Who we are
Suggested text: Our website address is: https://www.e-skouropoulos.gr & https://www.askouropoulos.gr .
Personal data Controller is the legal entity with the name E. Skouropoulos SA which is based in Attica Greece, 106 Agias Paraskevis Str. 15262 Chalandri, VAT number EL999213208 with General Commercial Registry (GEMI) number 005879701000, tel: +30 2106853550 e-mail address: info @ e-skouropoulos.gr .
Our priority is to legally process this data and keep you fully informed about it. Please feel free to contact us for any queries.
We inform you that our company is involved mainly in activities aimed at businesses (B2B) and not final consumers (B2C).
- Section One: General information
1) What is personal data?
2) What is Personal Data Processing?
3) Is the processing of your personal data mandatory?
4) When and how we collect your data
5) Which principles do we follow during your personal data processing?
- Section Two: Processing analysis
- Categories of personal data which we process
B. Purposes of processing – Legal basis of processing
C. Personal data date retention
D. Your rights
- Section Three: Other information
SECTION ONE: General Information
- What is personal data?
The term “personal data” means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
In other words, personal data is any information related to a natural person, whether it immediately reveals its identity or it can reveal it.
- What is personal data processing?
Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Basically, almost every action, from the moment personal data is created until it is destroyed ( or it is completely anonymized) constitutes processing.
Personal data processing is a legal action, provided it is carried out within the framework provided by the relevant legislation, meaning national law 4624/2019 and the European General Data Protection Regulation (GDPR) 679/2016 and e-privacy (3471/2006).
- Is personal data processing necessary?
Providing some of your data to our business is necessary when you are trading or contacting us. No registration is required for your browsing of our website, but personal data is processed through cookies (see Cookies Policy).
With this policy we inform you of the processing rules we follow.
If you do not provide us with the data listed below, we will probably not be able to complete the transactions you requested or respond to your contact request or any other request you submit.
- When and how do we collect your data?
We collect your data at the following moments:
Α. When you counteract with our business in relation to the provision of our services
Β. When you contact us (via e-mail or post mail)
- Which principles do we follow during your personal data processing?
When processing your data, we accept, adopt, and apply the principles of processing under article 5 GDPR, meaning that your data are:
- a) processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’);
- b) collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 89(1), not be considered to be incompatible with the initial purposes (‘purpose limitation’);
- c) adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);
- d) accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’);
- e) kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed (‘storage limitation’);
- f) processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures (‘integrity and confidentiality’).
SECTION TWO: Processing analysis
- Categories of personal data which we process
Our company collects and then processes (stores etc) the following categories of personal data:
company name, type of company, activity, address, no. telephone, email address, website, VAT, Tax Office, no. G.E.M.I., data from transactions (type, value, comments / complaints), data of your banking transactions with our company (when you pay by bank for the provision of our services, ie date, amount, method of payment, account details ).
This data is closely and exclusively related to your business and is absolutely necessary to serve the following processing purposes.
- Purposes of processing – Legal basis of processing
We collect and process the above categories of personal data for the following purposes:
1.Provision of our services, invoicing-credit, service of contractual rights and obligations
2.Customer service (information about services, customer record keeping)
- Defense of legal claims
- Compliance with legislation (tax, etc)
- Sending requests for research and evaluation of our services (without other content eg advertising or marketing purpose)
Legal basis of processing
Please be advised that the above purposes are processed for the following reasons:
- under the legal basis of article 6, paragraph 1, subsection b of GDPR 679/2016/EE (processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract)
- under the legal basis of article 6, paragraph 1, subsection c of GDPR 679/2016/EE (processing is necessary for compliance with a legal obligation to which the controller is subject)
- as appropriate under the legal basis of article 6 paragraph 1 subsection f of 679/2016 / EU (ie for the defense of the legal interests of our company)
- Personal data date retention
Processing of personal data should be limited in time, only for the time absolutely necessary for the purposes of processing.
The personal data we process according to the above, is kept for a period of time necessary to comply with the legislation (mainly tax legislation) and to safeguard our legal claims.
We keep your data in our company, as well as in information systems located in a country within the EU.
- Your rights
We process the above data in accordance with the above protection policy and of course we support and ensure that your rights are exercised in a similar manner.
Our response to your requests (whether it is for the exercise of rights or the submission of complaints) takes place free of charge and without delay, and in any case within (1) one month after we receive your request and confirm your identity. However, if your request is complex or a large number of requests are submitted to our business at the same time, we will let you know within this month if we need to receive another (2) two-month extension within which to respond. Reported times of one (1) plus two (2) months (if required) are legal and provided for in the GDPR.
If your requests are manifestly unfounded or excessive, our business may charge a reasonable fee, taking into account administrative costs for providing the information or performing the requested action or refuse to respond to your repeated request.
Specifically you have the following rights:
- Right to information about all the above issues and any other issue relating to the processing of your data.
- Right of access, that is, the right to receive a copy of the data you have given us.
- Right of updating / rectification if any data is or becomes incorrect so as to correct it. The update will take place within 7 business days of the date of submission of your written request and confirmation of your identity.
- Right to erasure (‘right to be forgotten’). This right may be subject to limitations due to the need to retain certain data due to legal obligations.
- Right to restriction of processing when:
- a) the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;
- b) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
- c) we no longer need the personal data for the purposes of the processing, but it is required by you for the establishment, exercise or defence of legal claims and in similar cases
- Right to data portability, meaning the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.
- Right to lodge a complaint to the Hellenic Data Protection Authority (dpa.gr) in case you believe we are breaching the relevant data protection laws.
SECTION THREE: Other information
- Our business uses modern and up-to-date protection systems (antivirus systems, firewalls, etc.) to prevent the illegal invasion, access or dissemination of your personal data.
- We inform you that we do not proceed to automated individual decision making or profiling.
- Contact – Requests – Complaints
If you have any questions, comments or complaints about the management or the protection of your personal information, or if you wish to exercise any of your rights, please contact us at info @ e-skouropoulos.gr .
To file a complaint about a breach of your personal data you can contact the Hellenic Data Protection Authority (1-3 Kifisias Str., Zip Code 115 23, Athens, Call Centre: 210 6475600, Fax number: 210 6475628, e-mail address for reporting a personal data breach incident : email@example.com, general e-mail address: firstname.lastname@example.org)
Company E. Skouropoulos SA with the Cookies Policy informs you about the processing of personal data made through cookies every time you visit the website e-skouropoulos.gr & askouropoulos.gr .
What are Cookies;
Cookies are files that contain small amounts of data, which are used as anonymous unique identifiers. Cookies are sent to your browser from the websites you visit and are installed in the internal memory of your device.
Each web browser uses separate categories of cookies, which contain anonymous information in relation to the websites you visit and the devices you use at that time.
Cookies are used to facilitate your browsing of websites, to store your preferences and to improve the services provided to you.
Accepting or declining Cookies?
You can accept (consent) to the installation of cookies separately for each category, through the table that appears at the beginning of your visit to our website.
We also remind you that your browser (web browser) may accept cookies automatically or not, depending on the settings you maintain in it. If you do not want
to install cookies, you can change the relevant settings. Usually through the field SETTINGS or OPTIONS in your browser and then through the privacy and security settings, you can prevent the installation of cookies on your terminal device from the beginning. In this case, you may not be able to use all the features of our site.
With the exception of the absolutely necessary cookies (as analyzed below), all other categories of cookies are installed on your terminal device with your consent.
On our website we use the following categories of cookies:
1) necessary cookies (eg for the identification and / or retention of content entered by the subscriber or user during a connection (session) to a website throughout the specific connection, such as the “shopping cart”, for the subscriber’s or user’s connection in services that require authentication, for the user’s security, for the realization of load balancing in a connection on an internet website, for the maintenance of the user’s choices regarding the presentation of the website, eg language selection, search history)
2) performance cookies to receive information about traffic and how users browse
3) analytics cookies
4) advertising cookies for the installation of cookies regarding performance, analysis, advertising or any other category other than the necessary ones and before it happens, we ask for your consent through explicit and active selection.
How to delete Cookies
You can delete cookies through the relevant table that appears on your screen. Alternatively you can delete all cookies through your browser (clear data option or
similar depending on the browser).
Cookies Policy updates
Our company will amend the Cookies Policy periodically in order to meet its legal obligations and the actual operation of cookies. We advise you to visit it from time to time, in order to stay informed about the relevant issues.