What is personal data

Personal data is data that can be used to identify a natural person and its protection is important to us. We aim to be as honest and transparent as possible about the personal data we collect and how we process it under the EU General Data Protection Regulation (known as "GDPR") and Law 4624/2019.

How personal data is collected or obtained

Our online store www.milianjo.com collects or receives data from you through our websites, as well as through forms, applications and devices, product sites on social media or otherwise. This personal data is either provided directly by users or we collect it (e.g. by using cookies to understand how our websites/apps are used) or from third parties.

The legal basis for processing the data of users of the online store www.milianjo.com is:

- The explicit consent and assent of the users to the processing of personal data (e.g. when you choose to receive newsletters).

- Legal grounds: where processing is required by law or is necessary for compliance by the controller with a legal obligation

- Legitimate interest: in specific cases, we collect User Data in order to achieve the legitimate interests of our business, provided that the interests, fundamental rights and freedoms of the data subjects do not override these interests.

Purpose of Processing of Personal Data.

The online store www.milianjo.com processes your personal data in order to:

- communication with users

- informing users about the activities of the e-shop (e.g. via newsletter)

- the drawing up and implementation of contracts with users

- the exercise of its legal rights and compliance with its legal obligations

- upgrading the products and services of the e-shop as well as the optimization of its website.

The rights and choices of the Subjects

Our online store www.milianjo.com respects the right of its users to the protection of your privacy. The rights of the subjects are as follows:

Right to information

Users have the right to receive clear, transparent and understandable information about how we use personal data and how to exercise their rights.

Right of access

Users have the right to access the personal data that the online store holds about them (subject to certain restrictions).

Right to rectification

Users have the right to request the correction of their personal data if they are incorrect or no longer up to date and/or to complete them if they are incomplete.

Right to erasure/right to be forgotten

Users have the right to request the deletion of their personal data, under the conditions of Article 17 of the GDPR. It should be noted that this is not an absolute right, as the online store may have legal or legitimate reasons to retain personal data in accordance with Article 17 of the GDPR.

Right to withdraw consent for data processing carried out on the basis of consent at any time

Users may withdraw their consent to the processing of data by the online store where such processing is based on consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent prior to its withdrawal.

Right to lodge a complaint with a supervisory authority

Users reserve the right to contact the Personal Data Protection Authority (PDA) and to lodge a complaint about the data protection and privacy practices of the online store.

Right to data portability

Users have the right to move, copy or transfer data from our database to another database. This applies only in the case of data processing based on a contract or your consent or where such processing is carried out by automated means. This right is exercised without prejudice to Article 17 of the Regulation and may not adversely affect the rights and freedoms of the online shop or third parties.

Right to object to direct marketing, including profiling

Users may at any time unsubscribe from the website or social media or opt out of receiving direct marketing communications or profiling.

Right to restrict processing

Customers reserve the right to request that we restrict the processing of their data. This right means that the processing of users' data is subject to restrictions and therefore it is now possible to store but not to use or further process them.
This applies in limited cases listed in the General Data Protection Regulation, namely:

• the accuracy of the personal data is contested by the data subject for a period of time that allows the data controller to verify the accuracy of the personal data,
• the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of their use,
• the data controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims,
• the data subject has objected to the processing on the basis of the legitimate interests of the data controller pending verification whether the legitimate grounds put forward by the data controller override those of the data subject.

The aforementioned rights of the data subject are subject to the restrictions provided for in Article 23 of the GDPR. In order to handle such requests, our online store www.milianjo.com is obliged to request confirmation of the data subject's data and identity before proceeding to satisfy them.

Retention period of personal data

Our online store www.milianjo.com retains the personal data of users for as long as it needs them and for the purpose for which it retains them (e.g. for as long as you maintain an account in our online store, for as long as etc.) in the context of providing services or for compliance with our legal obligations.

Our online store www.milianjo.com may retain some personal data of users in order to comply with legal or regulatory obligations (e.g. tax and commercial legislation) and to be able to administer its rights or for statistical or historical purposes.

Processing Manager

The person responsible for the processing of the personal data of users through automated or non-automated means either by himself or through any other person appointed by the above for the performance of processing on his behalf is Michalelis Ioannis.

Changes to the Privacy Policy

This Policy may be amended at any time. For this reason, we recommend that you refer to it regularly. If it is amended, the date on which it was amended will be indicated. The Privacy Policy, as formulated in accordance with the most recent amendment, shall always be deemed to apply.

Contact details

For any questions or concerns about the way our online store www.milianjo.com handles and uses personal data or if you wish to exercise any of the above rights, please contact the office by sending a message to info@milianjo.com or by sending a letter to :

www.milianjo.com

Akadimias 32, Athens, 10672