Privacy Policy

Data Protection Policy of the company under the name “CHERRY PICKS O.E.”, headquartered in Patras, VAT number: 802403068 (Patras Tax Office).

1. Scope of Application

This privacy policy explains how the website of the company under the name “CHERRY PICKS O.E.”, headquartered in Patras, VAT number: 802403068 (Patras Tax Office) [hereinafter “Prestaville”] collects, uses, processes, stores, manages, transfers, and protects personal data (hereinafter “Information”) to meet the company's data protection standards and comply with the law. The privacy policy concerning the website prestaville.com (hereinafter referred to as the “Website”) has been drafted in compliance with Regulation (EU) 2016/679 (hereinafter referred to as the “GDPR”), which constitutes a directly binding legislative act. Prestaville is committed to protecting the privacy of visitors and users/customers of the website prestaville.com. This privacy policy applies to all information accessed by any third party (hereinafter “User and/or Customer”) or managed by prestaville.com. The platform prestaville.com is not directed at children. If you are under the legal age or unable to enter into legally binding agreements in your country, you are not permitted to use this Website. If you believe we have received data from an individual protected under child protection laws without obtaining the necessary parental consent, please notify us immediately, and we will take reasonable steps to securely delete such data.

This policy does not apply to information collected through any other website or to the practices of companies we do not control. Please note that the Website may contain links to other websites. For example, if you click on an advertisement on the Website and are redirected to another site, this data protection policy will not apply to any information collected on that site. We are not responsible for the data protection practices of other websites, and we recommend that you read the privacy policy of each website you visit.This data protection policy ensures that Prestaville:

• Complies with data protection legislation as defined by current Greek and European personal data protection laws (GDPR).

• Protects the rights of staff, customers/users, and partners.

• Ensures transparency in matters related to data processing and storage.

• Is protected from the risks of data breaches.

2. Legal Basis for Data Processing

The personal data you provide anywhere on the website is intended solely for purposes related to your transactions with us, as detailed in the General Terms of Use, specifically:

(a) To maintain your personal account on Prestaville, we retain the data you voluntarily provide to us.

(b) To process orders and transactions.

(d) For statistical purposes and the improvement of services provided – this data processing is also conducted within the scope of the legitimate interest of the Data Controller.

(e) To enhance the services provided and ensure the operation of the respective service for which you provide the data, while ensuring that the data is not used by any third party (except as required by law for competent authorities), without adhering to the legislative provisions regarding the protection of personal data processing, as applicable.

(f) We also promote your personal data to social media accounts (Facebook, Instagram), as well as through Google and affiliate networks for statistical, advertising, and promotional purposes, and to attribute commissions for purchases made via affiliate program links.

By accepting cookies upon entering our online store, you allow us to monitor news about new arrivals and product offers, in full compliance with community guidelines on personal data protection. If you do not wish to receive such updates and advertisements, you can clear your browsing history or mark the advertisement as unwanted.

In summary, we only request the information necessary to provide you with the full range of our services, such as your first name, last name, contact email for communication and account/transaction confirmation, and a password for account creation. For completing transactions, we also request your billing address. If you wish to receive an invoice for services rendered, we additionally require your company name, VAT number, and the tax office your business is registered with. We also keep a record of your order history and a wishlist of products selected by the user, in order to optimize the services provided and facilitate your use of our services.

In any case, the criterion used to determine the retention period is based on compliance with the deadlines permitted by law, alongside the principles of data minimization, storage limitation, and rational management of our records.

3. Security of Personal Data

The Prestaville platform for online sales of digital products implements appropriate technical, physical, and administrative security measures at every stage of the process to protect data from loss, misuse, damage, alteration, unauthorized access, and disclosure, as provided in Article 32 of GDPR 679/2016. These measures ensure an appropriate level of security against risks, including, among others, where applicable:

(a) encryption of personal data,

(b) the ability to ensure the confidentiality (Article 90 GDPR 679/2016), integrity, availability, and resilience of processing systems and services continuously,

(c) the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident,

(d) a process for regularly testing, assessing, and evaluating the effectiveness of technical and organizational measures to ensure the security of processing.

Furthermore, Prestaville takes measures to ensure that any individual acting under the authority of the data controller or processor who has access to personal data processes it only upon the instruction of the data controller and restricts access to your personal information to authorized employees. Key features of our information security program include:

• The Prestaville platform declares that it has adopted all necessary technical and organizational measures to guarantee the security and integrity of the personal data it handles, as well as to prevent loss, alteration, and/or access by unauthorized third parties.

• It uses the "https" protocol for secure and encrypted communication between customers and us.

• For the security of your transactions, we have taken all possible measures, partnering with Eurobank and using the bank's most secure SSL 128-bit encryption protocol for safe online commercial transactions. This encrypts all credit/debit card information so that it cannot be read or altered during transmission over the Internet. The SSL (Secure Sockets Layer) protocol is currently the global standard for website authentication to internet users and for encrypting data between internet users and web servers.

4. Categories of Data Collected

When you visit the Website and in order to:

(a) register as a member of Prestaville and create an Account,

(b) subscribe to Prestaville's Newsletter service,

(c) ensure the ability to communicate with you to inform you about our new products and services, as well as offers and promotional activities, or

(d) exercise your rights according to the law and the General Terms of Use, you must first accept Prestaville's General Terms of Use and this Data Protection Policy, as you may be asked to provide information that concerns you (such as your name, surname, email address, phone number, etc.).

Notably, no sensitive personal information is required for simply browsing the Website. Specifically, Prestaville collects the following data from you, which you voluntarily provide for the purpose of registering as a member and creating a personal profile and account on Prestaville: your first name, last name, contact email for account confirmation and transactions, and a password to create an account. For the completion of a transaction, we request the billing address. If you wish to receive a service invoice, we also require your company name, VAT number, and the tax office your company is registered with. Order history and a list of products the user wishes to purchase are also recorded to optimize the services provided and facilitate the user experience. Additionally, for registration to the Newsletter service, to receive updates on Prestaville and our news, we ask for your email address.

5. Sources of Data Collection

We collect your personal data from:

the information you directly provide when creating your account and placing an order,

the internet (company sites and other public sources),

third-party applications (Facebook, Google Analytics, etc.).

Customers using the Website or making transactions through it agree and accept the following:

• The information and material contained on the Website are the property of Prestaville. The information and material may be freely used by visitors/customers, but copying, reproducing, or republishing them for any reason is not permitted without the written consent of the Company to which they pertain.

• As data controllers, we make every effort to ensure the accuracy of the information contained on the Website, but we are not bound by its content unless explicitly stated otherwise. The information and material contained on the Website are subject to changes that will take effect from the time they are posted on the Website. Customers are deemed to be aware of and informed about the terms upon entering and using the platform.

• Prestaville is not responsible for any error or inaccuracy in the transmission of information and/or instructions from the customer/user, for interruptions, impersonation, incorrect data entry, or system malfunction due to force majeure or any other reason not attributable to the gross negligence or willful misconduct of the Company or its employees.

• Prestaville has taken all necessary measures to safeguard the security and confidentiality of information concerning the visitors and customers/users of the Website. However, it bears no responsibility if, despite due diligence, the confidentiality of such information is breached.

6. What Kind of Data Processing Does Prestaville Conduct?

Personal data of the data subject will be processed for the following purposes, depending on the case:

Management and development of platform registration: Registration entails processing the user’s browsing profile. This profile involves using the customer's personal data, their browsing details, products viewed or added to the cart, sections of the website visited, and location to assess preferences or personal interests, with the goal of offering platform content, offers, services, and products that match their profile.

Management and development of online purchases: We use the customer’s personal information to process and deliver their order, and to inform them via email and/or SMS about the status of their order.

Management and sending of information about exclusive offers: Sending news and personalized information tailored to the profile, interests, and needs of the customer via email, SMS, mail, or any other communication method and/or digital platform. This involves creating user profiles that include the use of personal data, purchase history (if any), and browsing information on the Prestaville platform to evaluate certain aspects of personal preferences, aiming to offer commercial announcements suitable for the customer’s profile. In some cases, personal data may also be used to customize announcements on digital media.

Responding to rights of access, correction, and deletion, as well as queries and complaints.

Management and sending of purchase certification forms, such as digital receipts or invoices.

7. Retention Period of Your Data

Prestaville retains your personal data only for the period reasonably necessary, considering the needs that arise for possible improvements, service activation, and compliance with legal requirements. This means that personal data may be retained for a reasonable period even after the individual has stopped using our services.

The validity of the consent provided lasts no longer than 12 months, after which new consent is required upon visiting our platform again.

8. Your Rights Regarding the Processing of Your Data

(a) Right of Access:

You have the right to obtain confirmation of whether our platform is processing personal data concerning you and to access the personal data we hold about you.

(b) Right of Correction:

You have the right to ask us to correct your personal data if it is inaccurate or to complete it.

You can request that we delete your personal data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

(d) Right to Restriction:

You have the right to request the restriction of your data processing, in which case we will retain it only for the exercise or defense against complaints.

(e) Right to Data Portability:

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller when processing is based on consent or a contract and is carried out by automated means.

(f) Right to Object:

You can object to the processing of your personal data based on the public or legitimate interest of Prestaville, including profiling. In such a case, Prestaville will stop processing your data unless there are compelling legitimate grounds or it is necessary for the exercise or defense of legal claims.

(g) Right to Not Be Subject to Automated Decisions:

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you. However, this right cannot be exercised if the decision is necessary for the performance of a contract between you and Prestaville, is authorized by applicable law, provided adequate safeguards are in place to protect your rights and interests, or is based on your explicit consent.

(h) Right to File a Complaint:

You may submit your complaint to the Hellenic Data Protection Authority.

9. Transfer of Personal Data

Your data will be transferred to Prestaville employees for optimal service, particularly for processing your orders from our online store.

As part of certain functions of the platform and website, we share specific personal data of visitors/users (such as IP address and all user interactions with the application) with legal entities (Google, Facebook, Instagram) via cookies.

The data collected by the Google Analytics tool, such as the URL visited by the user, the action performed, and the time spent on each page (retention), is usually transferred to and stored on a Google server.

For every transfer, we always take measures to ensure that the personal data transmitted is the minimum necessary and that there are always legal and legitimate conditions for processing.

Your personal data may also be transferred to third parties outside the Prestaville platform, but only following the issuance of a special related order from a competent public authority or state entity, in which case Prestaville will be obligated to comply.

10. Transfer of Personal Data to Third Countries

Data processing is generally carried out by service providers located within the European Economic Area or in countries that have declared an adequate level of protection.

11. Submission of Complaint/Grievance

For any matter related to the processing of your data, you can contact us at the email info@prestaville.com. Additionally, you always retain the right to contact the Hellenic Data Protection Authority, which accepts the submission of related complaints either in written form to its protocol or electronically by following the Authority’s instructions on the website: http://www.dpa.gr/portal/page?_pageid=33,211532&_dad=portal&_schema=PORTAL.

12. Cookies & Other Technologies

Cookies are files installed on the computer, phone, tablet, or any other device used by the user, with the purpose of recording activities while navigating this website. Additionally, cookies help us monitor the performance and traffic of our website, improving its presentation and content based on the preferences of our visitors. Under no circumstances do cookies contain personal information or information that would allow anyone to contact the website visitor via phone, email, etc. Furthermore, the use of cookies does not provide access to your computer's documents or files. We only use technically necessary cookies, which are essential for the proper functioning of the website and allow you to browse and use its features. These cookies do not identify you individually. Without them, we cannot offer the efficient operation of our website (session ID, recording cookie consent or not). In addition, cookies used by Facebook, Google, and affiliate networks are stored for statistical purposes, advertising, and tracking commissions from purchases made via affiliate links. If the visitor/user accepts the use of cookies, the following types of cookies may be used: Functional Cookies, Preference Cookies, Advertising Cookies, Analytics Cookies, and Google Analytics Advertising Feature Cookies.

Do You Not Wish to Use Cookies?

You can enable, disable, or even completely delete cookies through the settings options of the browser you are using. For example, in Chrome, you can click on the Chrome menu and then select Settings > Privacy > Content Settings and adjust your cookie settings according to your preferences. If you choose to disable cookies, some parts of the Website or application may not function properly.

The Website's software is designed to ensure the highest level of security and trust. All the information contained in the requests submitted via the Website is equally secure and confidential. Only authorized employees, who are appropriately trained in handling customer information and personal data, will have access to this information, and only when necessary to fulfill your requests.

13. Modifications

Prestaville reserves the right to update and modify the terms of transactions, which will be effective from the date of their posting on the online store. Consequently, we encourage customers/users to periodically check this page to stay informed about the latest privacy practices. In any case, customers/users will be notified via email or a notification on the Website about any changes to this policy.

14. Intellectual and Industrial Property Rights

All intellectual and industrial property rights of the Website and its contents, including the headers, images, sounds, designs, texts, graphics, logos, icons, brand combinations, trademarks, works, illustrations, photographs, industrial designs, and any other elements that could be used on an industrial and commercial level, are owned by Prestaville or third parties who have authorized us to use them.

The user agrees to respect the intellectual and industrial property rights of the platform. The user may use the Website and its contents for personal use. Any other use is prohibited, and the user must request our explicit written authorization.