Privacy Policy
PRIVACY POLICY
This Privacy Policy describes how Replicar Hellas (“We”), in its capacity as a process, collects and uses the information, which may include personal data, that you provide on our website. More specifically, it describes our practices concerning the collection, use, storage and disclosure of the Personal Data you provide us, as well as the choices available to you regarding the use of your personal data and how you can access and update these data.
Please visit and read this Policy periodically, as we may amend it over time. Each time you visit the Website or provide us with information, you are accepting the practices described in this Policy at that time.
Our contact details can be found below:
Replicar Hellas
2nd km Katerini - Nea Efessos, GR-60100, Katerini, Greece
Tel. No: +30 23510 76991
Fax No: +30 23510 36105
E-mail: rch@replicarhellas.com
INTRODUCTION
This Privacy Policy covers all personal information of visitors / users we collect during a visit to our Website.
As the processor of your personal data, Replicar Hellas is obligated to ensure the unhindered exercise of your rights under national and Community legislation concerning our collection, use and disclosure of your personal data, including Regulation (EU) 2016/679 of the European Parliament and of the Council adopted on 27 April 2016 and entering into force on 25 May 2018 (hereinafter the “Regulation”).
For the purposes of this Policy, “Personal Data” means any information relating to an identified or identifiable natural person (“data subject”), such as name and surname, date of birth, residential address, telephone number, sex, nationality, identity particulars, IP address, etc. We will collect, use or disclose your Personal Data in accordance with this Policy and with the Applicable Law on Personal Data Protection.
SPECIAL NOTE FOR CHILDREN
Under the specific provisions of Article 8 of the Regulation, minors under the age of fifteen (15) are prohibited from communicating their Personal Data to us through the Website without prior consent of the holder of parental responsibility over them. We request that such persons do not submit information to us. In the event that Website users fall under the above category and continue communicating their Personal Data to us through the Website, we shall consider that these persons have received prior consent from the foregoing adult.
INFORMATION CONCERNING THE PERSONAL DATA WE COLLECT
During our communication through our Website, you will be requested to provide certain particulars, such as your full name, your telephone number, your e-mail address and, potentially, other data that may be used for your personal identification.
INFORMATION CONCERNING THE PERSONAL DATA COLLECTED BY OTHER WEBSITES
We may communicate or transfer your Personal Data collected during your use of our Website to our associates, information collection centres and service providers assisting our business activities. By providing information on our Website, you expressly authorise us to communicate and process your information for the purpose of sending e-mail replies or notifications in accordance with the specific provisions below.
We may place links on our Website to other websites operated by third parties, as we may collaborate with third parties. When you click on these links or otherwise visit, participate in or use the services or websites of other parties, irrespective of whether or not they contain our trade name, trademarks and other intellectual property rights, along with those of the third party managing each website, you must be aware and cognizant of the fact that we do not control the business practices of these parties, and that this Policy does not apply to these other parties or their websites.
This website uses the Google Analytics service for the purpose of collecting and analysing data regarding the behaviour of users on the website, i.e. web traffic, navigation to individual pages, the duration of browsing on these pages or the links that led the users to those pages. All the above data are non-personally identifiable, are collected according to the policy of the service, and are not sold or transferred to third parties.
This website uses the Google reCAPTCHA service for the purpose of preventing malicious attacks from bots. The service is used at the contact form of the website, where users have to confirm that they are not a bot in order to send an e-mail through the form. The verification takes place by sending non-identifiable data to the service (such as dispatch of the IP address to Google), which is collected according to its privacy policy, and is not sold or transferred to third parties.
USE OF YOUR PERSONAL DATA
We or third enterprises associated with us use your Personal Data for numerous purposes, including sending you e-mail messages with news and notifications concerning the products and services we offer, improving and adapting the content of the Website, analysing the use of the Website, sending and providing you with newsletters and information specific to your interests, and notifying you about new car models or new provisions we offer. We may also use your Personal Data to provide you with information on programmes, partnerships and/or services offered by third parties. We may also use your Personal Data to facilitate your communication with us or associated third-party enterprises. We may also use your Personal Data to resolve disputes, address problems and impose any new policies and rules governing the use of the Website, as well as notify you of changes to the use of the Website and the Privacy Policy.
Provision of Personal Data on your part is mandatory in order to register on this Website and create a personal account.
DISCLOSURE OF YOUR PERSONAL DATA
We do not sell your Personal Data to third parties, but we may share them with third parties to be used in accordance with this Privacy Policy based on the specific provisions above. In the normal course of our business, we may share certain of your Personal Data with our associates and third parties acting on our account or as permitted or required under the legislation in force governing the protection of Personal Data.
We may use third-party service providers (e.g. data management providers) to manage one or more aspects of our business activities, including the processing of personal information. In such cases, we use contractual obligations or other appropriate means to ensure that your Personal Data are used in a manner that is consistent with this Policy.
We may disclose your Personal Data as permitted or required by the law. For example, we may be compelled to disclose and reveal your Personal Data pursuant to a court judgment, prosecutorial order or decision by a different person or administrative body authorised by law to compel the disclosure of such information. If there are reasonable grounds to believe that your Personal Data could be useful in the investigation of inappropriate or illegal activity, we may disclose such information to law enforcement services or other appropriate investigative authorities.
DESCRIPTION OF THE RIGHTS OF THE DATA SUBJECT UNDER THE LAW
A. As the Data Subject, you have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, to access the personal data and the following information:
a) the purposes of and legal basis for the processing;
b) the categories of personal data being processed;
c) the recipients or categories of recipient to whom the personal data have been communicated, in particular recipients in third countries or international organisations;
d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject;
f) the right to lodge a complaint with a supervisory authority and the contact details of the supervisory authority;
g) communication of the personal data undergoing processing and of any available information as to their source.
B. You have the right to revoke your consent at any time (for this purpose, please contact us by sending an e-mail message to rch@replicarhellas.com). The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
C. You have the right, by sending a request to the controller via e-mail at rch@replicarhellas.com, to request INFORMATION AND ACCESS to your data, RECTIFICATION or ERASURE of your data and RESTRICTION OF PROCESSING of that data that concern you.
You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data that concern you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
We are obligated to delete personal data without undue delay and to inform you in writing of any refusal of rectification or erasure of personal data or restriction of processing and of the reasons for the refusal. You have the right to lodge a complaint with a supervisory authority or to seek a judicial remedy.
Where personal data have been rectified or erased or processing has been restricted, we shall notify the recipients and the recipients shall rectify or erase the personal data or restrict processing of the personal data under their responsibility.
The above rights of notification, access, erasure and restriction of processing of the rights of the data subject may also be exercised through the competent supervisory authority in the event that the controller refuses to satisfy them in part or in whole.
The competent supervisory authority and its details are as follows:
Hellenic Data Protection Authority
1-3, Kifissias Street, GR-11523, Athens
Call Centre: 210 6475600, Fax: +30-210 6475628,
E-mail: contact@dpa.gr.
D. As the subject of your Personal Data, you retain the right to their PORTABILITY and, more specifically, the right to receive the Personal Data that concern you and which you provided to us as the controller, in a structured, commonly used and machine-readable format, and the right to transmit those data to a new controller without hindrance on our part, in accordance with the specific provisions of Article 20 of the Regulation. In this event, we bear no liability for the processing of the data by the new controller to whom your Personal Data will be sent, nor for the quality of the data to be transferred, beyond our obligations under the Regulation. As the controller, we must identify the data subject before proceeding with the above.
RESTRICTION OF RIGHTS
Without prejudice to specific provisions, we may refuse in part or in whole to exercise the rights of information and access envisaged in Articles 13 through 15 of the Regulation for the reasons set out in detail therein.
DISPUTE RESOLUTION PROCEDURE
If you have any enquiries or questions concerning this Policy or if you believe we have infringed or mishandled your Personal Data, please e-mail us at rch@replicarhellas.com and we will endeavour to resolve any problem or question you may have. You have the right to object to the use of your Personal Data at any time. This objection must be addressed to us in writing via e-mail and must contain a request for a specific action, such as rectification, temporary non-use, commitment, non-transmission or erasure. We are obligated to respond in writing within one (1) month from receiving your objection at the latest. In our response, we must notify you of actions we have taken or, otherwise, the reasons we did not satisfy your request. In the event that we do not respond in time or you do not consider our response satisfactory, you have the right to appeal to the Hellenic Data Protection Authority and request the examination of our response or failure to take action.
PROCESSING PURPOSES
We use your personal data for the following purposes:
A. In order to respond to and handle requests you have submitted.
B. We may also use your data for marketing actions, as permitted by law, or to send promotional material, posts, videos, etc.
C. At times, we may contact you via e-mail, post, telephone or text message, depending on the contact details you have shared with us. This may take place for various reasons:
- When you use our services, we may send you a questionnaire concerning your experience using our website.
- We use personal data for research and analysis purposes. We may assign the realisation of the above on our account to a third party. We may communicate or disclose the research results, inter alia, to third parties in collective, anonymous form. We also use your personal data for purposes of analysis in order to improve our services and the user experience.
- We use information, which may contain personal data, to avoid obstructing official or legal inquiries, investigations or procedures, to avoid prejudicing the prevention, detection, investigation or prosecution of criminal offences or the execution of criminal penalties, to protect public security, to protect national security, and to protect the rights and freedoms of others. For these purposes, personal data may be communicated to third parties, such as law enforcement authorities, as permitted under the legislation in force, and external consultants.
- If we use automated means for processing personal data that produce legal effects or affect you significantly, we will take the measures necessary to protect your rights and freedoms, including the right to obtain human intervention.
- If we use service providers for the processing of your personal data, this will take place strictly on our account. This processing will take place for the purposes included in this Privacy Policy, such as facilitating the payment of packages, sending marketing material or providing analysis support services. These service providers are bound by confidentiality terms and are not permitted to use your personal data for their own or any other purposes.
- We disclose personal data to law enforcement authorities and other governmental authorities to the extent required by law or absolutely necessary for the prevention, detection or prosecution of criminal offences and fraud.
DATA RETENTION
We retain your information, which may include personal data for as long as we deem necessary, in order to provide you with information, comply with the legislation in force, resolve disputes with various parties and anything else required for the purposes of our business activity, including the detection and prevention of fraud or other illegal activities. All the personal data we retain are subject to this Privacy Policy. If you have questions concerning a specific period of retention of certain types of personal data, please contact us using the contact details you will find below.
INTERNATIONAL TRANSFER OF DATA
The transfer of personal data, as described in this Privacy Policy, may include the transfer of personal data abroad to countries with data protection legislation not as comprehensive as that of European Union countries. Where required by European law, we shall transfer personal data solely to recipients providing a sufficient level of data protection. In this event, we will make the necessary contractual arrangements to ensure that your personal data remain protected according to European standards. You may request a copy of these terms by using the contact details below.
INTERACTION WITH SOCIAL NETWORKING MEDIA
You may also contact Replicar Hellas by using our channels on social networking media. For example, if you send us a message or post on our channels on social networking media, we may use the information contained in your message or post in order to respond on those media. In order to provide you with the assistance requested, we may request additional information via direct or private message - for example, to provide us with details on the matter that concerns you, your name, e-mail address, telephone number and location (city/country).
Your post or message must not include sensitive data (such as racial or ethnic origin, political opinion, religion or beliefs, health issues). You must be aware that anything posted publicly on social networking media can be read by anyone.
LINKS TO SOCIAL NETWORKING MEDIA
Our website contains links to social networking media that have been incorporated and facilitate easy sharing on the platforms of social networking media. When you click on any of these buttons, a browser window will open, directing you to the website of the corresponding service provider, where (after logging in) you may use, for example, the “Like” or “Share” button.
For further information on the purpose for and extent to which data is collected, processed and used by the providers and their websites, as well as your rights and potential options for protecting your privacy, please refer to the data protection information of the respective service providers.
Facebook: http://www.facebook.com/policy.php
YouTube: https://policies.google.com/privacy
CHANGES TO THE POLICY
As the website is constantly evolving, this Privacy Policy may change. If you wish to view the changes effected to this Privacy Policy from time to time, please visit the Privacy Policy page. If we effect material changes or changes affecting you (e.g. if we begin processing your personal data for purposes other than those listed above), we will contact you before processing begins.