1. Who is responsible for your data – Where do you go to exercise your rights?

Your Data Controller is the Company.

You can address all requests for exercising your rights below (under 3.1-3.7.) to the Company’s electronic contact address.

General principles observed by the Company regarding transparent information

2.1. Any information that we give you with this document and any information that you may request from us in the future is provided free of charge, provided that the request is not repeated, excessive or manifestly unjustified (see more in 2.3.)

2.2. For each of the above rights that you exercise, the Company will respond to you within one (1) month of receiving the request or in case of objective difficulty, complexity of the request or the number of requests, the Company will respond to the maximum period in total three (3) months regarding either the termination of your application or the justified refusal to perform what you requested for legal reasons expressly specified in General Regulation 679/2016.

2.3. In the event that the Company deems that any of your above rights are manifestly unfounded or the request is excessive or (much more) of a repetitive nature, it is entitled, on the one hand, to charge you with a reasonable fee for providing further information (which is in principle free of charge) and on the other hand to refuse to follow up on the request.

2.4. In the event that the Company has reasonable doubts about your identity when you submit a request to exercise any of your above rights, it may request the provision of additional information necessary to confirm your identity before processing the request.

2.5. In the event that the Company delays beyond the justified period to respond to your request as well as in any case where you consider that your rights are being violated or the Company is not consistent with its obligations to keep your data, you have the right to file a complaint with the supervisory authority. (Personal Data Authority, Athens Kifisias 1-3, P.O. 115 23, Athens, contact@dpa.gr, +30-210 6475600.

2.6. You reserve the right to withdraw your given consent at any time by submitting your relevant request document to the email address ebitafashion@gmail.com (see 1.2)

What are your Rights in relation to the Personal Data you have provided to us?

3.1 Right to Information

You reserve the right to request information about the personal data we received from you and keep for one or more purposes as described below. This text as a whole is a manual of basic information and understanding of the philosophy of the regulatory framework that governs the protection of your personal data. Updates, deepening and clarifications in this text can be given to you after submitting a relevant request to exercise the right to information. (see how in 1.2)

3.2 Right of Access

You retain the right to request from our Company access to your data which we maintain and confirmation in relation to whether they are being processed and more specifically information regarding the purposes of processing, the categories of personal data, the recipients or categories of recipients, the time period of their retention and processing, the existence of the right to complain to the Personal Data Protection Authority, any available information about the origin of the data when it has not been made available by you yourself, the existence or non-automated decision-making including profiling and the relevant methodology, guarantees regarding the policy we follow when the transfer is made to third countries, a copy of the personal data held and processed. (see how in 1.2.)

3.3 Right of Correction

You reserve the right to request from our Company the correction of your data in the event that any element for which we have the right to process has been changed or has been entered incorrectly. (see how in 1.2)

3.4 Right to Erasure

You retain the right to request from our Company complete or partial deletion of your data that we have the right to keep and process, either because they are no longer necessary to fulfill the purposes for which they were collected, or because you revoke your consent, or because the data was collected for a purpose that you consider unlawful. Our Company, in a reasonable time (no longer than one month and under conditions if there is a difficulty no longer than three months in total) will respond to you confirming the total or partial deletion of your data or regarding the impossibility of deleting specific data if any law or the fulfillment of a duty in favor of the public interest, or the right to freedom of expression and information or the exercise or support of a legal claim requires their retention. In this case, on the one hand, you have the possibility of filing a complaint with the supervisory authority, and on the other, of bringing legal action. (see how in 1.2.)

3.5 Right of Limitation

You retain the right to request from our Company a limitation of the processing of your data, quantitatively, temporally or with regard to the purpose of processing them and more specifically (a) either because you question the accuracy of your data and for as long as it takes the Company to confirm their accuracy, (b) either because you consider the processing illegal but instead of deletion you choose restriction (c) or because their use by the Company is no longer necessary but you do not wish to delete them as their retention will serve you for some legal claim, (d) or in the event that you object to the processing of the data and until it is verified whether your rights as a Subject prevail over the Company’s legitimate processing grounds. (see how in 1.2.)

3.6 Right to Portability

You retain the right to receive the personal data you have provided to us in a structured commonly used and machine-readable format as well as the right to further transmit it without objection, given that your data is processed on the basis of consent. In the context of exercising this right, you also have the possibility to request direct transmission from the Company to the third party without your own mediation.

This right is exercised subject to the limitations of the right to erasure (see above under 3.4.) and its exercise cannot adversely affect the rights and freedoms of others. (see how in 1.2.)

3.7 Right to Object

You reserve the right to object to any use of your personal data for the purpose of direct marketing and profiling related to such direct marketing. (see how in 1.2.)

Can your data be forwarded elsewhere?

Your data is not intended to be the subject of transmission to any organization outside the Company with the exception of (a) our Company’s electronic systems and network support service providers – and for the sole purpose of their performance of the contract to support our Company and (b) the relevant police/judicial authorities in the context of our mandatory compliance with the law and to the extent (and subject to the condition) that this may be required.

Guarantees

We assure you that the Company will exhaust every technical and organizational Data protection measure and will only make the optimal, minimum and absolutely necessary use and processing of the Data as defined by law and strictly and exclusively for the purpose for which you have made it available to us.

ΙΙ. Special provisions for the individual categories of Personal Data Subjects that coincide cumulatively with the above general provisions of the Policy

Α. WEBSITE USERS

Α.1. Purpose: To receive, process and maintain your data received (by default) by the Company in order to be able to use (read) the site, i.e. your IP address, the place and time of your connection and the provider of the connection service with the internet (telecommunications companies), is for the sole purpose of using the website.

Α.2. Legal basis for processing: The legal basis for the processing of your data is the fact that the processing is necessary for the fulfillment of the legitimate interests pursued by the Company.

Α.3. Retention Time: Your above data will be kept for as long as the Company’s website operates and then it will be deleted.

Β. RECEIVERS OF COMMUNICATION

Β.1. Purpose: The receipt, processing and storage of your data provided exclusively in the context of communication (e-mail address) is done to satisfy the exclusive purpose of informing you about the Company’s products and actions.

Β.2. Legal basis for processing: The legal basis for the processing of your data is your consent to it in order to fulfill the respective purposes above, according to article 6 par. 1 item a of the Regulation on the protection of personal data.

Β.3. Data Retention Time: In order to fulfill the above processing purpose, i.e. informing you about our products and actions, we consider a reasonable and necessary time to retain your relevant data for a period of five (5) years. After the lapse of five years from the time of obtaining your consent, the relevant data will be deleted unless consent is provided again by you under the above conditions.