Privacy Policy

Personal Data Protection Statement

This stamen contains information about how HERBACO uses your personal data always in accordance with current national legislation  and with Regulation (EU) 2016/679 of the European Parliament on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR).

HERBACO is committed to the full enforcement of national legislation and European Regulations by taking into account the adoption of appropriate technical and administrative measures for the protection of personal data.

This policy applies to personal data collected by the website:

https://herbaco.gr  

Controller

The Controller for your personal data for this website is the company DOGOS PAVLOS AND CO LIMITED PARTNERSHIP trading as HERBACO, with G.E.MI. no. 058875504000 (head office: 28, P. P. GERMANOU St., 54622 THESSALONIKI, tel.: +302310267007), Email: info@herbaco.gr, henceforth “HERBACO”.

Purpose of the Policy

The purpose of this policy is to set down in the most simple, understandable and comprehensive way, the following:

  • The types of data we process through our website, the purposes and the legal basis for processing
  • How long we keep your data
  • Who can be recipients of our data
  • Your rights and how you can exercise them
  • The legitimate interests we pursue
  • The rules regarding your consent, when necessary
  • The rules regarding personal data collected through cookies
  • Links

 

When is it necessary to provide us with your personal data?

Data collected automatically when you visit our website (IP address, URL, browser, OS)

HERBACO can trace the IP address through which a computer or any other electronic device accesses the internet and subsequently our website. This is due to the way in which the internet operates and is intended to secure networks from malicious acts. For the same reason, this function collects data on the user’s browser and operating system (windows, android, iOS, etc.). These data cannot identify you directly and are stored for the minimum length of time for network security. Your consent is not required to collect these data, since they are necessary for the safe and proper operation of each website.

The legal basis for the collection and retention of your data is our legitimate interest for the proper and secure operation of our website. You have the right to object to the retention of your data on grounds related to your particular situation, if your rights and freedoms override our legitimate interests or the necessity of collecting the data for the establishment, exercise or support of our legal claims. For ways in which to exercise this right, see below under “Rights”.

 

Data stored automatically – Cookie Policy

Cookies are small data/text files stored on your computer’s hard drive by your browser.  

Cookies are divided into different categories depending on the purpose they serve and the way they work, such as facilitating your navigating from one website to another, storing your preferences and generally improving your browsing experience.

Cookies and other similar tracker technologies are governed by the e-privacy Directive 2002/58/EC, and additionally by the General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679.

On our website, we use three types of cookies: necessary, preference, and marketing. For all other categories of cookies, with the exception of functionally necessary cookies and those that pertain to your requests to the website (e.g., language selection), and pursuant to Greek Law 3471/2006, article 4, para. 5, the installation of cookies is permitted only if the subscriber or user has provided consent following clear and extensive information.

  • Necessary

By necessary cookies we mean those that have been evaluated as necessary from a technical – functional point of view, as without them no connection (secure or any) can be made to the website in order to connect to the website or in general to provide the internet service specifically requested by the user (e.g., placement of products in the shopping cart). For cookies of this category, the law does not require your prior consent.

  • Preference

If you choose to change the default Greek language of display of the website to English, HERBACO uses cookies to register your preference in order to display our website in the language you prefer.  For cookies of this category, the law does not require your prior consent.

  • Marketing

Marketing cookies are used to track visitors to websites. The purpose is to display ads that are relevant and engaging to the user. They are installed only if the user gives prior consent, choosing to activate cookies.

You can change the settings for the cookies installed by our website at any time by clicking on the relevant tab “COOKIE SETTINGS”, which is located at the footer of our website

Detailed information about the cookies used, the functions they perform by category, their duration and their recipients, can be found here.

 

When you send us a message through the contact form

You can submit your message on our website through the contact form. For this purpose, you will need to provide your name, email address and telephone number so that we can contact you to respond to your message. The legal basis for the use of this information is our legitimate interest in responding to the messages of visitors to our website, and in case that, through your message, you request to conclude a contract between us (e.g., collaboration, or purchase of products), or an action to be taken in the context of a purchase you have already made (e.g., return, etc.), our legal basis for using your information is to take steps at your request prior to entering into a contract, or to perform an existing contract between us.

If you choose to contact us using these forms, none of the data you provide will be stored by this website or transferred/processed by anyone. Instead, the data will be recorded in an email and sent to us. Email content is encrypted before being sent over the internet to travel securely and is decrypted by our local computers and devices after it is received.

We will keep your message in our mailbox for 12 months from your last communication, unless it includes information about a contract with you, in which case it will be stored for up to 5 years after the conclusion of our collaboration, for the purpose of proving our transaction and establishing/exercising legal claims that may arise on either side within the stipulated limitation period.

 

Automated decision-making

We do not use your personal data for automated decision-making that may have legal or other important consequences for you, and we do not create profiles for you based on your personal data.

 

Your rights according to the General Data Protection Regulation (GDPR)

RIGHT OF ACCESS AND RECTIFICATION

You have the right to know whether your personal data has been or will be processed and, in any event, the right to require HERBACO to rectify your personal data if they are inaccurate, or to supplement them if they are incomplete. When updating your personal information, you may be asked to verify your identity before we can fulfill your request.

RIGHT TO DATA PORTABILITY  

You can receive your personal data in electronic form. This right applies:

  1. a) if you provided your data yourself,
  2. b) either by giving your consent,
  3. c) or in order to conclude a contract with us.

You will receive your data in a structured, commonly used and machine-readable format (i.e. in a type of electronic file commonly used and easily readable by common software), and you can transfer them or request that we transfer them to another controller, provided that this does not adversely affect the rights and freedoms of other persons.

RIGHT TO ERASURE

Subject to the conditions of the law, you may request the deletion of your personal data, and in specific cases the restriction of their processing. Personal data that we are required to retain due to legal obligations cannot be deleted. Deletion of personal data necessary for the performance of a contract may lead to cancellation of the contract or inability to perform it.

RIGHT TO OBJECT

You have the right to object at any time to the processing of data pertaining to you.

This right applies if the reason for our processing is our legitimate interest and you object due to any situation particular to you (for personal, professional or social reasons).

This applies to data collected automatically when you browse the internet and our website, as well as when you send us a message through the contact form on our website.

RIGHT TO RESTRICT PROCESSING

You have the right to request the restriction of processing of your data.

This will apply if you dispute the accuracy of your data and until we verify them, when you consider that the processing is unlawful, when we no longer need them, or when you have exercised your right to object.

RIGHT TO WITHDRAW CONSENT

When we process your data on the basis of consent you have provided, you have the right to withdraw such consent freely, at any time, without retroactive effect, and without being subject to any other consequence in other services that we provide to you for other reasons (e.g., based on a contract for the sale of our products).

RIGHT TO FILE A COMPLAINT

You have the right to file a complaint with the Personal Data Protection Authority if you believe that your data are being unlawfully processed. The Authority recommends that you first contact us to submit any complaint or request. You can do this for free, by email to info@herbaco.com. We will make every effort to satisfy your request. If you are not satisfied with our response, you can submit your complaint to the competent Personal Data Protection Authority.

Ways to exercise the above rights

To exercise your rights, as well as for any information regarding the processing of your personal data, you can submit a request to info@herbaco.com.

We may need to ask you to identify yourself before responding, to ensure that someone else is not exercising your right.

As a rule, your request will be fulfilled within one month of receipt, or if it is particularly complex, you will be informed at least within one month of the delay that may result from the complexity of the request.

Information and all related actions in response to your requests are provided free of charge unless they are excessive or repetitive.

 

Retention period of your personal data

Your personal data are retained only for as long as it is necessary for the purpose for which they were collected, according to the distinctions mentioned in the above use cases.  

 

Who can be recipients of your personal data?

  • Only authorized HERBACO associates have access to the data when necessary. We may give access to your data on a case-by-case basis to our partners who provide services to us (such as web hosting providers, website management, IT support providers, etc.), if their services are necessary for our operation and your service. All our partners are contracted to us to protect your personal data and are committed not to disclose to anyone else.

In any case, your personal data will not be transferred, sold or disclosed to anyone for marketing purposes without your prior explicit consent.

Transfer to third countries

Your personal data is not transferred to third countries outside the EEA or to international organizations unless it is in compliance with legislation on data protection guarantees.

 

Personal data security

HERBACO implements appropriate technical and organizational measures to ensure an appropriate level of security of your data against risks. However, no information system is 100% secure. In any case, HERBACO has prepared a plan to deal with any incident of data breach, in order to eliminate or limit its consequences, according to which if there is an elevated risk to your rights or freedoms, you will be informed immediately.

Links

Our website may contain links to other websites. This privacy statement does not apply to the user’s access of other websites. Please consult each time the privacy policy of the website you are entering.

In instances where the links on our website lead to websites that present protected intellectual property works to the public, we are not responsible if such websites make such presentations without permission from the rightsholders. In any case, HERBACO never places links for profit-making purposes and checks such links to the extent possible regarding the websites they lead to, so as not to display protected works without permission from the holder of the copyright or related rights.

Updating and amendment

HERBACO reserves the right to amend/update individual sections of this Policy without prior notice to you. Please always read the Privacy Policy before using our website in order to be informed of the current version of the Policy in case any amendments or updates have been made.

Last update of this Policy: January 2023