Processing Policy &
Personal Data Protection

While browsing HOLY ICONS, in order to ensure the possibility of communicating with you in order to inform you about our new services, you may be asked to provide information that concerns you (name, email address, etc.). Any personal data that you provide anywhere on the HOLY ICONS website is intended solely and exclusively for ensuring the operation of the respective service and may not be used by any third party, without complying with the provisions of Law 2472/97 on the protection of personal data, as it is in force at any time. HOLY ICONS operates in accordance with applicable Greek and EU legislation and securely stores your personal data for as long as you are registered with a HOLY ICONS service, which are deleted after the termination of the transactional relationship in any way. The personal data that you provide to HOLY ICONS are used exclusively by it or its affiliated companies, for the purpose of supporting, promoting and executing the transactional relationship. The data kept in the file may be communicated to the competent judicial, police and other administrative authorities upon their lawful request and in accordance with the applicable legal provisions. The customer has, within the framework of the legislation on telecommunications privacy, the rights of information and objection provided for in articles 11 to 13 of law 2472/1997. The information we request from you: Each visitor can browse HOLY ICONS without providing any personal information. We will only need personal information when you become a member and create an account. At this stage, you will only be asked for your email address, which you can use if you agree to receive our newsletters. Optionally, we ask for information such as a mobile phone number (in case we need to contact you directly). By completing and sending the relevant form with your information, you simultaneously provide us with your written consent to use the information included therein for the purposes described in these terms within the framework of this personal data policy.

This Privacy Statement describes the personal data that the company collects about you, how we use and protect your personal data, the choices you have regarding how we use this data. We recognize that the protection of personal data is an ongoing responsibility and therefore, we will update and modify this Statement from time to time.

The personal data we collect about you is:

Name and surname. We collect names (first name, last name) for the needs of communicating with you.

Postal address. We collect your business address for communication purposes - to travel to your location if requested.

Email address. We collect our customers' email addresses for communication and promotional purposes.

Other contact information. We collect other contact information, such as the telephone number of our customers or our customers' contact persons, to provide our services better and faster.

We do not sell your personal data to anyone and only share it with third parties who facilitate the provision of our services to you.

We use your personal data for profiling purposes to personalize services and products.

The processing of your personal data for the sale of our services is necessary for the overall management of your order by the company and its partners. This management also includes the detection of online fraud and fraud related to modern payment methods, the prevention and management of payment (non-payment) incidents and the preservation of the company's rights regarding its commercial activity. In some cases, the processing of your personal data is necessary for the purposes of our legitimate interests or for the purposes of our compliance with national and/or European legislation.

For the purpose of executing the order of our products, we will retain your personal data for a reasonable period of time from the completion of the order and for the most complete satisfaction of your requests in relation to the respective order.

When you provide us with your personal data, we take steps to ensure that it is kept secure. In order to protect your personal data, we take physical, technical and organizational measures to protect it. We update and review the security technology we use on an ongoing basis. We limit access to your personal data to only those who need to know it in order to provide the services to you. In addition, we train employees on the importance of confidentiality and maintaining the privacy and security of your personal data. Among other things, we have implemented the following technical and organizational measures and procedures to protect your personal data from any loss, alteration, unlawful processing or modification: Encryption, Detection and management of security breach incidents, Use of servers located in rooms with limited access and subject to regular audits, Use of information systems and computer programs that have been installed in a manner that minimizes the use of personal data and/or user identification data, Adoption of individual procedures for maintaining personal data and their secure deletion/destruction, Access to systems and databases on principle.

As part of our activities, we use third-party providers who provide services on our behalf. As such, we may need to share your personal data with them. However, we only share with them your personal data that is necessary to provide the services we request from them and we require them to protect your data and not use it for other purposes. The personal data we collect from you is stored in one or more databases hosted by third-party providers located within the European Union. These third parties do not use or have access to your personal data for any purpose other than cloud storage and retrieval.

You have the right to request access to your personal data, which we process. In addition, you have the following rights: Right to rectify or delete (in certain cases) your personal data. Right to restrict processing or object to the processing of your personal data. Right (under certain conditions) to receive your personal data so that you can use them anywhere else. In cases where we process your personal data based on your consent, you also have the right to withdraw your consent at any time, without this affecting the lawfulness of the processing for the period before the withdrawal of your consent. Finally, you have the right to file a complaint with the competent Greek independent authority, which is the Personal Data Protection Authority (http://www.dpa.gr/).

The personal data we collect from you is not transferred or processed outside the European Union.

You can contact us for any question regarding the processing of your personal data or our use of cookies or to exercise your rights, using the electronic contact form on our website or by sending an email to info@holy-icons.gr.

This Statement was last updated on [23/05/2018]. We reserve the right to modify and update this Statement at any time, for any reason, without notice to you, other than by posting the updated Statement on our website.