This website of 2kay recognizes and respects the right to protection of personal data of internet users, in accordance with European Regulation 2016/679 and Law 4624/2019. This policy document describes the collection and processing of user data when visiting or using the services provided on our website. The visitor of our website and / or user of our services must carefully read the terms and conditions of protection of his personal information mentioned here.
Who will use your Personal Data.
The website will 2kay.gr use your personal data in its capacity as Data Controller.
- What is personal data?
According to the law, it is any information relating to an identified or identifiable natural person (“data subject”), such as name, e-mail address, VAT number, etc. Identifiable is defined as the natural person whose identity can be ascertained, directly or indirectly, in particular by reference to an identifier, such as name, ID number, location data, an identity identifier (IP address, e-mail, etc.) or one or more factors specific to his/her physical, physiological, genetic, psychological, economic, cultural or social identity. - What is personal data processing?
Processing of personal data is any operation or set of operations performed with or without the use of automated means, on personal data, such as collection, registration, organization, structuring, storage, adaptation, alteration, retrieval, search for information, use, transmission to third parties, dissemination, association, combination, restriction, deletion and destruction of personal data. - What personal data do we use?
The “company” collects and maintains exclusively the personal data that you disclose to it by entering the requested personal information in the respective fields and / or your answers in the context of specific actions it conducts and you can voluntarily participate and are the minimum necessary for the proper operation of the website and the services it provides. In the context of the obligation to safeguard and protect the information of its customers and partners, the “company” is committed to protecting and using in an appropriate way the personal data collected either online from this website or through communication / cooperation with any third party. The company collects only the personal data voluntarily provided by our online visitors, so that we can satisfy your requests, to be able to provide you with information about our products and services, by sending you information material (letters, newsletters, etc.) and to serve you in the best way. Where additional, optional information is sought, you will be informed of this at the time of collection. This personal data falls into the following categories:Identity data: includes first name, surname, title, etc. If you communicate with us through social networking, your social media username may also be included.
Contact data: includes shipping address, delivery address, email address and telephone numbers.
Transaction data: includes details about payments from you and other details about the products you have purchased from us.
Technical data: includes your internet connection email address (IP address), your browser, your location, your operating system and other information about the device you use to visit the website.
Tracking data: includes data that we or others collect through cookies and similar tracking technologies. - WHAT COOKIES ARE?
Cookies are pieces of information in the form of very small text, stored in the browser you use on your PC on your Smartphone & tablet (Chrome, Mozilla Firefox, etc.), helping the most effective operation of our site. Cookies do not in any way cause damage to users’ computers or the files stored on them. The information stored in cookies is used for identification & optimization purposes. - Necessary Cookies
They allow the execution of basic functions of the site, such as adding products to the cart, electronic payment and saving products to the wish-list. Without these absolutely necessary Cookies, the smooth operation of the e-shop is directly affected, but your personal navigation experience is also degraded since basic e-commerce functions are underperforming. - Performance cookies
Performance cookies collect information about how visitors use the website. They allow us to see which pages they visit most often or show us if they have a problem navigating. These cookies do not collect information that identifies the visitor. All information collected by these cookies is aggregated and is only used to improve how the 2kay.gr works. - Functionality cookies
These cookies “memorize” your preferences while browsing our site, so that we can recommend the appropriate products based on your needs. With these cookies you enjoy a personalized version of the 2kay.gr so you can find what you are looking for much easier. - Advertising cookies
These cookies are used to provide advertisements more relevant to you and your interests. They are also used to send targeted advertising or offers aimed at limiting mass, unwanted and meaningless advertising messages. At the same time, they help us measure the effectiveness of advertising campaigns. - Cookies Analytics
They are a subset of functionality Cookies and enable us to evaluate the effectiveness of the various functions of our site, so that we can continuously improve the experience we offer you. - Third-party vendors, including Google, may display Company ads on websites on the internet.Third-party vendors, including Google, may use cookies to update, optimize and display ads based on a user’s previous visit to 2kay.gr website, may also use cookies from a previous visit to its website for remarketing.You can set your browser to inform you each time before a cookie is downloaded and you can decide to download or reject it. In this case, keep in mind that you may not be able to take full advantage of it.
2kay.gr may use Google Analytics features for display advertising (e.g., remarketing, Google Display Network display reports, Campaign Manager integration). Using Ads Settings, visitors can opt out of Google Analytics for display ads and customize Google Display Network ads.Here are the available Google Analytics opt-out options for the web.2kay.gr complies with the Google AdWords Interest-Based Advertising Policy and restrictions for sensitive categories and:It uses remarketing with Google Analytics for online advertising. 2kay and third-party vendors, including Google, use together first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick cookie) to update, optimize and serve ads based on previous visits by some users to its website. 2kay.gr and its third-party vendors, including Google, use together first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick cookie) to run reports on how impressions of its ads 2kay.gr, other uses of advertising services, and interactions with those ad impressions and advertising services are related to visits to the 2kay.gr website. To 2kay. may use data from Google’s interest-based advertising or third-party shared data (such as age, gender and interests) with Google Analytics.We do not collect special categories of your personal data (this includes your nationality, religion or belief, sex life, sexual preferences, political opinions, trade union membership, information about your health and biometrics, and criminal record information). - Collection and purpose of processing personal data.
The receipt of personal data takes place only if you voluntarily choose to provide them, for example, in person or if you contact by email or if you register as customers of the products and services of the “company” or if you participate in various actions / competitions on social media and / or as users of this website. The use of the products and services provided by 2kay.gr website, including the provision of online ordering services for our products and services, requires ensuring that we are able to communicate with you. Therefore, it is necessary when registering on the website 2kay.gr to declare the true personal data that will be requested. By subscribing to the services provided by 2kay.gr you also consent to the storage and use of your personal data in accordance with this Statement. The purpose of collecting, using and processing your personal data is:the provision of the services and products you request through the website, for the receipt of which their use and / or processing is required, e.g. Online orders, and the consequent implementation of contractual obligations, in the context of execution, delivery and invoicing of orders under the best conditions and in the most efficient way, to provide personalized services and facilitate the ordering process, for the convenience of the user and/or to ensure that the content of the website is presented in the most efficient way for you and your computer. The legal basis for processing personal data for this purpose is your consent (Article 6 (1) (a) and Article 9 (2) (a) of the GDPR). in addition, but only with your optional consent which is the legal basis of processing in accordance with Article 6 (1) (a) of the GDPR Regulation: the promotion of products and services provided by the “Company”, in particular through the 2kay.gr and the receipt of promotional information material (direct marketing) by the “Company”. Your data may in any case be processed, even without your consent, for reasons of compliance with laws, regulations, EU law (Article 6 (1) (c) of the GDPR Regulation, to obtain statistics on the use of the Website and its proper functioning (Article 6 (1) (c) of the Regulation), and the establishment or defense of legal claims in the interest of the Company. Personal data is entered into the Company’s IT system in full compliance with data protection legislation, including security and confidentiality profiles, and is based on principles of good practice, lawfulness and transparency regarding processing. The data is stored for as long as is strictly necessary to achieve the purposes for which they were collected. In any case, the criterion used to determine this period is based on compliance with the deadlines set by law and on the principles of data minimization, storage limitation and rational management of records. All your data will be processed in printed or automated means, ensuring in any case the appropriate level of security and confidentiality.Your personal data is not used for purposes other than those described in the Statement, unless we obtain your prior permission, or unless required or permitted by law.The “company” collects “sensitive” personal data only when you voluntarily offer us this data or when this data is required or their collection is permitted by law. We advise you to refrain from providing sensitive data, unless this is required for the purpose of providing the personal data or if you hereby consent to the use of such data. The “company” may ask you to provide it with certain personal data to send information messages about products and services and / or relevant offers and announcements. It may also ask for your permission for certain uses of your personal data and you can either consent to or refuse these uses. If you wish specific services or communications, such as an electronic newsletter, you will be able to unsubscribe from the relevant mailing list at any time by following the instructions contained in each communication. If you decide to unsubscribe from a service or communication, we will try to delete your data as soon as possible, although we may need some time and/or information before we can process your request. -Persons who have access to Personal Data and Transfer of Personal Data
The Data is processed by electronic and manual means in accordance with the procedures and practices related to the aforementioned purposes and is accessible by the staff of the Controller authorized to process the Personal Data and supervisors and in particular employees belonging to the following categories: technical, IT and administrative staff; Product managers, as well as other staff members who need to process the data to perform their duties. - The “company” does not transmit personal data to third parties. In some cases, the “company” may share your personal data with various companies or service providers that cooperate with it in order to respond to your requests or to natural or legal persons entrusted with the execution of processing, provided that we inform you in advance and obtain your prior consent. The persons who have access to the data are obliged to maintain the confidentiality of this data. The Data may also be shared with countries outside the European Union (“Third Countries”): a) institutions, authorities, public bodies for institutional purposes, b) professionals, independent consultants – whether working individually or collectively – and other third parties and providers who provide the Data Controller with commercial, professional or technical services required for the operation of the Website (e.g. provision of IT and Cloud Computing services) for purposes mentioned above and to support the Company in providing the services you requested and c) to third parties in case of mergers, acquisitions, transfers of businesses or their branches, audits or other extraordinary acts. The named recipients receive only the data necessary for their respective functions and duly undertake their processing only for the purposes mentioned above and in accordance with data protection laws. The Data may also be communicated to the other lawful recipients identified from time to time by applicable laws. With the exception of the above, the Data will not be disclosed to third parties, natural or legal persons, who do not perform commercial, professional or technical duties for the Controller and will not be disseminated. The persons receiving the data will process them, as the case may be, as Data Controllers, Processors or persons authorized to process the personal data for the purposes mentioned above and in accordance with applicable data protection legislation. With regard to the transfer of data outside the EU, even to countries whose laws do not guarantee the same level of protection of personal data privacy as that provided by EU law, the Controller informs that the transfer will in any case be carried out in accordance with the methods allowed by the GDPR, such as, for example, on the basis of the user’s consent, on the basis of standard contractual clauses approved by the European Commission, selecting parties participating in international programmes for the free movement of data or implemented in countries considered safe by the European Commission.
- Your rights regarding Personal Data
If you wish, you can request at any time to be informed about your personal data kept by the “company”, their recipients, the purpose of keeping and processing them as well as their modification, correction or deletion, by sending a relevant e-mail to the address info@2kay.gr from the e-mail address you have stated. You also have the right to review the personal data we hold and generally to exercise any right provided by the legislation on the protection of personal data. The personal data you disclose to us through 2kay.gr, either during your registration or at a later stage, are collected and used and processed in accordance with the applicable provisions on the protection of personal data. and specifically, in accordance with the provisions of Law 2472/1997 and Law 3471/2006, as in force, as well as the new European General Data Protection Regulation (EU) 2016/679 as well as Directive 95/46/EC, on the protection of personal data. You maintain, upon your request, in accordance with the provisions of Articles 15 – 22 of the GDPR:Right to be informed about the personal data we hold about you.
Right to rectification of your personal data.
Right to complete your personal data, provided that such data is necessary for the purposes of processing your data.
Right to delete your personal data. Some data will only be deleted after a specified retention period, for example because in some cases we are required by law to retain the data, or because the data is required to fulfil our contractual obligations to you. Right to block your personal data: in certain cases provided for by law, we will block your data if you ask us to do so. Further processing of bound data takes place only to a very limited extent. Right to withdraw your consent, which can be done at any time. Right to object to the processing of your data. You may at any time object to the processing of your personal data in the future, if we process your data on the basis of one of the legal justifications provided for in Article 6 §§ 1e) and 1f) of Regulation (EU) 2016/679. If you object, we will stop processing your data, provided that there are no legitimate grounds for further processing. The processing of your data for advertising purposes does not constitute a legitimate ground. - Security of Personal Data
The “company” applies specific technical and organizational security procedures in order to protect personal data and information from loss, misuse, alteration or destruction. Our partners who support us in operating the website and digital infrastructure also comply with these provisions. The company has ensured the compliance of the cooperating companies with the GDPR policy and bears no responsibility for any unlawful action by them on personal data. - Links to other websites
This Privacy Policy applies only to the Website defined above. Although the Website may contain links to other websites (known as third-party websites), we inform you that the Company does not have access to or use cookie tracking systems, web beacons or other user tracking technologies that may be active on third-party websites, the content and material published on them or the methods of processing your personal data. For this reason, the Company expressly denies any responsibility for such matters. Therefore, you should verify the privacy policies of such third-party websites and collect information about the terms and conditions and how they process your personal data. - How we store data and for how long. According to Article 5 (1) (c) of the GDPR Regulation, the computers and programs used by the Company are created in such a way as to minimize the use of personal and identification data. These data are processed only to the extent necessary to achieve the purposes mentioned in this Policy and will be stored for as long as is strictly necessary to achieve the specific purposes pursued. In any case, the criterion used to determine the storage period is based on compliance with the deadlines allowed by law and the principles of data minimization, storage limitation or rational management of our records.
- Resolving complaints, complaints
According to the General Data Protection Regulation, the “company” undertakes to resolve complaints or complaints regarding the collection or use of personal data.If you consider that the protection of your personal data is affected in any way, you can appeal to the Personal Data Protection Authority. - Revisions to the Statement
The “company” reserves the right to modify or revise this Statement periodically, at its sole discretion. If changes are made, “us” will record the date of modification or revision in this Statement and the updated Statement will apply to you from that date. We encourage you to periodically review this Statement to see if there are any changes to the way we handle your personal data.
