*Η πολιτική απορρήτου είναι διαθέσιμη στα ελληνικά εφόσον ζητηθεί.

This Privacy Policy describes how Hyper Hypo treats customer personal information on the website. According to the General Data Protection Regulation (GDPR), processing must be based on a legitimate basis, a real reason for collecting, storing, using, and disclosing your personal information.

WHO IS THE DATA CONTROLLER?

The data controller of your data is the company under the name “Hyper Hypo”. We collect personal data of the users of our website, only when they provide it voluntarily, while using our online services.

WHAT KIND OF DATA DO WE COLLECT?

We collect information from and about you concerning:

• Contact information such as your name and mailing address if you register with us. We also collect email addresses and phone numbers. If you register, we will also have you create a password.
• Payment information, such as your debit or credit card number. If you use a different payment method, we will collect the necessary information to manage the transaction as well.
• Information you submit online. This includes information you post when you interact with us on social media platforms.
• Information about your product preferences.
• Information about your device and location. We collect the type of device you use to access our Platform. We also collect information about the type of browser you are using and the site you came from or what site you go to when you leave us.

HOW DO WE COLLECT YOUR DATA?

We collect information directly from you when you create an account our purchase product. We also collect information if you contact customer service or sign up for our newsletter.

We collect information via tracking tools like browser cookies and web beacons. We use these tools on our websites and in emails we send to you.

Your personal data are collected so that we can provide you with our services, in an effort to enhance your experience as a customer. Without this data, we may not be able to continue, establish or maintain the facilities and services provided.

Data is also collected during the normal course of work, so that our relationship with our customers can be continued.

We do not disclose or publish your personal data and the confidential information you have given us without your explicit consent.

The data stored for customers will be kept confidential, but we may provide this data to the following parties under the confidentiality duty for the purposes set out in the previous paragraph:

• to any representative, contractor or service provider to third parties who provides administrative, telecommunication, computing or other record keeping services to Hyper Hypo in connection with the operation of the business and on the condition that they comply with the relevant legislation
• to any other person under the obligation of confidentiality to Hyper Hypo who has undertaken to maintain the confidentiality of this data
• to any person to whom Hyper Hypo is under an obligation to disclose information in accordance with the requirements of any legislation or court order that binds Hyper Hypo is under an obligation to disclose information in accordance with the requirements of any legislation or court order that binds Hyper Hypo or any of its online or physical stores.

WHY DO WE USE YOUR DATA?

We process your information on the basis of:

• Fulfilling a contract that we may have with you (regarding the supply of products or services)
• Compliance of our company with a legal or regulatory duty etc.
• Your consent, such as when you choose to receive emails or newsletters from us
• Satisfying legitimate business interests of the company such as direct marketing, fraud prevention, network security and information technology systems, etc. This policy also applies to information collected in our store. Your use of this website indicates you agree to our collection, use and disclosure of your information as described in this Privacy Policy.

HOW LONG DO WE KEEP YOUR DATA?

We will process your data for the period of time that you remain a registered user (i.e. until you decide to unsubscribe).

We will process your data for the period required to manage the purchase of the products or services you have including any returns, complaints or claims relating to the purchase of that product or service particular service. We will process your data for as long as necessary to fulfil your request or application. We will process your data until you unsubscribe or cancel your subscription to the newsletter. If you participate in promotions, we will retain data for a period of 6 months from the end of the promotion. We will process your data occasionally during an action or a specific quality survey or until we anonymise your browsing data.

Regardless of how we process your data during the period that it is necessary to achieve the respective purpose, we will then keep it duly stored and protected for the period during which liability may arise from their processing, in accordance with the applicable legislation. Once the limitation period for any claim has expired, we will proceed to delete the personal data.

Sending order to different recipient

In the case of sending an order from a user to a different recipient, it goes without saying that the final recipient must be aware of the shipment and that the sender will have ensured the receipt of the shipment. The user declares the consent of the necessary personal data that will allow the execution of the order. The same terms apply to gift cards.

Credit/Debit Card Data

The data of your credit/debit cards shall be requested upon completion of your orders, when you choose this payment method. Your credit/debit card data shall be solely used for being transferred through a safe environment to the related banking institute exclusively for the purpose of completing your order. No credit card data are kept in the systems of our Company.

For having the card owner verified, your card data may be forwarded to a third service provider, associated with your bank, which shall complete the payment through your card.

HOW WE SHARE INFORMATION WITH THIRD PARTIES?

Hyper Hypo, for the delivery of the user’s order, obligatorily transmits to a third party the minimum necessary personal data exclusively for the execution of the shipment of the order. These data are: name, surname, address, telephone and electronic contact address.

It is necessary to give access to your personal data to third parties who provide support for the services we offer you, in particular:

• Financial Organisations, Financial Institutions,
• Providers of technology and analytical services,
• Providers and partners of services related to logistics support, transportation,
• Providers and partners of services related to technology support, transportation, financial services, and other services. and delivery and/or facilities of their partners,
• Service providers related to customer service,
• Service providers and partners related to marketing and advertising, such as social networking sites, advertising agencies or advertising partners.

WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?

Data Retention

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

Communication

Your personal data shall be collected by us if you voluntarily provide them, for example, when you contact us. We shall use and store these data exclusively for replying to your request, for example for forwarding your request to the competent department so that the latter contacts you.

These data shall be voluntarily supplied upon your explicit consent. As to the information related to your communication channels (e.g. your email address or telephone number), you also agree that we may contact your through such communication channel for promptly replying to your request.

Following the final processing of your request, your data shall be deleted, if you wish so, and since such deletion does not oppose to the legal storing requirements. To this end, you may contact our data protection officer.

We are committed to respecting the confidentiality of your personal data and ensuring that you can exercise your rights. You can exercise your rights at no cost to you, by writing an email to us at the email address hello@hyperhypo by simply telling us the reason for your request and the right you wish to exercise.

You are hereby notified that you may at any time exercise any of the following rights, as the same are provided for in the General Regulation: a) right to access the information you have supplied and obtain a copy of them, in order to verify legality of their processing, b) right to amend your personal data, c) right to delete your personal data or revoke your consent, unless prohibited under a related legal obligation, d) right to limit processing, e) right to object in case you disagree with processing purposes, f) right to data portability and transfer to other controllers, if technically possible.

With regard to any of the aforementioned rights, you may contact us via email at [email protected], phone at +30 211 7359628 or through the digital form of our website.

In addition, you reserve the right to make a complaint to the Data Protection Authority (www.dpa.gr) either by phone: +30 210 6475600, fax: +30 2106475628, email: [email protected].

In the event that we deem it necessary to confirm the identity your identity, we may request a copy of a document proving your identity.

Regardless of the purpose or legal basis on which we process your data, you have the following rights:

• Right of access: You have the right to receive information from us regarding the processing of your personal data.
• Right to rectification: You have the right to request that we rectify any of your personal data that is incorrect Right to erasure: You have the right, if the requirements specified in Article 17 GDPR have been met, to request the erasure of your data. Accordingly, you may request the erasure of your data, for instance, if it is no longer necessary for the purposes for which it was collected. Furthermore, you can also request erasure if we process your data on the basis of your consent and you withdraw this consent.
• Right to restriction of processing: You have the right to request the restriction of the processing of your personal data if the requirements specified under Article 18 GDPR have been met. This is the case, for example, if you dispute the accuracy of your data. You may then request that processing is restricted for as long as it takes to examine the accuracy of your data.
• Right to object: If processing is based on an overriding legitimate interest you have the right to object to the
  processing of your data. An objection is permissible if processing is either in the public interest or on account of a justified interest of OIKOS or a third party. In the event of objection, you are kindly requested to notify us of your reasons for objecting to data processing. Besides this, you also have the right to object to data processing for the purpose of direct marketing. The same applies to profiling, if this is related to direct marketing.
• Right to data portability: Provided that the data processing is based on consent or on the fulfilment of a contract and that it is also carried out using automated processing, you have the right to receive your data in a structured, common and machine-readable format and to forward it to another data processor.
• Right of withdrawal: Insofar as the data processing is undertaken based upon consent, you have the right to withdraw your consent, with future effect at any time, free of charge.
• Right to lodge a complaint: You also have the right to lodge a complaint with a supervisory authority regarding our processing of your data. If you don’t want us to send information to third parties to show you ads, you can do so by various means such as changing the preferences on your device, browser settings and/or cookies, by checking the privacy policies and settings of the social media sites on which you are using you have a profile, or by sending us an email to the above email address informing us of your request.
  Where we are permitted to process your data on the basis of your consent or to carry out a contract you will also have the right to request the portability of your data. your personal data. This means that you will have the right to receive the personal data that you have given us in a structured, commonly used and machine-readable format in order to transmit it directly to another legal entity without any hindrance from us.
  Where the processing of your data is based on our legitimate interest, you will also have right to object to the processing of your data. Finally, we inform you of your right to lodge a complaint with the competent regulatory authority, before:
• the Hellenic Data Protection Authority:  https://www.dpa.gr/

Minors

According to applicable legislation, you may freely use our website if you have attained the 18th year of age. Otherwise, you may use our website under the supervision of your parents or upon their consent.

CHANGES TO THE PRIVACY POLICY

We may modify the information contained in this Privacy Policy when we deem it appropriate.

If we do so, we will notify you in various ways (for example, through a banner, or a pop-up) or we may even send a notification to your email address when such change is important to your privacy, so that you can review the changes, evaluate them, and, if applicable, even if the change is important to your privacy.

If applicable, object to or unsubscribe from a service or feature. In any case, we recommend that you check this Privacy Policy from time to time to see if we have made any changes to this Privacy Policy changes or if we have introduced any interactive improvements, as you will always be able to find it as a permanent information point on our Website and Application.

Responsible for Personal Data Management for Hyper Hypo is: Andreas Kokkino, (+30) 211 7359628, [email protected].