PRIVACY

Privacy Policy

INTRODUCTION

"GEORGE CARLAS" ( "Company" or "us" ), which you can contact at CONTACT , wants to inform you about how we collect, use and share personal information about and about you through this site and related mobile websites, applications and widgets (collectively "Company Services" ).

You will find the Contents and a brief summary of this Privacy Policy at diagram below. For more information on the Company's data processing, click on the links in each section of the summary.

Contents:

1. WHAT AND WHO DOES THIS PRIVACY POLICY COVER?

2. WHAT KIND OF PERSONAL DATA DO WE COLLECT FOR YOUR PERSON?

3. HOW DO WE USE YOUR PERSONAL DATA?

4. WHY DO WE USE YOUR PERSONAL DATA?

5. HOW DO WE PROCESS YOUR PERSONAL DATA?

6. WHO CAN ACCESS YOUR PERSONAL DATA?

7. ARE YOUR PERSONAL DATA TRANSPORTED ABROAD?

8. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?

9. WHAT IS VALID FROM MAY 25, 2018?

10. UPDATES TO THIS PRIVACY POLICY

11. HOW CAN I CONTACT YOU ABOUT THE PROCESSING OF MY PERSONAL DATA?

1. WHAT AND WHO DOES THIS PRIVACY POLICY COVER?

The Company is responsible for the processing of personal data (eg information identifying a specific person, such as full name or email ) that we collect from and for you through the Company Services that are processed in accordance with the terms of this Privacy Policy.

This Privacy Policy, as well as our Policy regarding Cookies, apply to all users, including those who use the Company Services without having registered or subscribing to a Company Service and those who have registered or are subscribers to a Company Service.

As defined in our Terms of Use, the Services of the Company are addressed to the general public, are not addressed to children and do not collect conscious personal data from children under 16 years of age.

2. WHAT KIND OF PERSONAL DATA DO WE COLLECT ABOUT YOUR PERSON?

The Company collects (1) registration data, during your registration or during your registration in a Service of the Company, (2) public data and publications that you disclose through the Company Services, (3) data that you have allowed social media to disclose to the Company, (4) activity data when you access and interact with a Company service. Specifically, the Company collects the following types of data from and for you:

1. Registration Data , ie the information you submit to subscribe to a Company Service, for example to create an account, post comments, receive a newsletter, or enter a contest. Registration information may include, for example, name, surname, email address, gender, country, zip code and date of birth.
2. Public data and publications consisting of comments or content that you post on the Company Services and your personal data that accompanies such posts or content, which may include your nickname, username, comments, likes, status, profile information and photo. Public information and posts are always public, which means they are available to everyone and may appear in search results on external search engines.
3. Social media data . If you access or sign in to a Company Service through a social media service or link to a Company service in a social media service, the data we collect may also include your user ID and / or username associated with this social media service, the information or content that you have allowed the social media service to share with us, as well as your profile picture, email address or friend lists, and personal information that you have published in relation to the specific social media service. By accessing the Company Services through social media services or by linking a Company Service to social media services, you authorize the Company to collect, store and use the relevant personal data and content in accordance with this Privacy Policy.
4. Activity data . When you access and interact with the Company Services, we may collect specific information about these visits. For example, to allow you to connect to the Company Services, our servers receive and record information about your computer, device, and browser, including your IP address, browser type, and other information. software or hardware. If you access the Company's services from a mobile or other device, we may collect a unique device ID assigned to that device, geolocation data, or other transaction information for that device. We may also collect cookies and other tracking technologies (such as browser cookies, pixels, beacons and Adobe Flash technology commonly referred to as "Flash cookies"). These technologies can be used to collect and store information about your use of the Company Services, such as the links you visited, the video and other content you viewed, the search queries you submitted and the ads you viewed. For more information, see our Cookies Policy.
5. Information from other sources . We may supplement the information we collect with information from other sources, such as publicly available information about your online and offline activities from social media services and commercially available sources.

We do not collect:

• Financial information from a payment service provider: in some cases, we may use an offline payment service to enable you to purchase a product or make payments ("Payment Service"). If you wish to purchase a product or make a payment through a Payment Service, you will be directed to a Payment Service website. Any information you provide to a Payment Service will be subject to the Payment Service's privacy policy and not to this Privacy Policy. We have no control over and are not responsible for any use, by the Payment Service, of information collected through any Payment Service.
• Sensitive information: we ask that you do not send us or disclose sensitive personal data (such as social security numbers, information about racial or ethnic origin, political views, religion or other beliefs, health, criminal background or your involvement in trade unions) in or through the Company Services or otherwise.

Affiliate Services

Finally, the Company Services may also link to websites, including social networking sites, which are managed by non-affiliates companies, and may provide advertisements or offer content, functionality, games, newsletters, contests or applications developed and maintained by non-affiliates affiliated companies. The Company is not responsible for the privacy practices of unrelated companies and as soon as you leave the Services of the Company

or click on an advertisement you should check the applicable Privacy Policy of the other service.

Functionality cookies

These cookies "memorize" your preferences when browsing our site, so to be able to suggest the right products based on your needs. With these cookies you enjoy a personalized version of karlas.gr with the result that you find much easier what you are looking for.

3. HOW DO WE USE YOUR PERSONAL DATA?

We use the personal data we collect from and in relation to your person to:

• Provide you with the Services and the Company Operations,
• To measure, analyze and improve these Services and Operations of the Company,
• To improve your experience through the Company Services (both online and offline providing content that you may find relevant and interesting,
• Allowing you to comment on content and participate in online games, contests or rewards programs,
• Provide you with customer service and to answer your questions,
• Protect the rights of the Company and others. For example, there may be cases in which the Company may use your personal data, including cases where the Company considers, in good faith, that such processing is necessary to: (i) protect, enforce or defend legal rights, the security or the property of the Company, the Company's subsidiaries or their employees, agents, contractors, licensors and suppliers (including the implementation of our agreements and terms of use), (ii) the protection of security, confidentiality and the security of users of the Company's Services or citizens, (iii) the protection of the Company, as well as other involved third parties, such as the Company's suppliers, from fraud or for risk management purposes,
• For to comply with applicable laws or legal procedures and / or to respond to requests from the relevant government authorities.
• For the full a corporate transaction such as a proposed or actual reorganization, merger, sale, joint venture, divestiture, transfer or other disposal of all or part of the business, assets or inventories of the business (including any bankruptcy or similar proceedings). For example, if the Company participates in a merger or transfer of all or a substantial part of its activities, the Company may disclose and transfer your personal data to the party or parties participating in the transaction as part of that transaction,
• social transaction is allowed - if you link or link a social media service account to the Company Services, we may share your username, photo and likes, as well as your activities and comments with other users of the Services of the Company and with your friends related to your social media service. We may also share the same personal information with your social networking service provider,
• Send to you (via email, SMS, telephone, chat and social media), with your prior consent, offers, promotions and other commercial announcements regarding the Company 's Services.
• We send you, with your prior consent, commercial announcements tailored to your interests and needs through the communication methods mentioned in point (j) above.

We may use anonymous data or information that no longer identifies you personally, even indirectly (eg statistics) for any purpose or we disclose it to third parties.

4. ON WHICH LEGAL BASIS DO WE PROCESS YOUR PERSONAL DATA?

The processing of your personal data for the purposes of:

• Section 3, points a) to f ) of this Privacy Policy is necessary for the provision of the requested services and is therefore mandatory, because otherwise the services could not be provided,
• Section 3, point (g) of this Privacy Policy is required by applicable law and is therefore also mandatory.
• Section 3 (h) of this Privacy Policy is performed in the legitimate interest of the Company and its counter parties to conduct such financial transactions. activities. This interest is well balanced with your own interest, as the data processing takes place within the strictly necessary limits of such economic activities. This data processing activity is optional and you may object at any time as described in Section 11 of this Privacy Policy.

Instead, the processing of your personal data for other purposes:

• In Section 3, point (i) is at your discretion, but without your consent it is impossible to link a social media service account to the Company Service, which means that you should to connect to the Service of the Company using a different mechanism,
• Of Section 3, points (j) and (k) is at your discretion, but without your consent it is impossible for the Company to provide you and / or third parties, general commercial announcements of the Company and services / products or announcements of third parties based on your interests and needs and provide you with services under the same name.

You can revoke at any time your consent to the processing of your personal data for the purposes of Section 3 (i) to (k) by sending a notice to the e-mail address described in Section 11 below.

Below you will find an explanatory diagram on the above topic:

5. HOW DO WE PROCESS YOUR PERSONAL DATA?

Your personal data is processed by both electronic and manual means and is protected by appropriate security measures, taking into account the latest technology, implementation costs and nature, the scope, context and purpose of the processing as well as the different probabilities and severity of the risk with regard to the rights and freedoms of individuals. Specifically, the Company uses appropriately administrative, technical, personnel measures, and physical measures aimed at protecting the personal data in its possession from loss, theft and unauthorized use, disclosure or amendment.

6. WHO CAN ACCESS YOUR PERSONAL DATA?

The Company may disclose your personal data for the purposes of Section 3 above to the following categories of recipients located within the European Union or outside the European Union in accordance with and within the limits of the provisions of Section 7 below:

• Third-party service providers who are in charge of processing activities and, where required by applicable law, are duly appointed as processors (eg cloud service providers, other organizations group service providers who serve or support the Company's Service and therefore, for example and without restriction, IT service providers, experts, consultants and law firms resulting from possible mergers, divisions or other transformations, and
• To affiliated companies in their capacity as data controllers or data processors.
• To the competent authorities for the purposes of complying with applicable laws.

The data processors appointed by the company include IT service providers. You can request a complete list of designated data processors from the Company at referred to in Section 11 of this Privacy Policy.

7. ARE YOUR PERSONAL DATA TRANSPORTED ABROAD?

The data can be transferred to countries inside and outside the European Economic Area and in particular to the United States. The European Commission recognizes that some countries outside the EEA provide an adequate level of data protection in accordance with EEA standards. The full list of these countries is available at http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm . For transfers from the EEA to countries not considered safe by the European Commission, we have established appropriate and appropriate safeguards to protect your personal data and the transfer of your personal data in accordance with applicable data protection laws, such as standard contractual clauses approved by the European Commission in accordance with Articles 45 and 46 of Regulation (EU) 2016/679 data protection (the "Privacy Regulation" ).

You have the right to request a copy of the above measures and further information regarding your personal data by contacting the Company at the address listed in Section 11 of this Privacy Policy.

8. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?

You have the right, at any time, to:

• you receive confirmation as to whether your personal data exists and are informed of its content and origin, verify its accuracy and request their correction, updating or modification,
• you request the deletion, anonymization or restriction of the processing of your personal data that have been processed in violation of applicable law,
• object to the processing, in all cases, of your personal data for lawful reasons.

You can send your request to the address listed in Section 11 below. Include your email address, name, address, and phone number in your request and specify clarity the information you want to access, change, update, remove or delete.

We remind you that even after your account is canceled, or if you ask us to delete your personal information, copies of certain information from your account may remain visible to some cases where, for example, you have shared information on social media or other services or, for example, when such copies are necessary for the purposes of complying with obligations or for legal defense purposes. Due to the nature of caching technology, your account may not be immediately inaccessible to others. We may also retain creation information backups of your account on our servers for a period of time after your cancellation or deletion request, in order to comply with applicable law.

We also give you many options regarding the use and disclosure of your personal data for marketing purposes. You can revoke your consent regarding:

• Receiving emails from us . If you no longer wish to receive marketing-related emails from us, you may opt out of receiving emails related to marketing either by following the unsubscribe instructions in our announcements or simply changing your preferences in your user profile settings if you are subscribed user or through the consent management tool available on our site, if you are not a registered user. You can also send a request to the address listed in Section 11 of the Policy Privacy. In any case, the Company may continue to send you administrative announcements regarding the provision of the Company's Services.
• Sharing your personal information with company affiliates or business associates for their own marketing purposes . If you prefer not to disclose your personal information on an ongoing basis to Company affiliates and / or business associates for their immediate marketing purposes, you can opt out of this notification either by simply changing your preferences in the user profile settings if you are a registered user, either through the consent management tool available on our website, if you are not a registered user, or by sending a request to the address of Section 11 of Privacy Policy.

In all the above cases, we may contact you and ask for more information, which is necessary for the proper processing of your request. Also the additional permissions described in Section 9 below are valid from May 25, 2018.

9. WHAT IS VALID FROM MAY 25, 2018?

As of May 25, 2018, the General Data Protection Regulation has entered into force and the following provisions apply:

1. Retention periods that apply to your personal data

Will we retain your data only for the period necessary to fulfill the purposes for which the data was collected as described in this Privacy Policy. In any case, the following retention periods will apply to the processing of your personal data for the purposes set out below:

• The data collected for the purposes mentioned in Section 3, points a) to h) of this Privacy Policy are retained during the provision of the Company's Service, plus the limitation period in accordance with the current legislation, after the expiration of the Company's Service. The data collected for the purposes of Section 3 (i) of this Privacy Policy is retained for the period of time required to connect to the Company's Service through a social network, and
• Data collected for for the purposes of Section 3 (j) shall be maintained in a form which allows the data subjects to be identified only for the period required for the purposes of the processing of personal data; personal data may be stored for longer periods shall be processed only for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, in accordance with Article 89 (1) of the General Regulation on Personal Data and provided that the this Regulation to safeguard the rights of the data subject ("limitation of the storage period")
• collected for the purposes of Section 3 (k) shall be kept in a form which allows the identification of data subjects only for the period required for the purposes of the processing of personal data; personal data may be stored for longer periods personal data shall be processed only for the purpose of archiving in the public interest, for the purposes of scientific or historical research or for statistical purposes, in accordance with Article 89 (1) of the General Personal Data Regulation and provided that appropriate required by this Regulation to safeguard the data subject 's rights and freedoms (' limitation of the storage period ')

At the end of the retention period , your personal data will be canceled, anonymized or collected.

2. Additional rights

In addition to the rights listed in Section 8 of this Privacy Policy and following the implementation of the Privacy Policy, you will also have the right, at any time, to:

1. Ask the Company to restrict the processing of your Personal Data in the event that:

• Question the accuracy of the personal data until we have taken the necessary steps to correct or verify its accuracy ,
• Editing is illegal, but you do not want us to delete your personal data,
• We no longer need your personal data for editing purposes, but you need it to create, exercising or defending legal claims, or
• You have objected to the processing for reasons of legitimate interest pending verification as to whether the Company has regular legitimate reasons to continue processing.

2. You object to the processing of your personal data,
3. Request the deletion of your personal data without undue delay,
4. Receive an electronic copy of your personal data if you wish to transfer the personal data you have provided to us, either to yourself or to another provider ("data portability") & lt ; when personal data is processed automatically and the processing is either (i) based on your consent or (ii) is necessary for the performance of the Company's Service, and
5. File a complaint to the relevant supervisory protection authority data.

10. UPDATES TO THIS PRIVACY POLICY

The Company may modify or update this Privacy Policy for any reason (including, but not limited to, changes in applicable law and interpretations, decisions, interpretations, under this applicable law.)

Refer to the Effective Date at the top of this Privacy Policy to see when it was last revised. Any changes to this Privacy Policy will be notified in advance by posting the revised Privacy Policy to the Company Services. In the event of any material changes to this Privacy Policy that alter the nature of the processing or extend our rights to use the personal data we have already collected from you, we will notify you and provide you with a choice regarding future use. of such personal data, as may be required by applicable law.

11. CONTACT US

If you have any questions about this privacy policy, please contact us at CONTACT .