our online services. If you are a parent and become aware that your child has provided us with information, please contact us via one of the following methods (phone, email), leaving your information and we will work with you to address the issue.

Theodorou Group does NOT collect sensitive personal data such as race, national origin, religion, health, sexual orientation or genetic biometric data etc. they are categorized as “special categories of data” and receive additional protection according to European data protection legislation.

In accordance with the law, you can request access to your personal information, object at any time to the processing of data concerning you, correct your personal information or remove it from our current customer records. Please let us know by contacting us in one of the ways below. For our record keeping purposes, we will retain the personal information you submit in the course of commercial transactions.

We have taken appropriate organizational and technical measures to protect your personal data from misuse, interference, loss, unauthorized access, modification or disclosure.

The measures we use include implementing appropriate access control measures, technical information security and ensuring that personal data is encrypted, pseudonymised and anonymized where necessary and feasible.

Access to your personal data is permitted only to our employees and partners and only insofar as it is necessary to operate our website and support our related activity and is subject to strict contractual obligations of confidentiality when processed by third parties.

You can contact us at Agiou Athanasiou 17 Str., 19002, Peania, Attica, Greece, call us at +302106690900, +302106047000, email us at  marketing@theodorougroup.com or submit a request through the contact form on our website.

This statement will be revised as necessary to adapt to legislative changes, to respond to customer feedback and needs, and to changes in our products and services. Any changes will be posted with a simultaneous revision of the last updated date at the top of this statement.