Privacy Policy

Privacy Policy

Legal Basis for Processing, Data Update and Notification

The company "VICKO S.A." is the data controller of the personal data of the visitor/registered user and manages the processing of their data on the service web pages of www.vicko.gr. VICKO S.A. informs the visitor/registered user-customer, and the visitor/registered user-customer acknowledges being informed of the following:

For the processing of their data as described below, VICKO S.A. relies on the following legal bases:

Contract Execution: To fulfill the purposes of this contract, i.e., enabling the visitor/registered user-customer to complete their orders on www.vicko.gr, the processing of personal data provided by the visitor/registered user-customer during registration and order placement is necessary. This includes recording their transactions. The main purpose of this data processing is the completion of the specific order, communication with the user-customer, sending informational messages regarding the order processing stages, providing order-related clarifications, delivering the order to the user-customer's chosen location, confirming and verifying the user-customer when necessary, and updating the stock status on www.vicko.gr. VICKO also reserves the right to regularly inform the member via telephone, mail, email, SMS, or any other appropriate communication method about products and services within their transactional relationship (Article 11, paragraph 3 of Law 3471/2006) unless the member objects to this communication. This update may include product information, offers, competitions, surveys for improving products and services, and other promotional activities.

Legitimate Interests: Some data processing is necessary for improving VICKO S.A.'s services (processing statistical and non-identifiable data), detecting fraud or misuse attempts by the member, and safeguarding VICKO S.A.'s legitimate interests.

Consent: The registered user-customer is asked to provide their specific, clear, and free consent for the personalized analysis of their consumer behavior for the purpose of sending them commercial communications with personalized offers for VICKO S.A.'s products or services according to their preferences, with or without human intervention, so that the registered user-customer can receive tailored updates and offers from VICKO S.A. that best suit their profile and preferences.

The member has the right and obligation to access, correct, and update their personal data and must notify VICKO as soon as possible of:

Any changes to the personal details provided upon registration in VICKO S.A.'s online store for better service.

Processing and Types of Personal Data – Visitor/Registered User Rights

Personal Data Processing: VICKO S.A. will process the personal data of the visitor/registered user-customer as provided by them during account creation and order placement to complete the specific order through our online store. The user/customer can choose two ways to complete an online order and provide their personal data:

As a visitor: In this case, the visitor/customer's personal data will be retained in VICKO S.A.'s records for thirty (30) days from the completion and delivery of the specific order, and the processing will concern only the execution of the remote sales contract. However, data proving the transaction will be retained for tax purposes (billing record).

As a registered user of the online store: In this case, the customer/user has created a user account in our online store, and their personal data will be retained in the company's records until they request deletion. Once a year, VICKO S.A. will ask the user/customer to confirm the accuracy of their details and update them if there are changes. The user/customer can change or correct their data anytime by logging into their account on www.vicko.gr with their username and password.

Types of Personal Data

Specifically, the personal data that every visitor/registered user-customer must provide to conduct any transaction through VICKO S.A.'s online store (www.vicko.gr) and place product orders are as follows:

  • Full name
  • Shipping address
  • Billing address (if different from the shipping address)
  • Billing details (if payment by invoice is chosen)
  • Contact phone number
  • Customer's email address

For contract execution (to enable the visitor/registered user-customer to complete their orders on www.vicko.gr):

  • Full name
  • Shipping address
  • Billing address (if different from the shipping address)
  • Billing details (if payment by invoice is chosen)
  • Contact phone number
  • User/customer's email address
  • Purchased products
  • Order history

The visitor/registered user is informed that providing the above mandatory personal data and their transaction details is necessary and a prerequisite for correctly executing the order contract and delivering the products and services. Therefore, the user's consent is not required for this specific processing.

For analyzing the personalized consumer behavior of the registered user-customer to send them commercial communications with personalized offers for VICKO S.A.'s products or services according to their preferences, VICKO S.A. will additionally process the following data for the member:

If products are requested to be delivered to a third party other than the visitor/registered user, the latter acknowledges full responsibility for informing and obtaining the full consent of the recipient for sharing their personal data with VICKO S.A. solely for the purpose of delivering the relevant products. The visitor/registered user assumes full responsibility for any claims made by the recipient against VICKO S.A.

Credit card details are not stored on the company's storage media during the transaction but are entered directly into a secure environment of the partner bank responsible for card processing.

The visitor and registered user-customer are also informed that VICKO S.A. processes the contact details provided by them for communication purposes under Article 11, paragraph 3 of Law 3471/2006. When notifications about changes to the terms of use of www.vicko.gr are sent via SMS/viber/email, etc., to the registered user-customer with a hyperlink (link), the IP address of their electronic device (mobile, tablet, computer, etc.) may be recorded to prove that the member received the notification.

Data Recipients: For data necessary to serve each of the above processing purposes and within the scope of each recipient's duties, the data recipients of the user-customer may be:

  • Authorized employees of VICKO S.A.
  • Tax and other audit authorities in case of an audit

External partners providing internet services, order storage and management, call center services, (courier) delivery or bulk shipping services, product installation services, sales data analysis services, internet services, e-commerce services, and call center customer service providers with whom VICKO S.A. collaborates and who are subject to the specific strict data processing terms agreed with VICKO S.A. as the Data Controller.

When entering, accessing, or processing personal data, VICKO S.A.'s employees and contractors fully comply with the provisions of the European General Data Protection Regulation 2016/679 and the applicable Greek legislation and jurisprudence on personal data protection. VICKO S.A. requires its employees, website maintainers, and third-party partners to take all necessary technical and organizational measures (including appropriate policies and procedures to prevent the disclosure of visitors’/registered users’-customers' personal data they process and possess, and to implement procedures for the legal management and processing of personal data, protecting them according to GDPR).

Data Subject Rights: Every registered user-customer, as a data subject, can exercise their rights at any time as provided in the General Data Protection Regulation 679/2016 E.U., especially Articles 12 to 23, and national legislation, specifically:

  • The right to be informed and to access data processed by VICKO S.A.
  • The right to restrict data processing
  • The right to correct or delete part or all (right to be forgotten) of their personal data
  • The right to object to the processing of their personal data
  • The right to data portability

The member can exercise the above rights as follows:

For the right/obligation to access and correct/supplement personal data, the company provides the opportunity for registered users-customers of www.vicko.gr to view, correct, or supplement their personal data through their personal account on www.vicko.gr under the "My Information" menu and the "Edit" field.

For the right to data portability, VICKO provides registered users-customers of www.vicko.gr the opportunity to receive their personal data and/or transfer them to another data controller in the format specified by the competent supervisory authority, by submitting a request to the email address dpo@vicko.gr.

The member has the right to withdraw their consent at any time for any processing of their personal data performed based on their consent without affecting the lawfulness of the processing based on consent before its withdrawal. The withdrawal of consent can be done from their personal account on www.vicko.gr under the "My Information" menu and the "Edit" field or by sending an email to dpo@vicko.gr.

In case of exercising any of the above-mentioned rights, VICKO S.A. will take all possible measures to satisfy the request within one (1) month from its submission. In this case, the member is informed that the minimum necessary personal data will be retained to ensure VICKO's legitimate interests.

The deletion of a registered user-customer of www.vicko.gr can be done via email to dpo@vicko.gr.

Retention Period of Personal Data: VICKO S.A. will retain and process the visitor user-customer's data for a period of thirty (30) days from the completion of their specific order. The data of the registered user-customer will be retained and processed until the registered user-customer requests the deletion of their account or, for any data processing based on their consent, until they withdraw their consent for the purposes of VICKO S.A.'s services. However, some necessary personal data related to their transactional relationship with VICKO S.A., as well as information on their notification, consent, and withdrawal of consent for the processing of their data, may be retained as information for the registered user-customer to ensure proof of the lawful processing of their data by VICKO S.A. and the safeguarding of the parties' legal claims.

Special Category Data: The member is informed that VICKO S.A. neither collects nor requires the disclosure of sensitive personal data (special category data) for the needs of www.vicko.gr.

Transparency Obligation: For any information regarding their data, as well as its processing and protection, the registered user-customer can contact VICKO S.A.'s Data Protection Officer at the email dpo@vicko.gr or via the telephone line 2310 476737. If the registered user-customer is not satisfied with the response, they are informed that they have the right to appeal to the competent supervisory authority (Hellenic Data Protection Authority, www.dpa.gr, 1-3 Kifissias Ave., P.C. 115 23, Athens).

Technical and Organizational Measures for Protection: VICKO S.A., its processors, and its associates/helpers implement appropriate technical and organizational measures to best protect personal data against accidental or unlawful destruction or loss, alteration, unauthorized disclosure or access, and generally illegal processing (including remote access), as well as to ensure the capability of restoring availability and access to data. These measures aim to ensure a level of security appropriate to the risk that may affect these data, always taking into account the type and importance of the data, technological developments, implementation costs, and the nature, scope, context, and purposes of each specific processing, while applying procedures for the regular testing, assessment, and evaluation of the effectiveness of these technical and organizational measures. In any case, VICKO, its processors, and its associates/helpers are committed to maintaining the confidentiality of the members' personal data and not disclosing or allowing access to them to any third party without the prior information of the member, except in cases explicitly provided by law.

VICKO declares that no other use of the member's personal data will be made for purposes other than those mentioned in these terms without prior information and, where required, the explicit consent of the member.