PRIVACY POLICY

This Privacy Policy (hereinafter referred to as “Politics”) describes the practice of the company under the name Cal, regarding the collection, use, storage and the disclosure of the Personal Data (as defined below) provided to us by the users of the website www.cal.gr (hereinafter referred to as the “Website”), as well as the content, products and services offered through the Site (hereinafter collectively with the Website, the “Services”).

This Policy is an integral part of the Terms of Use, which are incorporated by reference. Any term in capitals the first letter of which is used but not defined in this Policy will have the meaning defined in the Terms of Use. At the beginning of this is the latest policy update. Please visit and read this Policy periodically as we may change it from time to time. Every time you visit the Site or provide us with information, you accept the practices described in the Policy at that time.

1 Introduction.

We respect and support the individual rights to privacy and the protection of Personal Data. We know how important it is to protect your personal information and we want to make every user experience of our Website safe and secure. According to this goal, we have developed this Policy to explain to you our practices for the collection, use and disclosure of your personal data and information.

  1. Applicable Law.

The applicable data protection law (hereinafter the “Applicable Privacy Act”) consists of the applicable national and Community legislation on the collection, use and disclosure of your personal data by us, including Regulation (EC) 2016/679 of the The European Parliament and the Council, adopted on 27 April 2016 and put into effect on 25 May 2018 (hereafter referred to as “the Regulation”).

  1. Definition of Personal Data.

For the purposes of this Policy, “Personal Data” means information and data about a particular person, such as date of birth, name and surname, home address, telephone number, gender, address its IP, etc. We collect, use or disclose your Personal Data in accordance with this Policy and in accordance with the Applicable Privacy Policy.

  1. Processing Manager.

The Company is responsible for processing your Personal Data and as such undertakes to do everything in its power to ensure the confidentiality of your Personal Data and to ensure the unhindered exercise of the rights conferred by the Applicant Privacy Policy.

  1. Special note for minors.

Minors under the age of eighteen (18) and persons who have no full capacity to act in accordance with the jurisdiction applicable in their case are prohibited from communicating to us through the Website by telephone or in any other way their Personal Data without the

prior consent of the person or persons exercising parental responsibility for them. We ask those persons not to submit information to us. In the event that the users of the Site are under 18 (18) years of age and continue to disclose their Personal Data via the Site, it will be deemed by us that such persons have obtained the prior consent of the person or persons exercising parental responsibility of them.

  1. You provide us with your Personal Information in the following cases:

If you wish to create a personal account through your registration on the Website: you will be asked for some of your personal information, such as your name and surname, your email address, your birth date, and possibly other data can be used for your personal identification.

When you use our Services: You may be asked for some of your personal information, such as your postal address, the details of the payment method when ordering from our online store and your e-mail address when you sign up for one of the competitions or informative our newsletters.

If you contact (in writing or orally) with the Customer Service Department of the Company: We may store / register your correspondence / contact, as well as any information requested and necessary for your best service and / or proof of transaction our relationship (eg if you place a product order by phone).

  1. Information we receive automatically when you visit the Site or use the Services.

Website: We may collect information from the Website and how you use it. When you visit the Web site, the web browser sends data to our servers. With this information we can optimize our services by personalizing and improving your experience when using the Website (via a computer, mobile phone or other portable device).

This information may include the following: • your IP address, • the date and time of your visit to the Site, • the referral URL (ie the website from which the user originated), • the pages you’ve visited on our site, • information about the device you are using and your web browser (type of web browser and version, operating system, etc.).

Information about your position

When you visit the Website from your computer, mobile phone or mobile device, we can collect and process information about your actual location, of the GPS signals emitted by the device. We may also use a variety of other technologies to determine your location, such as the sensor data of your device that can, for example, provide us with information about nearby Wi-Fi access points, or Nearby Field Contact (NFC) and / or GSM tower. Note that we’ll let you know when we’re going to use your location information, and you usually can not allow or disable sending your location information through your device or web browser settings.

Cookies and other identifiers

We and our affiliates use various technologies to collect and store information when you visit our Site, and this may include sending one or more cookies or other identifiers to your device. More information on how we use cookies and identifiers and how to disable them can be found in Article 15 below.

  1. Information on the Personal Data Collected by Other Websites – Third Party Advertising.

We may place links to other third-party websites as we have and will have future collaborations with third parties. When you click on these links or otherwise visit, participate or use the services or websites of other parties, whether or not they contain our trademark, trademarks and other intellectual property rights, along with those of third party handling the website, you must be aware and aware that We do not control the business practices of these parties and that this Policy does not apply to these other sites or websites ions.

We allow third parties to display ads and / or collect certain anonymous information when you visit the Site. These companies may use anonymous, non-personally identifiable / identifiable information during your visits to the Website or other websites in order to provide advertisements for goods and services that may be of interest to you. These companies usually use a third party cookie or web beacon to collect this information. More information on cookies can be found below in Article 15.

  1. Use of Your Personal Data.

We use your Personal Information for the purposes outlined below:

Managing your order through the Website or by telephone: We use information such as your name, address, and payment details to process and deliver your orders, as well as to inform you of the status of your order. We may also use the information to assess your creditworthiness, and we may use third party services for that purpose.

Customer Service: If you contact us (by telephone or in writing) with our Customer Service (or vice versa), we use your order information and our contact history to respond to your requests, manage your order, facilitate exercising your rights and generally offering you the best possible service.

Marketing / Promotion: To send you emails with news and updates on our Site and Services to provide you with and send you information that interests your interests (such as banners / banners) , in any case obtaining your prior consent to use your Personal Information for the above purposes.

Use of the Site: To improve and customize the content of the Site and product offerings, to analyze the use of the Site.

Other Company Services: We may also use your Personal Information to provide you with information about products and services provided by third parties. We may still use your Personal Data to forward you messages from other members or users, thus facilitating your communication with other members or users of the Site.

Dispute Resolution: We may also use your Personal Data to resolve disputes, troubleshoot and impose any policies and rules governing the use of the Site and to inform you of changes to the use of the Site, its Terms of Use, and Privacy Policy.

Other purposes: To the extent required by law, we will ask for your consent when we want to use your information for purposes other than those listed above. The provision on your part of your Personal Data is voluntary. However in some cases, if you do not give us your Personal Data, you will not be able to access all or some of our Services.

  1. Disclosure of Your Personal Data.

We do not sell your Personal Information to third parties, nor do we give third parties licenses to use them on their behalf. However, in the normal course of our commercial activities, we may share some of your Personal Information by:

a limited number of our staff and employees in marketing, sales, customer service and technical departments, to the extent necessary to provide you with the Services, our third party partners acting on our behalf in accordance with this Policy (in particular below), or as permitted or required by applicable law on the protection of personal data.

You can request a complete list of processors for us by sending your written request to the address mentioned at the beginning of this Policy.

10.1 Service Providers.

We may use third-party service providers (e.g., web hosting providers, data management providers) to manage one or more aspects of our business, including the processing or delivery of personal information on our behalf. When using an external company or partner, we use contractual commitments or other appropriate means to ensure that your Personal Data is used in a manner consistent with this Policy and applicable law.

10.2 Disclosure in accordance with the law.

We may disclose your Personal Data as permitted or required by law. For example, we may be required to disclose and disclose your Personal Data in accordance with a court order, public order or order or decision of another person or administrative body with legal authority to compel disclosure of such information. If we have reasonable grounds to believe that your Personal Data might be useful in investigating improper or illegal activity, we may disclose such information to law enforcement agencies or other appropriate research authorities.

  1. Right to information, access, oppose and delete.

11.1 With respect to your Personal Data, you retain, among other things, the rights to information, access, opt-out and deletion (“right to forgiveness”), as specifically defined in Articles 13-22 of the Rules of Procedure. In this context, at any time you may have access to your Personal Data that we maintain in databases to modify, correct or update this data, even to oppose – at any time and for any reason – the processing of Personal Data relating to you, as well as to revoke your consent with regard to their processing or to request their permanent deletion from the Company’s records. To do this, please follow the steps that will be listed each time in the message you receive through the relevant communication medium (such as e-mail or sms messages).

11.2 If you wish to withdraw your consent from all our newsletters and your consent to the use of your Personal Data for the purposes of marketing, promotional products and / or services, then you can use the subscription revocation link (‘ unsubscribe ‘) as it refers to the messages you have received. Alternatively, you can contact our Customer Service Department by e-mail : calgreece@yahoo.com. Please note that we may need to ask you to verify your identity before proceeding with your request.

11.3 You may also at any time request that your Personal Data maintained in our records be permanently deleted, by contacting our Customer Service Department via e-mail : calgreece@yahoo.com . do not respond or our response is not considered by you to be satisfactory, you have the right to have recourse to the Data Protection Authority and ask for our response or our failure to act.

In the event of a deletion request from you: (a) We will cease to use and make available your Personal Data (unless otherwise required or required by law).

  1. b) We will delete all of your Personal Data from our databases other than those contained in emails, correspondence or other documents that we may hold in order to be able to prove the terms of our contractual relationship with you or as otherwise provided by the applicable legislation.
  2. c) Taking into account the available technology and the cost of implementation, we will take reasonable technical and organizational measures to inform other processors processing for you our Personal Data, as specifically mentioned above, that you have requested the deletion by them (the executors processing) of any links to such data or copies or reproductions of such Personal Data.

Please note that we may need to ask you to verify your identity before proceeding with your above-mentioned request.

  1. Summary of Your Rights under the Applicable Privacy Policy.

In the context of respecting your privacy / privacy, we endeavor to ensure that your Personal Data is complied with in accordance with applicable Personal Data Protection Law and any other relevant applicable law. In this context, we guarantee that your Personal Data will:

(a) Process fairly and legally. In particular, we will demonstrate transparency regarding the processing of your Personal Data.

(b) collected for clear and legitimate purposes only and are not further processed in a way incompatible with these purposes. In the event that we decide to process further your Personal Data then your explicit consent is necessary.

(c) It is relevant, appropriate and not more than what is required at all times for the purpose of processing. We will collect and retain your Personal Data if this is necessary to meet functional and administrative requirements or to comply with any legal obligation.

(d) It is accurate and, if necessary, updated / corrected upon your request.

(e) They will be retained in a format that allows you to identify yourself and not for longer than is necessary for the purposes for which it was collected or for the purposes that were subsequently processed.

(f) Processed in accordance with the rights of the subject of the Personal Data as these rights have been established by the applicable Personal Data Protection Law (right to information about the processing undertaken, the right to access the Personal Data, the right to object / limit the use of processing of personal data, the right to temporary judicial protection, the right to lodge a complaint with a supervisory authority, the right to portability and the limitation of processing, information in the case of automated decision making / user profile preparation of the Services).

(g) Appropriate technical and administrative measures against the arbitrary or unlawful processing of your Personal Data and against the accidental loss or destruction or damage thereof in the context of the Company’s activities will be applied.

(h) Your Personal Data will not be transferred by us to countries outside the European Union unless you have given your consent and only if an equivalent level of protection of the rights and freedoms of the underlying Personal Data regarding the management of exported data.

(i) Right to data portability: According to the Regulation, as the subject of your Personal Data you reserve the right to the portability of these data, and in particular the right to receive your Personal Data concerning you and which you have provided to us as the controller , in a structured, commonly used and machine readable format, as well as the right to transmit this data to a new editor without objection, in accordance with the specific provisions of Article 20 of the Can lation. In such a case, we are not responsible for the processing of the data by the new controller to whom your Personal Data will be sent, nor for the quality of the data to be transferred, beyond what we are required under the Rules. As the controller we will need to verify your identity before proceeding with the above. The right to portability – if exercised – does not negate the other rights provided by the Regulation and the applicable Personal Data Protection Law.

The Website of the Personal Data Protection Authority provides information and assistance on rights in accordance with the Regulation and related legislation (www.dpa.gr).

In summary, your basic rights are as follows: • The right to know what information is kept on you in electronic form and in document files. • The right of access and information regarding the purpose of the processing of Personal Data, for the recipients or the categories of recipients. • The right to be informed about any changes that have been made to our editing from our latest update to you. • The right to be informed about the methodology used in the process of automatic processing of Personal Data. • The right to be informed about the security measures imposed by the Data Protection Officer for the Protection of Your Personal Data. • The right to be informed about the transfer of your Personal Data to third parties. • The right to take steps to stop processing your Personal Data if the processing may cause you to suffer significant damage or material moral damage when this is unjustified. • The right to oppose the processing of your Personal Data and to require that your Personal

Data not be used to promote various products and services. • The right to prevent decisions taken on you based solely on automatic processing (profile training). • The right to be able to claim the correction or destruction of any Personal Data that is incorrect or you no longer want to process it. • The right to restrict the processing of your Personal Data, as well as the right to portability thereof (when the processing involves identifiable personal data and is based on the consent and performance of the contract). • The right to object at any time to process your Personal Data, as well as the right to withdraw at any time your consent to the processing of such data and request the permanent deletion of these from the Company’s databases. • The right to submit a complaint to a supervisory authority. • The right to claim damages if you have suffered damage and non-material damage as a result of violation of the provisions of the Rules.

  1. Duration and country of storage of your Personal Data

We retain your information for a limited duration of two (2) years, starting from the time of your last contact with us, unless there is an obligation to keep the information for a shorter / longer period than the law, or if it is required in the context of some or to fulfill our business relationship or for purely administrative purposes of the Company.

Unless otherwise stated in the Policy, your information is stored and processed in countries within the European Union.

  1. Dispute Resolution Procedure

If at any time you have any questions or concerns about this Policy, or you believe we have violated or misinterpreted your Personal Data, please e-mail us at calgreece@yahoo.com and we will try to resolve any problem or question you may have.

  1. Monitoring of information.

We can use web beacons or pixel tags to track information and specifically to record our users and gather data and info