Last modification: 4/12/2024

Grecmuse” is committed to protecting your personal data. Therefore, it takes the necessary and proportionate measures to protect, secure and maintain the integrity and availability of your data processed through the website www.grecmuse.com (“website/site”).

Users are encouraged to carefully read the website’s Privacy Notice. By using the website you have been informed of the processing and the terms of this Privacy Notice. Your use of the Website following changes to this Notice constitutes your acknowledgement of the provisions regarding  the relevant processing.

The Notice is directly linked to and accompanies the Terms of Use of the website. Please refer to them for more information.

  1. Data Controller

The company under the name “GRECMUSE Single Member Private Company” and the distinctive title “GRECMUSE”  located at Aetideon 14, Street, Cholargos, Athens, Greece with TIN number 802486109  (hereinafter referred to as “Grecmuse”, or the “Company” or “Data Controller”) is the owner and administrator of the website www.grecmuse.com and is responsible for the processing of personal data processed through the website and for the services it offers.

You can contact “Grecmuse” for any request regarding your data by sending an email to info@grecmuse.com.

 

  1. Data we collect from you

 

To create an account/Log in

 

Identification data

Email

Password

 

 

 

 

 

For the transaction with the website

Billing Information 

Name

Last name

Address (Street, City, Town, County, Postal Code, Country)

Telephone number

Email address

Any Notes

 

Different Shipping Address 

Name

Last name

Address (Street, City, Town, County, Postal Code, Country)

Any Notes

 

 

To process the payment

 

 

 

On delivery

Name of Payer

Payment Date

Transaction amount

Billing Information

 

By electronic payment

Payment Date

Transaction amount

Means of payment

Billing Information

 

 

To contact the website

Communication data

Name

Email address

 

Additional information

Message

 

Other data 

Product preferences

Order History

Sort Products to “Favorites”

           

  1. Data collected by automated means

When you use our Website, your device automatically provides us with data so that we can serve you and tailor our response to you. The type of information we collect by automated means generally includes technical information about your device, such as your IP address or other device identifier, the type of device you are using, and the version of the operating system.

The data we collect may also include usage information and statistics about your interaction with the site.

We encourage you to carefully read the Cookies Policy to learn more about Cookies, how they are used and how you can control their use.

 

  1. Purpose and lawful basis for the processing of personal data

The processing of users’ personal data is subject to the terms of this document, the relevant provisions of the General Data Protection Regulation (EU/2016/679) and the Greek laws 4624/2019 & 3471/2006.

 

We use the data we collect through our website for the following purposes and on the following legal bases:

 

  • Purpose: To create an Order and provide our services including delivery

Legal basis: execution of contract

 

  • Purpose: To communicate with users at their request (message)

Legal basis: The company has a legitimate interest in responding to your message.

 

  • Purpose: Provision of Coupons

Legal basis: execution of a contract with the sender/ Legitimate interests of the company to send the gift card for the recipient

 

  • Purpose: To comply with tax legislation

Legal basis: legal obligation of the company

 

  1. Data retention

User data collected for the purpose of carrying out a transaction and processing the payment (for product purchases) are kept for up to 15 years after the order to comply with our tax obligations.

Data relating to your account creation and preferences are deleted when you choose to delete your account.

The user’s contact data is kept for 1 year after the user’s communication with our Website.

For the duration of the retention of information collected through cookies, please refer to the Cookies Policy .

 

  1. Recipients of the data

 Your data may need to be made available to Grecmuse staff and website maintenance technicians (2NET), who are external contractors. All parties are bound by confidentiality and due diligence obligations.

We forward your personal data to all our partners/suppliers in order to process your order. Each of the above companies act as independent data controllers.

Finally, your personal data are processed by the following companies that act as data processors:

  • By 2NET, the company that hosts our emails
  • By 2NET, which hosts our website in Greece.
  • By Alpha Bank (Nexi), which acts as a payment processor.
  • By Courier Companies (such as Speedex for Greece etc.) that deliver our orders to you.

We may also process and transfer personal user data to comply with our legal obligations or orders from the relevant police, public and judicial authorities.

 

  1. Technical measures of the website

We work with the website hosting service provider to ensure that your personal data is protected by keeping our website and email data within the European Economic Area. The data is protected by European legislation.

Our website uses an encryption system (TSL) to ensure greater security during your browsing.

We may store encrypted backups of our database with a third-party storage provider to ensure its security in the event of an emergency or disaster.

 

  1. Contact the website

Contact with our website is available through the contact form or by sending an email to info@grecmuse.com .

Only our authorised personnel, who are bound by confidentiality clauses or a regulatory obligation of confidentiality, have access to the messages we receive on our website.

We do not forward messages we receive to third parties without the express consent of the sender.

Exceptions to the above are cases where forwarding to third parties or not deleting the emails we receive is necessary to comply with our legal obligations or to establish, exercise or support legal claims.

 

  1. Social Media & Platforms

Grecmuse” may use social media to promote its services. This notice does not apply when you use social media to contact our website or if you access social media via the button on our website. Instead, the processing of your personal data is subject to the privacy notice of those websites. We advise you to read their privacy notice carefully before using them.

 

  1. Your rights

You have the following rights regarding your personal data

Right to information

You have the right to be informed about the collection and use of your personal data.

Right of access

You have the right to obtain confirmation from us as to whether or not your personal data is being processed and, if so, you have the right to get informed about the personal data being processed in a short, intelligible, transparent and easily accessible form.

Right to rectification

You can request and we will ensure that we correct inaccurate or incomplete personal data without undue delay, including through a supplementary declaration.

Right to erasure

You have the right to ask us to delete your personal data without undue delay and we will proceed with the deletion under the conditions set by law.

Right to restrict processing

You have the right to ask us to restrict processing activities only to specific purposes, under the conditions set out by law.

Right to object

You have the right to object, at any time and on grounds relating to your particular situation, to the processing of your personal data. We will no longer process personal data unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or maintenance of legal claims.

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, as well as the right to request the transfer of such data to another controller without objection from us under the conditions set out by law.

Right to human intervention

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way.

 

If you have any questions about this notice or wish to request clarification or if you wish to exercise any of your rights or withdraw your consent to any communication, please contact info@grecmuse.com  .

We will respond to your request within thirty (30) days of receipt. If an extension of the above deadline is required to investigate and/or process your request, we will inform you, explaining the reasons why an extension is necessary.

In any case, if you believe that the protection of your personal data has been violated in any way, you have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr). For the jurisdiction of the Authority and how to lodge a complaint, you can visit its website, where detailed information is available.

 

  1. Amendment of this Notice

We may make changes to this Notice from time to time. We may make these changes for a variety of reasons, for example to reflect changes or requirements arising from legislation, new features or changes in corporate practices. The latest version will be published in the relevant section of the website. You should check back frequently to find the latest version. The latest version is the current version. If changes affect your rights or obligations, we will notify you in advance by reasonable means, which may include notice through the website or by email. If you continue to use the Services after the changes take effect, you will be notified by the revised notice.