Privacy Policy

Principles governing data processing

• α) Legality and Transparency
  All personal data we collect is processed lawfully and fairly, always in accordance with applicable law and in a transparent manner regarding the information we collect about you.
• b) Purpose limitation and data minimisation
  Art & Colour collects your personal data for specified, explicit and legitimate purposes and does not process them further in a way incompatible with these purposes. In addition, only appropriate and necessary data is collected to the extent of the purpose for which it is processed. That is, the information and data you share with us is not further processed unlawfully, unless there are reasons of public interest.
• c) Accuracy
  Your personal data is accurate and, when necessary, updated. Art & Colour takes all reasonable steps to promptly delete or correct personal data that is inaccurate, through the ready processing form and by contacting us directly by e-mail, as detailed below.
• d) Limitation of the storage period
  Art & Colour retains your personal data only for the period of time required for the purposes of their processing or compliance with the request of each individual or until the subject requests their deletion (and in any case not more than 20 years, unless we continue to keep them in accordance with the applicable legislation).
• ε) Data Integrity, Confidentiality and Security
  Art & Colour applies appropriate security policies and procedures to ensure that your personal data is processed in a manner that guarantees appropriate security, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage, using appropriate technical and organisational measures.

Despite the efforts made by Art & Colour, security cannot absolutely guarantee against all threats. In the event of a loss or breach of personal data we have a dedicated incident response team and a procedure for dealing with such incidents in order to remedy the breach as quickly as possible, limit the potential consequences and comply with our obligations under the law.

We make every effort to ensure that access to your personal data is limited to those who need to know it. Persons who have access to the data are obliged to respect the confidentiality of this data. In the event of a breach of your personal data, we inform you immediately and by any appropriate means.

Lawfulness of processing

For the processing of your personal data and information to be lawful, certain conditions must be met. Art & Colour is always in compliance with Greek and EU legislation and collects only the personal data that is necessary and required, in compliance with the above legal requirements, which are the following:

• Your consent: To process the data provided to us you must first of all have given us your consent by accepting the terms of use and this privacy policy of our website, the use of cookies. We may occasionally ask you for specific permission to process some of your personal data, and your personal data will only be processed in this way if you agree to this.

You may withdraw your consent at any time either by completing the “Personal Data Management Request Form”, in which you may at any time request the withdrawal of your consent to the processing of certain personal data and the extraction, correction or deletion of your personal data held by us, or by contacting Art & Colour at info@artcolour.gr.

Generally, you are not required to submit personal data to Art & Colour online, but we may ask you to provide certain personal data in order to receive additional information about our services and events. Art & Colour may also ask your permission for certain uses of your personal data and you can either consent to or refuse these uses.

If you accept the consent clause for certain services or communications, such as an electronic newsletter, you will be able to unsubscribe from the relevant mailing list at any time by following the instructions contained in each communication. If you decide to unsubscribe from a service or communication, we will try to delete your data as soon as possible, although we may need a certain amount of time and/or information before we can process your request.

•  Performance of a contract: this is when the processing of your personal data is necessary for the performance of our obligations arising from a contract, when you are a party to a contract or at your request prior to entering into a contract.
•  Legal obligation: this is where we are required to process your personal data in order to comply with a legal obligation, such as to keep records for tax purposes or to provide information to a public body or law enforcement authority.
• Legitimate interest: we may process data about you where we have a legitimate interest in carrying out a lawful activity in order to ensure the continuation of that activity, as long as it does not override your interests.
• Public interest: sometimes processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

Minors

Art & Colour understands the importance of protecting children’s privacy, especially in an online environment. If the child who gives consent to the processing of their personal data has reached the age of 16, then the processing is in accordance with the law. If the child is under the age of 16, such processing is lawful only if and to the extent that such consent is given or approved by the person having parental responsibility for the child.

Collection and use of Personal Data

What data we collect

We receive your personal data if you choose to provide it (for example, if you contact us by e-mail or if you subscribe to certain services). Depending on your activity on our website we collect different data and more specifically, we can separate users of our website into three categories.

Paragraphs 4.1 to 4.4 of this Policy refer in detail to all three types of users, while paragraphs 4.4 and 4.5 refer more specifically to the first two categories of users, i.e. registered users and those who make purchases without registration respectively.

By registering and/or submitting your personal data to Art & Colour, you also consent to the use of such data in accordance with this Policy. Your personal data will not be used for any other purposes unless we obtain your permission, or unless required or permitted by law or professional standards.

For example, if you register on the Art & Colour website and provide information about your preferences, we will use this information to personalise your user experience. When you register or log in using a third party unique registration service, we may identify you as the same user regardless of your use of different devices and personalise your user experience on any other Art & Colour websites you visit.

In some cases where you have registered for certain services, we may temporarily store your email address until we receive confirmation of the information you provided via email (i.e. by sending an email to the email address you provided as part of your registration to confirm your registration request). In some cases, it is possible that you may have previously provided your Personal Data to Art & Colour.

Automatic collection of Personal Data

In some cases, Art & Colour and its service providers use cookies and other technologies to automatically collect certain categories of data when you visit us online and through any emails we may exchange. The collection of this data allows us to personalise your online experience, to improve the performance, usability and effectiveness of Art & Colour’s online presence and to assess the effectiveness of our marketing activities for our services.

IP addresses

An IP address is a number assigned to your computer every time you access the internet. It allows computers and network service computers (servers) to identify and communicate with each other. The IP addresses from which visitors appear to originate may be logged for information technology security and system diagnostic purposes. This data may also be used in aggregate form in order to perform an analysis of trends and site performance.

Cookies

Cookies may be placed on your computer or internet-enabled device each time you visit us online. This allows the website to remember your computer or device and serve more purposes.
On our website a banner will appear which will require your consent to the collection of cookies. If you do not give consent, your computer or internet-enabled device will not be monitored for activities related to the promotion of services. A secondary type of cookies may be required in order to ensure necessary functionality. These cookies will not be blocked through the use of this warning box (banner). Your selection will be stored in a cookie and will be valid for a period of 365 days. If you wish to revoke your selection, you can do so by deleting your browser cookies.
Although most browsers automatically accept cookies, you can choose to accept or reject cookies through your browser settings (an option often found in your browser’s Tools or Preferences menu). You can also delete cookies from your device at any time. However, you should be aware that if you do not accept cookies, you may not be able to fully experience some of the features of our website and some parts of our website may not function properly.
Additional information regarding the management of cookies can be found in the “Help” folder of your browser or via websites such as www.allaboutcookies.org.

Other third party tools and widgets may be used on our website to provide additional functionality. The use of these tools or widgets may install a cookie on your device to make their service easier to use, and to ensure that your activity is displayed correctly on our websites.
Cookies alone do not tell us your email address or identify you personally in any other way. In our analytical reports, we may receive identifying information including IP addresses, but only to determine the number of unique visitors to our websites and the geographic origin of visitors, and not to identify individual visitors.

By browsing our website and entering yourlogin details to access areas for registered users only, you agree that we may place cookies on your computer or internet-enabled device.

Types of cookies

The main types of cookies that websites may use are described below

• Session cookies
  These are temporary cookies that remain in your browser’s cookie file on your device only during your visit and are deleted when you close the browser.
• Persistent cookies
  These remain in the cookie file of your device’s browser even after you close the browser, sometimes for a year or more (the exact length of time depends on the lifetime of each cookie). Persistent cookies are used when the website administrator may need to know who you are for more than one visit (e.g. to remember your username or your preferences regarding website customization).
• First-party cookies
  These are cookies that are installed in your browser and/or on your device’s hard drive by the website you are visiting. This involves assigning a unique identifier to you for the purpose of tracking your browsing of the website. Website operators often use first-party cookies to manage visits and for identification purposes.
• Third-party cookies
  These are cookies used by third parties, such as social networks, to track your visits to the various websites on which they advertise. The site administrator has no control over these third-party cookies.

Cookies from video service providers (Google, Vimeo, DailyMotion, etc.)

These providers may place cookies on your device if you watch videos on our website that they provide to us as an external service. If you disable these cookies, you may not be able to view embedded videos from our site.

Google Analytics

Art & Colour uses Google Analytics. More information on how Art & Colour uses Google Analytics can be found here:  Google Marketing Platform Privacy Policy

In order to provide website visitors with more choices about how their data is collected by Google Analytics, Google has developed the Google Analytics Opt-out Browser Add-on. The add-on communicates with Google Analytics JavaScript (ga.js) to indicate that information about the website visit should not be sent to Google Analytics. The Google Analytics Opt-out Browser Add-on does not prevent information from being sent to the website itself or other web analytics services.

Skroutz service usage data

Our company, in order to be able to constantly evaluate and improve the quality of the services provided to the consumer, uses the Skroutz Analytics service, which works with cookies. Through this service, if you have previously given your consent via Skroutz.gr, usage statistics are securely communicated by us to Skroutz. The data obtained by our company through this service is covered by the  privacy policy as well as the cookies policy of Skroutz.gr, at the end of which you may also withdraw any consent you have given.

Social media apps and widgets

The Art & Colour website may include functionality to allow you to share via third party social media applications, such as the Facebook Like button and Twitter widget. These social networking applications may collect and use information about your use of Art & Colour’s websites (see above for details of “Social Networking” cookies). Any personal information you provide through such social networking applications may be collected and used by other members of that social networking application and such exchanges are governed by the privacy policies of the companies providing the application. We have no control over or responsibility for those companies or their use of your information.
In addition, our website may host blogs, forums, crowd-sourcing and other applications or services (collectively referred to as “social media features”). The purpose of social media features is to facilitate the exchange of information and content. Any personal information you provide to any Art & Colour social media feature may be disclosed to other users of that social media feature (unless otherwise stated at the collection stage) over whom we may have limited or no control.
The publication of personal data of third parties (images, etc.) through the Art & Colour website is illegal, unless the prior consent of the data subjects has been obtained.

Data collected during your registration

When you register on our website, we ask you to provide us with certain information about you.
This information may include:

• Personal data such as name, address, email address, telephone number and other contact details and date of birth. This data is collected when you purchase a product from our stores or when you first register with our online services, e.g. when you make a purchase enquiry, a comment on our social media pages (Facebook, Twitter, YouTube), participate in one of our competitions, etc.
• Account information, such as username and other identifiers or credentials used to access our online services.
• Record of purchases, orders and “basket”, i.e. when you buy a product or add it to your “basket” without completing the order, we keep this data to help you in subsequent purchases.
• Device information.
• IP address and cookie data.
• Location.

Cases in which we ask you to provide us with your personal data:

• When you buy products in our stores or through our call center.
• When you register to use our online services.
• When you request to receive updates on marketing promotions.
• When you enter one of our competitions or complete one of our customer surveys.
• When you make requests.

Data collected from users who purchase products without registration

In this case, users submit to us the absolutely necessary data to complete their order, such as name, address, email address, telephone number and other contact details, which are used until the completion of the order and then deleted without any record being kept.

Transfer of Personal Data to third parties

We do not share personal data with third parties who are not affiliated with us, except as required for our legitimate business and professional needs, in order to respond to your requests and/or as required or permitted by law or professional standards.
This includes the following third parties:

• External service providers: Where necessary, we will outsource to other companies and individuals to perform certain tasks that contribute to our services on our behalf under data processing contracts. We may, for example, provide personal data to partners to host our databases and applications, to provide data processing services, or to send you information you have requested, or to call centres for the purpose of providing support or interview services during market research projects.

All Art & Colour partners are fully compliant with the General Data Protection Regulation (GDPR compliant) and are contractually bound to comply with it. Art & Colour  only transfers personal data to them when they meet our strict data processing and security standards. We only disclose personal data that enables them to provide their services.

• Transfer of business: in the event of a reorganisation, restructuring, merger, sale or other transfer of assets, we will transfer data, including personal data, on a reasonable scale, provided that the recipient agrees to respect your personal data in a manner consistent with applicable data protection laws. We will continue to ensure the confidentiality of any personal data and will notify you when your personal data becomes subject to a different privacy policy.
• Courts, judicial or regulatory authorities:Art & Colour may disclose personal data in order to respond to requests from courts, judicial, governmental or police authorities, or where required and where it is prudent to comply with applicable law, court orders or orders of courts or judicial authorities.
• Public bodies: Art & Colour may disclose personal data in cases of audits by public bodies and authorities, such as, for example, audits concerning personal data protection, security, tax audits.

Indicatively Your Personal Data may be disclosed in part to the following recipients:
– Kinsta (Provision of internet services)
– Google
– Mailchimp (Compilation and sending of newsletters)
– Facebook
– ACS Courier (Order dispatches)
– Courier Center (Order dispatches)
– DHL(Order dispatches)

Art & Colour may also transfer certain personal data outside the EEA (European Economic Area) to external companies working with us or on our behalf for the purposes described in this Privacy Notice. Art & Colour may also store personal data outside the EEA. If this happens, your personal data will continue to be protected by contracts we have with organisations outside the EEA, which are in a format approved by the European Commission. By providing personal data online, visitors consent to this transfer and/or storage of their personal data overseas.

Art & Colour will not forward the personal data you provide to any third parties for their direct use for marketing purposes.