PERSONAL DATA PROTECTION POLICY

Last updated 16/05/2022

General

Camelot® International Health Organization respects the privacy and personal data protection of the users of its website (hereinafter “users” or “you“) and complies with applicable laws regarding the protection of personal data. In particular, the processing of users’ personal data is carried out in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679, any other applicable national and European legislation on the protection of personal data and privacy in the electronic communications sector (Law 3471/2006, as amended) and the decisions of the Data Protection Authority (DPA). Please read it carefully. This Policy has been written in the simplest possible way in order to make it easier for you to understand and decide freely and voluntarily whether you wish to provide your personal data.

Who is the controller?

The data controller within the meaning of the General Data Protection Regulation 679/2016 is the company “Camelot® International Health Organization” located in Kallithea, Attica, at 146, Syngrou Avenue (hereinafter the “Company” or “We“).You can contact us by phone at 2119557550 and by e-mail at [email protected]

What kind of data do we collect?

Depending on how you interact with us, we process the following categories of personal data:

• Identity, contact and address details such as name, telephone number, e-mail address, product delivery address, etc.
• Financial and transaction data such as order and return data, payment methods, etc.
• Mailing information (e.g. when you use the contact form)

Finally, we collect information automatically through the use of cookies and similar technologies. For more information about our use of Cookies, please refer to our Cookies Policy.

What are the purposes and legal bases for the processing of personal data?

When you purchase products from our online store, we ask you to provide us with billing information (e.g. name, address, telephone number, email address, etc.). This data is necessary to identify you so that we can provide you with our products and services as well as to communicate with you in this context. The legal basis for processing is the performance of the contract between us.

Our website offers the possibility to register. To register you need a valid email address to which we send you a password (login code). After creating your account you can fill in additional information (identity, contact details, address) and if you make purchases you will have access to your order history. If you create an account and fill in all the required information you will be able to log in as a customer and make your purchases faster. The legal basis for this processing is the execution of the contract between us to which you become a party by accepting our website Terms of Use before registering.

We may use the same contact details to contact you in the future to inform you about new products. The purpose is to promote our products and services and we believe we have a legitimate interest in keeping you informed. In promotional messages sent to you you will always be given the option to unsubscribe from our mailing list via a link.

When you use the contact form, we process data (name, e-mail, phone number, region, message) in order to process your request by responding to queries you submit. The legal basis for processing is your consent, which you provide by accepting this Policy before sending your message. You are not obliged to consent to the processing of your data, but otherwise it will not be possible to send the form and communicate with the Company in this way.

Use of “Add-on Social Networks” (“Social Networks”) media Plugins”)

We use “Social media Plugins” which are products of social media. For example, we have integrated the “Like” plugin of the social media Facebook Inc. or other providers such as Twitter Inc., LinkedIn Inc. etc. You can distinguish the origin of each add-on from the brand name (“logo”) of each social network provider. The integration of add-ons implies under certain conditions a transfer of data to the respective social networking service provider. Your browser sends information to these providers when you visit our website. For example, Facebook uses cookies and receives information when you visit our website, such as information about your device and your activity, without any additional action on your part and this happens regardless of whether you have a Facebook account and whether you are logged in (see https://www.facebook.com/policie s/cookies).

Please note that we are not responsible for any subsequent processing of personal data that takes place by the respective providers. Our website only enables the transfer of information by integrating plug-ins and may be co-responsible with the respective providers for this exclusive processing activity. For more information about the add-ons (“Social Plugins”) please refer to the Privacy and Cookie Policies of these providers. We integrate these plugins in order to improve and promote our website and we believe that the resulting data processing serves the legitimate interests of our Company.

Who do we share your personal data with?

Access to your data is restricted to:

• Suppliers of the Company who are required to have access to data in order to provide their services to us. These suppliers are bound by specific confidentiality agreements.
• Authorized employees of the Company who are required to have access to your data (e.g. employees who respond to messages you send through the contact form). All Company employees who have access to customer data are bound by specific confidentiality agreements.
• The Greek State. Data is disclosed to the State to comply with our obligations under the law (e.g. tax legislation) or requests from national authorities.
• Third party providers that place Cookies. Some cookies are placed by third parties who cooperate with us in providing their services. Therefore, these partners have access to information collected through the use of these technologies (For more information, please visit our Cookies Policy).
• Social Network Providers with respect to the above “Third-party Plugins”.

How long do we keep your data?

The length of time your data is stored depends on the purpose for which it was collected. Specifically, in the case of filling in the contact form, your data is kept for the time required to process your contact request. In case of purchase of products, the data we collect are kept for the period of time required for the execution of the contract between us and for the fulfilment of the Company’s tax and other obligations, in accordance with the applicable legislation. The contact details of our customers are kept for a reasonable period of time for the purpose of sending informative material for product promotion purposes, unless you unsubscribe from our group of recipients. The information collected for account creation is retained until you request deletion of the account.

Security measures – Data transfer outside the EU

Our Company takes care to provide all necessary technical and organizational security measures to protect personal data from unauthorized access and leakage at all times. We provide you with the highest level of security both when carrying out your purchases and when submitting your requests through our website.

Our servers are located within the European Economic Area (EEA). For efficiency reasons, servers of our partners (e.g. third-party cookie providers) may be located outside the EEA. Please be advised that data is transferred with adequate safeguards and stored securely.

Connection to third party websites

Our Site may have links, hyperlinks, banners or tabs which, when clicked, will take you to third party websites (e.g. when you want to add a review on the Facebook, Inc. or Google Inc. platform). Please refer to the respective Privacy Policies as our Company is not responsible for the processing of personal data carried out by these websites.

What are your rights in relation to your data?

Our Company wants to ensure that you can exercise your rights in relation to your personal data. To this end, we inform you that for as long as we keep your data you have the right to exercise your rights free of charge. However, in the event that your requests are manifestly unfounded, excessive or repetitive, the Company may charge you a reasonable fee. In particular, you have the right to request:

• access to your data,
• correcting, updating or completing them when they are inaccurate or incomplete,
• deletion, if they are no longer necessary for us according to the above mentioned processing purposes and there is no longer a legitimate reason for keeping them,
• their portability, where the legal basis of the processing is the consent or performance of the contract between us,
• restriction of data processing,
• withdraw your consent at any time. The withdrawal of your consent shall operate for the future without affecting the lawfulness of the processing based on your consent prior to its withdrawal.
• object to processing where the legal basis for processing is our legitimate interests.

You can exercise the above rights by sending an email to [email protected]

Finally, you have the right to lodge a complaint with the competent Data Protection Authority(https://www.dpa.gr/) if you believe that your rights have been violated.

Amendments to the Privacy Policy

We reserve the right to modify this Policy to comply with any applicable legal requirements or whenever we deem it necessary. With respect to your data, the Policy posted at the time of your visit to our Website will apply. In the event of a modification, we will also change the date of the “Last Updated” at the top of the Website.

Contact

If you have any questions or comments regarding the protection of your data, please do not hesitate to contact us at [email protected] address or at 2119557550 telephone number. Data Protection Officer (DPO) of our company is Mr. Hercules Athanasiou.