Introduction

At dot2dot we want you to know and have control over what data you share with us and what we do with it. This text (called Privacy Policy) explains in simple and clear terms what data we collect and how we use it. Its purpose is to help you get informed and decide what data you want to share with us and in what way.

Processing Manager

The Social Cooperative Enterprise with the name dot2dot KOINONIKH SYNETAIRISTIKI EPIXEIRISI SYLLOGIKIS KAI KOINONIKIS OFELEIAS” and distinctive title “dot2dot KOIN.S.EP.” (hereinafter “dot2dot”) based at 6 Georgiou Stavrou Street, Thessaloniki, is in accordance with the law responsible for the processing of the personal data of visitors to the website www.dot2dot.gr in the context of the provision of its services [hereinafter “Services”].

Personal Data We Collect

In the context of the provision of the dot2dot Services, we may collect and further process your following personal data, depending on the functions you use:

• Identification information (name and surname).
• Contact details (email address, postal address, telephone number).
• Additional information when you use the Cart, such as cart products, order number and date, delivery status, order amount and shipping costs, information regarding any cancellation, change or return of an order, IBAN and name of beneficiary bank account (including any relevant proof), holder’s name and surname, expiry date and encrypted bank card number (in the format 123456ХХХХ7899). We do not have access to your full bank card details as we apply the strong PCI (Payment Card Industry) security and encryption standards.
• Information we receive when you tell us what you think about the Services, such as comments, product ratings (including any photos and order number you send us), satisfaction surveys, questions and answers to them, and your comments or suggestions for us to improve.
• Free text information and any reference of a represented company, which we receive in the context of your submission of interest, through the special contact form on the website.
• Information we collect through tools such as cookies and using local storage, such as your searches on the website with any filters or other sorting/comparison options, the products you view, the details of the purchases you make with the Cart, your interaction with the Services and the functions of our website, technical errors and security issues of navigation and transactions, your IP address, the type and manufacturer of your device, the type of browser, the type and version of the operating system or application that you use, your origin on the website from another website, as well as other statistical information in general about our users.
• Voice recording, in limited cases, when you call our customer service center.

Why we collect them

Your above personal data will be processed by us exclusively to serve the following purposes and according to the following legal bases:

Contract

dot2dot processes your data to be able to offer you the Services you choose to use, such as submitting questions, reviews and comments through our website, including the use of special electronic contact forms, serving your order, including managing changes/returns, the update on the progress of your order, the calculation of pricing depending on the purchases you choose to make, as well as the provision of telephone or electronic service and support to our users.

This includes the contractually necessary recording of calls to the telephone service center of our users, when you submit a request related to your order and which we may need to be able to prove.

Legal interest

It is dot2dot’s legitimate interest to carry out checks to prevent fraud against transactions or malicious use of the Services, as well as for the smooth operation and security of its systems, to send satisfaction surveys and other general or personalized promotional communication to users, to analyze the consumer trends and the profile of its users for internal research and development purposes and to direct suggestions for submitting an answer to another user’s query or product review to specific users.

Legal obligation

Dot2dot is obliged by law to cooperate with the competent authorities to combat specific incidents concerning particular purchases made through the website and which are deemed suspicious of fraud, unauthorized use or theft of a bank card, etc. Dot2dot is also obliged by law to manage and respond to your requests regarding the protection of your personal data.

Public Data

By using the functions of submitting ratings, answering other users’ questions, etc., each user acknowledges that the information they provide, which may reveal their personal preferences, habits or even sensitive personal health data, is expressly made public by them for this purpose. Therefore, dot2dot, relying on this voluntary act of disclosure on the part of the users, processes the data in question for the above purposes.

Consent

As long as you give your consent to the use of technologies such as cookies, information is automatically collected about you, to offer you a top personalized experience, to help you find what you are looking for more easily, to analyze our traffic, as well as for commercial use by our partners.

More information on how we use cookies on our website can be found in the website’s Terms & Conditions. You can at any time change your choice for cookies and withdraw your consent, at the bottom of the website.

Who We Share Them With

Your personal data is collected and further processed by the authorized dot2dot teams, with full respect for your privacy. In the context of the provision of the Services, recipients of your personal data may be the following categories of our partners:

Our website analytics and performance measurement service providers such as Google, data storage service providers such as SoftOne, Microsoft and Amazon, telephone solution providers such as Avaya and Sangoma Technologies, social network providers such as Facebook, as well as providers online maps such as MapBox. Your data may be transferred outside the European Union and in particular to the USA by these companies, even though the relative storage of the data takes place mainly in the EU.

Payment service providers such as Everypay.

Data network service providers to connect our infrastructure to the internet.

Collaborating courier companies, in the context of the delivery of your order.

Communication technology partners, such as Survey Monkey, SendGrid, Nexmo, Bulksms, Twilio, Gleam, Zendesk, Intercom, in the context of managing our inbound and outbound communications with you. Your data may be transferred outside the European Union and in particular to the USA and/or Australia by these companies, even though the relative storage of the data takes place mainly in the EU.

Affiliated customer service provider, Webhelp.

Other categories of partners to whom the transmission of data may be required on a case-by-case basis in the context of the operation of the Services.

The police authorities and any other administrative, judicial or public authority or in general a legal or natural person to whom, based on a law or court decision, a relevant obligation or right of dot2dot to communicate such data may arise.

In addition, in the context of the operation of dot2dot Analytics, as well as the Mixed CPC/CPS Billing Model (see examples above), we share as Joint Controllers with each partner that uses these functionalities, information in the form of either statistics or aggregated data about popularity of products, stores and categories, or user shopping data, respectively. In this context, we conclude special contractual clauses for the protection of personal data, in order to ensure that the necessary security measures for your data are observed. For any issue related to the use of these technologies, please contact us as the appropriate communication channel.

Also, in the context of the best possible management of incoming requests and questions related to the progress of your order through the website Cart, as well as the management of related returns, losses or compensations, but also for the general accounting management of cooperation. For any issue regarding the processing of your personal data in the context of this management, please contact us as the appropriate communication channel.

You should remember that the comments you post or the ratings you make on the website are publicly visible and therefore any other visitor to the website can read them.

How Long Do We Keep Them?

Dot2dot retains the personal data of non-registered users resulting from their interaction with the Services for a maximum period of two (2) years after their last purchase through the website.

The details of the recorded calls documenting any transaction or modification thereof, will be kept for a maximum period of six (6) months.

Otherwise, after the end of the retention period or if a user requests the deletion of their data and there is no pending litigation or other dispute or legal interest arising from the use of the Services, their data will be deleted as soon as possible or will be anonymized.

Our Commitments

At dot2dot we take your privacy seriously. We take appropriate technical and organizational measures every day, in accordance with the latest technological standards and applicable legislation, in order to ensure that the processing of your personal data, either by us or by third parties on our behalf, is lawful, appropriate and has the proper level of security to prevent any unauthorized or accidental access, editing, deletion, alteration or other use thereof.

For example, in order to ensure the privacy of your information as best as possible, we use strong encryption on all our pages.

Your Rights

According to the legislation on the protection of personal data, you have and can exercise the following rights, after verifying your identity:

the right of access, i.e. the right to be informed on the one hand whether your personal data is being processed by dot2dot and on the other hand to receive further information about the processing being carried out,

the right to request the correction of any inaccurate personal data of yours or their completion (e.g. correction of postal address),

as well as if the conditions of the legislation are met:

the right to erasure,

the right to portability, i.e. the right to receive and transmit your personal data, which you have given to dot2dot, to another controller, in an appropriate format,

the right to restrict processing,

the right to withdraw at any time the consent you have given us, without this withdrawal affecting the legality of the processing of personal data carried out before this withdrawal.

Specifically, regarding the use of technologies such as cookies, you can at any time change your choice and withdraw your consent by changing your options at the bottom of the website.

In case of exercising the rights of correction, deletion and limitation of your data, these requests will also be forwarded to the third party recipients to whom this data may have been disclosed by us, in the context of providing the Services.

The exercise of your above rights is done by submitting your relevant written request to dot2dot, to which we undertake to respond within a period of one (1) month from its receipt. This deadline can be extended for two (2) additional months due to the complexity of the request and/or the large volume of requests.

Right of Termination

In case you consider that we have not satisfied your request sufficiently and the protection of your personal data is affected in any way, you can submit a complaint through a special online portal to the Personal Data Protection Authority (Athens, Kifisias Avenue 1-3, P.O. 115 23 | tel: +30 210 6475600). Detailed instructions for submitting a complaint are provided on the Authority’s website.