Privacy Policy

Protecting your personal data is important to us!

With its present policy, "HATZIARGYRIOU ZAKAR S.A." company, based in Metamorphosi, Attica on 41 Nafpliou st., Postal Code 14452 (hereinafter referred to as "the Company" or "We" or "Us") determines and discloses the terms under which, acting as the "Controller" designated by law, collects, stores, uses, and processes your personal data, which the Company collects when you visit, sign in or use loomdeco.com website, which is the Company's online shop.

This Privacy Policy also describes how we use, share, and protect your personal data, the choices you have regarding your personal data, and how to contact us. This Data Protection Policy is in accordance with the terms resulting from the application of General Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “"GDPR”) and any other relevant applicable legislation.

If you have any questions about this Privacy Policy, or any issues regarding the processing of your data and the exercise of your rights, you may contact us by email at [email protected].

Personal Data.

The term “personal data” refers to information about natural persons including, but not limited to, your name, address, e-mail address, contact telephone, etc. which identify or may identify you, hereinafter “personal data or data”

Processing of Personal Data

Processing of personal data means any act or series of acts carried out with or without the use of automated means in personal data or personal data sets, such as the collection, organization, structure, storage, adaptation or alteration, retrieval, search for information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, erasure or destruction.

Disclosure of Personal Data

The disclosure of Personal Data to the Company may be necessary in order to achieve the purposes as set forth in this Privacy Policy or it may be optional.

If you do not provide the information marked as necessary within the web page, it will be impossible to achieve the primary purpose for which such data is collected. An example is the company's failure to fulfill the sales contract.

The disclosure of additional data to the company, other than those that are mandatory, is optional and does not have an impact on the main purposes of data collection, since your disclosure is used solely to optimize the quality of the services we provide.

Personal Data that are collected

We only proceed to the collection of data that are absolutely necessary, appropriate, and clear for the intended purpose. This data include:

Data you provide to us when you register and create a user or customer account in the online shop via internet or through your mobile phone or your personal contact, and specific data such as e-mail, password/login password, name, and surname, mailing address, phone number.
Data and information you provide to us through your transactions with us (purchases, orders, etc.) in order to fulfill these orders (such as shipping/delivery information including name, surname, postal address, e-mail address, telephone number, billing information, credit/debit card holder number and details, or information about the offer you requested, and our communications (through our online shop, phone, e-mail or any other means).
Data relating to the payment method for the transactions you make with us.
Data you provide to us when you register to our newsletter.
Data for the products and services you usually select. In order to recommend products or services that you are interested in and to further enhance your shopping experience with us.
Website traffic information.
Information collected by using cookies in your browser. Learn more about how to use cookies here.
Details of your social media channel, if you interact with us through such channels (e.g., Facebook, Google, etc.).
Any other information you may provide to us voluntarily

5.Use of Personal Data

If applicable, we use your data:

To complete orders for products and services: The Company processes your Data to fulfill its contractual relationship, to process the order of products and/or services, to provide customer service, to comply with legal obligations, to oppose, raise or exercise legal claims. If we do not collect your data upon completion of the order, we will not be able to process your order and comply with our legal obligations. Please note that your data may need to be transferred to third parties in order to deliver the product or service you ordered (see below for information on how we share personal data with third parties).

In addition, we can retain your data for a reasonable period of time in order to fulfill our contractual obligations, such as product returns, always in compliance with applicable law.

To create a user account: Our Company processes Data to provide you with account functions and to facilitate the purchase of products and/or services.
For Communication purposes: Our Company uses your data to respond to any requests/queries you may submit and/or any complaints. The information you share with us enables us to manage your requests and to reply to you in the best way possible. We may also keep a record of your questions/requests to better respond to any future communication. We do this based on our contractual obligations towards you, our legal obligations, and our legitimate interests, in order to provide you with the best possible service and to be able to improve our services based on your own personal experience.
To send newsletters/offers: With your consent, we will use your Personal Data, preferences, and transaction information to notify you via e-mail, internet, telephone and/or social media about relevant products and services, including customized / personalized offers etc. You can withdraw your consent at any time.
For Web push notifications: Depending on the pages you visit, you may receive, with your prior consent, notifications about offers, news and your shopping cart. You can withdraw your consent at any time.
To participate in a loyalty program and competitions: Our Company may process Data in order to enable your participation in loyalty programs and competitions.
To develop and improve our products and services, based on our legitimate business interests.
Because we want to provide you offers and suggestions that are more relevant to your interests and needs.
To protect your account against fraud and other illegal activities: This includes using your data to maintain, update, and protect your account. We are also monitoring your browsing activity to quickly identify and resolve any issues and to protect the integrity of our site. All of the above is part of our legitimate interest.
To process payments and prevent fraudulent transactions: We do this on the basis of our legitimate business interests. This also helps protect our customers from fraud.
To comply with our contractual obligations towards you, any applicable law provisions, or court decisions.
To send you communications required by law or necessary in order to notify you of changes to the services we provide: For example, updates about these privacy notices, product recall notifications, and legally required information about your orders. These service messages will not include promotional content and do not require prior consent when sent by email or text message (SMS). If we do not use your personal data for these purposes, we cannot comply with our legal obligations.

Finally, we are aware that your data is processed by our Company's specially authorized personnel, or by our Company’s computer systems and electronic devices, and by way of exception, by third parties who, are contractually committed to maintaining the confidentiality and protecting your data and perform tasks that are necessary to achieve the purposes strictly related to the use of our online shop and the sale of products through our online shop.

6.Legal grounds for processing personal data.

Data protection law that defines the reasons under which a company may collect and process your personal data, including the terms of our contractual relationship
Your consent, where required. For example, when you choose to receive a newsletter. When we collect your personal data, we will always inform you on which data is necessary in relation to a particular service.
The Company’s obligations arising from the law (e.g., tax legislation, e-commerce legislation, etc.)
The legitimate interest of our Company. In specific cases, we collect your data in a way that is reasonably expected as part of the operation of our business and that does not substantially affect your rights, freedom, or interests.
Recipients of personal data

Access to your data is granted only to the strictly authorized personnel of our Company and to our business partners or third-party service providers.

12. Data Sharing

Data shared by our company

Our Company shares your data with:

Third party service providers, for example (but not limited to) for the process of credit cards and payments, transfers and deliveries, email distribution, research and analysis, promotional management, and management of certain services and data. Indicatively, after the purchase request of a product, we may disclose some of your personal data to third parties in order to complete the payment and shipment of the product (for example Banks, Transport Companies, etc.).
Other third parties, to the extent necessary for the following purposes:
1. compliance at the request of an institution of the Hellenic State, court order or applicable law.
2. prevention of unlawful use of our online shop or violations of its Terms of Use.

our protection against third party claims, and

contributing to the prevention or investigation of fraud (e.g., counterfeiting).

2. Other third parties to whom you have given your consent.

The Company only provides the information needed to perform these services and only for those purposes. Please note that this Privacy Policy only applies to the processing of the personal data we collect from you and up to their secure transfer to the above mentioned third parties. Although our Company discloses your data to third parties with due care and attention, we cannot control, and we are not responsible for the privacy practices or policies of such third parties. Any complaints or queries regarding the collection, use and retention of your personal data by third parties should be directed directly and exclusively against them.

13. Data retention period

We retain your Personal Data for as long as necessary to fulfil the purposes set out in this Privacy Policy (unless a longer retention period is required by applicable law). In general, this means that we will retain your personal data for as long as you have an account with our Company. With respect to your personal data relating to product purchases, we retain this data for a longer period of time in order to comply with our legal obligations (such as tax and commercial legislation and for warranty purposes where applicable). At the end of this retention period, your data will be completely deleted or anonymously aggregated with other data, for example, by aggregating them with other data, so that it can be used in an unidentifiable way for statistical analysis and business planning.

Some examples of customer retention periods include:

Orders: When you place an order, we will retain the personal data you provided for five (5) years so that we can comply with our legal and contractual obligations.

Warranties: If your order included a warranty, the relevant personal data will be retained until the end of the warranty period.

Newsletters: Your statement of consent for receiving our newsletters is maintained for as long as the Company sends you newsletters, but no longer than six months after its discontinuation.

14. Data security

For all personal data collected, the Company uses the necessary technical practices to keep its records and your data secure. Although information transmission through Internet can never be completely secure, our company has taken all necessary and appropriate technical, physical, legal, and organizational steps to keep your personal data secure.

15. Permissions

16. You have the right to access your personal data (Article 13 of GDPR).

This means that you have the right to be informed by us if we process your data. If we process your data you may request to be informed about the purpose of the processing, the type of data we retain, to whom we disclose it to, how long we store it, whether automated decision making takes place,, but also about your other rights, such as correction, erasure of data, restriction of processing and submission of complaint to the Personal Data Protection Authority.

You have the right to correct inaccurate personal data (Article 16 of GDPR).

If you find any errors in your data, you may request us to correct it (e.g., correction of a name or address update).

b. You have the right to erasure/ to be forgotten (Article 17 of GDPR).

You can ask us to delete your data if it is no longer necessary for the above-mentioned processing purposes.

c. You have the right to transfer your data (Article 20 of GDPR).

You can ask us to receive the data you have provided in a readable form or ask us to transfer to another controller.

d. You have the right to restrict processing (Article 18 of GDPR).

You can ask us to restrict the processing of your data for as long as your objections to processing are pending.

e. You have the right to object to and withdraw your consent to the processing of your Data (Article 21 of GDPR).

You can oppose to the processing of your data, and we will stop processing your Data if there are no other overriding and legitimate grounds that prevail against your right. If you have given your consent to the collection, processing and use of your personal data, you can withdraw your consent at any time with future effect.

17. Exercise of Rights

To exercise your rights, you can submit a request to us at [email protected] with the title "Exercise of Rights" and we will examine it and reply to you as soon as possible.

18. Applicable Law

The applicable law is Greek Law, as formulated in accordance with the General Data Protection Regulation 2016/679/EU, and in general the applicable national and European legislative and regulatory framework for the protection of personal data.

Any dispute arising from of or about the protection of your personal data is subject to mediation. If the dispute or part of it is not resolved through mediation, the dispute, or the unresolved part of it shall be resolved before the Courts of Athens

19. Appeal for the protection of personal data.

You have the right to file a complaint with the Data Protection Authority (1-3 Kifissias ave., Postal Code 115 23, Athens, Tel. 210 6475600, e-mail address (e-mail) [email protected]), if you consider that the processing of your personal data infringes the applicable national and regulatory framework on the protection of personal data.

20. Validity and Amendments

This Privacy Policy has been drafted in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 and has been in force since 27.2.2021. Given recent legislation and in view of possible amendments, interpretative circulars, etc., the Company may occasionally amend this Policy and the general terms and conditions.