This privacy policy determines the use of websites and services of the “BEST Single-membered Company” GCR 50769144000 with headquarters in Town of Skopelos (Chora) in Skopelos island, P.C. 37003, Greece with the discrete title “BEST SHOP SKOPELOS” and “SPYROU VASILEIOS SINGLE-MEMBERED COMPANY” GCR 149393444000 with headquarters in Town of Skiathos (Chora) in Skiathos island, P.C. 37002, Greece, with the discrete title “BEST SHOP SKIATHOS”.

At “BEST SHOPS”, we respect your privacy and are committed to ensuring the confidentiality and security of your personal data. We take all appropriate technical and organizational measures for their protection according to each applicable national and EU legislation, and more particularly the General Data Protection Regulation (EU) 2016/679, each national legislation as well as the Decisions, Directives and Opinions of the responsible Supervisory Authority.

Protecting the privacy of customers and traders is an essential priority for “BEST SHOPS”.

Our aim is to strictly comply with the existing legislation which ensures the high quality of our services. The collection and retention of personal data is carried out for legitimate and defined purposes and takes place in a transparent manner. Compliance with the current legal framework is given in a way that guarantees their integrity and confidentiality. The collected information is necessary to be appropriate, relevant and specific in amount and type. By accepting the Privacy Policy and the Terms and Conditions, you recognize that you have read and agree to accept this Privacy Policy. The Privacy Policy terms can be amended or updated in whole or in part, however each current version will be accessible through the website of “BEST SHOPS”.

The term Personal Data is used to characterize each information relating to identified or identifiable persons “subjects of data”. The identifiable person is that whose identity can be verified, directly or indirectly, through their identity card/passport and data that define their physical, genetic, psychological, economic, cultural or social status.

The term “Processing” is defined as an action or series of actions realized with or without the use of automated means or manually in Personal Data or in data sets. Such actions include the collection, submission, organization, structuring, storage, adaptation, alteration, recovering, searching information, use, disclosure by transmission, dissemination, all possible means of being available, the relevance or the combination, restriction, erasure or destruction of Personal Data.

The General Data Protection Regulation is applied in the whole or in part processing of Personal Data with automated means as well as in the non automated processing if it is part of a structured filing system.

Examples of processing: personnel and payroll management, accessing/searching information in contact data base that includes Personal Data, sending marketing emails, publishing/posting one’s photograph on the website, storage of IP addresses or MAC addresses, filming (closed circuit television).

The Data Controller determines the processing purposes of Personal Data and the means through which it is carried out. A Data Controller can be a physical or legal person, the public authority, the agency or another body which, alone or joined with others, determine the purposes and the way of processing Personal Data. When the purposes and the processing way are defined by the European or Member State Law, the Data Controller or the specific criteria for their appointment may be provided for by the European or Member State Law.

Mr. Vasileios Spyrou is the Data Controller for the “BEST SHOPS”.

• Personal data (Full name, Identity Card or Passport Number, Insurance Number, VAT Number, genre, date of birth, nationality)
• Contact details (telephone number, postal address, e-mail, personal accounts on social media etc)
• Payment details with credit or debit card
• Responses to our questionnaires and your general evaluation of the services we provide.
• Any kind of personal data that you provide us with to better serve you.
• Data included and collected through promotions or campaigns or competitions through social media pages, email marketing etc.

The collection, processing, use and storage of your personal data are carried out for the below purposes:

• For the observance and fulfilment of our contractual obligations.
• For the information and promotional use as long as your consent is obtained
• To comply with the applicable provisions, the legal framework which governs the shops and the Applicable Law.
• To authenticate you when connecting to our websites and our Wi-Fi (in cases you want to use it in our shops)
• To fulfil information requests and remember your preferences and registration information.
• To measure and collect data for administrative and other purposes of contact and to operate and improve the effectiveness of our services and websites.

Your rights in relation to your Personal Data that we process are the following:

• Withdrawing at any time your consent as far as the use of Personal Data for promotional or informational purposes is concerned.
• You can ask for information concerning the type of processing that your personal data undergo by the “BEST SHOPS” and you can have access to them.
• Change, correct or update your Personal Data when necessary
• Ask for the permanent erasure of all your Personal Data from our files
• Ask for restriction in processing of your Personal Data, provided that all conditions of the relevant legislation are met.
• Request a copy of all or a part of your Personal Data in a commonly used and read format by machines.

“BEST SHOPS” have taken and apply all appropriate technical and organizational data with the aim of safely processing personal data and preventing any accidental lose or destruction. Also, they ensure the prevention of unauthorized or/and illegal access to them, use, alteration or disclosure. They are responsible for maintaining the legal collection, processing and safe storage of Personal Data according to the provisions of the National, European and International Law regarding the protection of the individual. It has to be mentioned that the way of internet operation and the fact that it is accessible by anyone does not allow guarantees to be given that unauthorized persons will never have the ability to breach the technical measures and hava access to your data for illegitimate purposes.