DATA PRIVACY POLICY

Respect for your privacy, management, protection and security of your personal data are a priority for WeAre, hereinafter referred to as "the Company", “us” or “we”. WeAre acting as “Controller”, collects, stores, keeps and legally processes your personal data when you communicate or collaborate with us as customers, employees or suppliers. In particular, we observe all the guarantees of safe management and protection of natural persons with regard to the processing of personal data, in accordance with the provisions of the European Regulation under the number 2016/679 (hereinafter "GDPR Regulation"), which was incorporated into our national legislation with the under the number 4624/2019 law, as amended.

Please read the present privacy policy carefully. By using our website and signing the relevant consent statement you unconditionally accept the practices described herein, whose terms govern the contractual relationship between you and the Company.

1. Privacy Policy; Last amendment – Modifications

The present Privacy Policy was updated on the 14th of July 2021, is governed by the relevant provisions of the Greek and Community legal frame relating to the protection of individuals from the processing of personal data and is subject to periodic improvement and revision. We therefore reserve our right to amend this statement and to apply any change to your data and our practices in relation to their collection and processing, as required by law, and/or modify or replace the whole or/and part of this Privacy Policy in our sole discretion.

If there are substantial changes to this Privacy Policy or our practices regarding your data change in the future, we will notify you immediately. However, if you need any clarification or information regarding the changes, or you wish to raise a dispute, a reservation or a question about such changes, you may contact us at the address listed below. Please note that any information or clarification provided to you does not constitute a replacement, substitution or modification of this Policy.

If you continue to navigate on our website, use our services and purchase products through our online store, it is considered that you automatically and unreservedly have accepted the modified terms of this Privacy Policy. If you do not agree with the modifications, you should abstain from any action, do not use the website, purchase products and provide further personal data. You are also entitled to terminate any contract between us and ask for your account and data to be deleted. In any case, for further information or clarification, you may contact us while retaining your rights with respect to your personal data as outlined and described below.

2. Controller and Data Protection Coordinator

The “Controller” of your personal data is the company under the name “Kalliopi Petrozeli - Petros Petrozelis G.P.” with the distinctive title “We are Project”, headquartered in Egaleo of Attica, 78 Palaias Kavalas street, Tax Identification Number 801299607 of the A Tax Office of Peristeri, Registration Number at the Hellenic Business Registry 153850402000 (Chamber of Commerce and Industry of Athens), telephone number +30 2105982370, hereinafter referred to as “WeAre” or "Company" or “we”.

Petros Petrozelis has been appointed as the Personal Data Protection Officer for our Company (email address info@wearedesign.gr, tel. +30 2105982370)

You may contact us at the contact details listed below and provide us with your feedback, queries, comments or any complaints regarding this Privacy Policy and the collection and processing of your personal data, in general. You have the right to submit any complaint regarding your personal data that may arise from their processing by the Company to the Hellenic Data Protection Authority, which is the supervisory authority of Greece (www.dpa.gr). However, we consider it our obligation and duty to handle any concerns you may have regarding your personal data we process, so please do not hesitate to contact us.

3. What is personal data?

Personal data includes any information that may lead to the recognition or identification of a natural person (“data subject”) directly or indirectly, such as their name, address, telephone number, e-mail address, tax registration number, IP address and location data in accordance with the provisions of the GDPR Regulation, the under the number 4624/2019 law, the current Greek legislation and the decisions of the Data Protection Authority. Such data do not include data that are anonymous.

You are not obliged to disclose your personal information to the Company. However, in case you choose not to do so, the transaction with our Company may not be possible. Even in such case, we will respect your choice.

4. Which types of personal data do we collect and how do we collect them?

We process and protect your personal data when you navigate through our website, subscribe to our newsletter, submit an order, open an account, take part in promotional activities and contests or contact us through the contact form available in our website, always with your explicit consent, which you can freely revoke at any time by calling us in 210-5982370 or by sending us an email to the address info@wearedesign.gr.

Indicatively, we may collect the following personal data for you:

Identity Data such as name, surname, birthdate, username, password or membership code that you provide us when submitting an order. At this point your age is checked by us in order us to ascertain if you can validly contract with us or if you need another person’s consent.
Contact Data such address, fixed or mobile phone, e-mail address or any other contact information that you provide us when you place an order, open an account or participate in promotional actions of our Company.
Delivery Details such as the delivery address including street or avenue, number, postal code, city or town or village, region, country when you place an order or when we contact to clarify the special details of the shipment of your order.
Financial data such as bank account details, transaction value, credit notes, refunds, debit or credit card information and billing address that you provide us when you pay by electronic means, in case of refunds, etc. The card details, their confirmation, preapproval of payment and final charge are recorded in Stripe's secure environment (SSL). Our website is by no means aware and does not handle or store your card details.
Transaction or Purchase Data such as type of products, transaction value, delivery address, time of purchase, order history, complaints, payment method, details required in case of change of products or refund, such as bank account details, beneficiary name, IBAN, banking institution, etc.
Consumer Behaviour Data such as consumer preferences while browsing our online shop, the items you have viewed and purchased, your shopping cart, your wish list, your social media activity, gifts and discount codes redeemed, the frequency, way and time of purchase.
Technical data such as channels - sources of origin, Internet Protocol (IP) address, time zone and location, login details, browser type and version, operating system and platform and other technical data by the devices that you use to access our website. For further details regarding the collection of cookies, please read our Cookies Policy below.
Login Data such as email, username, password or membership code.
Data collected through Cookies such as browser, IP address, products you have placed in the shopping cart but not purchased yet, the country of origin of your order, the products you are checking at the online store, wish list and websites from which you were directed to us.
Marketing data including your preferences in receiving promotional material from us and third parties and your preferences concerning our communication with you - only if we have your explicit consent or you have subscribed to our newsletter - and your opinion regarding the products you have purchased from us.

We do not collect any information from anyone under the age of 15. Our services are aimed exclusively at people who are at least 15 years old. If you are a minor under the age of 15 years old, the transaction is only possible with the consent of the adult acting as your legal representative.

Please let us know as soon as possible about any changes to your personal data as it is important that the personal information we keep is up-to-date and accurate.

We collect directly from you the following personal details:

When you submit an order either through our online store or by contacting us by telephone, you should provide us your full name, shipping address, email address, mobile phone number and payment details (credit or debit card details, etc.). The card details, their confirmation, preapproval of payment and final charge are conducted through the Stripe's secure environment (SSL). The website https://www.wearedesign.gr/ is by no means aware and does not handle or store your card details.
When managing calls to seek information from our Company or to express an opinion or complaints.
When you create an account at We Are, you should fill out a registration form providing us your mobile phone number, your full name, date of birth, email address, home address and a password.
When you subscribe to our Newsletter, you should only provide us your name and email. To participate in promotional actions or competitions you should offer us your full name, your email and if the promotional action takes place in social media probably your social media details.

We collect by automatic means the following data and information about you:

By using cookies or similar technologies, we may extract and collect data about your preferences, such as which products you view and how often you navigate our online shop, which newsletters you open, their content and your interaction with us after receiving them, your wish list and the type of products you prefer to buy, the search terms you enter, the products you place in the cart without completing their purchase, the country of origin, the selected language etc.
Through your account we create the history of your orders from which we extract your preferences and collect data regarding the frequency of purchases, the value of the products you prefer, your location, etc.
We also collect data about the devices through which you visit our online store, for example your Internet Protocol (IP) address, login information, browser type and version, operating system and platform or any other technology used by your devices to access our website, which pages you visit before and after visiting our website, etc.

We collect the as above data in order to be aware of your preferences and offer you personalized proposals, to remain competitive, to analyse the traffic of our website and improve the user experience

We collect from third parties the following data and information about you:

We may receive your personal information, such as your full name and e-mail address, from a friend of yours who entered your details in order you to receive a voucher from us or in order us to send you a gift or gift card by our online shop.
If you sign up for our service through a social media platform, we may collect the above personal data directly from the information you have provided to the platform, as long as the social media platform follows the GDPR Regulation principles and is entitled to share your personal data with us. In such cases, you must be informed about the processing of your personal data from the relevant Data Protection Notice of these third parties.

Last but not least, we keep the right to extract and collect any personal data from you in order to prevent and detect illegal actions against you or against our Company or third parties.

5. How do we use your personal information?

The as above personal data, which are provided to us by you or by third parties or are generated by automatic means, are used for the following legitimate purposes. Please note that if the Greek or Community legal frame restricts or prohibits certain actions for which we use your data, we will immediately discontinue the use of your personal information for these purposes.

In particular, your personal data are used by us for the following purposes:

To receive your orders, process them, and ship products to you.
To check your age before executing an order and ascertain if you can validly contract with us or if you need another person’s consent.
To handle your requests, such as withdrawal, product replacement, money return, etc.
To communicate with you about issues relating to your purchases and send you confirmation email and list with the details of your order.
To manage, handle and process your payments, including the security of our financial transaction.
To help you open an account at our online shop.
To create, keep and maintain a database of our clients and to analyse it.
To send you commercial communication notifications by email (newsletter), SMS or social media regarding our Company's news, products, promotions and offers, if you have previously explicitly agreed (opt-in).
To analyse your behaviour and identify your preferences in order to offer you personalized proposals and to remain competitive.
To understand and analyse the results of our ads and promotions.
To announce the results of surveys, ballots and competitions in which you have participated.
To analyse the traffic of our website and improve the user experience.

6. How is your personal data stored?

Our Company will only ask you the minimum personal data required by the law and only for as long as it is required for us to offer you our services.

Our Company keeps your personal data only for as long as required by the contractual terms of each service in conjunction with the current legislation based on the processing purpose and then anonymizes or destroys it. You can ask us and find out which data we collect from you, ask for correction or erasure by filling out a relevant application, unless their retention is required by tax law, evidentiary or judicial purposes and to prosecute illegal actions even if you have deactivated your account or it is no longer necessary us to provide our services to you.

7. On which legal bases do we collect and use your personal data?

The Legal basis on which we collect and process your personal data is one of the following:

Performance of a contract to which you are a party.

For purposes of communication either at a pre-contractual stage or on matters relating to your transactions with our Company, such as when buying a product in order to inform you for its unavailability, to notify you that the order was executed, to issue receipt or invoice, to communicate with you about the delivery of the product, to inform you know about changes to our Terms of use or our Privacy Policy or any other policy that our Company adopts.

The Company may also process your personal data in order to ensure the activation and managing of your account and your participation in promotional actions provided that you have accepted the terms of participation.

Any legitimate business interest against which your data protection interests do not prevail.

To manage and protect our Company and online store in terms of troubleshooting, testing and system maintenance, support and data retention.

To prevent and deal with cases of fraud and other illegal activities for the purpose of protecting you, the Company and any third party.

To provide you access to your personalized account where you can track your transactions and wishlists you have created.

To evaluate and offer you a user friendly and tailor made experience, including personalized communication with you and proposals of products of your interest, according to your preferences and buying habits.

To let you know about offers, products, or other actions of We Are, if you are a member.

To measure the effectiveness of our Company's presentation and display on third-party websites.

To use data analysis tools to improve our online store, our products and services and our relationships with customers.

When we rely on the as above interests of our Company as a legitimate basis for processing your personal data, we always assess whether such processing overrides your interests, fundamental rights and freedoms that require the protection of your personal data and if we consider this process as risky, we will not process your personal date unless we can rely on another legitimate processing ground.

To comply with a binding legal obligation, such as the maintenance of financial data of transactions for tax purposes, the use of your email for sending a confirmation of your order execution.

If none of the above apply, your consent which you will always be requested to provide before we process any information (opt-in).

Your free and explicit consent is the legal basis for using your email and mobile phone for us or third parties working with us to send you emails for your orders or newsletters, or for you to receive commercial communication for promotional actions and offers.

8. Transfer of your personal data to third parties

Our Company expressly declares that will not make any illegal or improper use of your personal data and will not transfer in any way, for any reason and to any third party your personal data and information.

However, our Company shares the personal data you have given us with your explicit consent with specific categories of partner companies, in order to support, promote and execute our transactional relationship provided that your personal data does not contain any illegal processing, such as with web and digital application companies and courier services. These providers are contractually bound not to use your information in any way other than to help us provide you with the products and services we have agreed to.

In particular, our Company cooperates:

With third-party companies which host and manage our online store and social media profiles.
With third-party courier companies which manage and process the shipment of your orders, collect the money on our behalf if needed, receive and deliver to you the products you return due to withdrawal or return.
With third-party data analysis companies and advertising - marketing companies acting in the name of and on behalf of us to send you messages with commercial content (newsletters).

We reserve the right to disclose your personal data to a third- party which we may transfer all or part of our business to. In addition, in the event of a merger or redemption or other change in our business the new persons involved have the right to use your personal data in the same way as we do.

Your retained data may be communicated to any judicial authority, police or any other administrative authority upon their request and in accordance with the applicable law.

9. Links to third party websites

Our Company website may contain hyperlinks that redirect to other websites of third parties, meaning affiliates which operate and are maintained exclusively by them and are not controlled by us. Therefore, our Company bears absolutely no responsibility for the content, actions or policies of these websites. Please

read carefully the respective data protection policies on the websites you visit, as they may differ significantly from ours.

10. Principles of collection and processing of personal data - Your rights:

Our Company and its trained staff follow the principles of lawful processing of your personal data according the GDPR Regulation, namely the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality and accountability.

You have a number of rights regarding the use of personal data that you have disclosed to our company. To be explicit:

The right to be informed about how your personal data is collected, processed, maintained and stored by our Company.
The right to have access at any time to your personal data and to information that you have disclosed to our Company.
The right to ask us to correct your personal data.
The right to ask us to delete your personal data. In this case, we will delete it without unjustified delay if;
1. personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
2. you have revoked your consent for the collection, processing and storage of your personal data by our Company and there is no other legal basis for the processing.
3. you are opposed to the processing of your personal data and there are no compelling and legitimate reasons for the processing.
4. personal data has been processed illegally.
5. personal data must be deleted in order to comply with a legal obligation under the law to which our Company is subject.
6. personal data has been collected while offering information society services directly to children (Article 8 of GDPR).
The right not to receive promotional messages from our Company from now on.
The right to receive the personal data you have provided to our Company, in a structured, commonly used and machine-readable format as well as the right you to transfer such data to another “Controller”.

You may exercise these rights following unsubscribe links or through the customer support telephone line at +30 2105982370 (Monday-Friday 9:00-17:00) or by sending an email to info@wearedesign.gr.

These rights are exercised free of charge, either by sending an e-mail to info@wearedesign.gr or by calling us at +30 2105982370, except if they are repeated frequently and involve high costs or are manifestly unfounded. In this case you will be incurred the corresponding costs.

If you exercise your above rights, we will take all possible measures to satisfy your request within thirty (30) working days of receiving the relevant request. In any case, we will inform you immediately either for its satisfaction or for the objective reasons that prevent its satisfaction.

In the event that you consider that the protection of your personal data is offended, you may apply to the Personal Data Protection Authority, using the following contact details:

Website: www.dpa.gr

Postal Address: 1-3 Kifissias Avenue, 11523, Athens

Call Center: +30210 6475600

Fax: +30210 6475628

Email: complaints@dpa.gr

11. Security of your personal data

We take all the appropriate technical and organizational measures to ensure the confidentiality, integrity and availability of your data. We have a trained Data Protection Officer and recognize the importance of protecting your privacy and all your personal information.

Where appropriate, we use encryption and other technologies that can help safeguard the information you provide. The data you submit to our Company is treated exclusively by specifically authorized personnel with corresponding professional qualifications that provide sufficient guarantees in terms of technical knowledge and personal integrity to ensure confidentiality. We also ask our service providers to comply with stringent privacy and data protection requirement. Any partner who has access to the above information uses it to serve exclusively the above purposes. We share the information you provide us exclusively in the ways described in this Privacy Policy and in accordance with your express and specific consent which you may revoke at any time. By your side, you should not disclose the data or passwords you may have entered to create your account, which are personal and non-transferable.

However, the security of your data in our online store is subject to threats beyond our Company’s sphere of influence deriving from technical weaknesses of the network that are not controlled by the Company or related to reasons of force majeure.

Our Company performs regular quality and security checks on the systems and algorithms it uses to correct the factors that lead to inaccuracies of the data collected

12. Unsolicited commercial communication

If you have expressly given your consent, our Company has the right to send you regular advertising - promotional messages via e-mail in order to keep you informed about our Company news.

If you want to stop receiving such messages you have the option to a) select the unsubscribe hyperlink included in each email or b) contact us at info@wearedesign.gr stating that you do not wish to receive hereinafter related messages.

Once our Company receives your request it will execute it and you will stop receiving such messages.

The Company, if finds that any unauthorized or inappropriate use is being made, such as the transmission of bulk or unsolicited commercial e-mails without your prior express consent, may take appropriate action to terminate any unwanted action, without notice and at its sole discretion.

13. Cookies Policy

In compliance with the provisions of the European Directives 2002/58/EC and 2009/136/EC, the under the number 3471/2006 Greek law and the Directives of the Greek Data Protection Authority given on 25/02/2020, our website uses cookies in order to improve the user-friendly navigation and use of the website. Cookies are online tools which collect and analyse information from social networking platforms or collaborating third party websites, in order to measure traffic, improve the operation, content and overall appearance of our website and adapt to the needs of our customers. Cookies do not allow the identification of users.

The data collected by cookies may include the type of browser you are using, the type of operating system you use, information about online service providers, webpages you visit and links leading to third party websites through our online store.

Cookies are collected by us and by third party providers only after the explicit consent you give (opt-in) after receiving clear and extensive relevant information. By using our website, you agree that we may place these types of cookies on your device and access them when you visit the website in the future. You can disable the collection of cookies at any time by changing the system settings of your browser. If you want to delete all cookies that are saved on your device, check the support and help area of your web browser. However, by deleting our cookies or disabling the collection of cookies in the future, you may not be able to access certain areas or functions of our site.

WeAre may collect the following categories of cookies:

Transient and persistent: Transient cookies are stored on your device during your visit to the website and are deleted once you leave it. Persistent cookies remain on your device for a longer period of time until they are deleted by you, such as cookies regarding the products stored in your cart or the ones you recently viewed.

Third Party Cookies installed by third-party websites or social media you enter through our online store. These cookies are governed by the Cookies Policies of each third party who installs them so we encourage you to read the relevant policies.

Essential Cookies stored on your device during your visit to our website and their acceptance ensures the smooth operation of the site.

Performance Cookies serve statistical purposes and as third-party cookies are governed by the Cookies Policies of each third party and you should read the relevant policies.

Marketing Cookies are third-party cookies which optimise our promotions based on the user’s preferences and choices. Given that, you may be able to display relevant promotional material not on our website but on third-party platforms.

Most browser menus provide several options about managing cookies. You may allow cookies to be installed, disable or delete existing ones or you may ask to be notified whenever cookies are installed. Please note that if you reject or disable our website’s cookies, the functionality of the web pages may be affected.

We may modify our Cookies Policy from time to time in our sole discretion. Any relevant modification will apply as soon as the amended Cookies Policy is posted on the Website. For your information, there will be a notice posted at our homepage mentioning the as above change. In any case, if you continue to use our website and our online store services after such modifications, you will be deemed to accept these modifications. If you do not agree to the terms of this Policy, you should abstain from using our website and online store.

Contact

If you have any questions or comments regarding this Privacy Policy or if you feel that we have not followed the principles set out in it, please contact us at info@wearedesign.gr or call us at +30 2105982370 (Monday-Friday 9:00-17:00).