To ensure that you understand which personal data we collect about you and the reasons why we collect, use, and share them.

To explain how we use the personal data you have shared with us so that you have an excellent experience when using this website.

To explain your rights and choices regarding the personal data we collect and process and how we protect your privacy.

The company "chesstavli.com", hereinafter the "Company", fully complies with the provisions of European Regulation 2016/679 on the "protection of natural persons with regard to the processing of personal data and on the free movement of such data".

Data Controller

The "Company", within the framework of providing products, maintains and processes your personal data with confidentiality and respect for your privacy, taking technical and organizational measures for their further protection. For the purposes of this privacy policy, the data controller is: Athanasios Sykas of Eleftherios, manager of the company.

The "Company" recognizes that the protection of personal data, their confidential nature, and their secure handling are of major concern to its customers and users of its online services and websites. The "Company" therefore assures that these same considerations constitute a priority for it, forming an integral part of its business policy and ethics. This Policy outlines the information and data collected by the "Company" and how it may process them, as well as information regarding the actions that the User of the various websites or recipient of the "Company’s" products/services may take if they do not wish their personal details or data to be processed in any way. The term "personal data" refers to information and details that are capable of identifying and recognizing the subjects of such data. Such data may, for example, concern your personal or objective situation, in particular your full name, date of birth, email address, phone number, and/or postal address. The "Company" collects, stores, processes, and uses the personal data you provide to the extent necessary to establish, implement, or terminate a contractual or non-contractual relationship with you. For example, such a relationship arises if you subscribe to receive a newsletter, participate in surveys or competitions, or contact us to obtain information about us and our products. In such cases, we use your personal data in order to securely and effectively process your requests.

Personal Data Collected

A. Data we collect from you when you visit this website:

Device data, device identity, operating system and version installed on the device, time, date, duration of visit, user location, Internet Protocol address (IP address), browser information, browser language, etc.

This information is collected to inform us about the visit to the website. We limit data collection to what is strictly necessary in order to comply with the principle of data processing relating to data minimization.

B. Data we collect from you when you visit and register on this website:

Device data, device identity, operating system and version installed on the device, time, date, duration of visit, user location, IP address, browser information, browser language, or related information such as:

First Name
Last Name
Address
Email address

C. Data we collect from you when you visit, register on this website, and place an order:

Device data, device identity, operating system and version installed on the device, time, date, duration of visit, user location, IP address, browser information, browser language, or related information such as:

First Name
Last Name
Address
Email address
Landline
Mobile phone
VAT number

D. Data we collect from you in person when you visit one of our stores:

First Name
Last Name
Address
Email address
Landline
Mobile phone

Purpose of processing your personal data and legal basis

Through this website, Users are given the opportunity to express interest in the services/products of the "Company". This expression of interest is made through the submission of personal data by the user.

The "Company" may process the information sent by users/visitors for statistical purposes as well as to improve the provision of its services.

Specifically, the purposes for which we process your personal data are as follows:

Fulfillment of sales and delivery of products you order through this website. The legal basis for this processing is the execution of the sales contract.

Issuance of the required tax documents. The legal basis for this processing is compliance with applicable tax law, which requires the collection of subject data and VAT number for the issuance of legal documentation, their retention for a specific period, and their transmission to the Independent Authority for Public Revenue (AADE).

Sending informational messages (either via email or SMS) about new products and/or offers. The legal basis for this processing is the legitimate interest of the "Company" to inform its customers about the products/services it offers.

Granting and redeeming vouchers if you hold such vouchers. The legal basis for this processing is the legitimate interest of the "Company" to inform its customers about the products/services it offers.

Sending offers valid exclusively for registered users. The legal basis for this processing is the legitimate interest of the "Company" to inform its customers about the services it offers.

Responding to inquiries/requests you send via this website. The legal basis for this processing is the legitimate interest of informing users.

Statistics on the user’s origin and browsing duration. The legal basis for this processing is the consent given by the user upon registration on the website.

Additionally, apart from the above processing purposes, the processing of your personal data is possible for the protection of the legitimate interests of the "Company", within the permitted framework taking into account your rights.

Your Rights

Right of access: you have the right to be informed and request access to your personal data that we process.

Right to rectification: you have the right to request that we modify or update your personal data if it is inaccurate or incomplete.

Right to erasure: you have the right to request that we delete your personal data.

Right to restriction: you have the right to request the temporary or permanent cessation of processing of all or some of your personal data.

Right to object: you have the right to object at any time to our processing of your personal data based on reasons relating to your personal situation. You also have the right to object to the processing of your personal data for direct marketing purposes.

Right to data portability: you have the right to request a copy of your personal data in electronic format and transmit this personal data to a third-party service.

Right not to be subject to automated decision-making: you have the right not to be subject to a decision based solely on automated decision-making, such as profiling, if the decision would have legal effects on you or similarly significant effects.

Right to lodge a complaint with the supervisory authority: you have the right to file a complaint against the Company with the Hellenic Data Protection Authority or any other authority designated by the Greek state or any supervisory authority of an EU Member State.

The "Company" is committed to maintaining the confidentiality of the personal data of all visitors to the site and to protecting the personal data you may provide to us.

The entry of user details for the provision of services via this website implies the user’s consent to the collection, processing, and use of their personal data under the terms of this privacy policy. However, the User will be explicitly asked to give their consent for each such action.

Retention Period of Personal Data

The "Company" retains and processes your data for as long as the member account remains active.

The account may become inactive if it has not been used for a period of five (5) years.

If your account becomes inactive, the "Company" will delete your data by the end of the calendar year in which your account became inactive, unless a different retention period is required by applicable law.

Advertising and commercial purposes - Disclosure

To the extent that the User consents to the use of their personal data for "advertising and market research", their personal data may be used for such purposes. The condition for such use of personal data is the provision of explicit consent by the User, e.g., when they activate the appropriate checkbox during a promotional activity and then click a confirmation button. In this case, the "Company" may send the User advertisements for its products and services, tailored to the User’s needs, or suggest participation in promotional activities such as discounts or offers. The "Company" will communicate with the User through the means to which they have consented, such as email if they provide their email address, or via phone or SMS, if they provide their landline or mobile number. Finally, the "Company" may also use the User’s details to analyze and improve the effectiveness of its website as well as for further advertising and market research purposes. The User is entirely free to decide whether, and to what extent, they wish to disclose their details for the aforementioned purposes. Where permitted by the nature of their request and technically possible and acceptable to the "Company", the User may contact our Company anonymously or under a pseudonym. In processing their request, the "Company" may need to disclose their personal data to external service providers in European or non-European countries. The "Company" requires external service providers to use the User’s personal data only in accordance with its standards, this Policy, European data protection legislation and case law, as well as the applicable national regulatory framework. The "Company" does not disclose the User’s personal data to third parties nor sell or rent them without the User’s prior explicit consent. However, the "Company" reserves the right to disclose information about the User if the law requires it or if such disclosure is requested by competent government agencies, administrative authorities, or law enforcement bodies. The "Company" bears no responsibility in the event of disclosure, either to itself or to a third party via the "Company’s" website, by a User of personal details or data of a third party, without the prior consent of such third party. Responsibility for such disclosure lies solely with the disclosing User.

Social networks

On our website chesstavli.com, social plug-ins from social networks may be used, such as primarily the "Like" plug-in of the social network "Facebook": the Internet browser will establish a connection with Facebook’s servers and the fact that you visited the "Company’s" website will be transmitted to Facebook, even if you are not logged into Facebook and regardless of whether you have activated the relevant plug-in. If you are logged into your Facebook account during your visit to the "Company’s" website, Facebook may link your access to the website with your Facebook account. If you click the "Like" button, this will be transmitted to Facebook and stored there. In this way, you can share the "Likes" you have made with your friends on Facebook. The "Company" has no influence on the nature and scope of the data transmitted to Facebook, nor can it know exactly which of your data are transmitted to Facebook and for what purposes Facebook uses such data. If you do not want Facebook to link your visit to the "Company’s" website with your Facebook account, you must log out of your Facebook account before visiting the "Company’s" website. Additional information regarding the collection, storage, and use of your personal data by Facebook as well as the available settings to protect your personal data can be found in Facebook’s privacy notes.

Collection and Use of Children’s Personal Data

The ability to register on this website is addressed only to individuals over the age of 16.

If it is found that personal data belonging to individuals under the age of 16 have been collected, these will be deleted as soon as possible.

Parents or legal guardians of minors are solely responsible for the protection of minors, and the "Company" bears no responsibility for any use of its website by minors without their parents’ knowledge. Parents/guardians should be aware that other information or details voluntarily provided by minors—or others—in the context of email exchanges, or in any other way, may be used by third parties to send emails that should not be received by minors. In such cases, the "Company" bears no responsibility. The "Company" encourages all parents to inform their minor children about the safe and responsible use of the Internet, particularly with regard to submitting personal information or details through it.

Confidentiality, Security of Processing, and Recipients of Personal Data

The processing of personal data is limited within the "Company", and personal data are available to the "Company’s" staff solely for the purpose of providing sales services for which the User has agreed by voluntarily submitting this data. The "Company’s" staff is bound by confidentiality obligations. The "Company" has taken the necessary technical security measures and organizational measures for processing users’ personal data. The personal information collected is stored on restricted-access servers controlled with passwords, and the "Company" uses special technologies and processes and takes strict physical, electronic, and administrative security measures to enhance the protection of such information against loss or misuse and to protect it from unauthorized access, disclosure, alteration, or destruction.

Recipients of the data, under legal obligation, cooperation agreement, or at the request/consent of the data subject, are:

Third parties (such as banks or the AADE) in order to satisfy a request submitted by the data subject on the "Company’s" website to use a service or to process a payment.

Judicial and prosecutorial authorities in case of claims or criminal acts.

In the event of disclosure of such data, the Data Subject is informed when filling out the relevant form/application.

Apart from the cases explicitly required by law, as mentioned above, the "Company" will not otherwise disclose, sell, or disclose any information provided to it by the User without their consent.

Changes to this Policy

We may occasionally make changes to this Policy.

When we make significant changes to this Policy, we will provide you with clear notice appropriate to the circumstances, e.g., either with a prominent notice on this website or via email.

Therefore, you should make sure to carefully read any such notice.