Privacy policy

We would like to inform you about how we collect, use and disclose personal data from and about you through this website and the mobile websites, applications and widgets connected to it.

1. WHAT AND WHOM DOES THIS PRIVACY POLICY COVER?

The Company is the data controller of the personal data (e.g. information that identifies a specific person, such as full name or email address) that we collect from and about you through the Company Services, which are processed in accordance with the terms of this Privacy Policy.

This Privacy Policy, as well as our Cookie Policy, applies to all users, including those who use the Company Services without being registered or subscribed to any Company Service, and those who are registered or subscribed to any Company Service.

As defined in our Terms of Use, the Company Services are intended for a general audience, are not directed at children and do not knowingly collect personal data from children under the age of 16.

2. WHAT TYPES OF PERSONAL DATA DO WE COLLECT ABOUT YOU?

The Company collects (1) registration data when you register or sign up for a Company Service, (2) public data and posts that you share through the Company Services, (3) data that you have allowed social media platforms to share with the Company, and (4) activity data when you access and interact with a Company Service. In particular, the Company collects the following types of data from and about you:

Registration data, meaning the information you submit in order to register for a Company Service, for example to create an account, post comments, receive a newsletter or participate in a competition. Registration information may include, for example, first name, last name, email address, gender, country, postal code and date of birth.

Public data and posts consisting of comments or content that you post on the Company Services and your personal data accompanying such posts or content, which may include your nickname, username, comments, likes, status, profile information and photo. Public information and posts are always public, meaning that they are available to everyone and may appear in search results on external search engines.

Data from social media. If you access or log in to a Company Service through a social media service or connect a Company Service to a social media service, the data we collect may also include your user ID and/or username associated with that social media service, the information or content that you have permitted the social media service to share with us, as well as your profile photo, email address or friends lists, and the personal data that you have made public in relation to that specific social media service. When you access the Company Services through social media services or when you connect a Company Service with social media services, you authorize the Company to collect, store and use the relevant personal data and content in accordance with this Privacy Policy.

Activity data. When you access and interact with the Company Services, we may collect certain information about these visits. For example, in order to enable your connection to the Company Services, our servers receive and record information about your computer, device and browser, possibly including your IP address, browser type and other software or hardware information. If you access the Company Services from a mobile or other device, we may collect a unique device identifier assigned to that device, geolocation data or other transaction data for that device. We may also collect cookies and other tracking technologies (such as browser cookies, pixels, beacons and Adobe Flash technology commonly known as “Flash cookies”). These technologies may be used to collect and store information about your use of the Company Services, such as the pages you have visited, the video and other content you have viewed, the search queries you have submitted and the advertisements you have seen. For more information, please refer to our Cookie Policy.

Information from other sources. We may supplement the information we collect with information from other sources, such as publicly available information about your online and offline activity from social media services and commercially available sources.

We do not collect:

Financial information from any payment service provider: in some cases, we may use an unaffiliated payment service to allow you to purchase a product or make payments (“Payment Service”). If you wish to purchase a product or make a payment through a Payment Service, you will be directed to a Payment Service website. Any information you provide to a Payment Service will be subject to the Payment Service’s privacy policy and not to this Privacy Policy. We have no control over and are not responsible for any use by the Payment Service of information collected through any Payment Service.

Sensitive information: we ask that you do not send us or disclose sensitive personal data (such as social security numbers, information relating to racial or ethnic origin, political opinions, religion or other beliefs, health, criminal background or trade union membership) to or through the Company Services or otherwise.

Linked services
Finally, the Company Services may also link to websites, including social networking sites, operated by unaffiliated companies, and may provide advertisements or offer content, functionality, games, newsletters, competitions or applications developed and maintained by unaffiliated companies. The Company is not responsible for the privacy practices of unaffiliated companies and, once you leave the Company Services or click on an advertisement, you should review the applicable Privacy Policy of the other service.

Functionality cookies
These cookies “remember” your preferences while browsing our website, so that we can suggest the appropriate products based on your needs. With these cookies, you enjoy a personalized version of plaisio.gr, making it much easier to find what you are looking for.

3. HOW DO WE USE YOUR PERSONAL DATA?

We use the personal data we collect from and about you to:

Provide you with the Company Services and Features,

Measure, analyze and improve such Company Services and Features,

Improve your experience through the Company Services (both online and offline) by providing content that you may consider relevant and interesting,

Allow you to comment on content and participate in online games, competitions or reward programs,

Provide you with customer service and respond to your questions,

Protect the rights of the Company and others. For example, there may be cases where the Company may use your personal data, including cases where the Company believes, in good faith, that such processing is necessary to: (i) protect, enforce or defend the legal rights, security or property of the Company, the Company’s subsidiaries or their employees, agents, contractors, licensors and suppliers (including the enforcement of our agreements and terms of use), (ii) protect the safety, privacy and security of users of the Company Services or the public, (iii) protect the Company, as well as other involved third parties, such as the Company’s suppliers, from fraud or for risk management purposes,

For purposes of complying with applicable laws or legal processes and/or responding to requests from competent governmental authorities.

To complete a corporate transaction such as a proposed or actual reorganization, merger, sale, joint venture, assignment, transfer or other disposal of all or part of the business, assets or stock of the business (including any bankruptcy or similar proceedings). For example, if the Company is involved in a merger or transfer of all or a substantial part of its business, the Company may disclose and transfer your personal data to the party or parties involved in the transaction as part of such transaction,

To enable social interaction functionality — if you log in or connect a social media service account with the Company Services, we may share your username, photo and likes, as well as your activities and comments, with other users of the Company Services and with your friends associated with your social media service. We may also share the same personal data with the social networking service provider,

To send you (by email, SMS, telephone, chat and social media), with your prior consent, offers, promotions and other commercial communications relating to the Company Services.

To send you, with your prior consent, commercial communications tailored to your interests and needs through the communication methods mentioned in point j) above.

 

We may use anonymous data or data that no longer personally identifies you, even indirectly (e.g. statistics), for any purpose or disclose it to third parties.

4. ON WHAT LEGAL BASIS DO WE PROCESS YOUR PERSONAL DATA?

The processing of your personal data for the purposes of:

Section 3, points a) to f) of this Privacy Policy is necessary for the provision of the requested services and is therefore mandatory, because otherwise the services could not be provided,

Section 3, point g) of this Privacy Policy is required in accordance with applicable laws and is therefore also mandatory.

Section 3, point h) of this Privacy Policy is carried out on the basis of the legitimate interest of the Company and its counterparties to conduct such economic activities. This interest is adequately balanced with your own interest, since data processing is carried out within the strictly necessary limits for the exercise of such economic activities. This data processing activity is not mandatory and you may object at any time as described in Section 11 of this Privacy Policy.

By contrast, the processing of your personal data for the remaining purposes:

Section 3, point (i) is at your discretion, but without your consent it is impossible to connect a social media service account with the Company Service, which means that you will need to log in to the Company Service using a different mechanism,

Section 3, points (j) and (k) is at your discretion, but without your consent it is impossible for the Company and/or third parties to provide you with general commercial communications from the Company and third-party services/products or announcements based on your interests and needs, and to provide you with services under the same brand name.

You may withdraw your consent at any time regarding the processing of your personal data for the purposes of Section 3, points i) to k), by sending a notice to the email address described in Section 11 below.

5. HOW DO WE PROCESS YOUR PERSONAL DATA?

Your personal data is processed both electronically and manually and is protected by appropriate security measures, taking into account the state of the art, implementation costs and the nature, scope, context and purpose of processing, as well as the varying likelihood and severity of risk to the rights and freedoms of individuals. Specifically, the Company uses appropriate administrative, technical, personnel-related and physical measures intended to protect the personal data in its possession from loss, theft and unauthorized use, disclosure or modification.

6. WHO MAY ACCESS YOUR PERSONAL DATA?

The Company may disclose your personal data for the purposes of Section 3 above to the following categories of recipients located within the European Union or outside the European Union, in accordance with and within the limits of the provisions of Section 7 below:

 

To third-party service providers entrusted with processing activities and, where required by applicable laws, duly appointed as processors (e.g. cloud service providers, other group organizations, service providers that serve or support the Company Service and therefore, by way of example and without limitation, companies providing IT services, experts, consultants and lawyers — companies arising from possible mergers, demergers or other transformations), and

To affiliated companies in their capacity as data controllers or data processors.

To competent authorities for purposes of complying with applicable laws.

The data processors appointed by the Company include IT service providers. You may request from the Company a complete list of appointed data processors at the address referred to in Section 11 of this Privacy Policy.

7. ARE YOUR PERSONAL DATA TRANSFERRED ABROAD?

The Data may be transferred to countries within and outside the European Economic Area and, in particular, to America. The European Commission recognizes that certain countries outside the EEA provide an adequate level of data protection in accordance with EEA standards. The full list of these countries is available at http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm. For transfers from the EEA to countries not considered safe by the European Commission, we have established appropriate and suitable safeguards intended to protect your personal data and to transfer your personal data in accordance with applicable data protection laws, such as standard contractual clauses approved by the European Commission in accordance with Articles 45 and 46 of Regulation (EU) 2016/679 on data protection (the “General Data Protection Regulation”).

You have the right to request a copy of the above measures and further information regarding your personal data by contacting the Company at the address referred to in Section 11 of this Privacy Policy.

8. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?

You have the right, at any time, to:

receive confirmation as to whether your personal data exists and be informed of its content and origin, verify its accuracy and request its correction, updating or amendment,

request the deletion, anonymization or restriction of the processing of your personal data that has been processed in violation of applicable law,

object to the processing, in all cases, of your personal data on legitimate grounds.

 

You may send your request to the address referred to in Section 11 below. In your request, include your email address, name, address and telephone number and clearly specify the information you wish to access, change, update, remove or delete.

 

We remind you that, even after the cancellation of your account, or if you ask us to delete your personal data, copies of certain information from your account may remain visible in certain cases where, for example, you have shared information on social media or other services or, for example, where retaining such copies is necessary for compliance with legal obligations or for legal defense purposes. Due to the nature of caching technology, your account may not immediately become inaccessible to others. We may also retain backup information relating to your account on our servers for a period of time after cancellation or your deletion request, for purposes of compliance with applicable law.

 

We also give you several choices regarding the use and disclosure of your personal data for marketing purposes. You may withdraw your consent regarding:

Receiving electronic communications from us. If you no longer wish to receive marketing-related emails from us, you may opt out of receiving marketing-related emails either by following the unsubscribe instructions in our communications, or simply by changing your preferences in your user profile settings if you are a registered user, or through the consent management tool available on our website if you are not a registered user. You may also send a request to the address listed in Section 11 of the Privacy Policy. In any case, the Company may continue to send you administrative communications relating to the provision of the Company Services.

Sharing your personal data with the company’s subsidiaries or business partners for their own marketing purposes. If you prefer that we do not share your personal data on an ongoing basis with the company’s subsidiaries and/or business partners for their direct marketing purposes, you may opt out of such sharing either simply by changing your preferences in your user profile settings, if you are a registered user, or through the consent management tool available on our website, if you are not a registered user, or by sending a request to the address in Section 11 of the Privacy Policy.

In all the above cases, we may contact you and request additional information that is necessary for the proper processing of your request. In addition, the additional rights described in Section 9 below apply as of May 25, 2018.

9. WHAT APPLIES AS OF MAY 25, 2018?

As of May 25, 2018, the General Data Protection Regulation has entered into force and the following provisions apply:

 

Retention periods applicable to your personal data

We will retain your data only for the period necessary to fulfill the purposes for which the data was collected, as described in this Privacy Policy. In any case, the following retention periods will apply regarding the processing of your personal data for the purposes referred to below:

-Data collected for the purposes referred to in Section 3, points a) to h) of this Privacy Policy are retained for the duration of the provision of the Company Service, plus the duration of the limitation period in accordance with the applicable legislation in force from time to time, after the termination of the Company Service. Data collected for the purposes of Section 3, point i) of this Privacy Policy are retained for the period required for you to log in to the Company Service through a social network, and

-Data collected for the purposes of Section 3, point j) are retained in a form that permits identification of data subjects only for the period required for the purposes of processing personal data; personal data may be stored for longer periods, provided that the personal data will be processed solely for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, in accordance with Article 89(1) of the General Data Protection Regulation and provided that the appropriate technical and organizational measures required by this Regulation are implemented in order to safeguard the rights and freedoms of the data subject (“storage limitation”)

-Data collected for the purposes of Section 3, point k) are retained in a form that permits identification of data subjects only for the period required for the purposes of processing personal data; personal data may be stored for longer periods, provided that the personal data will be processed solely for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, in accordance with Article 89(1) of the General Data Protection Regulation and provided that the appropriate technical and organizational measures required by this Regulation are implemented in order to safeguard the rights and freedoms of the data subject (“storage limitation”)

At the end of the retention period, your personal data will be deleted, anonymized or aggregated.

 

Additional rights

In addition to the rights referred to in Section 8 of this Privacy Policy and following the implementation of the General Data Protection Regulation, you will also have the right, at any time, to:

-Ask the Company to restrict the processing of your Personal Data where:

-You contest the accuracy of the personal data until we take the necessary steps to correct or verify its accuracy,

-The processing is unlawful, but you do not want us to delete your personal data,

-We no longer need your personal data for the purposes of processing, but you need it for the establishment, exercise or defense of legal claims, or

-You have objected to processing on grounds of legitimate interests pending verification as to whether the Company has compelling legitimate grounds to continue the processing.

-Object to the processing of your personal data,

-Request the deletion of your personal data without undue delay,

-Receive an electronic copy of your personal data, if you wish to transfer the personal data you have provided to us either to yourself or to another provider (“data portability”)< where the personal data are processed by automated means and the processing either (i) is based on your consent or (ii) is necessary for the performance of the Company Service, and

-Lodge a complaint with the competent data protection supervisory authority.

10. UPDATES TO THIS PRIVACY POLICY

The Company may amend or update this Privacy Policy for any reason (including, indicatively, changes in applicable law and interpretations, decisions, opinions and orders relating to such applicable law.)

Please refer to the Effective Date at the top of this Privacy Policy to see when it was last revised. Any changes to this Privacy Policy will be notified in advance by posting the revised Privacy Policy on the Company Services. In the event that we make material changes to this Privacy Policy that change the nature of the processing or expand our rights regarding the use of personal data that we have already collected from you, we will notify you and provide you with a choice regarding the future use of such personal data, as may be required by applicable law.