1. Who will use your Personal Data
The website www.digibrain.gr will use your personal data in its capacity as Data Controller. You can contact us electronically at info@digibrain.gr.
If you have any questions regarding the processing of your Personal Data, if you wish to exercise any of your rights or file a complaint regarding your Personal Data, you can contact our Data Protection Officer (DPO) either by phone or by letter to the address of the “company” marked for the attention of the Data Protection Officer or electronically at info@digibrain.gr

2. What personal data we use
The “company” collects and stores exclusively and only the personal data that you provide to it by entering the requested personal information in the corresponding fields or/and your answers in the context of specific actions that it carries out and you may voluntarily participate in and are the minimum necessary for the proper functioning of the website and the services it provides.

In the context of its obligation to safeguard and protect the information of its customers and partners, the “company” undertakes to protect and use in an appropriate manner the personal data that are collected either online from this website or through communication/cooperation with any third party.

The company collects only the personal data that is voluntarily provided by our online visitors, so that we can meet your requests, provide you with information about our products and services, send you informative material (letters, newsletters, etc.) and serve you in the best possible way. Where additional, optional information is sought, you will be informed at the time of collection.

This personal data falls into the following categories:
a) Identification data: includes name, surname, title, etc. If you contact us through social media, your social media username may also be included.
b) Contact data: includes mailing address, delivery address, email address and phone numbers.
c) Transaction data: includes details of payments from you and other details of the products you have purchased from us.
d) Technical data: includes your internet connection IP address, browser, location, operating system and other information about the device you are using to visit the website.
e) Tracking data: includes data that we or others collect through cookies and similar tracking technologies such as web beacons, pixels and mobile identifiers.

What are Cookies?
Cookies are small pieces of text information stored in the browser you use on your PC, Smartphone, and tablet (Chrome, Mozilla Firefox, etc.) to help our site function more effectively. Cookies do not in any way harm users’ computers or the files stored on them. The information stored in cookies is used for identification and optimization purposes.

Categories

1) Necessary Cookies
These cookies allow the basic functions of the site to be performed, such as adding products to the cart, making online payments, and saving products to the wishlist. Without these absolutely necessary cookies, the smooth operation of the e-shop is immediately affected and your personal browsing experience is downgraded, as basic e-commerce functions are not fully functional.

2) Performance Cookies
Performance cookies collect information about how visitors use the website. They allow us to see which pages are visited most often or show us if they encounter any problems while browsing. These cookies do not collect information that identifies the visitor. All information collected by these cookies is aggregated and used only to improve the way www.digibrain.gr works.

3) Functionality Cookies
These cookies “remember” your preferences when you browse our site, so that we can recommend the right products to you based on your needs. With these cookies, you enjoy a personalized version of www.digibrain.gr, which means you can find what you’re looking for much more easily.

4) Advertising Cookies
These cookies are used to deliver ads that are more relevant to you and your interests. They are also used to send targeted ads or offers to limit bulk, unwanted, and irrelevant advertising messages. At the same time, they help us measure the effectiveness of advertising campaigns.

5) Analytics Cookies
These are a subset of Functionality Cookies and give us the ability to evaluate the effectiveness of the various functions of our site so that we can continuously improve the experience we offer you.

Specifically:

Third Party Providers, including Google, may display Company ads on websites across the Internet. Third Party Providers, including Google, may use cookies to inform, optimize and serve ads based on a user’s prior visit to www.digibrain.gr. It may also use cookies from a prior visit to its website for remarketing purposes. Users may opt-out of such cookie use by Google.

You can set your browser to notify you before you receive a cookie and decide whether to accept or reject it. In this case, please note that you may not be able to use all the features of the website. www.digibrain.gr may use Google Analytics features for display advertising (e.g., remarketing, Google Display Network impression reporting, DoubleClick Campaign Manager integration, and demographics and interest reporting).

By using https://adssettings.google.com/, visitors can opt-out of Google Analytics for display advertising and customize Google Display Network ads. Here are the https://support.google.com/analytics/answer/181881?hl=en available to opt out of Google Analytics for the web. www.digibrain.gr complies with the Google AdWords Interest-Based Advertising Policy and Sensitive Category Restrictions and:

• Uses remarketing with Google Analytics for online advertising.
• www.digibrain.gr and Third Party Providers, including Google, together use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick cookie) to inform, optimize and serve ads based on a user’s prior visits to its website.
• www.digibrain.gr and Third Party Providers, including Google, together use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick cookie) to report on how impressions of their ads, other uses of advertising services, and interactions with these impressions and advertising services are related to visits to their website.
We do not collect any special categories of your personal data (this includes your race, religion or beliefs, sexual orientation or preferences, political opinions, union membership, health information or genetic or biometric data, or criminal record information).

3. Collection and Purpose of Processing Personal Data
Personal data is collected only when you voluntarily choose to provide it, for example, in person or if you contact us by email or register as a customer of the “company’s” products and services or if you participate in various actions/competitions on social media or/and as users of www.digibrain.gr.

The use of the products and services provided by www.digibrain.gr, including the provision of online ordering services for our products and services, presupposes the possibility of communicating with you. Therefore, it is necessary when you register on the website www.digibrain.gr to declare the true personal data that will be requested from you.

By registering for the services provided by www.digibrain.gr, you also consent to the storage and use of your personal data in accordance with this Statement.

The purpose of collecting, using and processing your personal data is:
(a) the provision of the services and products you request through the website, for the receipt of which the use or/and processing of your personal data is required, e.g. online orders, and the subsequent fulfillment of contractual obligations, within the framework of order execution, delivery and invoicing under the best possible conditions and in the most efficient way,
(b) the provision of personalized services and the facilitation of the ordering process, in order to make it easier for the user and/or to ensure that the website content is presented in the most efficient way for you and your computer. The legal basis for the processing of personal data for this purpose is your consent (Article 6(1)(a) and Article 9(2)(a) of the GDPR Regulation)
(c) in addition, but only with your optional consent, which constitutes the legal basis for processing in accordance with Article 6(1)(d) of the GDPR Regulation: the promotion of the products and services provided by the “company”, in particular through www.digibrain.gr, and the receipt of advertising material (direct marketing) from the “Company”.

Your data may be processed in any case, even without your consent, for reasons of compliance with laws, regulations, EU law (Article 6(1)(c) of the GDPR Regulation), for the collection of statistics on the use of the Website and its proper functioning (Article 6(1)(f) of the Regulation), and the protection or defense of legal claims in the interests of the Company.

Personal data is entered into the Company’s IT system in full compliance with data protection legislation, including security and confidentiality profiles, and is based on principles of good practice, lawfulness and transparency in processing.

The data is stored for as long as is strictly necessary to achieve the purposes for which it was collected. In any case, the criterion used to determine this period is based on compliance with legal deadlines and the principles of data minimization, storage limitation and rational file management.

All your data will be processed in paper or automated form, ensuring in any case the appropriate level of security and confidentiality.

Your personal data will not be used for any other purposes than those described in the Statement, unless we have your prior consent or unless such use is required or permitted by law.

The “company” only collects “sensitive” personal data when you voluntarily provide such data to us or when such data is required or its collection is permitted by law.

We advise you to refrain from providing sensitive data unless it is required for the purpose of providing the personal data or unless you hereby consent to the use of such data.

The “company” may ask you to provide it with certain personal data for the purpose of sending you information about products and services and/or related offers and announcements. It may also ask for your consent for certain uses of your personal data and you may either consent to or refuse such uses.

If you wish to receive specific services or communications, such as an electronic newsletter, you will have the option to unsubscribe from the relevant mailing list at any time by following the instructions contained in each communication.

If you decide to unsubscribe from a service or communication, we will endeavor to delete your data as soon as possible, although we may require some time and/or information before we can process your request.

4. Access to and Transfer of Personal Data
Data is processed by electronic and manual means in accordance with the procedures and practices related to the aforementioned purposes and is accessible to the Controller’s personnel who are authorized to process Personal Data and their supervisors, and in particular employees belonging to the following categories: technical staff, IT staff and administrative staff, product managers, as well as other members of staff who need to process the data for the performance of their duties.

The “company” does not transfer personal data to third parties. In some cases, the “company” may share your personal data with various companies or service providers that it cooperates with in order to respond to your requests or to natural or legal persons who have been assigned the processing, on condition that we will inform you in advance and obtain your prior consent.

The persons who have access to the data are obliged to maintain the confidentiality of this data.

The Data may also be communicated to countries outside the European Union (“Third Countries”): (a) to bodies, authorities, public entities for institutional purposes, (b) to professionals, independent consultants – whether working individually or collectively – and other third parties and providers that provide the Data Controller with commercial, professional or technical services that are required for the operation of the Website (e.g. provision of IT and Cloud Computing services) for the purposes mentioned above and to support the Company in providing the services you have requested and (c) to third parties in case of mergers, acquisitions, transfers of businesses or their subsidiaries, audits or other extraordinary events.

The recipients referred to receive only the data necessary for their respective functions and undertake to process it properly only for the purposes mentioned above and in accordance with data protection laws. The Data may also be communicated to other legitimate recipients as identified from time to time by applicable laws.

With the exception of the above, the Data will not be communicated to third parties, natural or legal persons, who do not perform commercial, professional or technical duties for the Data Controller and will not be disseminated. The persons who receive the data will process it, as the case may be, as Data Controllers, Processors or persons authorized to process personal data for the purposes mentioned above and in accordance with applicable data protection legislation.

As regards the transfer of data outside the EU, even to countries whose laws do not guarantee the same level of protection of the privacy of personal data as that provided by EU law, the Data Controller informs that the transfer will in any case take place in accordance with the methods permitted by the GDPR, such as for example on the basis of the user’s consent, on the basis of the standard contractual clauses approved by the European Commission, selecting parties that participate in international programs for the free movement of data or that are implemented in countries considered safe by the European Commission.

5. Your Rights Regarding Personal Data
If you wish, you can request at any time to be informed about your personal data that are kept by the “company”, their recipients, the purpose of their keeping and processing, and their modification, correction or deletion, by sending a relevant email to info@digibrain.gr from the email address you have provided. You also have the right to review the personal data we keep and generally to exercise any right provided by the legislation on the protection of personal data.

The personal data that you provide to us through www.digibrain.gr, either during your registration or at a later stage, are collected and used and processed in accordance with the applicable provisions on the protection of personal data, and in particular, in accordance with the provisions of Law 2472/1997 and Law 3471/2006, as amended, but also of the new European General Data Protection Regulation (EU) 2016/679 and Directive 95/46/EC on the protection of personal data.

You retain, upon your request, in accordance with the provisions of Articles 15-22 of the GDPR:

• The right to be informed about the personal data we hold about you.
• The right to rectify your personal data.
• The right to complete your personal data, provided that such data is necessary for the purposes of processing your data.
• The right to erase your personal data. Some data will only be deleted after a specified retention period, for example because in some cases we are required by law to retain the data, or because the data is required to fulfill our contractual obligations to you.
• The right to restrict the processing of your personal data: in certain cases provided for by law, we will restrict your data if you request us to do so. Further processing of restricted data is only carried out to a very limited extent.
• The right to withdraw your consent, which may be done at any time.
• The right to object to the processing of your data.
• You may object to the processing of your personal data in the future at any time, if we are processing your data on the basis of one of the legal grounds provided for in Articles 6(1)(e) and 6(1)(f) of the Regulation (EU) 2016/679. If you object, we will stop processing your data, provided that there are no legitimate grounds for further processing. The processing of your data for advertising purposes does not constitute a legitimate reason.

6. Security of Personal Data
The “company” implements specific technical and organizational security procedures to protect personal data and information from loss, misuse, alteration or destruction. Our partners who support us in the operation of the website and digital infrastructures also comply with these provisions. The company has ensured the compliance of its partner companies with the GDPR policy and does not bear any responsibility for any unlawful act by them on personal data.

7. Links to other websites
This Privacy Policy applies only to the Website defined above. Although the Website may contain links to other websites (known as third-party websites), we inform you that the Company does not have access or use user tracking systems, cookies, web beacons or other user tracking technologies that may be active on third-party websites, the content and material published on them or the methods of processing your personal data. For this reason, the Company expressly disclaims any liability for such matters. Therefore, you should verify the privacy policies of such third-party websites and collect information about the terms and conditions and how they process your personal data.

8. How and for how long we store data
In accordance with Article 5(1)(c) of the GDPR, the computers and programs used by the Company are designed to minimize the use of personal data and identification data. This data is processed only to the extent necessary to achieve the purposes set out in this Policy and will be stored for as long as is absolutely necessary to achieve the specific intended purposes. In each case, the criterion used to determine the storage period is based on compliance with the deadlines permitted by law and the principles of data minimization, storage limitation or rational management of our archives.

• 9. Resolution of complaints
• In accordance with the General Data Protection Regulation, the “company” undertakes to resolve complaints or reports relating to the collection or use of personal data.
• If you believe that the protection of your personal data has been affected in any way, you may appeal to the Hellenic Data Protection Authority, 1-3 Kifissias, P.C. 115 23, Athens, www.dpa.gr

10. Revisions to the Statement
The “company” reserves the right to modify or revise this Statement periodically at its sole discretion. In the event of any changes, the “company” will record the date of modification or revision in this Statement and the updated Statement will be effective for you from that date. We encourage you to periodically review this Statement to check for any changes to the way we manage your personal data.