Privacy policy

1. GENERAL TERMS

Individuals who visit this site (users) may browse through it and use its services and content, either as visitors or as registered users; because of this access, this policy is valid for the processing of their personal data.

The company under the name VROUTSIS BROS SA, is responsible for the processing of personal data of the visitor/registered user and controls the processing of their data on the webpages of its services. The processing of personal data is performed in accordance with the provisions of the General Data Protection Regulation (GDPR 2016/679), Law 4624/2019 and the current Greek legislation for the protection of personal data, as well as for the protection of personal data and of privacy in the field of electronic communications (Law 3471/2006, as applicable) and the decisions of the Data Protection Authority (DPA)

For the processing of your data as described below, the company relies on the following legal foundations:
Execution of contract (Article 6.1.b GDPR): In order to achieve the purpose of communication of the user with the company through www.vroutsi-sa.gr, it is necessary to process the personal data provided by them, when completing the contact form. The purpose of this basic data processing is, for each user, the integrated communication with VROUTSIS BROS SA.

Legal interests (Article 6.1.f GDPR): Some form of processing of personal data is necessary for the improvement of the services of VROUTSIS BROS SA, the detection of fraud or unauthorized access, as well as any cooperation with judicial and regulatory authorities. Furthermore, for the regular information of the visitor and/or the registered user through telephone communication, standard mail, e-mail, short message service (SMS) or any other suitable means of communication in his contact details, which were legally acquired, in the context of the use of www.vroutsi-sa.gr, for the products and services of VROUTSIS BROS SA, in the context of their transactional relationship (Article 11 par. 3 of Law 3471/2006) and provided that the user does not object to this communication. This information may include information about its products and/or offers and/or contests, communication to conduct research to improve the products and the services provided to its users, as well as any other promotional activities and the service of similar purposes. In addition, VROUTSIS BROS SA can communicate with the visitor and/or registered user through messaging services such as Viber, WhatsApp etc., for better communication and cost control. Finally, VROUTSIS BROS SA considers that its legitimate interests include the presentation and promotion of itself, as well as of its products and services on electronic social networks (social media) and other IT services, also giving the opportunity to other users of these networks to participate in promotional activities and declare that they ‘like’ our page and post comments about products and services.

Legal obligation (Article 6.1.c GDPR): some data of the users are kept for the compliance with the legal obligations of VROUTSIS BROS SA, such as for tax and accounting purposes.

Consent: The provision of the email address by the visitor or the registered user in the special field of www.vroutsi-sa.gr is a positive consent action for receiving informative/promotional messages.

2. Processing of Personal Data

VROUTSIS BROS SA will process the personal data of the user as they are declared by him/her, when entering them in the various forms of the website. Each user of www.vroutsi-sa.gr is responsible for the validity and accuracy of the data he/she enters.

As a visitor: In this case, the personal data that will be kept in the files of VROUTSIS BROS SA and their processing will refer exclusively to the execution of the distance selling contract. However, the data that prove the execution of the transaction will be kept stored for tax purposes (invoicing document) and its contact data may be used by VROUTSIS BROS SA. for commercial communication purposes, unless the user has stated that they do not wish such communication.

Type of Personal Data and Purpose of Processing

In particular, the personal data that should be provided by each user through www.vroutsi-sa.gr of VROUTSIS BROS SA. are the following:

Full name

Mobile and landline contact number

E-mail address

The visitor/registered user is also informed that for the purposes of communication with VROUTSIS BROS SA, in the context of Article 11 par. 3 of Law 3471/2006, the latter shall process the contact details declared by the user. Also, that, when updates are sent via SMS/Viber/email etc. to the registered user for any modification in the terms of use of www.vroutsi-sa.gr with a hyperlink (link), it is possible to record the IP address of their electronic device (mobile phone, tablet, computer, etc.) to prove that the registered user has received the update.

The purpose of basic data processing is to communicate with the visitor and send informational messages. The visitor is informed that the provision of the above mandatory personal data is necessary. For this reason, their consent is not required for this data processing.

Every visitor of www.vroutsi-sa.gr is informed that their personal data concerning products and services of VROUTSIS BROS SA, will be processed for the purpose of serving users – customers by both the competent employees of VROUTSIS BROS SA, as well as by third party recipients and/or the performers of the processing on its behalf. These third parties are transport companies, individual or group shipping companies, internet and e-commerce service providers and customer service call centers with whom VROUTSIS BROS SA cooperates and who are subject to the special strict conditions for the processing of personal data that have been agreed with VROUTSIS BROS SA, as the Head of Processing. VROUTSIS BROS SA requires from its employees, website operators and third-party affiliates to take all necessary technical and organizational measures (including appropriate policies and procedures) to prevent the disclosure of the personal data of its visitors/registered users – customers, who process, possess and implement procedures for the management and processing of personal data, in a lawful manner and protect them in accordance with the GDPR.

No other processing or transmission of visitor data will be performed by VROUTSIS BROS SA. and its website (www.vroutsi-sa.gr) unless there is prior full information and consent, where required.

3. Recipients of personal data

For the data necessary for the service of each of the above processing purposes and within the responsibilities of each recipient, the recipients of the visitor’s/registered user’s data are or may be:

– The competent employees of VROUTSIS BROS SA

– The tax authorities and the banking authorities in case of relevant inspection

– The company that currently provides CRM services and processes the data of the registered users-customers as the executor of processing on behalf of VROUTSIS BROS SA, according to the instructions and orders of VROUTSIS BROS SA. or any other company that shall provide in the future to VROUTSIS BROS SA the same services in replacement of or in cooperation with the above company.

– External partners providing internet services, call center services, product installation services and sales data analysis services, to whom the necessary data for the performance of their duties are transmitted with strict restrictions and procedures. These companies use the data provided to them based on the terms of use of www.vroutsi-sa.gr exclusively in accordance with the instructions of VROUTSIS BROS SA.

4. What rights do you have over your personal data?
Each guest user as a data subject, can exercise their rights at any time, as provided in the General Data Protection Regulation (EU) 679/2016, and in particular in Articles 12 to 23 thereof and the national law and more specifically:

the right to information and access to data processed by VROUTSIS BROS SA

the right to restrict the processing of their data

the right to correct or delete part or all (right to forget) of their personal data

the right to object to the processing of their personal data

the right to the portability of their data.

The exercise of the above rights of each visitor can be performed by:

submitting a relevant request to the following email address: info@vroutsi-sa.gr

Each user is informed that they have the right to withdraw their consent, for any processing of their data they have given their consent to www.vroutsi-sa.gr, through the cookies policy section.

In the case of exercise of one of the aforementioned rights of the registered user, VROUTSIS BROS SA shall take all possible measures to satisfy the request within (1) one month from its submission. In this case, the user is informed that the minimum necessary personal data will be kept, to safeguard the legal interests of the company.

5. How long do we store your data?

The data of the visitor of www.vroutsi-sa.gr will be stored and processed by VROUTSIS BROS SA. until the user requests the deletion of their account or, for any processing of their data based on their consent, until the user withdraws their consent for the purposes of providing the services of VROUTSIS BROS SA. However, some necessary personal data concerning the user’s transactional relations with VROUTSIS BROS SA, as well as the information, consent and withdrawal of the user’s consent for the processing of their data will remain as information for the registered user-client to ensure the proof of the legality of the processing of their data by VROUTSIS BROS SA. and the safeguarding the legal claims of the parties.

If you leave a comment in one of our articles, the comment – critique along with its metadata, will be stored forever.

6. Personal data that belong to a special category

The user is informed that VROUTSIS BROS SA does not collect or require the disclosure of any sensitive personal data (special category data) for the needs of www.vroutsi-sa.gr.

7. Obligation of transparency

For any other information regarding the data, as well as their processing and protection, any subject of personal data may contact the Data Protection Officer of VROUTSIS BROS SA. at info@vroutsi-sa.gr. If, however, they are not satisfied with the answer or, in general, with the way of collecting, processing and managing their data, the subject is informed that they have the right to complain to the competent supervisory authority (Data Protection Authority, www.dpa.gr, 1-3 Kifissias Ave., PC 115 23, Athens, tel. 210 6475600, email: complaints@dpa.gr).

8. What actions do we take to protect your data?

VROUTSIS BROS SA, the processors on its behalf and its representatives/execution assistants are contractually committed to take the appropriate technical and organizational measures for the best possible protection of personal data against accidental or illegal destruction or loss, alteration, illegal disclosure or access to them and generally their illegal processing (including remote access), as well as to ensure the possibility of restoring availability and access to them. These measures aim to ensure a level of security that corresponds to the risk that the specific data may have to face, always taking into account the type and criticality of the data, the evolution of technology, the cost of implementation and the nature, scope, framework and objectives of each specific process, while applying procedures for regular testing, estimation and evaluation of the effectiveness of these technical and organizational measures. In any case, VROUTSIS BROS SA, the processors on its behalf and its representatives/execution assistants are contractually obliged to maintain the confidentiality of personal data and not to disclose or allow access to them, to any third party, without prior notification of their subject, except in cases expressly provided by law.

VROUTSIS BROS SA declares that no other use of the personal data of the visitor/registered user will be made for purposes other than those mentioned in this policy without prior notice and, where required, only with their consent.