Privacy Policy and Use of Cookies

This website, oattree.gr, serves as an online store for the exhibition and sale of products (handmade sweets) through the Internet.

This Privacy Policy and Cookie Use (hereinafter “Data Policy”) has been formulated by our Company in accordance with relevant legislation to inform you clearly, simply, and comprehensibly about our policy regarding your personal data. The purpose is to make you aware of how we manage your data and the procedures you can follow to exercise your legal rights.

Our Company adheres to the relevant legislation for the protection of personal data, as currently enforced with the implementation of the General Data Protection Regulation 679/2016/EU, hereinafter GDPR.

The Data Policy is an integral part of the General Terms of Use and Transactions of “oattree.gr” and is unified with them.

We may modify this Policy from time to time in accordance with applicable legislation. Any modification will take effect immediately upon the modified Policy being posted on our website. At the same time, there will be relevant notification to visitors with a message displayed on the homepage. In any case, if you continue to use our website and services after modifications have been made in accordance with the above, you will be deemed to accept these modifications unreservedly. If you do not agree with the terms of this Policy, as it may be modified, we kindly ask you not to continue using the website and our online store.

A. PERSONAL DATA PROTECTION POLICY

1. What is personal data? Personal data is any information concerning an identifiable person, meaning a person who can be identified, i.e., whose identity can be verified by this identifying element. Such elements include, for example, the name, address, date of birth, and gender of the member, mobile phone number, email address, as well as usage data, such as username and password (Regulation 2016/679/EU).
2. What data do we collect? Users can browse the website without providing any personal information unless explicitly informed and consented to by the Company.

For order completion: When a user places an order, the Company will request the following information: full name, complete address (city, street, number, postal code, country) for product shipment, contact phone, and email address to keep the user informed about the order’s progress.

This information is necessary for the correct execution of online sales and informing the user about it. By providing and accepting the terms of use and the Company’s policy, the user gives consent to the Company to collect the requested information. The user commits to providing accurate and truthful information and updating the Company in case of any changes.

For registration as a MEMBER: Users have the option to register as a MEMBER for quicker and better service. When registering, the Company will request the following information: full name, complete address, phone, email address, and password.

By registering and accepting the terms of use and the Company’s policy, the user gives consent to the Company to collect the requested information, provided voluntarily. In any case, this information is necessary for the execution of online sales and user information. The user commits to providing accurate and truthful information and updating the Company in case of any changes.

The registered MEMBER has access to their information through their account and can correct or delete it. The Company can also do the same with a simple request from the user via email at info@oattree.gr.

Newsletter Subscription

For your subscription to our company’s Newsletter service, with the purpose of sending informative messages about products/services, offers/discounts, and news from oattree.gr, please fill in the relevant box with your email address. By doing so, you provide us with your consent to send you informational emails. You can unsubscribe at any time, either by clicking the relevant option at the end of the email or by making a simple request to our company.

Additionally, we may ask for your mobile phone number to send you brief SMS or Viber messages for updates from our company (regarding products/services, offers/discounts, and news) only with your explicit consent. You can request to stop receiving these messages at any time, either by making a simple request to our company or by clicking the relevant option at the end of the Viber message.

How We Process Your Data

The personal data you provide on our website’s pages and services are exclusively intended for purposes related to your transactions with us, communication with you, ensuring proper service, and improving the services we provide. We only request information necessary for processing your order and completing online sales. These are essential details for processing your order and keeping you informed about its status.

By providing the requested information during your registration or order placement, we inform you of the purpose for which we collect these details. You have access to and the right to correct and withdraw this information at any time. We request your consent to process your data for the specific service our company provides.

Our company does not store or manage your payment information (credit/debit/PayPal). During payment, you are redirected to the payment platform with which our company collaborates, ensuring strict privacy and confidentiality of your details. Our company only receives confirmation that the payment was successfully completed.

Data Access

We assure you that we have taken all necessary technical and organizational measures to safeguard the confidentiality, integrity, and availability of all your data. An SSL certificate is installed for your security during website navigation.

Our company explicitly commits not to transmit or disclose personal information to third parties without your consent unless required by law. If you choose courier delivery for your products, our company, with your consent, will provide your details to the courier companies for the shipment.

Compliance with Legislation

Our company operates in accordance with applicable Greek and EU legislation, securely preserving your personal data for the duration of your registration with any oattree.gr service. The order details required by tax legislation or possible legal claims are stored for the necessary timeframe.

In cases where your actions for an order require completion, your information is disclosed to third parties, such as credit card providers for processing payment on your behalf when making a purchase from our online store, or to our third-party partners providing technical services such as hosting and technical support. We assure you that this information is always encrypted and cannot lead to the identification of the User. Third parties only see numbers and codes that cannot be linked to individuals in any way. Both our website hosting and electronic payment platforms adhere to security measures to ensure the safety and confidentiality of your data, along with respective privacy and personal data policies.

In every instance, employees of oattreegr with access to your personal data are specific individuals under the supervision of the Electronic Store Manager. Unauthorized access to personal data is strictly prohibited, and every reasonable measure has been taken to secure your data.

The kept data may be disclosed to competent judicial, police, and other administrative authorities upon their lawful request and in accordance with the applicable legislative provisions. Additionally, in the case of a legal order, service command, or official preliminary examination, our Company is obliged to provide the relevant information to the respective authority.

User Consent: By conducting any transaction and using any of our services, in accordance with the Terms of Use of oattree.gr and after informing yourself and accepting our Privacy Policy, you provide your consent for us to process your data for the purpose of the respective service you choose each time. By accepting the terms of use and our Data Policy, you consent to the storage of your data in our company’s files, only those that are necessary for our online sale, for the period required by tax authorities and for any legal claims that may arise.

We inform you each time which data we need and for what purpose so that you are aware that they are necessary each time for the purpose of the service we provide to you.

Purposes of Consent:

1. For Order Completion: When the user places an order, either as a member or as a guest, accepting the terms of use and the Company’s policy, they give their consent to the collection by the Company of the information requested for the purpose of completing the order, updating them on its progress, and delivering the products to them. For the shipment of products via a courier company, we will ask the user’s consent to provide their mobile phone number to the courier companies mentioned in our Terms of Use and our Website. By checking the relevant field, the user automatically provides their consent to us for this purpose.
2. For Advertising Purposes: By subscribing to our Company’s Newsletter service with the aim of sending you informative messages about the products/services, offers/discounts, and news of oattree.gr, you provide your consent for us to send you informative emails. Additionally, we may ask for your mobile phone number to send you short written SMS or viber messages for updates from our Company (about our products/services, offers/discounts, and our news). We will send you messages only if we have obtained your consent.

Fraudulent Acts Processing: You agree that, in the presence of reasonable evidence and as required by the specific circumstances, our Company has the right to collect, process, and use data necessary for the disclosure, interruption of offers created with malicious intent, as well as information related to any other illegal or unconventional use of our online store.

Transmission in Case of Legal Order / Transmission to Authorities in the Absence of a Legal Order: As data transmission is not allowed by law, you consent to the transmission of your personal data to law enforcement and supervisory authorities for necessary protection against risks to state and public security, as well as for the prosecution of criminal activities.

You have the right to revoke your consent at any time, in accordance with Article 7(3) of the GDPR, which will apply to the processing of your data after such revocation.

User Rights Regarding Personal Data: According to relevant legislation on personal data, the User has the rights of information, access, correction, deletion, restriction, and objection to processing, as well as the right to object to automated decision-making, as provided in Articles 15 to 22 of the GDPR. The User also has the right to file a complaint with the Data Protection Authority for any violation of their personal data.

Right of Access and Information: The User has the right to access personal data and information about what data is processed, for what purposes, whether there has been or will be a transfer to third parties, the storage duration criteria, the right to request correction or deletion of personal data, or restriction of processing, and the right to object to such processing. This applies to cases of automated decision-making as well.

Right of Correction and Deletion: The User has the right, with a simple request to our Company via email or mail, to request the correction of their details. Also, the User has the right to request the deletion of unnecessary information, either because the purpose for which it was requested has been fulfilled, or because the User revokes their consent or objects to their processing. However, there is no right to delete data if it is necessary for tax reasons or for the establishment, exercise, or support of legal claims.

Registered user members have the ability to access their account created through our online store, manage their information, correct, delete, or even delete an element or their account entirely. Additionally, those registered for the Newsletter or the SMS or Viber messaging service can request deletion either through a simple request to our Company or by clicking the relevant deletion option at the end of the email or message.

Right of Restriction and Objection: The User has the right to request the restriction of the processing of their data if they dispute the accuracy of the data, if the processing is illegal, or if they object to the processing and the Company no longer needs the data but the User requests it for the establishment, exercise, or support of legal claims. The User is informed before the restriction is lifted.

Moreover, the User has the right to object at any time for reasons related to their particular situation, to the lawful processing of their data, specifically in cases where it is necessary for the fulfillment of a duty imposed by public interest or due to the existence of a legitimate interest. The objection request should justify the particular circumstances justifying the objection.

Communication and Submission of Requests: Our Company is always at your disposal for any information, clarification, or request. Contact us via email at info@oattree.gr.

You can submit your request, and we will inform you by phone or by email no later than one month from the receipt of the request. If your request is complex, the deadline may be extended for another two months. If we are unable to respond, we will inform you without delay and no later than one month from your request of the reasons we cannot satisfy your request and your right to file a complaint with the Data Protection Authority. We must be sure of your identity, so we may ask you to confirm your details or provide additional information for identity verification. Your requests are satisfied free of charge unless they are excessive or have a high cost for our Company.

B. COOKIE POLICY

This website uses cookies. Upon entering our website, there is relevant information about the use of cookies, along with a hyperlink leading to this cookie policy. By accepting the use of cookies, by clicking the relevant option and continuing to navigate the website, you automatically provide your consent for the storage of cookies.

Below, you can learn more about the cookies we use, their purposes, and how to manage them.

What are cookies

“Cookies” are small files with information that a website stores on a user’s computer or electronic device so that each time the user connects to the website, it retrieves this information and provides services relevant to the user. An example of such information is the user’s preferences on a website, as indicated by the choices made by the user on that specific website (e.g., selecting specific buttons, searches, ads, etc.). No cookie file used on our website collects personally identifiable information or accesses any document or file on your computer.

For more information about cookies, how to manage and delete them, you can visit www.aboutcookies.org.

Types and functions of cookies

On our website, the following categories of cookies are used:

Temporary (Session) Cookies:

These cookies are stored on your computer or electronic device during your visit to our website and are deleted when you leave. They are renewed if the user visits the website again within a specified period (e.g., 5 days), restoring their duration to 30 days.

• a. Session Cookie for tracking visitor stay time: It measures the effectiveness of each website and helps in improving/upgrading its structure and content based on visitor needs. (Temporary)
• b. Cookie identifying first-time visitors: It measures the increase in website visits. (Persistent)
• c. Cookie recording the origin/entry method of visitors: It measures the effectiveness of the website’s display on third-party websites or search engines. (Persistent)
• d. Cookie recording visitor preferences: It records visitor preferences on the website, aiding in measuring effectiveness and improving/adapting the website to visitor needs. (Persistent)
• e. Cookies recording the country of origin of visitors: It measures the effectiveness and impact of the website. It helps adjust shipping costs and limits, with certain variables like language. (Persistent)

In a second phase, other stored cookies include:

• user: It stores the unique User ID for registered users when logging in. It helps identify users so that when they revisit the website after a few days (<30), they don’t need to log in again.
• grid_columns: It refers to the list of products and how many of them will be displayed per row. User choices are triplets and quadruplets, so the number 3 or 4 is stored.

Third-Party Cookies

We allow only Google Analytics and Facebook Pixel to install cookies. If you enter third-party websites or connect with social media entities (Twitter, Facebook, YouTube) through our website, be aware that these third-party websites or entities may install cookies immediately upon clicking the respective link. These cookies are beyond our control and are governed by the cookie policy of each third party that installs them. You should read their respective policies to understand how to manage them.

Thus, during your navigation on our website and your transactions with us through our services, our Company may collect personal data and other information about you through both our own cookies (First Party Cookies) and third-party cookies, specifically Google Analytics and Facebook Pixel (Third Party Cookies). Our Company uses this data and information for advertising and promotion purposes, statistical purposes, market research to optimize our products and services, to measure the effectiveness of our website, to improve and upgrade its content, to adapt it to user demand and needs, and to measure the effectiveness of the presentation and display of oattree.gr on third-party websites. Additionally, they are used by us for your account connection, to remember products stored in your cart, to connect to your account without requiring the opening of a new account each time you want to make a purchase in our store, for the functioning of the shopping cart, to verify problems on our server, etc.
Managing and Deleting Cookies
Most web browsers provide options regarding how to manage cookies. These options vary depending on the web browser you are using. Depending on the options provided by the web browser you use, you may allow the installation of cookies, disable/delete existing ones, or be notified each time you receive cookies. Instructions for managing and deleting cookies are usually found within the “Help,” “Tools,” or “Edit” menu of the web browser. Detailed guidance can also be found at www.youronlinechoices.com/gr, where the control and deletion of cookie files are explained for most web browsers.

Please note that if you reject or disable the cookies on our website, the functionality of the websites may be partially lost. Additionally, disabling a cookie or a category of cookies does not delete the cookie from the web browser. Such an action should be performed by you by changing the internal settings of the web browser you are using.