PRIVACY POLICY
1. General
The website https://www.sabanis.com/ (the “Website”) belongs to “Dimitrios Sabanis and Company E.E.”, a private company legally seated in Greece, Karagiorgi Servias 12 str., PC 10562 Athens, with VAT Number 998621593 and Company registration number (G.E.MI. – Greek abbreviation) 007514201000 (“Company”, “Sabanis” or “We”). Sabanis is a Greek luxury jewellery brand.
Company respects the protection of the Website users’ (the “Users” or “You”) personal data and their privacy and complies with the applicable legislation regarding the processing of personal data. In this Privacy Policy, you will find all information regarding how we collect, use, and share information about you when you access and use the Website. We kindly recommend that you carefully read this Privacy Policy. We have drafted this Policy transparently and clearly to help you decide freely and voluntarily whether you wish to provide us with your personal information.
2. Who is the Data Controller?
Data Controller of the Users’ personal data within the meaning of the General Data Protection Regulation (EU) 2016/679 (“GDPR”) is Company. This means that Company is responsible for processing and protecting your personal data. The office of Company is located in Greece, Karagiorgi Servias 12 str., PC 10562 Athens and the store is located in Athens, Voukourestiou 2 str., PC 10564.
Contact details
Email address: [email protected]
Tel.: +30 21 0323 0683
3. What personal data do we collect and what are the purposes and the legal bases for data processing?
Depending on how you interact with us, we will process your data for various purposes and on different legal bases. In particular:
- Voluntarily provided data
(a) When you create an account, we ask you to provide your first and last name, your email address, your chosen password, and optionally your phone number if you want easier access to order-tracking information. You can also optionally choose whether you are more interested in female or male-oriented jewels. The purpose of the processing is the User’s authentication and to facilitate the User’s activities on the website (e.g., shop faster, be up to date on an order’s status, keep track of previous orders, etc.). The legal basis for the processing is your consent (Article 6 (1) (a) GDPR) that you provide before you create your account, after having read the present Privacy Policy, by clicking on the specific tick-box.
(b) When you carry out a transaction as a new customer, we ask you to provide your full name, contact information (e-mail address or telephone number), shipping address (Country, address, postal code, city) and payment information (e.g., card details etc.). All this information is necessary for the execution of the transaction (e.g., delivery of products, billing, communication). The legal basis for the processing is the performance of the contract (Article 6 (1) (b) GDPR). With your consent (Article 6 (1) (a) GDPR), which you provide by ticking the specific tick-box, we will save the above information for future orders. We will keep some transaction-related data for tax purposes (Article 6 (1) (c) GDPR).
(c) When you book an Appointment with us, either by calling us at +30 210 3230683 or by using the Form that you will find on the Website, in the tab “Book an Appointment”, we ask you to provide your full name, title, e-mail address, phone number, choose the date and time, kind (call/video/in-store) and the purpose of the appointment, as well as any message to the client advisor that you may have. In this case, the legal basis for the processing is the consent (Article 6 (1) (a) GDPR) that you give by clicking on the specific tick-box.
(d) When you wish to subscribe to our newsletter, we only ask you to provide a valid e-mail address. We do not collect any further data beyond the email address. We collect this data to send you emails about our latest products and offers. The legal basis for the processing is the consent (Article 6 (1) (a) GDPR) that you give by clicking on the specific tick-box. You may unsubscribe from our mailing list at any time by following the instructions within each email you receive.
(e) We may also use the contact details of our existing customers (e.g., account holders or Users that have purchased our products) for marketing purposes (e.g., send emails about our latest offers and deals). The processing of personal data for marketing purposes may be regarded as carried out for our legitimate interest to promote our products. However, you may unsubscribe from our mailing list at any time by following the instructions within each email you receive.
(f) When visiting SABANIS boutique, you may voluntarily provide your name, phone number, and email address through a registration form or other consent method. Providing this information is entirely voluntary and done with your consent. The information you provide will be used for informational messages, promotions, new product announcements, events, and general marketing from SABANIS. By providing your contact information, you agree to receive automated or manual marketing messages (email or SMS) from SABANIS. Your consent is optional and is not a condition of purchase. You may unsubscribe from marketing messages at any time by using the unsubscribe link included in emails or by replying STOP to SMS messages. Once unsubscribed, you will no longer receive marketing messages unless you choose to re-subscribe. Your personal data will be securely stored and used exclusively by SABANIS in accordance with our Privacy Policy. Your data will not be sold or shared with third parties without your consent. SABANIS reserves the right to update these terms at any time. Continued use of our services following such changes constitutes acceptance of the updated terms.
2. Automatically collected data
(a) When you visit the Website, some information is automatically collected from our server and recorded in log files. This data may include information about the device and browser you use, your network connection, your IP address, etc. The temporary storage of the IP address is necessary to enable the delivery of the website to the user’s computer. We store the above data to ensure the Website functionality, security, availability, integrity, and confidentiality of information from accidental or unlawful acts or incidents. The legal basis for the temporary storage of data and log files is Article 6 (1) (f) GDPR.
(b) We also collect information automatically by using cookies or similar technologies. For more information on cookies, please visit our Cookies Policy.
Who do we share your personal data with?
Your data shall not be disclosed to any third party, apart from the following:
(a) Vendors who are required to have access to personal data to provide their services (e.g., IT services company, hosting providers, accounting office, courier service provider). All vendors are bound by specific agreements (controller-to-processor contracts) ensuring protection of your data.
(b) Authorized employees who have access to personal data only when this is necessary (e.g., to handle your requests) and are bound by non-disclosure and confidentiality agreements.
(d) Public or independent authorities such as Public Prosecutor’s Office, Cybercrime Division, Data Protection Authority (DPA), etc. when that disclosure is necessary to comply with a law or to prevent unlawful acts against us or Users of the Website.
5. Data Retention
We will retain your personal data for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. In general, the following data retention policy applies:
When you create an account, we retain your data for as long as your account is active. When you send us a “Book an Appointment” contact form, we process your data for as long as it is necessary to fulfill your request. When you subscribe to our Newsletter, we retain your e-mail address until you unsubscribe. In any case, we retain data for as long as it is necessary to fulfill our obligations according to tax law (e.g., transaction data).
If you request the deletion of your account, we delete all information about you upon deletion of your account unless: (a) we must keep it to comply with applicable law or to keep evidence for such compliance; (b) there is a dispute or claim and we need to retain all relevant information until it is resolved; or (c) we must keep the information for our legitimate business interests, such as fraud prevention and Website Users security.
6. Data security – International data transfers
We have adopted measures of a technical and organizational nature required to guarantee the security of your data and prevent it from being lost, processed, or accessed illegally. We regularly monitor our systems for possible vulnerabilities and attacks and review all processing practices to update security measures.
Our web hosting provider and other partners are located in Greece. Therefore, we do not transfer personal data outside the European Economic Area (EEA). However, if we decide to do so in the future, we will update the present Privacy Policy, and we will provide all appropriate safeguards laid down in the GDPR the Standard Contractual Clauses for personal data transfers to third countries adopted by the European Commission (EU 2021/914 of 4 June 2021 Decision) so that we ensure that your data is transferred with adequate safeguards and is always kept safe.
7. Links to third-party websites
The Website may contain links, hyperlinks, banners or tabs leading to websites operated by third-parties. We kindly recommend that you review the Privacy Policy of each external website and get informed about how each third-party uses your personal data. Company shall not be held responsible for processing activities carried out by those third-parties.
8. Rights of data subjects
We want to ensure that you can exercise your rights enshrined under the applicable laws. To this end, for as long we retain your data you may exercise your rights free of charge. However, we may charge a reasonable fee in case of manifestly unfounded, disproportionate or repeated requests. In particular, you have the following rights:
- to request access to the personal data that we hold;
- to request rectification of inaccurate or incomplete data;
- to request erasure of your personal data to the extent that they are no longer necessary for the purpose for which we need to keep processing them, as we have explained above, or when we are no longer legally permitted to process them;
- to request that we limit the processing of your personal data;
- if you have given us your consent to process your data, you also have the right to withdraw such consent at any time. In the event that you withdraw your consent, this will not affect the legality of the processing carried out previously.
- When we process your data based on your consent of for the purposes of a contract, you can also request portability of your personal data.
- When the processing of your data is based on our legitimate interest, you are entitled to object to the processing.
You can exercise the above-mentioned rights by sending us an email message at [email protected].
Finally, we inform you that you have the right to lodge a complaint with the competent Data Protection Authority if you have concerns that we have violated your rights.
9. Changes to the Privacy Policy
We may amend the information contained in this Privacy Policy when we consider this appropriate having regard to the applicable laws. The version of the Privacy Policy that applies to the processing of your data, is the one available at the Website when you visit it. In case of an amendment, we will also change the “Last Updated” date at the beginning of this Privacy Policy.
COOKIE POLICY
The website www.sabanis.com (the “Website” or “We”) uses cookies. We have drafted this Cookies Policy to provide users (“You”) with more information on cookies and the purposes for which we use them.
1. What are cookies?
Cookies are little text files/data files which are sent to the Users browsers and are stored on their devices (e.g., laptop, mobile phone, tablet and other devices) when they visit a website. The term “Cookies” also refers to other similar technologies used to install and/or collect information on or from the user’s terminal equipment (for instance, pixels).
Depending on their provenance cookies are classified as “First-party cookies” and “Third-party cookies”. First party cookies are set by the website you’re visiting. Third-party cookies are set by an entity that is distinct from the one that operates the website visited by the user. This happens when a website uses external services placing their own cookies. Depending on their endurance cookies are classified as “Session cookies” and “Persistent cookies”. A Session cookie is automatically deleted when the user closes his/her browser. A “persistent cookie” remains stored in the user’s terminal device until it reaches a defined expiration date.
2. Legal framework regarding the use of cookies
The use of cookies is regulated by European Directive 2002/58/EC e-Privacy (this Directive is expected to be replaced by the ePrivacy Regulation). Each website may place cookies or have access to already stored information in the website user’s terminal equipment only upon explicit consent of the website user. However, website operators do not need user’s consent to use strictly necessary cookies. Consent should be given by a clear affirmative act, according to the General Data Protection Regulation (“GDPR”), after the user gets informed about the use of cookies, their usefulness, the purpose of the processing, and any recipients of the data.
3. What types of cookies do we use?
Of the different types of cookies, the Website uses the following:
Necessary Cookies
“Strictly Necessary Cookies” are required for the proper functioning of the website. These cookies ensure basic functionalities and security features. They are used to respond to actions made by you when requesting services, such as filling out forms. If you deactivate these cookies, the Website’s services will not work. Therefore, these cookies are always active, and, according to the applicable law, website operators do not need your consent to use them.
Performance Cookies
“Performance Cookies” help websites count visits and traffic sources so they can improve their content, presentation, and performance according to visitors’ preferences. They help websites to know which pages are the most and least popular and see how visitors move around the Website. All information these cookies collect is aggregated and therefore anonymous. If you block these cookies, the Website will not know when you visited it.
Marketing Cookies
“Marketing Cookies” track users across websites to deliver advertisements more relevant to them and their interests (targeted advertising). They are also used to limit the number of times you see an advertisement and help advertisers measure the effectiveness of advertising campaigns. These cookies include “Social Media Cookies” which are set by Social Media platforms. These cookies may also track your activities. However, disabling them may result in you not being able to view the embedded content.
4. Cookies and personal data processing
The use of cookies may be related to personal data processing (e.g., IP address, location data, behavioral data). Therefore, we recommend you consult our Privacy Policy to be informed about how we process users’ personal data.
5. International data transfers
Some cookies are put in place by third-party partners that provide their services. For service efficiency purposes, some of these providers’ servers may be located outside the European Economic Area (EEA). Therefore, some cookie-related information may be transferred outside the EEA. We inform you that this data is transferred with adequate safeguards and is always kept safe.
6. How do I consent to the use of cookies? Can I change my preferences?
By accessing the Website, you will see a cookie banner, where you can declare which cookies you want to be enabled, except for the always active “strictly necessary cookies”. That way, you consent to the use of cookies after having been informed about cookies through a link to this Policy. You can withdraw your consent and change the settings of cookies at any time through the “Cookie Settings” section, available on the Website.
You can completely delete cookies through the setup options in your browser. However, if you do so, the Website may not function properly.
7. Contact us
In case you need any clarification about the processing of personal data, please do not hesitate to contact us via e-mail at [email protected].