Personal Data Processing Statement
This Personal Data Processing Statement aims to explain the processing of personal data relating to the user (hereinafter referred to as the “User”) of the website www.my-dandy.com
Before providing personal data concerning a third party on the www.my-dandy.com, you must: (a) inform the person about the content of this statement, (b) obtain their consent to share their personal data in accordance with this statement.
Users/Buyers must be over 18 years old and have full legal capacity
The www.my-dandy.com as the Processor undertakes to collect and process the personal data collected in accordance with the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 regarding the protection of individuals against the processing of personal data and the free movement of this data and the repeal of Directive 95/46/EC (GDPR), Law 4624/2019 (Government Gazette 137/A’/29.08.2019), the decisions and instructions of the Personal Data Protection Authority and any relevant regulatory and legislative framework.
In particular, the www.my-dandy.com is committed to keeping the personal data it processes up to date and accurate, to store and delete it safely, not to collect and maintain personal data that are not necessary, to take measures so that personal data are not lost, misused, are accessed by unauthorized people or disclosed and generally to take appropriate technical and organizational measures to protect them. When the processing of personal data is based on the consent of the User/subject, they have the right to withdraw such consent at any time in accordance with the specific terms set forth herein. Withdrawal of consent shall not affect the lawfulness of the proceedings which were based on prior consent.
At the same time, the User/subject must inform the www.my-dandy.com in case of change of any personal data, which have previously been notified to the www.my-dandy.com, in order for the www.my-dandy.com to keep the personal data of the subjects up to date.
Categories of personal data processed by the www.my-dandy.com (hereinafter referred to as the “Personal Data”)
- Identification of a natural person, name, postal address, e-mail address, mobile or landline contact number, address number, bank account details, tax information etc., which can be used to identify the User or the final recipient of the products.
- Personal information collected on the www.my-dandy.com and subject to the respective request of the User. On a case by case basis and depending on the submitted request, there may be processing of Personal Data that will be voluntarily provided by the User during the submission of their request.
- Interaction data with electronic services: IP address, Cookies, information about the browser, device data, etc., which do not identify the User directly. More specific information about the use of Cookies on the www.my-dandy.com can be found in the special field “Information on Cookies”.
The www.my-dandy.com does not process sensitive personal data in the context of the services and the content of the Website. Similarly, the www.my-dandy.com does not hold credit/debit card details for your orders. Once you have selected the relevant payment method, the system redirects you to the online service that accepts electronic payments of the cooperating bank to complete your payment.
How we collect personal data:
- From the User in order to submit their order and process it.
- From the User when submitting a request other than the order of products (eg withdrawal from the contract of sale, cooperation, etc.).
- In the context of promotional activities for the promotion of the products of the www.my-dandy.com
Processing and Legal Basis
Below we list all the ways in which the www.my-dandy.com processes the Personal Data it collects, on what legal bases the processing is based as well as the legal interest on a case by case basis.
Purpose of processing: For the processing and completion of the order – Conclusion and Execution/Operation of the Sales Contract
Category of Personal Data
( a ) Identification
( b ) Communication
( c ) Financial
Legal basis of the processing: Necessary for the conclusion/execution of the terms of the contract
Purpose of processing: Managing order withdrawal/cancellation request and any other related request
Category of Personal Data
( a ) Identification
( b ) Communication
( c ) Financial
Legal basis of the processing:
( a ) Necessary processing to satisfy a legitimate interest.
( b ) Necessary processing for the execution of the terms of the contract.
( c ) Necessary processing for compliance with a legal obligation.
Purpose of processing: For the management of a request/complaint
Category of Personal Data
( a ) Identification
( b ) Communication
( c ) Financial
Legal basis of the processing: Necessary processing for compliance with a legal obligation.
Purpose of processing: For the promotion of products to the User, only if they have explicitly stated that they wish to be the recipient of promotions, having filled in the corresponding field on the www.my-dandy.com.
Category of Personal Data
( a ) Identification
( b ) Communication
( c ) Financial
Legal basis of the processing: Processing based on consent. It can be easily and freely revoked at any time by sending an email to info@my-dandy.com
The term “processing” covers a wide range of transactions carried out on personal data. It includes the collection, registration, organization, structure, storage, adaptation or alteration, retrieval, retrieval of information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction of personal data.
Recipients of Personal Data/Executors of Processing
In the context of the operation of the www.my-dandy.com and the execution of the contract of sale of the products, the Personal Data of the User or the final recipient of the product will be processed by the sections of the www.my-dandy.com that are responsible for the execution of the order, the collection of products, their pricing, the control of the payment of the price of the products, their shipment to the User or the final recipient if they are not the same person as the User, the management of the requests for withdrawal or cancellation of the order and the management of any kind of request of the User.
Also the Personal Data, in the context of the legal operation of the www.my-dandy.com to the extent that this is necessary for the better service of the User and the execution of the sales contract may be transmitted to or collected or processed for the purpose of providing services to the www.my-dandy.com by third parties performing the processing, such as in particular accounting and legal service providers and cooperating IT companies.
Furthermore, Personal Data are transmitted to the cooperating courier company, to serve the sales contract to the extent necessary for your better service and the fulfilment of the contract for the shipment of the ordered products. For these services, the www.my-dandy.com cooperates with the company “Elta Courier” (which is located at 88 G. Papandreou, Metamorfosi, PC 14452). In all the above cases, the collaborators with the www.my-dandy.com must act only on its behalf and have been specifically authorized for this purpose as they are fully committed to the confidentiality and the obligations provided in the legislation regarding the collection and processing of the above data. The www.my-dandy.com may also be required to disclose Personal Data to public services, judicial, public and independent authorities, such as the Consumer Protection Directorate of the Ministry of Development and Investment, the Consumer Ombudsman, if this is absolutely necessary for the exercise of legal interest, the defense of the rights or the fulfilment of obligations of the www.my-dandy.com, as the case may be.
Personal Data retention time
The www.my-dandy.com will keep and process the Personal Data for as long as is required to fulfil its obligations under the sales contract or for the other purposes of collecting Personal Data mentioned herein.
Specifically for the Personal Data of the User, which are processed by the www.my-dandy.com for marketing purposes (subscription to the informative newsletter), these are kept by obtaining the relevant consent of the User when marking the special field on the www.my-dandy.com and until the User withdraws their relevant consent either by sending a relevant request to the www.my-dandy.com at the email address info@my-dandy.com or by selecting the special field located in the informative newsletters.
In any case, the www.my-dandy.com will keep the Personal Data for as long as required until the relevant claims expire and in each case for as long as required by the tax legislation and the applicable legal and regulatory framework.
Rights in relation to the processing of Personal Data
Personal data protection legislation provides rights regarding the processing of personal data. Specifically, you can exercise the following rights:
( a ) Right of access: You may, upon request, be informed as to whether or not your Personal Data is being processed and receive relevant information.
( b ) Right of Correction: You can request correction of your inaccurate Personal Data or the completion of incomplete data.
( c ) Right of deletion: ou can request the deletion of your Personal Data under certain conditions provided by the legal framework.
(
d ) Right to restrict the processing: You may request that the processing of your Personal Data be restricted, subject to certain conditions provided by the legal framework.
( e ) Right to data portability: You may receive your Personal Data in a structured, commonly used and machine-readable format, as well as transfer that data to another processor.
( f ) Right of objection: You have the right to object, at any time and for reasons related to your particular situation, to the processing of your Personal Data including the compilation of profiles.
Anyone interested in exercising the above rights can contact the www.my-dandy.com in one of the following ways:
(a) by e-mail to info@my-dandy.com,
(b) by registered mail/delivery of a relevant letter, to the www.my-dandy.com at the headquarters of the www.my-dandy.com, at 23 Pindou street, Heraklio, Greece PC 14122.
The rights are exercised free of charge by the applicant, unless due to repetition they are deemed clearly unfounded and incur disproportionate and excessive management costs for the www.my-dandy.com .
In case of exercising the rights, the www.my-dandy.com will take all the necessary measures for their satisfaction and the applicant will receive a response within 30 days of receiving the request from the www.my-dandy.com
For any clarification regarding the submission process, any interested party can contact the www.my-dandy.com at +306986644333. In the event that the subject of Personal Data deems that their Personal Data are affected in any way, they reserves the right to appeal to the Personal Data Protection Authority (www.dpa.gr, 1-3 Kifissias Avenue, PC 11523, Athens , Call Center: +302106475600, Fax: +30210 6475628, E-mail: contact@dpa.gr).
For any other information regarding the processing of Personal Data, any interested party can contact the www.my-dandy.com at info@my-dandy.com or call the phone number +306986644333.
The www.my-dandy.com reserves the ability to modify and update this Statement, in whole or in part, at its sole discretion at any time. Any modification herein will take effect as soon as the modified Statement is posted on the www.my-dandy.com
In any case, as long as the User continues to browse the www.my-dandy.com and make use of its services after modifications have been made in accordance with the above, it is considered that they accept these modifications. If the User does not agree with the terms of this Statement as they may be modified, either in whole or in part, they must stop using the www.my-dandy.com and/or delete their Personal Data during the procedure that is provided in the www.my-dandy.com. Prior to each entry on the www.my-dandy.com, the User is suggested to check this page in order to be informed about the current and valid Personal Data Processing Statement.
