We aim to ensure that you feel safe on our site, so your privacy and the protection of your individual rights are important to us. For this reason, we would like to ask you to carefully read the summary below on how our site works. You can be sure that your data will be processed in a transparent and fair manner and that we will make every effort to handle your data carefully and responsibly.

The following Privacy Policy is intended to inform you about the way we use your personal data, in compliance with the strict requirements of privacy legislation, including the General Data Protection Regulation EU 2016/679 (GBER).

Contact details of the controller and the data protection officer

The person in charge of the processing of your personal data collected through this website is the company Cactus.

Email: katerina.s.iwannou@gmail.com

You can contact the data controller of the controller at: katerina.s.iwannou@gmail.com

Framework and security of personal data processing

We collect and use your personal information to the extent necessary to provide you with a functional website and to access our content and services, for example if you sign up for our website, sign in to an existing customer account and order products, you wish to contact us through the contact form, send your CV etc. The security of your personal data is a high priority for us. For this reason, we take appropriate technical and organizational measures to protect your data stored by us in order to effectively prevent any breach of their security, such as their loss and misuse by third parties. Our employees who are responsible for the processing of personal data in particular are bound by confidentiality obligations and are required to comply with them. Your personal data is protected by ensuring that it is transmitted in encrypted form; for example, we use SSL (Secure Host Level) to communicate with your web browser. A padlock will appear in your browser so you can see when an SSL connection is taking place. In order to ensure the protection of your data at all times, the technical security measures are regularly reviewed and adapted to the new technological standards if required. These protection principles also apply to companies, to which we entrust the processing of data in accordance with our instructions.

Purposes of processing and legal processing bases according to which your personal data are processed.

We collect, process and use your personal data through this website for the following purposes:

Concluding and executing contracts, e.g. processing orders for the products and services we offer through the website,
Providing newsletters and promotions, e.g. in case of your subscription to the Newsletter service of our company,
Conduct market research and customer service satisfaction,
Customer service and support of the site, e.g. to respond to questions or complaints you send us via the contact form,
Create an account on the website, so that you can browse points of the website that are accessible only to those visitors who have an account and you can order products through our online store

We collect, process and use your personal data in accordance with the following legal processing bases:

Article 6 (1) (a) of the GBER serves as the legal basis for the processing activities for which we obtain your consent for a specific processing purpose. For example, under this legal framework, we process your personal information for the provision of newsletters, promotions and targeted advertisements, and conduct market research and customer service satisfaction. More information on the consent process for these purposes can be found below.
Article 6 (1) (b) of the GCP stipulates that personal data may be processed for the performance of a contract. For example, under this legal basis we process your personal data when purchasing a product with

through our online store or when you request to be informed about the repair status of a product.
Also, this provision applies to any processing activity that is necessary to carry out activities during the pre-contractual stage. For example, under this legal basis we process your personal data when you send us your application electronically along with your CV to work for our company.
Article 6 (1) (c) of the GCC applies in cases where we are bound by a statutory obligation that requires the processing of personal data, for example for compliance with tax obligations or obligations arising from protection law of the consumer. For example, under this legal basis we process your personal data to respond to questions or complaints you send us via the contact form but also when required to disclose information about your transactions with us to the tax authorities.
Article 6 (1) (f) of the GBER applies in cases where we pursue our overriding legal interests. For example, under this legal basis we process your personal information to answer any questions or complaints you have sent us through the contact form and to evaluate your CV.

Duration of storage of personal data


We process and store your personal data only for as long as is necessary to fulfill the purpose for which we collected your data or for as long as we are required to store it in accordance with law or regulation.

Personal data that we hold in the context of the execution of a contract for the purchase of products or services through the website, are stored for a maximum period of 20 years.

Personal data that you have provided to us in order to contact us for the purpose of submitting a request, complaint or inquiry is stored in our files until we can properly handle the relevant issue, as well as respond to your request, complaint or question.

Also, information included in the job application and the CV submitted electronically are stored for a maximum period not exceeding two (2) years.

Also, the personal data you have provided to us for the purpose of sending us newsletters, promotional materials, targeted advertisements and market research and customer service satisfaction, is stored by us until you decide to unsubscribe from our relevant list or revoke your order. . In case you ask us to delete, we will ensure the immediate deletion of your information from the relevant list.

Use of Cookies


We use cookies on our website. For more information, please refer to the Cookies Policy.

Providing information about our products and services, special offers and other messages such as newsletters

We use your data to send the information you request about our products, services and other special offers to the email address you provide to us. This will only be done with your prior consent or if permitted by law. Consent to the above benefit is governed by Article 6 (1) (a) and Article 7 of the GIP.

Sign up for newsletters, promotions and market research and customer service satisfaction on our site

You can sign up to receive newsletter, promotions and market research and customer service satisfaction free of charge. When you sign up for the newsletter, promotions and market research, the data on the data entry form will be sent to us, ie at least your email address or your mobile phone number.

The registration is done using a “consent” procedure, through which you will receive an e-mail during the registration. This confirmation is necessary in order to prevent anyone from registering e-mail addresses that do not belong to him. Your consent to the processing of your personal data for these purposes is deemed to have been obtained upon confirmation of your registration.

Sign up for newsletters and promotions in our stores.

In case you register to receive information by e-mail or sms, in our store, we will store your e-mail address in order to provide you, only specific information depending on your region about the products and

our services.

Providing information on the sale of products and services

If you purchase products or services from our site, we may email you information about other similar products and services to the email address you provide even without your prior consent. In these cases, however, you will be able to unsubscribe from our Newsletters list by clicking on the relevant link we provide in each of our emails.

Postal deliveries

We may also use your data to send you updates about our products, services and special offers by mail without your prior consent. And in these cases, you can ask us not to send you information material again by sending us a relevant request.

We want you to enjoy reading the emails we send you, so we try to include only the information that you may find interesting. Therefore, in case you have given us your explicit consent to perform targeted ads based on your interests, we calculate and save the openings and clicks you make when you are logged in to your user profile. This information includes information about if and when you open our emails, what content you click on and when, and if and why the emails we send you may not be received by you. In addition, we use this data for statistical purposes, which you can find out about by reading the Cookies Policy.

Of course, you can unsubscribe at any time to stop receiving such emails and newsletters via traditional mail, ie withdraw your consent for the future. For this action a corresponding unsubscribe link is provided in each email and newsletter. You can also contact us to revoke your consent and unsubscribe at any time:

– via e-mail: katerina.s.iwannou@gmail.com

Unable to unsubscribe from certain information messages that are necessary for the performance and performance of our website, including service-related emails (e.g., registration confirmations, customer service information) or information related to purchases (eg order confirmations, contract documents, payment processing). You will receive these notifications in the contact details you provide.

Processing of personal data during the communication, registration and submission of visitor orders

Contact

When contacting us by telephone, e-mail or contact form, the information you provide will be stored by us in order to answer your questions under Article 6 (1) (b), (c) and (f) of the GIP, ie for the execution of the contract between us, in order to comply with our legal obligations and to handle properly your requests, complaints and inquiries in accordance with our overriding legal interests. The communication will be recorded in order to be able to prove the communication in accordance with applicable law. The data collected in connection with the above will be deleted by us after this discussion is completed and after this issue is finally resolved.

Registration for the completion of online purchases

When purchasing products or services on our site we give you the opportunity to register on our site by providing personal data. This data is entered into a data entry form and sent to us and stored by us. The registration is made for the execution of a contract or the performance of activities during the pre-contractual stage and, therefore, is based on Article 6 (1) (b) of the GIP.


For the conclusion and execution of the contracts, we request contact details depending on the specific case, for example name, delivery address, invoicing address, e-mail address and information about the payment method you choose. We also use your data to maintain our customer data in accordance with the requirements of applicable law, where only relevant data is stored.

Visitor orders

You have the opportunity to place orders as a guest. If you choose this way of ordering, you do not need to register before placing your order.

Please note that you will need to re-enter your data when submitting any future orders.

We collect, process and use the data you provide to us for visitor orders for the purpose of performing the contract in accordance with Article 6 (1) (b) of the GIP. We store the information you provide to us for the duration of the processing and execution of your order. Your data is then deleted, unless you decide to activate your customer account within 14 days from the day of your order. The data that we are obliged to store in accordance with our legal obligations regarding data retention, will be kept for a maximum period of 20 years.

Difference

Pursuant to Article 6 (1) (c) and (f) of the GCC, we use and store your personal data and technical information if necessary in order to prevent or investigate misuse or other illegal behavior within our website, e.g. χ. in order to maintain data security in the event of attacks on our information technology systems. In addition, we may take such action on the basis of orders from public authorities or courts, to the extent that we are required to do so by law, and also in order to safeguard our rights and interests and to be able to defend ourselves.

Processing of personal data when sending a CV

Through the website you have the opportunity to send us your CV and apply for a job. In this case we will process the personal data you provide to us to assess your qualifications and make a decision on your application. The collection and processing of your personal data for this purpose is carried out in accordance with Article 6 paragraph 1 (f) in accordance with our legal interest to hire new employees and in case we deem that you are a suitable candidate under Article 6 paragraph 1 point b) to take the necessary actions during the pre-contractual recruitment stage.

Transfer of personal data to third parties

When transmitting your personal data, we ensure that the level of security is always as high as possible, and for this reason your data is only transmitted to service providers and partner companies that are carefully selected in advance and are bound by contractual obligations to strictly adhere to measures to protect your personal data. We also transmit your data only to persons who are established within the European Union and the European Economic Area and are therefore subject to strict EU data protection legislation or are bound by a corresponding security standard.

Transmission between affiliated companies of the Company

We transmit your personal data regarding the fulfillment of deliveries and services on our website, to affiliated companies of the company within Greece in order to store them in central databases and for purposes related to the internal invoicing and accounting of the company. This is especially important so that you can use all of our services. In case you wish to receive your order from a retail store, the store you have chosen will be informed about your order and will process it. If you contact a retail store or our customer service hotline in case of questions, complaints or returns, the store and hotline will also have access to your order data so they can address your issue.

Transmission to partners

Regarding the services and products we offer on our website, we work with various companies for certain product groups. In case you order products or services of these partners, we will transmit the personal data you provide during your registration and, in case of other purchases, the additional personal data specified in the section “My account” (in particular the email address your delivery and billing address). Your counterparty will be identified on the respective product pages, in its Purchase Terms and Conditions and in its Legal Note. Please note that your counterparty is also responsible for the processing of your personal data and is responsible for the security measures of the data it receives and that the additional or different privacy policies of the counterparty will apply.

for those websites.

Transfer to partner service providers

For the operation and optimization of our website, we employ various service companies that operate on our behalf, e.g. to provide core IT services, host our website, process payments and ship products, install equipment, or deliver newsletters. We transmit the information necessary for the respective purposes to these service partners (eg name, address).

Some of these companies act on our behalf in the processing and execution of orders and, as a result, are allowed to use the data provided solely in accordance with our instructions. In this case, we are legally responsible for ensuring that these companies, to which we outsource the services, take appropriate data protection measures. For this reason, we agree on specific data protection measures with these companies and monitor these measures on a regular basis.

In case the goods to be shipped are bulky or heavy, your order will be shipped through a service provider such as Hermes or Nikos. This service provider will receive information from us, such as the email address or telephone number you provide to us with your order, so that they can arrange a specific delivery time with you.

Contrary to the requirements regarding the assignment of processing to third parties, we transmit data to third parties in the following cases, in which the third parties are themselves responsible for processing this data:

Regarding the shipment of goods, the data is transmitted to logistics companies or to the postal service provider specified in the order.
Regarding the payment of the ordered goods, the data are transmitted to the provider who undertakes the execution of the payment or to a financial bank specified in the order. If a credit card is used as a method of payment, the transaction-based security check will be performed with the help of the payment provider to prevent credit card fraud.
When it comes to payment, we do not collect or store payment information such as credit card numbers or account information. This information is sent exclusively and directly to the provider who has undertaken the payment processing. If a credit card is used as a method of payment, the exception is the “fake card number”. So that you do not have to re-enter your credit card information for each payment, a fake card number is stored in your customer account. The fake card number simply facilitates the payment of the products and services of our website that you order through your customer account and is not identical to your credit card number.

Transfer to other third parties

Finally, we may transfer your data to third parties or government agencies under applicable privacy laws if we are legally required to do so (eg by order of a public authority or court) or if we have the right to do so (e.g. .x. because it is necessary for the investigation of criminal activity or for the claim and exercise of our rights and interests).

Your rights

Of course, you have rights regarding the processing of your data, which we inform you about below. If you wish to exercise any of the following rights, all you have to do is contact us. You may use the following contact information without incurring any additional costs incurred by your communications provider in exercising your following rights and submitting any inquiries about this Privacy Policy:

Via email: katerina.s.iwannou@gmail.com

For your safety, we reserve the right to receive any further information necessary to confirm your identity when responding to an existing request. In addition, in the event that identification is not possible, we reserve the right to refuse to respond to your request.

Right of access

You have the right to request information from us about your personal data that we store and process from us.

Right of correction

You have the right to request the immediate correction and / or completion of your personal data that we store and

are processed by us.

Right to restrict processing

You have the right to request a restriction on the processing of your personal data that we store and are processed by us in case you dispute the accuracy of this data, in case the processing is illegal and in case the data is no longer necessary to us, but no you request the deletion of the data and request the data for the establishment, exercise or support of your legal rights, or in case you have notified your objection to the processing and the verification of whether the legal reasons for our edit prevail over your objections.

Right to delete

Under the conditions provided by the applicable legislation. you have the right to request the deletion of your personal data that we store and are processed by us, unless the retention of data is necessary for freedom of expression, freedom of information, compliance with the legal obligation to process, for reasons of public interest and for the establishment, exercise or support of legal claims.

Right to be informed in case of notification of correction or deletion of personal data or restriction of their processing to other recipients

In the event that you exercise your right to correct or delete your personal data or restrict the processing of such information, we will inform all recipients of your personal data that such data has been corrected, deleted or is now subject to processing restrictions. , unless it is not possible to do so or this update requires a disproportionate effort.

Right to data portability

In cases where the processing of your personal data is based on your consent in accordance with Article 6 (1) (a) or the performance of a contract in accordance with Article 6 (1) (b), you have the right to receive a copy of the data you have provided to us. , which will be sent to you or to a third party in a structured, commonly used and machine-readable format. If you request that the data be sent immediately to another data controller, this will only be done if it is technically possible

Right of objection

In the event that your personal data is processed on the basis of a legitimate interest in accordance with Article 6 (1) (f) of the GBER, as well as when we process your personal data for the purpose of direct marketing, you have the right to object to the processing at any time. in accordance with Article 21 of the GCC.

Right to withdraw consent

You have the right to revoke your consent to the collection of data at any time, which revocation will be valid for the future. The processing of personal data collected based on your consent is not affected until you revoke it.

Right to file a complaint to the supervisory authority

If you believe that our processing of your personal data violates your privacy laws or that your privacy rights have been violated in any way, you can file a complaint with the Personal Data Protection Authority.

The fastest, easiest, and most convenient way to exercise your right to correct and delete is to log in to your client account and edit or delete the data stored in the account directly. Please note that once the data is deleted, you will no longer have access to our affiliate services through our website. You may not be able to download the services again. For this reason, please back up your data before exercising your right to delete it in this way. The personal data that we are obliged to store in accordance with legal obligations regarding the protection of personal data will be limited instead of deleted in order to prevent their use for other purposes.

Links to other companies’ websites

Our website contains links to other companies’ websites. We are not responsible for the privacy measures taken by other sites, which you may access through these links. Please inquire about their respective policies.

Amendments to the Privacy Policy

In order to ensure that this Privacy Policy is always in line with applicable legal requirements, we reserve the right to make changes at any time. The same applies to cases where The Privacy Policy needs to be modified to adapt to new or modified products or services. For this reason, we kindly ask you to check this Privacy Policy at regular intervals for any changes.