PRIVACY POLICY
of the “Hatziperi Sp. Athanasia” sole proprietorship
(General Data Protection Regulation (EU) 2016/679)

The sole proprietorship doing business as “Hatziperi Sp. Athanasia”, with offices at 15 Pileos str., GR-18010 Aegina, tel. +30 2297022232, mob. no. +30 6946912908 and e-mail xorografies@gmail.com (hereinafter “Guide to Aegina” or “Business”), as part of informing the public about searching for and finding information about businesses and professionals in Aegina and about placing advertising for businesses and professionals, in its capacity as Data Controller, safeguards the protection of data provided to it that pertains to natural persons and complies with current law (European Regulation 2016/679-GDPR) on the protection of personal data.

1. The personal data we collect, the legal basis for retaining them and how long such data are stored
   1.1. The Guide to Aegina collects the following personal data: first name/surname, trade name, address, occupation, landline and mobile phone numbers, e-mail.
   1.2. Data is processed in accordance with Greek and EU law based on one of these legal grounds:
   • Performance of a contract: the processing of your personal data is necessary for us to fulfil the obligations that arise from the agreement between us for placement of advertising (Article 6 par. 1(b) of GDPR).
   • Legal obligation: lawful processing of your personal data to comply with a legal obligation, such as providing information to a public body or authority (Article 6 par. 1(c) of GDPR).
   • Legitimate interest: this involves processing of your personal data that is necessary for the purposes of the legitimate interests pursued by our Business, i.e. when it has a legitimate interest while performing an activity that ensures its continuity, as long as it does not override your interests (Article 6 par. 1(f) of GDPR).
   • Consent: the processing of your personal data may take place with your consent and based on such consent (Article 6 par. 1(a) of GDPR). This consent may be revoked at any time by sending a letter to the above address or by e-mail to the above e-mail address.
   In the event consent is withheld or there is no agreement, your advert cannot be placed in the next printed Aegina Guide to shopping-services-tourism or on the aeginapages.com website.
   1.3. Our Business processes your personal data (without prejudice to cases where there is an obligation to process based on legal provisions) for the duration of the agreement between us or throughout the duration of your consent. Specifically, the above personal data must be retained for the duration required by the purpose for which they are subjected to processing.
2. Why we collect and process your personal data;
   We collect and process your personal data for the following purposes:
   • The basic, free placement of particulars in the annually published printed “Aegina Guide to shopping-services-tourism” and its electronic form on the website www.aeginapages.com.
   • The entering into and performance of a contract with the object of placing an advertisement in the annually published printed “Aegina Guide to shopping-services-tourism” and/or its electronic form on the website www.aeginapages.com.
   • Any communication between us relative to the above for administrative reasons.
   • Sending of e-mail.
3. To whom we disclose and/or transmit your personal data;
   There is no provision for your data to be transmitted to any third party outside our Business, as any such transmission is not required for the purpose for which they are collected.
   The Aegina Guide does not transmit personal data it processes to third parties outside the European Union and/or international organisations.
   The Aegina Guide does not engage in automated processing and/or profiling.
4. What are your rights;
   As a Data Subject, you have the following rights, under Regulation (EU) 2016/679 (GDPR):
   4.1. Right of access: You retain the right to request access to data pertaining to you which our Business stores and to obtain verification of whether such data are subject to processing, as well as to be informed about the purpose of processing, the categories of personal data, the recipients or categories of recipients, the length of time data will be stored and processed, the right to lodge a complaint with the Personal Data Protection Authority and any available information relative to the source of data.
   4.2. Right to rectification: In all cases, our desire is to ensure the accuracy of your personal data. To that end, if any of your personal data have changed or have been processed incorrectly, do not hesitate to ask for their correction or to add to data that may be incomplete.
   4.3. Right of erasure: In addition, we would like to inform you that you have the right to request the deletion of your personal data (in whole or in part) provided (a) they are no longer necessary to the purposes of our contractual relationship; (b) the data were unlawfully processed and outside the scope detailed herein; (c) it is required by law.
   4.4. Right to restriction of processing: You retain the right to request that our Business restrict the processing of your data, in terms of quantity, duration or relative to the purpose of processing  (Article 18 of GDPR).
   4.5. Right to data portability: In exercising the right to data portability, you have the right to have your personal data transmitted directly from our Business to another, without your mediation, as long as it is technically feasible.
   4.6. Right to object to processing: You also have the right to revoke (in whole or in part) your consent to have your personal data collected and processed by our Business. In such case, you should keep in mind that any revocation of your consent may result in the termination of our contractual relationship, if there is one, since your consent is essential to its continuation.
   4.7. Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement. In any case, you are entitled to appeal to the Personal Data Protection Authority if you believe that the processing of your personal data harms you and that such processing infringes Regulation (EU) 2016/679.
5. Personal Data Security
   The Aegina Guide has taken all appropriate steps to protect the personal data it processes and to ensure that their processing is in line with obligations established by the legal framework.
   It implements the appropriate technical and organisational measures for the security of data and protects them from accidental or unlawful destruction, accidental loss, alteration, unauthorised disclosure or access and any other unlawful processing to the extent that is feasible.