Personal Data Protection

The company “Zoumboulakis Galleries”, located in Athens, at 6 Kriezotou str., (hereinafter referred to as “the Company”), as the processor of the personal data included in this website, informs its visitors that the processing of the personal data supplied by them [the visitors] (hereinafter referred to as “data”) is made in writing, by electronical or telecommunication means, in order to provide them with the each time requested service and so that they are able to trade with the company. In order for you to carry out your transactions in our online shop and so that we also have the possibility to communicate directly with you, you will be requested to provide us with certain personal data, such as first name and surname, e-mail address, etc. If you wish to purchase products from our website using a credit card, you will be requested to provide us with further data, such as the name of the card holder, the card number, the card expiry date and the CVV number.
Personal data of the users / visitors of our website which are sent electronically to the website of our Company, remain confidential and are neither transmitted, nor notified to third parties. They might be communicated to the employees used by the Company for the legal operation of its online shop. The users of the website are not obliged to provide their personal data, but if they don’t, the provision of the each time requested by them service is likely to be hindered.
At any time the users of our website maintain the rights stipulated for them by EU General Regulation 2016/679 of the European Parliament and the Council of 27th April 2016 on protection of all individuals within Europe against the procession of their personal data and on free movement of these data, i.e the rights stipulated in the clauses 12, 13, 14, 15, 16, 17, 18, 19, 20, 21 and 22 of General Regulation [GDPR].
We assure you that our Company is not going to make any misuse of your data and that we have taken all the appropriate technical and organizational measures in order to ensure that the procession of your data takes place in accordance with the GDPR.
Data are likely to be notified to the competent judicial, police and other administrative authorities [e.g. Independent Authority of Government Revenue], following a legitimate request by them and in accordance with the each time current relevant legislative provisions.