PERSONAL DATA SECURITY POLICY
Our company fully respects personal data and ensures that our online store complies with the provisions of Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR) as well as Law 2472/1997 on “Protection of individuals with regard to the processing of personal data” and Law 3471/2006 on “Protection of personal data and privacy in electronic communications”.
MGL PARTS IKE confirms that any collection, processing or storage of users’ personal data is carried out in accordance with the law and only upon their express specific consent and exclusively and solely for the purposes and to the extent required for the operation of the online store and the provision of the individual services it offers.
This data is used exclusively for reasons related to transactions with website users and may not be used for other purposes or by any third party, except in cases where disclosure is required by law or pursuant to a court order, as well as in the special cases mentioned below. In any case, www.mglparts.com does not collect, store and process data that the law classifies as sensitive, such as racial or ethnic origin, religious or political beliefs, health, social welfare, criminal record, etc.
The company does not collect personal data of minors and persons incapable of entering into contracts, as the use of the online store requires legal capacity. In the event of use of the online store services and subsequent collection of personal data from these categories of persons, the consent of the legal guardian or supporter of the individual is assumed, since the online store is not able to identify the age of the users. For transactions carried out without this consent, the guardian or supporter of the individual is solely responsible.
DATA PROCESSING MANAGER
The controller of the personal data of the users of the online store “MGL PARTS”, i.e. the person who decides what data should be collected, the method and the purpose of processing, is the company “MGL PARTS IKE”, tel. +30.2310.554556, email: info@mglparts.com , VAT number 800797868, based at 28 Ag. Dimitriou Street, TK54630, Thessaloniki, G.E.MI.: 141238604000.
NATURE OF DATA COLLECTED AND PURPOSE OF PROCESSING
The data collected by the website “MGL PARTS” is that provided to us for the completion of the purchase of products and that collected during the user’s browsing of the website and during the use of the various services it offers. Specifically, the cases in which personal data is processed are the following:
A. COMPLETION OF ORDER-PURCHASE CONTRACT FOR PRODUCTS
When the user wishes to order products, the declaration of personal data is necessary. In order to process orders, users are asked to declare Name, Surname, Email, Telephone, Address. These data are collected because they are the minimum necessary for the execution of the purchase contract.
Also, when concluding a contract to purchase products from the online store and if MGL PARTS IKE has collected the buyer’s email address in the above-mentioned legal manner, it informs with a special message that appears on the screen that it has the right to use the email for advertising purposes if the buyer does not object to this use in accordance with the provisions of the e-Privacy Directive 2002/58/EC, as amended by 2009/136/EC. In any case, the provision of the email in this context gives the company the ability to send advertising messages only for similar products and the owner of the email address can delete it easily and quickly at any time, by clicking on the “delete” option given in each message.
B. PERSONAL ACCOUNT
Each visitor to www.mglparts.com, if he wishes and gives his explicit consent, has the opportunity to obtain a personal account as a user-member of the website. The data provided to “MGL PARTS” in case of creating a personal account are Name, Surname, Email and the user’s personal password. This data is collected in order to speed up the user’s purchases, because by storing them, the buyer does not need to fill in the fields required to complete an order again, as they appear automatically filled in. In addition, through this service the company collects data on the preferences of the buyer-users, so that it can present more personalized suggestions and offers.
The visitor can also use this personal account for subsequent purchases from www.mglparts.com. Members are solely responsible for all actions carried out under their personal password, email address and generally their user account. In the event of any unauthorized use of their account and any breach of security, members must immediately notify the company. Members are also solely responsible for the careful use of their account and their formal exit from their account at the end of each use (Logout). If the user/visitor voluntarily discloses his/her personal or sensitive data through this website directly to third parties, it is up to him/her to investigate the terms of protection of such data by said third parties. The user accepts that MGL PARTS IKE has no responsibility whatsoever for such disclosures and for any subsequent use of such data by other persons. Similarly, MGL PARTS IKE bears no responsibility whatsoever for any disclosure by users of this website of personal data of third parties through the website without the prior consent of the interested data subject.
The company has the right to discontinue the use of access codes to its services or to discontinue the availability of website content to users it believes have violated the letter and spirit of these terms of use.
C. NEWSLETTER
www.mglparts.com provides users with the opportunity to subscribe to its newsletter by providing their email address. This subscription serves the purposes of commercial communication and promotion of www.mglparts.com services, informing users/visitors about new products, offers, possible competitions, offering discount coupons, as well as for the advertising and promotion of www.mglparts.com products remotely. Subscription to the newsletter is equivalent to the user’s consent to the sending of all the above-mentioned information concerning www.mglparts.com, its products and services to their personal email. This consent is freely revocable at any time by selecting the “unsubscribe” option at the bottom of each message.
D. CORRESPONDENCE-COMMUNICATION FORM
For correspondence with our company (e.g. for submitting complaints, for receiving informational/promotional material, etc.), we must also be informed of the users’ contact information (name, email).
E. CUSTOMER SERVICE
In the event of problems with orders or services offered by www.mglparts.com, the user can contact the company via email or telephone to request a resolution to the problem, providing their name, telephone number and email address.
F. COOKIES
www.mglparts.com has the right to use Cookies. Cookies are small text files sent by a website and stored in the browser while the user is browsing the Internet. Cookies are designed as reliable mechanisms for websites to remember information (such as products added to the shopping cart in an online store) or to record the user’s browsing history (including recording the websites visited in the past).
The installation of Cookies is possible only after the consumer has been appropriately informed and his consent has been obtained. www.mglparts.com allows users to continue browsing without sending Cookies to the server. For information about cookies, see www.aboutcookies.org .
G. MONITORING OF PROTOCOL (IP) ADDRESSES
www.mglparts.com collects information while the user browses the website, such as other pages visited, and stores it on the server in order to note the interaction of www.mglparts.com with other pages.
Also, www.mglparts.com uses information about the way the visitor uses the website, such as the products they choose to view or the services they use, in order to carry out analyses and statistical surveys to improve the offer and quality of the services provided.
Finally, our company, when users navigate the store using their personal account, may collect information from their computer’s operating system, their browser and the Internet service provider (IP) address for the purpose of measuring traffic, compiling order history and purchasing interest for the purpose of improving its services or maintaining an internal accounting record.
H. SOCIAL MEDIA PLUG-INS
Our website integrates application interfaces through social networking or additional plug-ins of social networking services, such as the services provided by Meta, Twitter, etc. These add-ons transfer information to the respective platform, such as the platform’s user identification number, the websites visited, etc. The plug-ins are governed by the data protection policy of each social networking service.
PERFORMANCE OF THE PROCESSING
The data collected by www.mglparts.com is processed by the authorized and specially trained personnel of the company MGL PARTS IKE in accordance with the explicit instructions received from the company, adhering to strict security rules and exclusively for the purposes mentioned above.
Some of this data is transferred to third parties with whom the company has entered into a cooperation agreement and has specifically authorized them to undertake some part of the execution of the provision of the services offered by MGL PARTS, as well as to specialist professionals to whom the company transfers the data in order to carry out its obligations imposed by law (tax-accounting) or to exercise its legal rights and claims, whenever necessary. These third parties process the data under the specific instructions and supervision of MGL PARTS, carry out the processing only to the extent required at a minimum by the purpose of the contract they have concluded with the company and ensure that their processing is carried out in accordance with the law.
The categories of third parties are as follows:
1)Internet provider
The internet provider offers the company the internet access necessary for the existence of the online store and gains access to the data necessary for its effective operation.
2)IT service provider
The IT service provider is responsible for the design and operation of the online store and has access to the data collected by it in order to provide the online services it offers, upgrade its operation and repair any damage that may arise.
3) Courier company
Courier companies receive the name and address of the buyers from the company in order to safely transport the ordered product to the consumer’s hands, so that the sales contract can be completed.
4) Accounting Office
The accounting firm that undertakes compliance with the company’s tax obligations gains access to the details of the sales invoices that the company enters into with the buyers, in order to ensure the declaration of these details to the legal mechanisms for recording and controlling the income of businesses.
5)Legal Advisor
The company’s legal advisor gains access to the company’s customer data in the event of a violation of the terms of the online store, in the event of any illegal action, in the event of a breach of contractual obligations arising from the sales contract and in any other case deemed necessary to exercise or protect the company’s legal claims and rights.
6)Other cases
Customers’ personal data may need to be transferred to public and judicial authorities when this becomes necessary in accordance with the law or based on a court decision/order in order to address criminal acts or violations of individual rights and public security.
DATA STORAGE PERIOD
The personal data collected is stored for a period of time that varies depending on the purpose for which it is used.
A) The data collected for the completion of product purchase contracts are retained for 6 years from the date of their issuance, in accordance with the legal obligation to keep accounting records.
B) Personal account data is stored until the user requests the deactivation of their account.
C) Data collected for sending advertising messages remains on file until the owner requests its deletion from the list.
D) The data collected by the customer service department is retained until the request submitted is satisfied.
E) Data collected while browsing the online store is retained for up to 2 years after the last visit.
G) The data used by the customer service department is kept until the problem is completely resolved.
USER RIGHTS
-RIGHT OF ACCESS
Every user of our website has the right to access their personal data that they have provided to www.mglparts.com., that is, to be informed about what data is stored, whether it is processed and of what type, as well as to be informed about the method of initial acquisition.
– RIGHT TO CORRECTION
Every user of www.mglparts.com has the right to request the correction of inaccurate information held in the company’s file.
– RIGHT TO DELETION
Each user of www.mglparts.com has the right to request the partial or total deletion of their personal data held in the company’s file.
– RIGHT TO RESTRICTION OF PROCESSING
Users have the right to request the restriction of processing when the accuracy of the data is contested or when it is unlawful or when they wish to have it processed only to the extent they themselves authorize.
– RIGHT TO PORTABILITY
Users have the right to receive their data in a structured, commonly used and machine-readable format or to request that their data be transmitted to another controller.
– RIGHT TO OBJECT TO PROCESSING
Each user of www.mglparts.com has the right to exclude the processing of their data, unless there is a processing obligation imposed by law, which overrides the right to object.
If you choose to exercise your above rights, www.monzouzou.com will act to satisfy your request immediately. The change is made within one month from the date of receipt of the request. In case of delay, www.mglparts.com immediately informs the user of the extension of the time for fulfilling the request. To access, change or delete your personal data or to delete your account, you can contact the company by phone or email. The owner and controller of the personal data collected in the file created for the above purposes is MGL PARTS IKE, at whose headquarters the above file is located.
– RIGHT TO COMPLAINT
In case you believe that any of your rights regarding personal data are being violated, you can immediately contact our Data Protection Officer, Ms. Despina Petropoulou, at the email address depedpo@gmail.com.
You also have the right to submit a complaint to the Personal Data Protection Authority, which is located in Athens, at 1-3 Kifissias Street, postcode 11523, tel. 2106475600, Fax: 2106475608 or to the email address complaints@dpa.gr .
Thank you for choosing www.soferina.com !
