What are the legitimate grounds for processing your personal data

Lawful grounds for processing your personal data include:

(a) the provision of the services that you have commissioned us and wish to receive from us, such as the purchase of products and thus the fulfillment of our contractual obligations in this regard

(b) the safeguarding and protection of our legitimate interests, both yours and ours.

(c) the compliance with an obligation imposed by law, such as regulatory compliance for tax purposes

(d) the consent you give under the specific conditions set by the legal framework in order to receive notifications of products, services, offers, etc. which process personal data in accordance with the applicable framework

How and why we use your personal data Account creation and as a Guest

Personal data is collected when you create an account on www.ebloom.gr. When creating an account you may be asked for more data, however the minimum for the conclusion and execution of the contract will be marked as a mandatory field.

In addition, by creating an account on www.ebloom.gr you can edit the data to add or remove information. This data will be used to make the process of completing an order easier each time you visit our online store and choose to be logged in.

The above data are necessary for the dispatch (address - telephone-number-Postal/Zip Code etc.) for the delivery of your order from our partner stores and the issue of the document you choose (Receipt or Invoice).

Order Execution - Delivery

Personal data is also collected when you place an order on www.ebloom.gr. For the completion of your order and the creation of an account you may be asked for more data, however, it will be the minimum for the conclusion and execution of the contract. This data is marked as a mandatory field.

In the context of completing the order some of this data is transferred to the partner shops/suppliers. Therefore, they are transferred to third party companies for the transport and delivery of your products. These companies may contact you to ask for clarifications and to inform you about the delivery of your order. In addition, the data is transferred during the payment process to payment providers.

The Company uses enhanced security systems to prevent data leakage from malicious systems.

Storage Time Interval

The time interval for data storage is decided on the basis of the following specific criteria depending on the case:

When processing is imposed as an obligation by provisions of the applicable legal framework, your personal data will be stored for as long as the relevant provisions require.

When the processing is carried out on the basis of a contract, your personal data will be stored for as long as necessary for the performance of the contract and for the establishment, exercise, and/or support of legal claims based on the contract.

For the purposes of product and service promotion, your personal data is kept until your consent is withdrawn. This can be carried out by you at any time. Withdrawal of consent does not affect the lawfulness of the processing based on consent in the period prior to its withdrawal.

What are your rights regarding your personal data?

Right of access: you have the right to be aware of and verify the lawfulness of the processing. Therefore, you have the right to have access to the data and to obtain additional information about the processing.

Right to rectification: you have the right to consult, correct, modify your personal data.

Right to erasure: You have the right to request the erasure of your personal data when we process it on the basis of your consent or in order to protect our legitimate interests. In all other cases (such as, but not limited to, where there is a contract, an obligation to process personal data imposed by law, public interest), this right is subject to specific limitations or does not exist depending on the case.

Right to restriction of processing: You have the right to request restriction of the processing of your personal data in the following cases: (a) when the accuracy of the personal data is contested and until it is verified; (b) when you object to the deletion of personal data and request instead of deletion the restriction of its use; (c) when the personal data is not necessary for the purposes of processing, but is nevertheless necessary for the establishment, exercise, support of legal claims; and (d) when you object to processing and until it is verified that there are legitimate grounds concerning us which override the grounds for which you object to processing.

Right to object to processing: you have the right to object at any time to the processing of your personal data in the cases where, as described above, it is necessary for legitimate interests pursued by us as data processors, as well as to processing for direct marketing and consumer profiling purposes.

Right to portability: You have the right to receive your personal data free of charge in a format that allows you to access, use and process it by commonly used processing methods. You also have the right to ask us, provided it is technically feasible, to transfer the data directly to another processor. This right exists for data that you have provided to us and is processed by automated means on the basis of your consent or in performance of a relevant contract.

Right to withdraw consent: Finally, the EBLOOM Company informs you that where the processing is based on your consent, you have the right to freely withdraw it, without affecting the lawfulness of the processing based on your consent, before you withdraw it. To withdraw your consent, you can use the unsubscribe options by following the contact form and always using the same e-mail address that you have used to create an account or by contacting the e-mail address info@ebloom.gr

The present Privacy Policy covers all personal data of visitors/users/members collected by the website during their visit and use of its services. Moreover, this contract covers the conditions of collection, processing and management of the personal data of visitors/users/members by www.ebloom.gr to any companies affiliated with it. This contract does not in any way cover the relationship between visitors/users/members of www.ebloom.gr and any services that are not under the control and/or ownership of www.ebloom.gr.

Given the nature and volume of the Internet, under any circumstances, including the case of negligence, www.ebloom.gr is not responsible for any form of damage suffered by the visitor / user of the pages, services, options and contents of www.ebloom.gr which they undertake on their own initiative and with knowledge of the terms of the present policy.

In any case, the entirety of your data is protected and processed in accordance with the terms and rules of Greek law and in particular Law 2472/1997 and the General Data Protection Regulation (Regulation 2016/679)], and our company strictly follows all the rules established by the relevant legislative framework. Within the framework of the above legislation, the data kept by our company may be disclosed to third parties, competent authorities, prosecutors or other administrative services in accordance with the rules and provisions provided for by the respective regulatory framework.

Finally, for the completion of the ordering process, you provide your unconditional consent to the sending of automated or personalized e-mails to the e-mail address and / or mobile phone that you have notified us and any telephone communication to the telephone numbers you have notified us by our company's employees.

Use of customer data for advertising purposes: in order to continuously improve and enhance our services, we may send you marketing messages via email related to our business. We may choose the types of communications you wish to receive at any time by updating your email preferences. You can also unsubscribe at any time. The sending of sms to the mobile phone number you provided us with when you placed your order is done in order to inform you of the progress of your order. You can, through the account you have created on our website, choose whether or not you wish to receive advertising/promotional material via sms and/or email. - Consent: we will not use your data for advertising purposes unless you have given your prior express and free consent. – However, for existing customers, we may use the email address we have received from you as part of our existing customer relationship to provide you with marketing materials related to similar products or services that you have previously requested, used or may be interested in. You may, however, object to this use at the time of collection and each time an email is sent. In order to stop receiving emails for marketing purposes, follow the instructions within the email you receive.

Information about the collection of personal data and the contact details of the processing controller.

Below we will inform you about how and for what purposes we process your personal data on this website.

The person responsible for the processing of personal data is the company "EBLOOM GREECE P.C." with the distinctive title "EBLOOM", located in Ilioupolis, Attiki, at 33 Saronikos Street Email: info@ebloom.gr. Telephone: +30 2109703733.

This website uses the SSL (Secure Sockets Layer) protocol which uses methods of encryption of data exchanged between two devices (most commonly Computers), establishing a secure connection between them, via the Internet, which results in the protection of your personal data, as well as other sensitive data (e.g. orders or inquiries of the processing controller). You can identify that you are on a protected connection by seeing the characters https:// and by the lock symbol that appears in the address bar of your browser.

Data collection when you visit the website.

When you visit the website only for information, i.e. you do not open a personal account for any orders or provide any of your personal data (e.g. contact form), then the only data we collect is the data that your browser transfers to our server, known as server log files, and specifically:

• The date and time at the moment of entering the website.

• The volume of data sent in bytes.

• The browser you used when entering the website.

• The operating system you used when entering the website.

• The Internet Protocol address (IP address) you used when entering the website.

The data processing is carried out in accordance with Article 6 par. 1(f) of the General Data Protection Regulation (GDPR) based on our legitimate interest for the improvement of the stability and functionality of our website. The data will not be transferred or used in any other way. However, we reserve the right to inspect the server log files if specific indications of illegal use are found.