1.1 grmobile.gr attaches particular importance to the protection of the privacy and personal data of its visitors/customers and always tries to operate in accordance with the new personal data protection regulation (GDPR)
1.2 This policy applies to cases where we act as data controllers for the data we receive from our site visitors and customers.
1.3 We use cookies on our website . During your first visit to our website we will ask you for your consent to the use of cookies, which are not absolutely necessary and critical for the functions of the site. From then on, you will be asked for new consent at regular intervals. For the policy and use of cookies there is also a special page that you can visit on the site.
1.4 Our site allows you to choose how we use and process your personal data. For example, you can request to be unsubscribed from our newsletter so that you do not receive informational and/or promotional material from us via email.
1.5 In this privacy policy, the words “we”, “us”, “our” refer to our company and in particular to GR Mobile and in the capacity of data controller.
2.1 This section describes:
(a) The categories of your data that we may collect and process.
(b) In the event that your data was not obtained directly from us but from a third party, we clearly state the sources.
(c) The reasons for collecting and processing the data
(d) The legal bases of this processing.
2.2 Performance Information– During your visit to our website we will probably process your data (data processing). Data processing may concern IP address, geographic location, browser type, operating system, traffic source (from where you arrived at our site), visit duration, page views, site browsing, as well as information on the time and frequency of use of the site from you.. This information is collected through Google’s popular Google Analytics platform and is required exclusively for matters of improving the performance of our site and the services offered by us to you. The legal basis for the collection and processing of the above data is defined as the consent of the user during his first visit (with the acceptance of cookies), as well as the legitimate interest of the company,
2.3 Personal Account Information– When using our online store we collect, process and use your personal account data (“account data”). “Account data” includes: name, email, contact phone number, shipping address and/or billing address. “Account data” is collected from you for the purposes of serving you and completing your purchase. “Account data” is processed for the purposes of completing our services, for the security of the site and/or its visitors, for maintaining backup copies of our business data, as well as for customer communication. In addition to the above legal bases, we also process the data on the legal basis of the conclusion of a contract between us for the sale of goods,
2.4 Our business maintains access to your information contained in your personal profile on our website (“profile data”). Profile data may include name, address, telephone number, email address. Profile data may be processed for the purposes of completing orders and shipping them to customers. The legal basis for this processing is consent, our legitimate interest, i.e. the proper management of our website and business, the performance of a contract between us and/or taking steps, at your request, to enter into such a contract.
2.5 Our business maintains access to information about transactions, including purchases of goods and services, that you enter into with us through our website (“transaction data”). Transaction data may include your contact information, and transaction details. Transaction data may be processed for the purpose of supplying the purchased goods and services and maintaining appropriate records of such transactions. The legal basis for this processing is to perform a contract between us and/or to take steps, at your request, to enter into such a contract in defense of our legitimate interests, i.e. the proper management of our online store.
2.6 Our business retains access to the information you provide to us to subscribe to email alerts and/or newsletters (“alert data”). Notification data may be processed to send you the relevant notifications and/or newsletters. The legal basis for this processing is your consent, but also the performance of a contract between us
2.7 Our business has access to any of your personal data identified in this policy where necessary to establish, exercise or defend legal claims, whether in legal proceedings or in an administrative or extrajudicial proceeding. The legal basis for this processing is our legitimate interests, i.e. the protection and assertion of our legal rights, your legal rights and the legal rights of others.
2.8 In addition to the specific purposes for which we may process your personal data set out in this Section 3, we may also process any of your personal data where such processing is necessary to comply with a legal obligation, or in order to protect your vital interests or the vital interests of another natural person.
2.9 Please do not submit any third party personal information to us unless specifically requested to do so.
3.1 We reserve the right to forward your personal data to an insurance company with which we cooperate and/or to our professional advisers, to the extent reasonably necessary for the purposes of obtaining or maintaining insurance cover, risk management, obtaining professional advice or installation, exercising or defending legal claims, whether it is a judicial process or an administrative or extrajudicial process.
3.2 Financial transactions related to our website and services are carried out through our payment service providers, banks, Paypal, Viva. We forward transaction data to our payment service providers only to the extent necessary for the purposes of processing your payments, refunding payments, and dealing with complaints and inquiries about those payments and refunds.
3.3 We reserve the right to forward the data resulting from an inquiry you make to us to one or more of the selected third party suppliers of goods and services identified on our website for the purpose of enabling them to contact you so that they can offer you , goods and/or services. Each such third party will act as a data controller in relation to the survey data we provide to it, and each time it communicates with you, each third party will inform you of its own privacy policy, which will govern the use of personal your data from third parties.
3.4 In addition to the above cases of forwarding personal data (Section 3), we may forward your personal data where the forwarding is necessary to comply with a legal obligation to which the data is subject or to protect your vital interests or the vital interests of interests of another natural person. We may also forward your personal data when such forwarding is necessary for the exercise or defense of legal claims, in a judicial proceeding or in an administrative or extrajudicial proceeding.
4.1 In section 5, we provide information about the circumstances under which your personal data may be transferred to countries outside the EU.
4.2 Our company and our online store have offices and headquarters in Greece . The European Commission has made an “adequacy decision” regarding each country’s data protection laws. Data transfers to each of them will be protected by appropriate safeguards, i.e. clauses adopted or approved by the European Commission.
4.3 Our site’s hosting facilities are located within the EU . The web hosting companies we work with meet all the requirements of the new European regulation (GPDR). The European Commission has made an “adequacy decision” regarding each country’s data protection laws. Transfers to each of them will be protected with appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission.
5.1 Section 5 sets out our data retention policies and process, which are designed to ensure that we comply with our legal obligations in relation to the retention and deletion of personal data.
5.2 Personal data that we process for any purpose or purposes is not kept for longer than is necessary for the purpose of the processing.
5.3 We keep your personal data for a period of time:
(a) reasonable, to make available and ship our products to you;
(b) for user/customer accounts, for as long as the customer needs, until the customer decides to proceed and request its deletion from our records.
5.4 In some cases, it is not possible for us to determine in advance the periods for which your personal data will be retained.
5.5 Notwithstanding the other provisions of this section, we may retain your personal data where such retention is necessary to comply with a legal obligation to which we are subject or to protect your vital interests or the vital interests of another natural person.
6.1 Our company may change/update these terms at will.
6.2 You should check this page regularly to be informed of any changes to these terms.
6.3 Our company will inform you of any changes to these terms and conditions via email or personal message or any other means of communication you have chosen.
7.1 In this section, we describe and inform you about your consumer rights (your rights) as described by the new General Data Protection Regulation (GDPR). Some of these rights are described in complex legal terms and therefore have not been included in this text in full detail. You can contact the relevant authorities for a full explanation of the terms and your rights.
7.2 Your basic rights as a consumer, based on the new regulation, are:
(a) the right to access your data;
(b) the right to rectification of data
(c) the right to erasure
(d) the right to restriction of processing
(e) the right to object to processing
(f) the right to portability
(g) the right to report to a competent authority
(h) the right to withdraw consent
7.3 You have the right to confirm whether you want us to process your data and when we process it, you have the right to access the data at any time, as well as additional information about it. The additional information concerns the purpose of the processing, the categories of data we collect and the recipients of the data. As long as the rights and freedoms of third parties are not affected, we can provide you with a copy of all your personal data. Your personal data can be viewed and edited by logging into your personal account in our store if you have created one.
7.4 You have the right to edit and correct data that you consider to be inaccurate, as well as to complete personal data when required to better serve you.
7.5 In some cases you have the right to delete your data completely without any delay. These cases include: a. personal data that are no longer necessary in relation to their original processing purpose. b. Withdrawal of your consent to the processing of your data. c. object to the processing based on specific articles of the applicable legislation. d. the processing only concerns direct advertising actions. e. the data is subject to illegal processing. However, there are also exceptions to the right to erasure, which apply when data processing is absolutely necessary: to ensure freedom of expression and access to information, to ensure compliance with legal obligations and to exercise legal rights and appeals.
7.6 There are cases where you can restrict the processing of your data. These are: you do not agree with the accuracy of the data, you consider the processing unlawful but do not wish to delete it, your data is no longer necessary for processing by us, but you need it for the purposes of exercising legal rights and appeals and when you have objected to the processing and await the result of this action. Where data processing is restricted based on the above, we may continue to collect and store your data, but we will only use it: with your express consent, to take legal action, to protect the rights of other legal or natural persons or for serious reasons of public interest.
7.7 You have the right to object to the processing of your personal data for reasons relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for: the performance of a task carried out in the public interest or in the exercise of any public authority delegated to us or the purposes of legitimate interests pursued by us or by a third party. If you make such an objection, we will stop processing your personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing concerns the exercise or defense of legal claims.
7.8 You have the right to object to the processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you make such an objection, we will stop processing your personal data for this purpose.
7.9 You have the right to object to the processing of your personal data for scientific or historical purposes or for statistical purposes, for reasons related to your particular situation, unless the processing is necessary for the performance of a task carried out in the public interest.
7.10 To the extent that the legal basis for processing your personal data is a) consent or b) that the processing is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract , and this processing is carried out by automated means: you have the right to receive your personal data from us in a structured, widely used and machine-readable format. However, this right does not apply if it adversely affects the rights and freedoms of others.
7.11 If you believe that the processing of your personal data breaches data protection laws, you have the legal right to lodge a complaint with a supervisory authority responsible for data protection. You can do this in the EU Member State of your habitual residence, your place of work or the place of the alleged infringement.
7.12 To the extent that the legal basis for processing your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of the processing prior to withdrawal.
7.13 You may exercise any of your rights in relation to your personal data by written notice to us or in some cases by your direct intervention in your account data.
7.14 grmobile.gr undertakes to inform its subscribers (members with an account whose personal information is stored) in detail within 72 hours, via email or any other available means, in case of malicious action (hacking) or any other loss/leakage of personal information the data.
8.1 grmobile.gr has appointed the company WebO2 as data controller (DPO). To contact our data protection officer, regarding data protection issues, information about your data and anything else, please contact the email.