Introduction

At “Mene & Jo” Company, hereinafter referred to as “BUSINESS”, we are committed to protecting and respecting your privacy. Compliance with our Privacy Policy (“Policy”) for Personal Data (“PD”) sets out the basis on which your PDP (“Personal Data Policy”) is collected.

The Policy has been developed to protect your PD and take appropriate organizational, technical, and legal measures. The PD is provided to us by you with your free consent directly, for the sole purpose of procuring, designing, and billing for our services that you have agreed to. This policy aims to help you understand why we collect your personal data and how we use it. Please take some time to read it carefully.

Information and PD we collect about you

We collect information and PD from you, which you provide either with your free consent directly through our Company’s website (https://mene-jo.gr/), either in person with physical presence at our offices or by telephone.

As required by Greek Law – and to serve you better – our obligation as a business is to process data, including the following, which could contain or be considered to contain PD:

Regarding our communication with you and your best service

We might need to contact you by email or telephone or through social media or messaging systems, for clarification and administrative reasons, such as for the design process of the projects you have assigned us to carry out, the management of the whole communication, and generally for your better service.

We also inform you that:

• When you visit the website of our BUSINESS, your device’s browser provides us with information such as your current IP address, web browser type, access time, and our website’s pages that you visited are collected and used for statistical data compilation. This information may be used to help us improve our website, and the services we offer and to design new services for you.
• We may use cookies and similar technologies to help provide our website data and to offer you a more personalized user experience in line with your needs and requirements. In this case, you have the option to reject the proposed cookies.

Purpose of Personal Data Processing

We process PD for the following purposes:

• Contact with you
• Promotional actions and informational activities for our BUSINESS only with your explicit consent

Legal Basis of the Processing Personal Data

The laws, regulations, and directives governing the processing of PD in the case of the e-shops we manage are as follows:

• Directive 2000/31/EC, Decree 131/2003 (on electronic commerce)
• Law 2251/1994 (On consumer protection for distance sales)
• Regulation EU/679/2016 (GDPR)
• Law 4624/2019 (Measures for the implementation of Regulation EU/679/2016)
• Law 4537/2018 (Payment services and other provisions)

Based on the above legislation, we inform you that the legal basis for the processing of PD is your free consent.

Personal Data Protection

The BUSINESS is committed to making every reasonable effort to protect your PD. To that end, we use a variety of security technologies and procedures to protect your PD from unauthorized access and use. Kindly note, however, that no physical or electronic security system is completely secure. We cannot guarantee the complete security of our databases, nor can we guarantee that the information you provide to us over the Internet will not be intercepted. Nevertheless, we are committed to continuing to review and improve our security policies and implement additional technical and organizational security measures as new technologies become available.

The transmission of information over the Internet is not completely secure and may involve the transmission of data to countries outside the European Union. This is due to the use of Cloud solutions for web hosting, email hosting, or proprietary software solutions delivered to us via Cloud storage. However, in any case, we do not allow third parties to use your PD for their own purposes. While we will do our best to protect your personal data, we cannot guarantee the security of your personal data which is transmitted to us. Therefore, any transmission of PD is at your own risk. When receiving PD, we use appropriate security measures to prevent unauthorized access.

Personal Data Maintenance

• The period for which the PD is retained by the BUSINESS is determined by the provisions of Greek tax legislation.
• Personal data that are necessary for the conclusion or execution of the order contract between us are kept throughout the contract’s duration and 5 years after its expiration or longer if requested by the competent financial authorities or required by the provisions of the applicable legal framework. In the event of claims being made, these data shall be kept until the issue of an irrevocable decision.
• When you create an account, we retain your PD until you request us to delete or modify them.

Personal Data Transmission

We ensure that your personal data is processed lawfully and is restricted strictly within the BUSINESS while ensuring its confidentiality. We are committed to not transferring your PD to third parties other than those to whom it is required by law or to whom you have already given your consent.

They may, however, be transmitted to our partners who act as processors on our behalf, to the extent that the aforementioned processing purposes are served, and subject to confidentiality to protect them in the context of our contractual obligations, to serve our legitimate interests and with a right of control over them.

Your rights and how you can exercise them

You have the right to:

• A) Know which personal data we hold and process, their origin, the purposes for which they are processed, and the time of their processing (right of access).
• B) Request that your personal data be corrected and/or completed so that it is complete and accurate (right of rectification).
• C) Request the restriction of the processing of your data (right to restrict processing).
• D) Refuse and/or object to any further processing of your personal data held by us (right to object).
• E) Request that we transfer your personal data we hold to any other controller of your choice (right to data portability).
• F) Lodge a complaint with the Data Protection Authority (www.dpa.gr) if you consider that your rights are infringed in any way (right to lodge a complaint with a supervisory authority).
• G) Request the deletion of your personal data from the records we keep (right to be forgotten).

In connection with the exercise of your above rights, kindly note the following:

• The BUSINESS has – in any case – the right to refuse to comply with your requests for restriction of processing or deletion of your personal data or your objection to the processing if the processing or data retention is necessary for the establishment, exercise, or support of its legal rights or the fulfillment of its obligations towards the Greek or European State.
• The exercise of the right to data portability does not imply the deletion of your data from our records, which is subject to the conditions of the immediately preceding paragraph and the conditions of the Regulation.
• The exercise of the above rights acts for the future and does not relate to data processing already carried out.

Processing Manager

The Data Controller is the company under the name “GEORGIA KOSTOUROU & SIA E.E.” (and the distinctive title “MENE & JO Ε.Ε.”), as legally represented.

For the exercise of the above rights in accordance with the European and Greek legislation and the restrictions set forth therein, as well as for matters of GDPR, you may contact us by email at dpo@mene-jo.gr or in written form at the address of the BUSINESS (2 A. Dikonymou Str. and 46 A. Panagouli Str., Zip Code 73134, Chania).

Policy Changes

We reserve the right to change this policy by implementing any new European and Greek Legislative provisions, and at our discretion. If we make any changes, we will post them here for your immediate access.