If the user disagrees with some or all of the terms of use of the website, services or online store, he must refrain from using it, otherwise he declares that he has unreservedly accepted all the terms and conditions of its operation. The website KARAVELA DIM. ANGELIKI THEOFANO, operates under the responsibility of the company KARAVELA DIM. ANGELIKI THEOFANO, VAT No.: 104196164, located at 22 Veikou Street, Koukaki, Athens, P.C. 11742. with contact number +30210-9211944, hereinafter referred to as the Company.

Visitors and users of the services of this website, while browsing its pages, may be asked to voluntarily provide information and data concerning them in order to register for services, place orders for products or services, receive updates, and enjoy the services offered by the website kiteclub.gr. Personal information is collected by us exclusively and only if you register for our services as a member and is limited to your name, address (street, city, postal code), a contact telephone number and billing information (VAT, Tax ID). At the same time, we request some information such as a mobile phone number (in case we need to contact you directly). You hereby give your explicit consent to the collection and processing of your above personal data, without which we cannot offer you our services, while you can revoke or modify it at any time (Article 7 of Regulation 679/2016 EU). We reserve the right to change the terms of protection of personal data without notice, in accordance with the applicable regulatory framework. We kindly ask you to check these terms at regular intervals for any changes, as your continued participation in our services implies your acceptance of all possible modifications thereof.

Personal data includes any information regarding the data subject, with the exceptions provided for by law. Personal data (simple and sensitive), in accordance with article 4 par. 1 of Regulation 679/2016 EU on the protection of personal data, is: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person. Simple personal data are all non-sensitive data. The processing of personal data of visitors – users is any operation or set of operations which is performed, with or without the use of automated means, on personal data or on sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (in accordance with Article 4(2) of Regulation (EU) 679/2016). The processing of user data by our Company is confidential.

Our Company takes appropriate organizational and technical measures to secure user data and protect it against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access and any other form of unlawful processing. The Company, acting on the basis of the principle of legality, objectivity, accuracy, transparency, integrity and confidentiality, purpose limitation, minimization and limitation of the storage period, processes user data, which it acquires in a lawful manner and keeps in a file, strictly under the conditions of the law (article 5 of Regulation 679/2016 EU), exclusively and only upon the consent of the user – data subject. The Company declares that it lawfully processes the data of users which it collects in a fair and lawful manner for specified, explicit and lawful purposes and which are subject to fair and lawful processing in view of these purposes.

Purposes that justify the processing include, among others, the execution of orders of users of this website, the requested information of users via newsletter and the general more effective provision to them of the services offered by the Company. The processing is limited to the strictly necessary extent, collecting no more data than is required each time in view of the purposes of the processing, which are accurate and, if necessary, are updated and kept in a form that allows the identification of their subjects only during the period required for the realization of the purposes of their collection and processing (article 5, par. b, c and e, Regulation 679/2016 EU). Our Company archives the contracts with consumers – users of this website, within the institutional framework and with a view to the smooth processing of orders.

Consumers can access them if specifically requested. Unique, restrictively listed in the law (art. 6 par. 1 of Regulation 679/2016 EU) cases in which our Company may process the simple data of users without their consent are the following:

a) the processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract,

b) the processing is necessary for compliance with a legal obligation to which the controller is subject

c) the processing is necessary to protect the vital interests of the data subject or of another natural person who is physically or legally unable to give consent

d) the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

e) the processing is necessary for the purposes of legitimate interests pursued by the controller or a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, in particular where the data subject is a child.

Furthermore, data processing by our Company is also permitted when: the user, after being informed about the type of data, the purpose and scope of the processing, the recipients or categories of recipients, has consented, or the processing is necessary for the performance of a contract to which the user is a party, or for taking measures during the pre-contractual stage, at the request of the subscriber even without the user’s consent (article 5, par. 2 of Law 3471/2006). The design and selection of technical means and information systems, as well as equipment for providing users with our Company’s services, are carried out with the basic criterion of processing as little personal data as possible. The permitted storage and processing according to the above include, by way of example, informing the user, processing his order, providing requested services and any action within the framework of the user’s contract with our Company. Sensitive personal data of users, as described in the law, are not collected by the Company under any circumstances. As an exception to this rule, the Company may collect and process sensitive personal data, under the strict, restrictive conditions referred to in the law (art. 9 par. 2, of Regulation 679/2016 EU).

Consent of the data subject is any indication of will, free, specific, explicit and fully informed, by which the data subject signifies agreement, by a statement or by a clear affirmative action, to the processing of personal data concerning him or her. This information includes information at least on the purpose of the processing, the data or categories of data concerned by the processing, the recipients or categories of recipients of the personal data, as well as the name, business name and address of the controller and of his or her representative, if any.

Consent may be revoked at any time, without retroactive effect (Article 7(1-4) of Regulation (EU) 679/2016). A written form is not required for the provision of consent to the processing of simple user data, therefore consent may also be given electronically, in any appropriate manner. Users of this website during the data collection stage are informed in an appropriate and clear manner about the purpose of the processing and the recipients of their data. Users enjoy the rights provided by law regarding their personal data, including the right to information, access to their data and objections in accordance with the specific provisions of the law (Articles 12-15 of Regulation 679/2016 EU). In particular, the data subject has the right to require the controller to correct inaccurate personal data concerning him without undue delay, as well as the right to request the deletion of such data (Articles 16-17 of Regulation 679/2016 EU). Users also have the right to data portability and to transmit such data to another controller without objection from our Company (Articles 18-20 of Regulation 679/2016 EU). To exercise these rights, you can contact us. The credit card details are not stored on our company’s storage media during the transaction but are registered directly in a secure environment of the cooperating online payment service that has undertaken the routing of the cards.

Our Company adheres to the SSL (Secure Sockets Layer) protocol, which is currently the global standard on the Internet for the certification of websites to network users and for the encryption of data between network users and network servers. An encrypted SSL communication requires that all information sent between a client and a server be encrypted by the sending software and decrypted by the receiving software, thus protecting personal information during its transfer. In addition, all information sent with the SSL protocol is protected by a mechanism that automatically verifies whether the data has been changed during transfer.

Use of Cookies

To provide better services and an improved user experience, the kiteclub.gr website uses cookies. Cookies are small text files that a website stores on the users’/visitors’ computer or on their mobile device (Smartphone, tablet, etc.) when they visit it via the browser. In this way, the website remembers the users’ actions and their preferences (such as login password, language, font size and other display preferences) for a period of time, so that these preferences do not need to be entered again each time they visit the website or browse its pages. The use of one or more cookies also helps to understand user behavior, to optimize the services provided by us. Cookies help monitor the performance and traffic of the website. Under no circumstances do cookies store your personal information or information that would allow any third party to contact the visitor of the website, via email, by phone, etc. In addition, with the use of cookies there is no access to the documents or files of the visitor – user’s computer. The cookies used are as follows:

a) Strictly necessary cookies: Necessary cookies are essential for the proper functioning of the website, and allow users to browse and use the functions of this website without hindrance (e.g. session cookies). These cookies do not detect or store your individual identity and are deleted as soon as you leave the website. Without these cookies, the effective functioning of the website is not possible. In addition, without these cookies, functions such as logging into an account created by the user, online product purchases and online payments are impossible.

b) Performance cookies are related to the collection of information about the behavior of users when navigating the website and store information about its usage and performance statistics, etc. The purpose of these cookies is to collect information that improves the website and its navigation.

c) Usability cookies store usage data of this website which are displayed on a subsequent visit to it, thus facilitating the user. This data is not available when the user visits third-party websites.

d) Third party cookies, such as Google Analytics and Facebook Pixel services. Google Analytics is a web analytics service provided by Google, Inc. (“Google”).

Google Analytics uses cookies to help analyze how users use the website, demographic information, accessibility technologies, and more. These cookies are governed by Google’s privacy policy, which you can find here. Similarly, Facebook Pixel, provided by Facebook Inc. (“Facebook”), uses cookies to help analyze how users use the website, demographic information, and more. You can view Facebook’s privacy policy here and here. Our site’s Services may include links to third-party websites in the future, to which our users may be redirected. Please note that we are not responsible for the privacy practices of such third-party websites. We encourage our users/visitors to read the data protection statements/policies of each third-party website to which they link from our site. Visitors-users of the kiteclub.gr website, when providing their information in the context of their transactions with the store, membership registration and any other case, are informed, consent and accept the processing of their personal data, for the needs of the smooth processing of the transaction and the appropriate provision of the services of this website. The voluntary registration by visitors-users of our online store of their personal data, grants our Company the right to process this data in order to execute orders and appropriately offer the services requested by the users. Visitors-users of the website kiteclub.gr with this registration provide their legally required consent to the processing of their provided personal data by the Company, within the framework of the law.