Personal Data Processing Statement
This Personal Data Processing Statement aims to explain the processing of personal data relating to the user (hereinafter referred to as the “User”) of the website www.sunnytiny.com (hereinafter referred to as the “Online Store” or the “Website”).
Before providing personal data concerning a third party on the Website, you must: (a) inform the person about the content of this statement, (b) obtain their consent to share their personal data in accordance with this statement.
Similarly, if you are under the age of 16, please obtain the consent of your parent or guardian before disclosing personal data or doing any transaction through the Website.
The Online Store as the Processor undertakes to collect and process the personal data collected in accordance with the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 regarding the protection of individuals against the processing of personal data and the free movement of this data and the repeal of Directive 95/46/EC (GDPR), Law 4624/2019 (Government Gazette 137/A’/29.08.2019), the decisions and instructions of the Personal Data Protection Authority and any relevant regulatory and legislative framework.
In particular, the Online Store is committed to keeping the personal data it processes up to date and accurate, to store and delete it safely, not to collect and maintain personal data that are not necessary, to take measures so that personal data are not lost, misused, are accessed by unauthorized people or disclosed and generally to take appropriate technical and organizational measures to protect them.
When the processing of personal data is based on the consent of the User/subject, they have the right to withdraw such consent at any time in accordance with the specific terms set forth herein. Withdrawal of consent shall not affect the lawfulness of the proceedings which were based on prior consent.
At the same time, the User/subject must inform the Online Store in case of change of any personal data, which have previously been notified to the Online Store, in order for the Online Store to keep the personal data of the subjects up to date.
Categories of personal data processed by the Online Store (hereinafter referred to as the “Personal Data”)
- Identification of a natural person, name, postal address, e-mail address, mobile or landline contact number, address number, bank account details, tax information etc., which can be used to identify the User or the final recipient of the products.
- Personal information collected on the Website and subject to the respective request of the User. On a case by case basis and depending on the submitted request, there may be processing of Personal Data that will be voluntarily provided by the User during the submission of their request.
- Interaction data with electronic services: IP address, Cookies, information about the browser, device data, etc., which do not identify the User directly. More specific information about the use of Cookies on the Website can be found in the special field “Information on Cookies”.
The Online Store does not process sensitive personal data in the context of the services and the content of the Website.
Similarly, the Online Store does not hold credit/debit card details for your orders. Once you have selected the relevant payment method, the system redirects you to the online service that accepts electronic payments of the cooperating bank to complete your payment.
Similarly, the Online Store is not addressed to minors under 16 years of age and does not process personal data that knowingly concerns minors under 16 years of age. For this reason, the use of the Website by minors under 16 years of age and transactions through the Website without the consent of the parent or the person exercising parental responsibility is not allowed.
How we collect personal data:
- From the User in order to submit their order and process it.
- From the User when submitting a request other than the order of products (eg withdrawal from the contract of sale, cooperation, etc.).
- In the context of promotional activities for the promotion of the products of the Online Store.
Processing and Legal Basis
Below we list all the ways in which the Online Store processes the Personal Data it collects, on what legal bases the processing is based as well as the legal interest on a case by case basis.
Purpose of processing: For the processing and completion of the order – Conclusion and Execution/Operation of the Sales Contract
Category of Personal Data
(a) Identification
(b) Communication
(c) Financial
Legal basis of the processing: Necessary for the conclusion/execution of the terms of the contract
Purpose of processing: Managing order withdrawal/cancellation request and any other related request
Category of Personal Data
(a) Identification
(b) Communication
(c) Financial
Legal basis of the processing:
(a) Necessary processing to satisfy a legitimate interest.
(b) Necessary processing for the execution of the terms of the contract.
(c) Necessary processing for compliance with a legal obligation.
Purpose of processing: For the management of a request/complaint
Category of Personal Data
(a) Identification
(b) Communication
(c) Financial
Legal basis of the processing:Necessary processing for compliance with a legal obligation.
Purpose of processing: For the promotion of products to the User, only if they have explicitly stated that they wish to be the recipient of promotions, having filled in the corresponding field on the Website.
Category of Personal Data
(a) Identification
(b) Communication
(γ) Financial
Legal basis of the processing: Processing based on consent. It can be easily and freely revoked at any time by sending an email to info@sunnytiny.com.
The term “processing” covers a wide range of transactions carried out on personal data. It includes the collection, registration, organization, structure, storage, adaptation or alteration, retrieval, retrieval of information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction of personal data.
Recipients of Personal Data/Executors of Processing
In the context of the operation of the Website and the execution of the contract of sale of the products, the Personal Data of the User or the final recipient of the product will be processed by the sections of the Online Store that are responsible for the execution of the order, the collection of products, their pricing, the control of the payment of the price of the products, their shipment to the User or the final recipient if they are not the same person as the User, the management of the requests for withdrawal or cancellation of the order and the management of any kind of request of the User.
Also the Personal Data, in the context of the legal operation of the Online Store to the extent that this is necessary for the better service of the User and the execution of the sales contract may be transmitted to or collected or processed for the purpose of providing services to the Online Store by third parties performing the processing, such as in particular accounting and legal service providers and cooperating IT companies.
Furthermore, Personal Data are transmitted to the cooperating courier company, to serve the sales contract to the extent necessary for your better service and the fulfilment of the contract for the shipment of the ordered products. For these services, the Online Store cooperates with the company “Courier Center SA” (which is located at 46 Kifissou Avenue, Egaleo, PC 12241). In all the above cases, the collaborators with the Online Store must act only on its behalf and have been specifically authorized for this purpose as they are fully committed to the confidentiality and the obligations provided in the legislation regarding the collection and processing of the above data. The Online Store may also be required to disclose Personal Data to public services, judicial, public and independent authorities, such as the Consumer Protection Directorate of the Ministry of Development and Investment, the Consumer Ombudsman, if this is absolutely necessary for the exercise of legal interest, the defense of the rights or the fulfilment of obligations of the Online Store, as the case may be.
Personal Data retention time
The Online Store will keep and process the Personal Data for as long as is required to fulfil its obligations under the sales contract or for the other purposes of collecting Personal Data mentioned herein.
Specifically for the Personal Data of the User, which are processed by the Online Store for marketing purposes (subscription to the informative newsletter), these are kept by obtaining the relevant consent of the User when marking the special field on the Website and until the User withdraws their relevant consent either by sending a relevant request to the Online Store at the email address info@sunnytiny.com or by selecting the special field located in the informative newsletters.
In any case, the Online Store will keep the Personal Data for as long as required until the relevant claims expire and in each case for as long as required by the tax legislation and the applicable legal and regulatory framework.
Rights in relation to the processing of Personal Data
Personal data protection legislation provides rights regarding the processing of personal data. Specifically, you can exercise the following rights:
(a) Right of access: You may, upon request, be informed as to whether or not your Personal Data is being processed and receive relevant information.
(b) Right of Correction: You can request correction of your inaccurate Personal Data or the completion of incomplete data.
(c) Right of deletion: ou can request the deletion of your Personal Data under certain conditions provided by the legal framework.
d) Right to restrict the processing: You may request that the processing of your Personal Data be restricted, subject to certain conditions provided by the legal framework.
e) Right to data portability: You may receive your Personal Data in a structured, commonly used and machine-readable format, as well as transfer that data to another processor.
(f) Right of objection: You have the right to object, at any time and for reasons related to your particular situation, to the processing of your Personal Data including the compilation of profiles.
Anyone interested in exercising the above rights can contact the Online Store in one of the following ways:
(a) by e-mail to info@sunnytiny.com,
(b) by registered mail/delivery of a relevant letter, to the Online Store at the headquarters of the Online Store, at 54 Makedonomachou Pradouna Street, Athens PC 11525.
The rights are exercised free of charge by the applicant, unless due to repetition they are deemed clearly unfounded and incur disproportionate and excessive management costs for the Online Store.
In case of exercising the rights, the Online Store will take all the necessary measures for their satisfaction and the applicant will receive a response within 30 days of receiving the request from the Online Store.
For any clarification regarding the submission process, any interested party can contact the Online Store at 210-6770103.
In the event that the subject of Personal Data deems that their Personal Data are affected in any way, they reserves the right to appeal to the Personal Data Protection Authority (www.dpa.gr, 1-3 Kifissias Avenue, PC 11523, Athens , Call Center: +302106475600, Fax: +30210 6475628, E-mail: contact@dpa.gr).
For any other information regarding the processing of Personal Data, any interested party can contact the Online Store at info@sunnytiny.com or call the phone number 210-6770103.
The Online Store reserves the ability to modify and update this Statement, in whole or in part, at its sole discretion at any time. Any modification herein will take effect as soon as the modified Statement is posted on the Website.
In any case, as long as the User continues to browse the Online Store and make use of its services after modifications have been made in accordance with the above, it is considered that they accept these modifications.
If the User does not agree with the terms of this Statement as they may be modified, either in whole or in part, they must stop using the Website and the Online Store and/or delete their Personal Data during the procedure that is provided in the Website.
Prior to each entry on the Website, the User is suggested to check this page in order to be informed about the current and valid Personal Data Processing Statement.
Last Update: March 2021
