I. INTRODUCTION
General
Respect for the privacy of customers (both corporate and individual), partners (both external and internal), employees, and Users of the Website https://nutriyummy.com/ (hereinafter the “Website”), as Data Subjects, and the management, protection, and security of their data are a priority for the company under the name "FLEXSTORES L.P." or under the trade name "FLEXSTORES" (hereinafter: the "FLEXSTORES", "COMPANY", "We", "Us").
The company has established this Privacy Policy, which includes the Cookie Policy as an integral and inseparable part (hereinafter the "Data Policy" or the "Policy"), to inform potential Data Subjects, as defined in the General Terms below, about any processing of their personal data that they disclose to the Company, as well as the purpose and legal basis of such processing.
Specifically, the COMPANY considers personal data to be any information that, either alone or in combination with others, allows the unique identification of the User, in accordance with the provisions of the General Data Protection Regulation (GDPR 2016/679 or General Regulation), the applicable Greek legislation, and the decisions of the Hellenic Data Protection Authority (HDPA). Special category data, such as data relating to health, racial or ethnic origin, receive special protection.
These rules apply when the collection, use, and storage of natural persons' data are carried out digitally or in paper form through a structured filing system.
II. DATA CONTROLLER & DATA PROTECTION OFFICER
Who is the Data Controller and Data Protection Officer (DPO) for your personal data
Data Controller
The Data Controller of your personal data is "FLEXSTORES L.P." The Company's Headquarters are located at Anakreontos 1, 18453 Nikaia (VAT No. 801199485).
Contact Information
- By phone: +30 211 0133008
- By email: [email protected]
- By post: Anakreontos 1, Nikaia 18453, Greece
Data Protection Officer of the Organization
The Data Protection Officer (DPO) is the company "Oikonomakis Christos & Partners International Law Firm."
Contact Information
- By phone: +30 210 3600036
- By email: [email protected]
- By post: Voukourestiou 18, Athens 10671, Greece
Questions & Comments
For any issue regarding this Policy, you may contact us via the following methods:
Data Subjects can submit their comments, inquiries, observations, or complaints regarding this Policy and the general collection and processing of their personal data to the Hellenic Data Protection Authority, which is the supervisory authority in Greece, headquartered at Kifisias 1-3, 11523 Athens (Phone: 210 6475600 | Fax: 210 6475628). More details can be found at www.dpa.gr.
In any case, it is the COMPANY's obligation and duty to address any concerns Data Subjects may have regarding the processing of their personal data by the COMPANY, upon disclosure of their personal information under any legal basis and purpose.
This Policy complies with the General Data Protection Regulation of the EU (GDPR), as well as opinions/decisions issued by the Hellenic Data Protection Authority.
III. COLLECTION AND PROCESSING OF DATA
Depending on the form and purpose of processing for each service, the COMPANY may collect and process personal data, including but not limited to the following:
1st CATEGORY OF DATA SUBJECTS - COMPANY EMPLOYEES
(Includes every employee of the company and any natural person expressing interest in employment with the company)
Categories of Personal Data
Full name, specialization, marital status, working hours, number of children, father's name, mother's name, date and place of birth, residential address, ID number, education, IKA registry number, insurance provider, AMKA, VAT number, Tax Office, OAED card number, contact phone numbers, email, salary, type of employment, recruitment details, bank account details, sick leave declarations, educational leave declarations, school leave details (children's names).
Legal Basis for Processing
Article 6 (1) (b), (c), and (f) of the GDPR
Purpose of Processing
Creation of Personnel File for Recruitment, Payroll and Insurance Records.
2nd CATEGORY OF DATA SUBJECTS - CORPORATE CLIENTS
(Active and inactive clients, as well as third parties authorized to provide information)
Categories of Personal Data
Full name, father's name, phone number, email, address, financial record, VAT number, contract details, debts, bank account.
Legal Basis for Processing
Article 6 (1) (b), (c), and (f) of the GDPR
Purpose of Processing
Client file creation, billing (issuance and tracking of invoices).
3rd CATEGORY OF DATA SUBJECTS - INDIVIDUAL CLIENTS
(Active and inactive individual clients, as well as third parties authorized to provide information)
Categories of Personal Data
Full name, father's name, phone number, email, address, VAT number, debts, bank account.
Legal Basis for Processing
Article 6 (1) (b), (c), and (f) of the GDPR
Purpose of Processing
Individual client file creation, billing (tracking and monitoring of invoices).
6th CATEGORY OF DATA SUBJECTS – USERS OF THE ESHOP
(https://nutriyummy.com/)
Categories of Personal Data
(From receipt documents:) Client details (full name, email, phone number, address, shipping address, bank account number, debit/credit card details).
Legal Basis for Processing
Article 6 (1) (b), (c), and (f) of the GDPR
Purpose of Processing
Creation and tracking of invoices issued via the company's e-shop.
7th CATEGORY OF DATA SUBJECTS - NEWSLETTER SUBSCRIBERS
Categories of Personal Data
Legal Basis for Processing
Article 6 (1) (a) of the GDPR
Purpose of Processing
Creation and tracking of the list of newsletter subscribers.