Introduction

We would like to assure you that the protection of our customers’ personal data is of paramount importance for the company MELISSA KIKIZAS Industrial and Commercial Food SA with VAT 094383682 seated at 1 Vionos street, PC 10443, email: dataprotection@kikizas.gr, tel: (+30) 2105190100, website: www.melissa.gr (hereinafter “Company”). Therefore, we take the appropriate measures in order to protect the personal data of our customers, which we process and to ensure that personal data processing is always carried out in accordance with the obligations set by the applicable legal framework, both by the company itself, as well as by third parties cooperating with us.

We would also like to assure you that in the Company, we do not collect data related to minors under 18 years of age.

Data Controller – Data Protection Officer (DPO)

The Company hereby informs you that, for the purposes of conducting its business activities, it processes personal data of its customers in accordance with applicable national legislation and the European Regulation 2016/679 for the protection of individuals against the processing of personal data and for the free movement of such data (General Data Protection Regulation, hereinafter referred to as “the Regulation”) as in force.

For any matter regarding the processing of personal data, you may contact the Data Protection Officer (DPO) at the personal data department, in writing, at the email: dataprotection@kikizas.gr.

Which are the legitimate grounds for processing your personal data?

The personal data that you provide with your explicit consent to the Company, can be processed by us only in case that legitimate grounds exist.

Legitimate grounds for processing your personal data are:

• compliance with various obligations imposed by law, such as regulatory compliance for tax purposes, e-commerce legislation.
• the consent you provide to the Company, under the specific conditions set by the current legal framework, to subscribe to the newsletters, to receive updates on products, offers and / or promotions, to participate in a customer satisfaction survey, to receive personalized updates, etc.

Where do we transfer the data

The Company, in order to fulfill the aforementioned grounds of processing your personal data, may disclose or transfer personal data that you have given us to subsidiaries or affiliates of the Company, or to third-party service providers who, in cooperation with the Company, provide assistance in the smooth operation of this website, as indicatively and not restrictively, the providers of technology services for the protection and security of our electronic systems, the advertising companies, the companies that conduct customer satisfaction research.

In all cases above, the Company remains the person responsible for the processing of your personal data and defines the individual elements of the processing; whereas, the Company concludes a special contract with the third parties to whom it assigns execution of processing activities, in order to ensure that the processing is carried out in accordance with the applicable legal framework and that every natural person can exercise the rights provided to him/her by the current legal framework in a free and unhindered manner.

Storage of your personal data

The Company undertakes the obligation to keep the file of personal data that you have stated to us at the time of your registration on our website absolutely confidential.

The data storage period is decided based on the following specific criteria depending on the case:

• For various promotional / advertising activities (marketing activities), your personal data is kept until you revoke your consent. You can exercise this right at any time. Revoking your consent does not affect the legality of the processing based on your consent during the period prior to its revocation.
• In addition, we will keep the data of the account that you created on our website stored for as long as you maintain such account and provided that you have not requested that it is deleted. We may retain some of your data as required, even after deletion of your account, if this is required to comply with legal or regulatory requirements, for dispute resolution purposes, for the prevention of fraud and abuse or for the imposition of terms and conditions for access to this website.

If you wish to revoke your consent, please contact the Company’s Data Protection Officer (DPO) at the following contact data:
email:  dataprotection@kikizas.gr.

Which are your rights in relation to your personal data

Every natural person whose data is processed by the Company is entitled to the following rights:

Right of access:

You have the right to immediately access the information related to your personal data and to verify the time and manner that they are initially stored, as well as to be informed about the methods used to process and protect them.

Right of rectification:

You have the right to review, correct, update or modify your personal data.

Right to erase:

You have the right to submit a written request for the erasure of your personal data from the Company’s file at any time, provided that we have processed them following your prior consent. In all other cases (such as when there is a contract in place, the obligation to process personal data is imposed by law, public interest grounds), this right is subject to certain restrictions or you are so entitled, as the case may be.

Right to restriction of processing:

You have the right to request the restriction of your personal data processing: (a) when you contest the accuracy of your personal data and until such accuracy is verified, (b) when you do not wish that your personal data are erased and you ask for the restriction of their use, instead of the erasure, (c) when your personal data is not used for processing purposes, but is necessary to establish, exercise and support legal claims, and (d) when you object to the processing; until it is verified that there are legitimate grounds related to us which prevail over the reasons for you opposing the processing.

Right to object to processing:

You have the right to object at any time to the processing of your personal data in cases where, as described above, it is necessary for the purposes of the legitimate grounds we pursue as controllers, as well as to the processing for the purposes of direct marketing and consumer profiling.

Right to data portability:

You have the right to receive, free of charge, a copy of the “Customer File” containing your personal data in electronic or printed form, which will allow you to access, verify and edit the data, using commonly used processing methods. You also have the right to request, if technically possible, that we transfer your data directly to another data controller. This right can be exercised for the data that you have provided to us and their processing is carried out by automated means, with your prior consent or in execution of a relevant contract concluded.

Right to revoke consent:

Finally, the Company informs you that in cases where the processing of your personal data takes place after your prior consent, you are entitled to revoke it freely, without prejudice to the legality of the processing based on your consent for the time-period before such revocation.

To exercise any of your above rights you may contact the Data Protection Officer (DPO) in writing at the following contact details: email: dataprotection@kikizas.gr.

Right to lodge a complaint with the Data Protection Authority

You are entitled to lodge a complaint with the Data Protection Authority (www.dpa.gr): Telephone Center: (+30) 210 6475600, Fax: (+30) 210 6475628, E-mail: contact@dpa.gr

Personal Data Security

The Company has taken steps and implements appropriate technical and organizational measures aiming at the safe processing of your personal data and the prevention of accidental loss or destruction and unauthorized and/or unfair access to them, use, modification or disclosure thereof. In any case, the way the internet works and the fact that it is free to anyone, does not allow for any warranties that unauthorized third parties will never be able to violate the applicable technical and organizational measures by gaining access and possibly using personal data for unauthorized and / or unfair purposes.