Update on the General Data Protection Regulation (GDPR / (EU) 2016/679)

Dear customer,
We inform you that from 25 May 2018, the new General Data Protection Regulation (GDPR / (EU) 2016/679) applies to Data Protection and is valid throughout the European Union (EU). The Regulation incorporates recognized principles of transparency, fairness and accountability, extends the privacy rights of EU persons and imposes new obligations on all entities that trade, monitor or handle the personal data of European citizens.
The commitment of our business
Our Company, with respect to the personal data of its Customers and employees, fully implements the new General Regulation for the Protection of Personal Data as well as the general Community and national legislation and the instructions and opinions of the APDPH for the protection of personal data. data and their processing.
The protection of the security and privacy of personal data, regardless of their origin, is important for the "(name-distinctive title ……", so our Company fully complies with the terms and procedures of the Regulation, applying a program for the whole Company, following a uniform methodology in all its departments, examining every aspect of our operations and ensuring the participation and commitment of all its executives.

Our program - What you would like to know about our cooperation:
Visit the website of our Company to be informed in detail about the following:
The personal data collected by our Company
The sources of personal data
The purpose of collecting personal data
The recipients of personal data
The time of keeping personal data
Our Customers' rights to / from the processing of personal data and how to use personal data.
It is pointed out that in order to start / continue our cooperation, you must provide in accordance with art. 7 of the Regulation (GDPR) your explicit written consent, where required. In the same way, you can revoke your consent.

(selection statement / I AGREE - I DO NOT CONSENT)

UPDATE
For the Processing of Personal Data
[I] UPDATE (CUSTOMER) DATA INFORMATION
The company "all4hobby" (hereinafter "Business"), in its capacity as controller, informs, in accordance with Regulation (EU) 2016/679 of the EU. and the provisions of the Greek legislation on "protection of personal data", the natural person (hereinafter regardless of gender or capacity of "Customer") that she and / or third parties, by order and on her behalf, will process personal data that the concern, in the context of a transaction for a product (s) or service (s) of the Company, in accordance with the following.
1. The personal data collected by our Company are:
a) Identification data, such as name, patronymic, spouse name, ID number, VAT number, place of residence / seat / establishment and other absolutely necessary identification data.
b) Communication data, such as postal and e-mail address, landline and mobile phone.
c) Data from the execution of payment transactions.
d) Data relating to Customer identity and transaction identities provided by devices or applications it uses, such as an ip address or other data provided through devices used by the Customer as identifiers location, as well as internet browsing data (cookies), which alone or in combination with unique identifiers, can be used to identify and create a Customer profile.
e) Data relating to communications made by e-mail or fax and / or by post and / or by courier service with the Customer.
It is pointed out that, in addition to the above data which is absolutely necessary for any transactional or contractual relationship of the Customer with the Company, the type and amount of other data collected depends on the type of relationship and the product offered or supplied or service.
2. The sources of your data.
The above mentioned personal data are collected from the following mentioned sources:
a) The above data under I.1.a-b, d from the Customer and / or from publicly accessible sources, including social networks on a website.
b) The above data under I.1.c from the Customer or from payment service providers, by order of the Customer himself,
3. The purpose of your data collection and how we process it:
The above personal data collected, either at the beginning of our business relationship or later, aare processed for the following purposes:
a) The identification of the Customer and the communication with him in any case of transactional, pre-contractual or contractual relationship with him, for the fulfillment of contractual and / or legal obligations of the Company.
b) to monitor the progress of the relevant contract and any debt arising therefrom.
c) The preparation of a contract with the Customer, its execution and in general its smooth operation and the fulfillment of the obligations of the Company to the Customer.
d) The protection of the rights and legitimate interests of the Company and the protection of the trading public, such as, as an indication, the provision of security procedures of the Company.
e) The communication with the Customer, in the context of the execution of the contract, for his information regarding the utilization of the products or services provided by his Company, its possibilities, characteristics and developments, as well as for its investigation degree of Customer satisfaction with the service provided by the Company and its services and / or the further wishes or requirements of the Customer, for purposes that serve the legal and contractual interests of the Company.
f) The promotion of new products and services of the Company and / or partner companies or third parties, to an existing or potential Customer, if there is, where appropriate, his explicit consent.
The Company may apply some automated methods to achieve its goals, by compiling a marketing profile (marketing pro-filing), based on the Customer's trading habits.
4. Who are the recipients of your data:
a) The employees and the executives of the Company, who are responsible for the management and operation of the contract (s) that the Customer concludes and co-signs with the Company, for the fulfillment of the obligations deriving from it (s) , as well as relevant obligations imposed by law.
b) Natural and legal persons, to whom the Company in each case entrusts the execution of specific tasks on its behalf, such as, among others, accountants and chartered accountants, lawyers, law firms, notaries and bailiffs, accredited intermediaries and service centers -receivers, experts, experts, file storage and management companies, market research companies, advertising and product promotion companies on behalf of the Company, as well as providers of postal services, development services, maintenance, configuration of computer applications, providers of electronic services mail, internet hosting services, including cloud services, cloud payment services companies, subject to any confidentiality and duty of confidentiality and confidentiality.
c) Credit and / or financial institutions, based in Greece or abroad, that have been licensed and operate legally.
d) Credit institutions and payment service providers established in Greece or abroad, which are licensed and operating legally, for the execution of a contract or transaction.
e) Supervisory, controlling, independent, judicial, public and / or other authorities and bodies within the framework of their statutory responsibilities, duties and powers.
5. When is the data transmitted to non-EU countries? (third countries) or an international organization:
The Company may transfer its Customer's personal data to non-EU countries. (third countries) in the following cases:
(a) if the European Commission has adopted an act on the adequate protection of personal data in that country or in that international organization.
b) if the Customer has been specially informed and has provided his explicit consent to the Company and the other conditions of the relevant legal framework are met.
(c) if the transfer is necessary for the performance of a contract, as in the case where the transfer is necessary for the execution of payment orders in a bank account of a third country credit institution.
d) if the transfer is necessary for the establishment, exercise or support of legal claims or the defense of the rights of the Company.
e) if there is a relevant obligation by law or a transnational or international contract.
e) if the Company is obliged to comply with the rules of automatic exchange of information in the context of controls related to criminal and / or tax and / or customs cases related to the Customer or officially attributed to him, accusations about them and as they derive from the current or future regulatory and regulatory framework.
In order to fulfill the obligations under e or above, the Company may proceed to the transfer of its personal data.Client to competent national authorities in order to be forwarded through them to the respective authorities of third countries.
6. How long the data will be kept:
In case of concluding a contract with the Company, the latter keeps the personal data of the Customer until the completion of the statutory general limitation period of the claims, ie for a period of up to twenty (20) years from the expiration of the relevant contract in any way .
If by the end of the above time legal proceedings are in progress with the Company or any related entity, directly or indirectly concerning the Customer, the above time of data retention will be extended until the issuance of an irrevocable court decision.
In case of non-preparation of a contract, but there was a pre-contractual stage of concluding a contract, the Customer's personal data will be kept for up to five (5) years from their collection, in the context of submitting a relevant application (statutory limitation period of any claims based on non-contractual liability), unless a shorter or longer data retention period is provided by law or regulation, in which case the above data retention time will be reduced or increased accordingly.
The contractual documents bearing the Customer's signature, in which personal data have been registered, may, after the lapse of five years, at the option of the Company, be kept in electronic / digital form.
7. The rights of the Customer for the protection of his data:
The Customer has the following rights:
a) Has the right of access. That is, to know what personal data concerning him is kept and processed by the Company, as well as their origin.
b) Has the right to correct. That is, to request the correction and / or completion of these in order to be complete and accurate, submitting any necessary document from which the need for completion or correction arises, which at the same time is its obligation.
c) Has the right to restriction. That is, to request the restriction of the processing of his data.
d) Has the right to object. That is, to refuse and / or oppose any further processing of his personal data held by the Company.
e) He has the right to be forgotten. That is, to request the deletion of his data from the files of the Company.
f) Has the right to data portability. That is, to ask the Company to transfer the data provided to it, to any other controller.
It is noted that the satisfaction of the requests c, d and e, if they relate to data that are necessary for the preparation or continuation and operation of the contract, regardless of whether they were granted by the Customer or if they were obtained from any public source. / authority, implies the automatic termination by the Customer of the respective contract or contracts, according to their relevant terms or the impossibility of examining the request of the subject.
Furthermore, the Company has in any case the right to refuse the request for restriction of the processing or deletion of the Customer's data if the processing or keeping of the data is necessary for the establishment, exercise or support of its legitimate interest, legal rights. or its compliance with its legal obligations in accordance with (1) and (3) above.
The exercise of the right to portability (above under f) does not imply the deletion of data from the records of the Company, which is under the terms of the immediately preceding paragraph.
The exercise of the above rights is valid for the future and does not involve data processing already performed.
The Customer has the right to file a complaint to the Personal Data Protection Authority (www.dpa.gr), which is the competent supervisory authority for the protection of the fundamental rights and freedoms of individuals against the processing that concerns them. , if he considers that his rights are being violated in any way.
8. How can the Customer exercise his rights under -7- above:
For the exercise of the above -7- rights, the Customer can contact:
At the headquarters of the Company by filling in the Form for Exercising Rights.
by phone at 2311 823843
electronically on the Company's website www.all4hobby.gr, by filling in the contact form.
via e-mail at info@all4hobby.gr
In addition, the Customer can print through the website of the Company www.all4hobby.gr the Form for Exercising Rights and send it completed, via physical mail to the address: 2A Stratou Avenue, 56 535 Polichni - Thessaloniki - Greece.
The Company undertakes to make every effort to respond to the Customer within thirty (30) days from the submission of his request, which may be extended for sixty (60) additional days if required at the discretion of the Company, taking into account face tthe complexity of the request and the number of requests. The Company undertakes to inform the Customer in any case of extension of the deadline of thirty (30) days within thirty (30) days of receipt of the request, as well as the reasons for the extension.
If the Company does not act on the Customer's request, it informs him without delay and no later than thirty (30) days from the receipt of the request, for the reasons for which it did not act and for the possibility of filing a complaint and filing a lawsuit. . The above service is provided free of charge.
In the event that the Customer's requests are manifestly unfounded, excessive or repetitive, the Company may refuse to respond to these requests, informing the Customer accordingly.
9. How Customer rights are protected:
The Company implements an information security management system to ensure the confidentiality, security of the processing of Customer data and their protection from accidental or unfair destruction, loss, alteration, prohibited dissemination or access and any other form of unfair processing.
The above Customer information is made in application of Regulation (EU) 2016/679 of the European Parliament and of the Council and the provisions of the Greek legislation on personal data protection adopted and applied in this context and replaces any previous information has been made in the framework of Law 2472/1997 and may refer to contractual or other documents of the Company.

[II]. contact info

(a) TREATMENT MANAGER:
www.all4hobby.gr CONTACT PHONE: +30 2311 823843

(b) DATA PROTECTION MANAGER:
www.all4hobby.gr ………… ..
CONTACT PHONE: +30 2311 823843