Privacy Policy

The present Privacy Policy informs you about the terms and conditions of processing of your personal data.

  1. Controller

The Controller means the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data. The Controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is the company with the brand name “TARTARAS K. KON/NOU G.P.” and the distinctive title “TARTARAS OPTIKA”,  based in Athens, Akadimias 4, P.C. 10677, with TIN 998848112, Registration Number 006623401000, tel. 2103604180, email info@tartaras.gr (hereinafter Company).

The Company through the website www.tartaras.gr (hereinafter Website) collects and processes your personal data with respect to your rights as users of the Website and Subjects of personal data, in full compliance with the applicable legal framework, including the provisions of the General Data Protection Regulation (GDPR - 2016/679), of Laws 4624/2019, 3471/2006, 2472/1997 as well as any relevant Act, Directive or opinion of the Hellenic Data Protection Authority (DPA).

  1. Personal data

You can visit the Website and browse the eshop without providing any personal information or entering your personal data. As a result, if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). 

When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

Our visited website

Date and time at the moment of access

Amount of data sent in bytes

Source/reference from which you came to the page

Browser used

Operating system used

IP address used (if applicable: in anonymized form)

- When you contact us

Personal data is collected in the case that you fill out the contact form or you send us an email and it is stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration. 

- When you proceed with an order /conclude a contract

In that case we process the data that is necessary for the completion of the order and the performance of the contract, such as contact details (name, address, telephone number, email) or financial information (such as TIN in case of invoice issuance).

Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, provided there are no legal storage obligations to the contrary.

Please note that the processing of your personal data takes place under the condition of your full and unconditional active consent, which is provided when completing the order form by selecting the relevant button "I accept the Terms of Use and Privacy Policy".

Specifically regarding the promotional emails, your data is processed only if you have consented, i.e. if you have chosen to receive emails of relevant content (newsletter). At any time you wish, you can withdraw your consent and request your deletion from this service and you will no longer receive a newsletter to your email address.

In any case, your data is kept by us only for as long as you consent or for the time that is required to fulfill our legal and tax obligations or for judicial use.

  1. Purposes of Processing

We collect and process your personal data only to the extent that it is necessary for the provision of our services and only for the following purposes:

- To manage the registration of your data on the Website www.tartaras.gr

- For communication and advertising purposes, when you subscribe to receive our newsletter. We will not send you an email newsletter, unless you have expressly confirmed that you agree to the sending of the newsletter. In that case, we process your personal data, such as your email address, to inform you about our products and the latest offers. 

- To service the transactions that take place in our online store and in particular, the management of the orders, the invoicing, the execution and delivery of the orders, the service of your requests, the management and execution of any requests of changes and returns of the products.

- For the purpose of statistical analysis regarding the orders from the eshop.

- For the purpose of our compliance with a legal obligation, the fulfillment of our obligations to the State and the competent Authorities, the preservation of our rights and claims and generally when the processing is necessary in accordance with the requirements of the current legislation.

In case you have given your consent for the processing of your data for any purpose, this consent is freely revocable at any time.

Regarding the newsletter, you can unsubscribe from the relevant list at any time you wish via the link provided in the newsletter or by sending us an email to the email address info@tartaras.gr, without any financial burden and without providing any explanation or justification for this. After your cancellation your email address will be deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data in excess thereof for any other of the herein mentioned purposes, provided that it is permitted by law.

  1. Notification to third parties

As a general rule, your personal data is not disclosed to third parties and third parties do not gain access to it. However, we may provide access to your data to third parties in the following cases:

- In the context of execution of electronic payments via credit / debit card, your personal payment data is transmitted to Stripe, which uses international banking standards of security and protection of transactions. The processing of your card details by the banking institutions is done exclusively for the completion of the transaction, i.e. the repayment of the products purchased from the online store. It is pointed out that the Company does not keep data and details of credit cards and / or bank accounts of the customer. For more information about how Stripe collects and uses your personal data please read their privacy policy here (https://stripe.com/gb/privacy) before completing the payment process on our website.

- For the needs of execution and delivery of the order, we transmit the necessary data to our partners, i.e. the courier companies we cooperate with, ACS and DHL. You could find   

- In any case we are legally obliged or when it is necessary to defend our rights, such as in the court, in public bodies or organizations. 

  1. Rights of the Data Subject

As the Subject of personal data and according to the current legislation, you have the following rights:

- The right to ask for any information regarding the data processing, such as the identity and the contact details of the controller, the purposes of the processing for which the personal data are intended, as well as the legal basis for the processing, the legitimate interests pursued by the controller or by a third party, the recipients of the personal data, where applicable, the fact that the controller intends to transfer personal data to a third country or international organization, the period for which the personal data will be stored.

- The right to request confirmation as to whether or not personal data concerning the subject is being processed. In that case you have the right to request free access to your personal data held by the Company, as well as information about the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data, the right to lodge a complaint with a supervisory authority, the existence of automated decision-making, including profiling e.t.c.

- The right to obtain from the controller without undue delay the rectification of inaccurate personal data as well as the completion of incomplete personal data.

- The right to obtain from the controller the erasure of the personal data without undue delay, under certain conditions, such as when personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, when the data subject withdraws consent on which the processing is based and there is no other legal ground for the processing, the data subject objects to the processing pursuant to Article 21,the personal data have been unlawfully processed, the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject, the personal data have been collected in relation to the offer of information society services referred to in Article 8(1).

- The right to obtain from the controller restriction of processing in the following cases, where the accuracy of the personal data is contested by the data subject, where the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead, where the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims, where the data subject has objected to processing pursuant to Article 21(1), pending the verification whether the legitimate of the processing of your personal data when their accuracy is questioned, the processing is illegal, the data is no longer needed in the Processor or you have objections regarding the automated processing.

- The right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning the subject, which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions or where personal data are processed for direct marketing purposes.

To exercise the aforementioned rights, you have to contact us at the email address info@tartaras.gr.

  1. Processing Security

The Company takes all necessary technical and organizational measures to ensure that the personal data are being processed securely, against malicious activities, theft, falsification, unauthorized disclosure, transfer or access to them and generally against all illegal forms of processing. 

This website and eshop uses the SSL (Secure Sockets Layer) protocol for secure online trading, in order to protect the transmission of personal data and other confidential content. This protocol encrypts all of your personal information so that it cannot be read or altered through their transmission over the Internet.

  1. Cookies

Cookies are small text files that are stored on your device when you visit our Website and serve to ensure the full functionality of the Website, to facilitate your browsing on it and to improve your user experience.

The operation of the Website will be significantly affected if you do not accept or disable the use of cookies. However you have the option at any time to disable unnecessary cookies, revoke your consent, manage the acceptance of cookies, delete them and generally select the cookie settings you want for the browser you use.

Types of cookies we use:

Absolutely necessary (technical) cookies: These cookies are absolutely necessary for the operation of the Website and are those that allow you to browse it, use different options or services, such as completing a transaction, by executing the order and payment management, the use of security information while browsing, the storage of content for the transmission of video or audio files, etc.

Functionality or personalization cookies: These cookies allow the storage of information, so that the user has access to the service with specific features that can differentiate his experience from that of other users, such as language, appearance or content, depending on the browser used by the user or the area from which he has access etc. Failure to accept these cookies may result in slow performance of the website or inadequately customized suggestions. 

In particular:

Cookies Necessary for the Functioning of the Store:

Name

Function

Duration

_ab

Used in connection with access to admin.

2y

_secure_session_id

Used in connection with navigation through a storefront.

24h

_shopify_country

Used in connection with checkout.

session

_shopify_m

Used for managing customer privacy settings.

1y

_shopify_tm

Used for managing customer privacy settings.

30min

_shopify_tw

Used for managing customer privacy settings.

2w

_storefront_u

Used to facilitate updating customer account information.

1min

_tracking_consent

Tracking preferences.

1y

c

Used in connection with checkout.

1y

cart

Used in connection with shopping cart.

2w

cart_currency

Used in connection with shopping cart.

2w

cart_sig

Used in connection with checkout.

2w

cart_ts

Used in connection with checkout.

2w

cart_ver

Used in connection with shopping cart.

2w

checkout

Used in connection with checkout.

4w

checkout_token

Used in connection with checkout.

1y

dynamic_checkout_shown_on_cart

Used in connection with checkout.

30min

hide_shopify_pay_for_checkout

Used in connection with checkout.

session

keep_alive

Used in connection with buyer localization.

2w

master_device_id

Used in connection with merchant login.

2y

previous_step

Used in connection with checkout.

1y

remember_me

Used in connection with checkout.

1y

secure_customer_sig

Used in connection with customer login.

20y

shopify_pay

Used in connection with checkout.

1y

shopify_pay_redirect

Used in connection with checkout.

30 minutes, 3w or 1y depending on value

storefront_digest

Used in connection with customer login.

2y

tracked_start_checkout

Used in connection with checkout.

1y

checkout_one_experiment

Used in connection with checkout.

session

 


Reporting and Analytics

Name

Function

Duration

_landing_page

Track landing pages.

2w

_orig_referrer

Track landing pages.

2w

_s

Shopify analytics.

30min

_shopify_d

Shopify analytics.

session

_shopify_fs

Shopify analytics.

30min

_shopify_s

Shopify analytics.

30min

_shopify_sa_p

Shopify analytics relating to marketing & referrals.

30min

_shopify_sa_t

Shopify analytics relating to marketing & referrals.

30min

_shopify_y

Shopify analytics.

1y

_y

Shopify analytics.

1y

_shopify_evids

Shopify analytics.

session

_shopify_ga

Shopify and Google Analytics.

session

 


Reporting & Analytics

Facebook Pixel

We use Facebook Pixel to help measure how users interact with our websites.

https://www.facebook.com/privacy/explanation

 

Google Analytics

We use Google Analytics to help measure how users interact with our websites.

https://policies.google.com/privacy

Google Tag Manager

We use Google Tag Manager to help manage analytics vendors.

https://policies.google.com/privacy

 


Advertising

Facebook Custom Audiences

We use Facebook Custom Audiences to deliver targeted advertisements to individuals who visit our websites.

https://www.facebook.com/policy.php

Google

We use Google Ads to deliver targeted advertisements to individuals who visit our websites.

https://policies.google.com/privacy



Additionally, we use pixels and tags from the following third parties, which may in turn place cookies:

Pinterest Analytics

We use Pinterest Analytics to help measure how users interact with our websites.

https://policy.pinterest.com/privacy-policy


TikTok

We use TikTok to help measure how users interact with our websites.

https://www.tiktok.com/legal/privacy-policy?lang=en



Cookies Necessary for the Functioning of the Sites

Name

Function

Duration

_Brochure_session

Used in connection with browsing through site.

-

checkout

Used in connection with Pay checkout on shop.app.

3w

signed_in

Used in connection with Shop login.

1y

user

Used in connection with Shop login.

1y



Reporting and Analytics

Name

Function

_landing_page

Tracks landing pages.

_orig_referrer

Tracks landing pages.

_s

Shopify analytics.

_session_id

Shopify analytics

_shopify_s

Shopify analytics.

_shopify_sa_t

Shopify analytics relating to marketing & referrals.

_shopify_uniq

Shopify analytics.

_shopify_y

Shopify analytics.

_y

Shopify analytics.

*_assignment

Shopify analytics

ab_test_*

Shopify analytics.

cart_sig

Shopify analytics.

ki_r

Shopify analytics.

ki_t

Shopify analytics.


  1. Links to other sites

The Website contains links (links, hyperlinks, banners) to other websites. We do not bear any responsibility regarding the privacy policy these websites follow, nor are we able to know or control it. For this reason you should be informed by each website separately about issues related to personal data.