MIKAEL SA fully understands the importance of protecting your personal data. Our goal is to ensure that you feel safe on our website. This policy applies to all of you who purchase and use our products or services through our points of sale (stores or through our website). The following Privacy and Data Protection Policy aims to inform you about how we use your personal data, complying with the strict requirements of the Greek Data Protection Law and the requirements of the EU Regulation 2016/679 on the Protection of Personal Data. If you do not agree to the terms of this Policy, as it may be amended, you may cease using our website.
Responsible for the processing of your personal data
The person responsible for the processing of the data is MIKAEL SA. The contact details of MIKAEL SA are as follows:
- Postal address: 71 Tsimiski str, 54624, Thessaloniki, Greece
- Phone: +30 2310 230906
- Email address: email@example.com
We inform you that MIKAEL SA has appointed a Data Protection Contact Person to whom you can raise any question regarding the processing of your personal data.
Any interested party may contact the Data Protection Contact Person via the following contact details:
- Postal address: 71 Tsimiski str, 54624, Thessaloniki, Greece
- Phone: +30 2310 230906
- Email address: firstname.lastname@example.org
Collection of personal data
The use of the term "Personal Data" in this Privacy Notice means information about you that allows us to identify you, directly or in combination with other information we may have. When you visit one of our outlets (stores or website), we collect and ask you to provide us with certain information about you. We only collect as much personal information as is deemed necessary and appropriate in order to provide you with our services and a functioning website. This information may include:
- Personal data such as name, address, email address, telephone number and other contact details. This data is collected when you purchase a product from our stores or when you purchase a product through our online store either as a simple visitor or as a registered user as well as when you first register with our online services, e.g. when you register for the first time on our website and when you create an account.
- Account information, such as username and other identifiers or credentials used to access our online services as well as information regarding your order history, products selected and viewed by you.
- Device information.
- Navigation information when visiting our website, IP address and cookie data.
- Location Information
We ask you to provide us with your personal data a. when you purchase products in our store or through our online store, when you register to use our online services, when you request to receive updates on marketing promotions - newsletter subscription, when you submit requests via the contact form on our website. In some other cases your personal data may be collected automatically or through information transmitted to us by third parties. In particular,
Data we collect automatically when you visit our website
In general, you can browse our site without sharing any data that identifies you. However, login and browsing information and interaction with our website is automatically collected in order to ensure the security of our website and the services we provide to you and to improve the online experience of users. In particular, in compliance with Article 6 par. 1(f) of EU Regulation 2016/679, our website collects a range of data and information of a general nature on each access you make, which is temporarily stored in log files on a server. The log file is created as part of the automatic logging carried out by the electronic processing system. In this context, the following data may be collected:
- Connection data collection:
We collect information about the device you use to browse and use our website (such as the operating system, browser type, IP address, date and time of access, the proxy server used, the recommended location of the IP address, the internet service provider you use).
- Collection of Navigation Data:
When you visit our website we may collect information about your visit, such as the browser you use, the pages you visited and the items you clicked on, viewed by you or added to your shopping cart, the length of your visit and the link that brought you to our website.
In any case, we reserve the right to check the server log files if specific indications of illegal use are found.
The collection and storage of the aforementioned data is necessary for the operation of our website in order to provide functionality and offer its content. In addition, we use the data to optimise our website and to ensure the security of our information technology systems. The legal basis for the processing of the above data is Article 6 para. 1(f) of EU Regulation 2016/679.
Data collection when placing an order as a simple visitor to our website
For the conclusion and execution of the contracts we ask for your contact details depending on the specific case, such as your first and last name, patronymic, e-mail, address (number and postal code), telephone number, country of residence and information on the payment method you choose. When you place your order, we may, with your consent, keep your e-mail address for the purpose of sending you newsletters, offers, promotional material and personalised advertising.
If you purchase products as a "visitor" we will use the purchase data to complete your purchase but will not add the information to any User Account you may have.
The processing of the shopping data is necessary for the performance of the contract to which you are a party, and lawful under Article 6(6)(a) of the GDPR. 1(b) of EU Regulation 2016/679.
Data collection through the creation of a user account
Through your User Account, in addition to the personal information requested from you (name, address, phone number, etc.) we collect data regarding your preferences, any orders you have placed (order history), products you have selected, products that were viewed by you and added to the "Wishlist" service. When you register, we may, with your consent, keep your e-mail and/or telephone number for the purpose of sending you newsletters, offers, promotional material and personalised advertisements.
If you have decided to create a User Account through your social media account, we may obtain the profile information of the social media you choose to share with us.
The User Account is only created if you request it. Therefore, the processing of the account data is lawful in accordance with Article 6(6)(a). 1(a) of EU Regulation 2016/679.
Data collection via the contact form
Through the contact form we collect your first name, last name and e-mail address for the sole purpose of being able to respond to any communication you request.
When you contact us via the contact form, the information you provide us with is collected and stored by us in accordance with Article 6 par. 1(a) of EU Regulation 2016/679. Our communication is recorded and the data is collected in order to be able to prove the communication in accordance with legal requirements. Your consent to data processing will be obtained by completing the contact form and this Privacy Notice refers to it.
Data collection by subscribing to a newsletter via our website
You have the option to subscribe to our website to receive updates from our newsletter about promotions, offers, discounts including the sending of personalized advertisements. When you subscribe to our newsletter the data in the data entry form will be sent to us.
The processing of personal data for newsletters and promotional messages is based on your consent, i.e. it is provided voluntarily, and is lawful in accordance with Article 6 para. 1(a) of EU Regulation 2016/679.
Data collection by registering in a shop
If you register in our store by filling in the relevant form to receive information and updates on promotions for our products and services, we will store your email address in order to also provide you with specific information via email about our products and services.
Social Media Data Collection
The Personal Data we collect includes the public data you have submitted in the social media environment of MIKAEL SA, which is available from the respective social media provider, such as the basic details of your profile and your account details as well as comments and content you have posted/shared.
Data relating to your profile on a social network may also be recorded when you click on a "like" or similar button on any of our websites or services. This is recorded and the content you view may be published on your profile or feed on the relevant social network.
Data collection shared through partners
We collect information that has been shared by partners with whom you have contacted and allowed to share your personal data with us to fulfil orders and/or for direct marketing or promotional purposes.
Purposes for which we process your personal data
The company processes your personal data only when the law allows us to do so. In general, we process your personal data only:
- when we have to execute the contract between us.
- where it is necessary for our legitimate interests (or the interests of a third party) and your interests.
- when we have to comply with a legal or regulatory obligation.
- when you have given us your express consent to do so.
The main purposes for which we process your personal data are:
- Management of navigation and registration data on our website. The navigation and the creation of a User Account implies the processing of the personal data you have given us as well as your navigation data on our website, such as your IP address, the products viewed or added by you to the cart and wishlist, the sections of our website you have visited, your order history. The processing of these data is done in order to provide you with access to our products and services, for the comfortable use of our website and the security of the system.
- Contract management and execution. We use your personal information to execute the contract between us and deliver your order as well as to contact you via email and/or SMS about the status of your order and anything related to its execution.
- Optimizing our website services, products and services and customer relations. In the pursuit of our legitimate interests and to enable us to improve our products and services, to evaluate how customers interact with our site, to grow our business, to tailor our communications with you according to your preferences and behavior, and to provide you with the best possible, personalized experience, we may analyze and combine all information related to your Account Data, navigation data and data related to We may also use this information to create user profiles and to analyze segments of our audience that indicate which products and/or services users are interested in and track the success of a marketing effort. This data is collected in order to improve our website and our applications, including the use of technologies that place cookies on your devices or in the emails we send you, and to provide you with higher quality services.
- Managing communication through our website
- Customer service and support
- Response to the exercise of access, correction and deletion rights, as well as to queries and complaints..
- Managing and sending purchase certification forms such as digital receipt or invoice
- Compliance with legal obligation
- Protecting, detecting and preventing fraud and other criminal activities, claims and other liabilities
- Network and information security in order to take steps to protect your information from loss, damage, theft or unauthorised access.
Please note that if you purchase products or services from our website, we may send you information about our other similar products and services to the email address you provide even without your consent.
We want you to find reading our emails and any information we send you enjoyable, so we try to include only information that you may find interestin
Transfer of personal data
We may transfer your personal information to our agents and/or subcontractors and third party partners for the purpose of supporting, promoting and performing our business relationship, but always under conditions that fully ensure that your personal information is not subject to any unlawful processing, i.e. other than the purpose of the transfer as set out above. When transmitting your personal data, we ensure that the level of security is always as high as possible, and for this reason your data is only transmitted to service providers and affiliated companies carefully selected in advance and bound by contractual obligations to comply with the applicable legislation on the protection of personal data. We also only transfer your data to entities established within the EU and therefore subject to strict EU data protection legislation or bound by an equivalent security standard.
Data transfers to third countries are not carried out or not currently envisaged.
When you use social network icons, data about your identity is automatically transmitted to these social networks.
To operate and optimize our website and to perform contracts, we employ various service companies that work on our behalf, e.g. to provide centralized information technology services, accounting services, host our website, process payments and ship products, install equipment, or deliver newsletters. We disclose information necessary for the respective purposes to these service partners (e.g., name, address).
In any case, we ensure that these companies to which we outsource the provision of services take appropriate data protection measures. For this reason, we agree on specific data protection measures with these companies and monitor these measures on a regular basis. In particular in the case of providers for delivery and transport of orders, the service provider will receive information from us, such as for example the email address or telephone number you provide us with your order, so that they can arrange a specific delivery time with you. For the execution of your orders, the company chooses its partners ACS Courier and DHL ,to whom it transmits your personal data for the purpose of executing the contractual relationship between us.
With regard to the payment of the goods ordered, the data are transmitted to the person processing the payment or to a financial bank specified in the order. If a credit card is used as a means of payment, a transaction-based security check will be carried out with the help of the payment processor in order to prevent credit card fraud.
With regard to the payment of your orders, we do not collect or store information related to the payment such as credit card numbers or account details. This information is sent exclusively and directly to the payment processor in question.
The above categories of recipients of your personal data are processors on our behalf and therefore we ensure that they are bound not to process your data in any way other than for the above transmission purposes.
The Company does not sell or otherwise transfer or disclose your personal data to third parties, other than those mentioned above, without your consent, except for the application of relevant legal dictates and to the competent authorities only.
The data kept in the file may be communicated to the competent judicial, police and other administrative authorities at their legitimate request and in accordance with the legal provisions in force at any given time. In addition, in the event of a legal order, an administrative order or an official preliminary investigation, we reserve the right to make the relevant data available to the relevant department without further ado.
Retention period and accuracy of data
We regularly ensure that the personal data held is up to date and accurate. In particular, we ensure that with each lawful processing of your personal data, we update it with the data we already have stored.
Your data is retained throughout the duration of our business relationship and for as long as necessary to fulfil the purpose for which it is stored or for as long as we are required by law. In determining the appropriate period of retention of your data we consider the quantity, the nature of your data, the potential risk of harm from unauthorised use or disclosure of your data, the purposes for which we process your personal data, whether we are able to fulfil those purposes by other means and applicable legal obligations.
In general, your personal data is retained throughout the duration of our business relationship and for at least ten (10) years in order to enable us to fulfil our obligation to maintain accurate records for tax, technical or other legal reasons.
Special cases include the personal data we collect when you subscribe to our newsletter, which is retained until you withdraw your consent (see withdrawal of consent) and your account personal data which is retained in your account until you delete it yourself or until you delete your account. Navigation data is retained for a period of 6 months.
The data collected when filling out a contact form on our website will be deleted by us after our communication is completed and after any request is finally resolved.
Translated with www.DeepL.com/Translator (free version)
In some cases, under legal obligations, we may retain certain personal data about you even if you delete your account or if there is a problem with that account, for example, if there is a negative balance or an unresolved claim or dispute. In this case, the data needed to resolve the problem or dispute will be retained for the duration of the dispute within the limits of the rules relating to the limitation period. In the event of the commencement of legal proceedings directly or indirectly concerning the data subject, the above retention period of your personal data will be suspended for the entire duration of such proceedings and until a final court decision is issued, at which point it will continue until the above limitation period is reached.
Please note that a specific procedure has been provided for the erasure/destruction of personal data to be deleted (see subject rights).
Subjects' consent and its withdrawal
Of course, you can unsubscribe and request to stop receiving all types of emails, communications, personalised advertisements and updates, i.e. withdraw your consent for the future. For this action, a corresponding unsubscribe link is provided in every email you receive from us and on our website.
You can also change your options regarding Cookies through your browser options if you wish to make another choice regarding our ability to combine your personal data, create user profiles and send/show you personalized advertisements.
For this purpose, you can contact us to withdraw your consent at any time:
- via email: email@example.com
- by post: 71 Tsimiski str, 54624, Thessaloniki, Greece
You cannot unsubscribe from certain informational messages that are necessary for the performance of contracts and the operation of our website, including service-related emails (e.g. registration confirmations, customer service information) or purchase-related information (e.g. order confirmations, contract documents, payment processing).
Rights of subjects
under the General Data Protection Regulation, you have the right to be informed about your personal data and the right to access them.
You also have the right to restrict the processing, rectification and erasure of the personal data concerning you and processed by us in accordance with this Statement. You also have the right to receive (right to portability) your personal data and to transfer it to another controller without any objection from us.
You can also object to the processing of data for the purposes mentioned at any time and inexpensively, separately for each communication channel and with effect for the future, as well as to the creation of personalised usage profiles.
For the above purposes, any request by the subject should be addressed in writing to the Company at the e-mail firstname.lastname@example.org or via the contact form.
In case of your request, we have a notification obligation regarding the rectification or erasure of personal data or the restriction of processing in accordance with Article 19 of EU Regulation 2016/679.
In cases of requests to delete your user account, you reserve the right to delete the entire account and also to select the personal data held by us that you wish to have deleted. However, we reserve the right to further processing if we demonstrate compelling reasons requiring protection which override your interests, fundamental rights and freedoms or if the processing serves to exercise or defend legal claims.
In any case, you can submit your request, to which we are obliged to provide a reasoned reply.
We are obliged to reply to each request within one month of its submission. This time limit may be extended by a further two months if this is deemed necessary because of the complexity of the request and the number of requests. In the event of a delay in replying to the request, we are obliged to inform you of the reasons why we have not acted.
Collection and use of children's personal data
We do not collect and use personal data belonging to children under the age of 16. If it is determined that any personal information has been collected from a minor under the age of 16 without verifiable parental consent, such information will be deleted as soon as possible. If you believe that information may have been collected from a minor under the age of 16, please let us know by emailing email@example.com.
The option to subscribe to our newsletter service (newsletter and/or telephone) is only available to persons over the age of 16.
On our websites, we use so-called cookies in accordance with Article 6, paragraph 1, point f) of EU Regulation 2016/679. Our interest in optimising our website must be regarded as legitimate within the meaning of the aforementioned provision.
Cookies are small files that are stored on your terminal device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause damage to your terminal device, do not contain viruses, Trojan horses or other harmful programs. Information is collected in the cookie, which is generated each time depending on the specific terminal device used. This does not mean that we have direct knowledge of your identity through them.
- your display preferences, e.g. brightness or character size
- if you have already answered a pop-up survey that asked you whether the content was useful or not (to avoid being asked the same question again)
Please note that you can configure your browser so that cookies are not deposited locally and existing cookies are deleted immediately. If you wish to find out how to proceed with these settings in your Browser, please refer to the help options of your Browser or contact your software manufacturer directly.
This website may contain links to other websites which are under the responsibility of third parties (natural or legal persons). Under no circumstances is MIKAEL SA responsible for the terms of protection and management of personal data which these websites follow.
MIKAEL SA applies appropriate technical and organizational protection measures (including encryption, anonymization or pseudonymization procedures where necessary) in order to prevent the loss, alteration, disclosure and use or access of your data in an unlawful manner. In addition, we restrict the collection, processing and access to your data to as many employees, and other third parties as necessary to carry out their professional duties. All of our employees process your personal data solely in accordance with our instructions and are committed to observing relevant confidentiality conditions.
For any breach of your data MIKAEL SA will notify you and any competent authority of any breach when we are required by law to do so.
If you have a question or a complaint about this policy, the way we handle your personal data, please contact us:
- By e-mail to: firstname.lastname@example.org.
- By post to 71 Tsimiski str, 54624, Thessaloniki, Greece
- Responsible for processing : MIKAEL SA
Complaints to the Data Protection Authority
You have the right to complain to the Data Protection Authority if you are concerned about the way we have processed your personal data, visit the Data Protection Authority's website for more details at: www.dpa.gr
We may revise this policy by posting an updated version on our website or by contacting you by email.
This policy was revised on 23/05/2018.