Privacy Policy
This website is in compliance with national and European legislation for the protection of personal data, and in particular with the EU General Data Protection Regulation 2018 (GDPR), which has been applicable in the countries of the European Union since May 25, 2018.
Collection and Processing of Personal Data.
When we refer to personal data, we mean any information concerning a specific natural person or a person whose identity can be ascertained, such as his name, address, e-mail, identification number. We collect the personal data that you voluntarily give us by completing the respective Order Form in order to use it to provide services to you. Specifically, we collect the following information: a) name b) telephone c) contact address d) email.
The personal data you declare to us are kept generally for reasons related to transactions with you, communication, improving the services provided, compliance with our obligations to you and to the authorities and for these purposes, by declaring them to us, you give your consent to their storage and processing. We collect and process your personal data only when absolutely necessary. We will never sell them, rent them, distribute them, or make them public in any way.
If you are under 16, you must have your parents’ consent to give us your data.
When we refer to processing of your personal data we mean any act or series of acts carried out with or without the use of automated means on personal data or sets of personal data, i.e. processing is the collection, registration, organization, structuring, storage, adaptation or alteration, retrieval, retrieval of information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction.
Purpose of personal data processing.
Our website www.oscreations.art collects information from the visitor himself, from actions and information provided by third parties about the visitor, from networks and connections, device information and their characteristics, connection information, mobile IP address information phone, without any of this information personally identifying the user.
The above information is used in order on the one hand to fulfill the contract for the electronic distance sale of goods, to comply with the law and on the other hand for our website to evaluate and improve its services, to develop new functions and to carry out checks to deal with any problems and to improves its interaction and measurement systems. It also uses the information available to it in order to promote security, whether within the context of the services provided or outside, for example by investigating suspicious activities or violations of the terms or policies of this website.
The Legal Basis for the Use of Information.
Legal Basis for our use of the information we collect about you is one of the following:
The performance of a contract to which you are a party. To communicate either at a pre-contractual stage or regarding issues concerning your transactional relationship with us, to notify you of the execution of the order, to communicate regarding the shipment of the product, to inform you of changes to our terms of use or the Statement Privacy and the other policies we adopt. To fulfill our obligations arising from the Sales Agreement, to participate in a competition or raffle as part of our promotions if you accept the conditions of participation.
Legitimate business interest that is not overridden by your interests in information protection. To run and protect our business and website (including troubleshooting, data analysis, testing, system maintenance, support , reporting and data retention), to prevent and deal with fraud and other illegal activities to protect the public and staff safety, including video surveillance system, to better understand your shopping habits so that we can develop and to improve our products and services and to tailor the website content to your needs and preferences, to collect and recover money owed to us, to use data analysis tools in order to improve the website, products/services , our relationships with customers. When we rely on the legitimate interests of the business, let as a legitimate processing basis for the collection and retention of your personal data (including cases of automated decision-making and profiling) we must assess whether the interests, fundamental rights or your freedoms that require the protection of your personal data. We have taken these issues into account and where we consider that there is a risk that any of your interests, fundamental rights or freedoms will be affected, we will not process your personal data, unless we rely on another lawful basis for processing.
The observance of a legal obligation to which we are committed. As part of its activities, our company is obliged to process your personal data in order to comply with its obligations arising from the law, such as for example the observance of the financial data of transactions for tax purposes, in use of your email to send it the confirmation of execution of your order, etc.
If none of the above applies, your consent (which we will ask for before we process the information).
The website www.oscreations.art uses Google Analytics (GA) to collect the above information, in order to enable the monitoring of the user’s interaction with the website. Although GA records data such as your geographic location, device, web browser and operating system, none of this information personally identifies you. GAs also record your computer’s IP address, which could be used to identify you personally, but Google does not give us access to this.
GA uses cookies, details of which can be found in Google’s developer guides. Cookies are small text files that are stored on the hard drive of each visitor/user and do not take notice of any document or file from their computer. They are used to facilitate the access of the visitor/user regarding the use of specific services and/or pages of the website, for statistical reasons and in order to determine the areas which are useful or popular. These data may also include the type of browser used by the visitor/user, the type of computer, its operating system, internet service providers and other such information. Disabling cookies in the internet browser will prevent GA from tracking any part of your visit to pages of this website.
If you choose to contact us by filling out the corresponding contact form on this website or a corresponding email link, none of the data you enter will be stored on the website or transferred for processing to any third-party data processor. Instead, the data will be sorted into an email message and sent to us.
In order to provide you with our services, we may share your personal data with certain third-party companies, who act on our behalf (as processors) by providing services to us in order to provide you with the best possible service. We ensure the processing of your personal data by the partners-third companies with contractual clauses limiting the purpose of processing and compliance with the technical and organizational measures according to the Regulation for the correct and safe processing of your personal data.
Use of personal data.
We will use your personal data for the purposes as described above. We do not collect or process more or other types of personal data than is necessary to fulfill the respective purpose. We will only use personal data as set out in this privacy policy, unless you have specifically given your consent to another use of your personal data. If we intend to use your personal data that we process with your consent, for purposes other than those disclosed in that consent, we will inform you in advance and, in cases where the processing is based on your consent, we will use your personal data for a different purpose only with your permission.
Use of customer data for advertising purposes.
To continually improve and enhance our services, we may send you marketing emails related to our business that may be of interest to you. You are recipients of the above messages only if you have expressly consented to this, while you can request at any time not to receive the above messages.
Our security measures.
We take and implement all appropriate technical and organizational measures, both at the time of determining the means of processing and at the time of processing, taking into account the principles of personal data protection, such as data minimization, in such a way as to meet the requirements of the Regulation and to protect your rights. Your personal data is not made accessible to an indefinite number of natural persons.
All traffic (file transfer) between our hosting server, this website and your browser is encrypted and served via HTTPS and SSL.
Visitor Rights.
According to the EU General Data Protection Regulation (GDPR/EC/2016/679), as a visitor to this website you have the following rights: Right to transparent information, communication and arrangements for exercising your rights (Article 12, 13, 14 Regulation), i.e. your right to be informed about how your personal data is used, Right of access (Article 15 of the Regulation) to the personal data we have collected from you, Right to correction (Article 16 of the Regulation) of inaccurate personal information we have about you, Right to deletion (“right to be forgotten”) (Article 17 of the Regulation) of the Member-User account and the information we have about you, Right to restrict the processing of your personal data (Article 18 of the Regulation), Right to object (Article 21 of the Regulation) in the processing of your personal data, Right to withdraw your already given consent (Article 7 of the Regulation), i.e. to withdraw the consent you at any time for consent-based processing. The legality of the processing of your data is not affected by the withdrawal of consent up to the point in time when you requested the withdrawal, Right to make a complaint to the competent supervisory authority, Personal Data Protection Authority (1-3 Kifisias Street, Athens, P.C. 115 23, +30 210 6475600, contact@dpa.gr).
The person responsible for processing your personal data is Stavrou Olga, father’s name Christos, resident of Messongi, Corfu, Greece, VAT number 124357669, who operates this online store through her sole proprietorship. If you have any questions, comments or complaints about our handling or protection of your personal data, or if you wish to amend your personal data or exercise any of your rights as a data subject, please contact us at info@oscreations.art.
Our obligations.
How long we retain the information we collect from you depends on the type of information. Information deemed necessary for the performance of our services to you is retained for as long as required by the nature of the services and in accordance with our obligations under applicable law and our tax obligations. In any case, we make every effort to ensure that your information remains secure, having already taken all the necessary technical and organizational measures.
In any case, your personal data is limited to what is absolutely necessary to achieve these purposes, is accurate and is transmitted only to authorized persons who are committed to confidentiality and confidentiality and comply with the terms of this policy.
In case we find any violation of this policy, which includes the possibility that your personal data has been disclosed, then within 72 hours from the recognition of the incident we will notify the Personal Data Protection Authority and the natural persons to whom the personal data belong.
Given that we do not employ more than 250 employees in our business, that we perform occasional personal data processing, that we do not process a special category of personal data, nor do we process data related to criminal cases, we are not required to keep a record of personal data processing activities.
Policy review.
This website unilaterally reserves the right to update, modify or revise this policy and the terms of use of its website, without prior notification to the user, in order to improve its services and to harmonize it with the provisions of current legislation (domestic and community) regarding the protection of personal data.