Πολιτική Απορρήτου – Privacy Policy (GDPR)

I. WHAT DOCUMENT DO YOU HAVE TO SHARE WITH?

This privacy policy of the Online Store and Application ( “Policy” ) is informative, which means that it is not a source of obligations for you (it is not a contract or regulations). The purpose of the Policy is to clearly present the principles of operation of the Online Store and the Application, as well as the principles of handling and processing personal data.

II. WHO IS THE ADMINISTRATOR OF YOUR PERSONAL DATA?

The administrator of personal data collected:

a) via the Online Store (including the use of cookies or similar technology) or other communication channels with the Customer;
b) obtained based on the Customer’s activity on the Internet belonging to MINIERA LTD

is the company MINIERA LTD with its registered office in Str. Kapitan Nikola Parapanov 3, Petrich, 2850, Bulgaria.
Contact with the Administrator is possible under the above-mentioned address, e-mail address: [email protected]
Your Personal Data may also be processed for marketing, analytical and statistical purposes by other Group companies (defined in point XII below) as separate controllers of your Personal Data, due to the Group’s common promotion and development policy us (be sure to read point XI below).

III. HOW DO WE TAKE CARE OF YOUR DATA?

The Administrator attaches great importance to the security and legality of the processing of the Clients’ personal data. The processing of the Customer’s personal data is carried out in accordance with the Regulation of the European Parliament and of the European Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the protection of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (Journal of Laws UE.L No. 119, p. 1) (“GDPR”) and other applicable provisions of the law for the protection of personal data.
Personal Data is information relating to an identified or identifiable natural person (“Personal Data”). An identifiable natural person is a person who can be identified directly or indirectly, in particular based on an identifier such as first and last name, identification number, location data, Internet identifier or one or more specific factors that determine the physical, physiological, genetic, psychological, economic , his cultural or social identity.
In addition, the Administrator protects not only the people who visit the Online Store, but also the customers who have provided the Administrator with their Personal Data using other communication channels, namely:

a) the website https://www.facebook.com and any other websites marked or co-marked with the Facebook brand (including subdomains, international versions, widgets and versions for mobile phones), the rules of operation of which are based on the regulations specifically available at https://www.facebook.com/legal/terms , respectively provided by Facebook Inc. or Facebook Ireland Limited (“Facebook Service”), including the use of the Facebook Lead Ads feature aimed at direct marketing of the Administrator’s products or services. The rules for the protection and use of Personal Data by the Facebook Service are available, for example, at:https://www.facebook.com/policy.php . The Administrator has no influence on the content of the legal regulations of the Facebook Service, including Personal Data;
b) applications that allow the Administrator within the framework of the Facebook Service to run advertising campaigns, including contests.

IV. FOR WHAT PURPOSES AND WHAT IS THE BASIS FOR PROCESSING YOUR DATA?

Your Personal Data may be processed for various purposes and with various legal bases, depending on the functions of the Online Store you use, in particular to conclude and implement contracts concluded with you, to carry out marketing activities, analyzes related to the market and statistical analyses, the improvement of the quality of services, the implementation of the relevant legal obligations of the Administrator or the detection of ad fraud abuses. Details below.

1. ACCOUNT ON THE ELECTRONIC STORE AND THE APPLICATION

The Controller of your Personal Data is the entity referred to in point II of this Policy.
Your Personal Data provided by you in connection with the creation of an Account, as well as other data collected in connection with your activity in the Online Store and the use of our services (in particular: first and last name; email address; contact telephone number · address [street, house number, apartment number, postal code, city, country], home/business/head office address [if different from the delivery address], bank account number and, in the case of non-consumer Customers, in addition the name of the company and tax registration number [VAT] is or may be processed for the following purposes:

a) maintaining your account so that you can enjoy the benefits it offers (e.g. placing orders without having to fill in forms each time, accessing your purchase history, managing your consents on the website, etc.) and allows you to use other services available on our website – the legal basis: Article 6, paragraph 1, point b) of the GDPR, i.e. the necessity of executing the contract you enter into by creating the Account and accepting the Regulation of the Online Shop
b) marketing activities, analytical and statistical activities of the Administrator or its partners (the third parties mentioned in point 11 of the Cookies Policy) or other so-called third parties with whom we cooperate, e.g. presentation of advertisements and offers, also tailored to your interests based on profiling (in a simplified way we analyze your activity (e.g. your purchase history and behavior on our website) so that we can better adapt not only to specific , general groups of our Customers, but also to your preferences)). However, our activities do not significantly influence your decisions, e.g. purchase decisions – legal basis: Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the Controller or a third party;
c) determination, defense and assertion of the claims that may arise in the context of the relationship between you and the Administrator and the other purposes necessary for the realization of the justified interests of the Administrator or a third party – legal basis: Article 6, paragraph 1, letter f) of the GDPR, i.e. a legitimate interest pursued by the Controller or a third party.

The provision of Personal Data is voluntary, but necessary to register in the Online Store.
We will process your data for the duration of your use of your Account (while for greater protection it can be deleted after three years from your last activity within the Online Store), and in the case of marketing activities – until you object, unless the law will oblige us to process this data longer or we will store it longer in case of possible claims, for the limitation period defined by law, in particular the Civil Code, or in case of other purposes arising from the application of legal our interests. In any case, the longest period of storage of Personal Data is decisive.
Information about the recipients of your Personal Data is detailed in point VIII of this Policy.
Information regarding the possible transfer of your Personal Data to third countries (outside the European Economic Area) is detailed in point IX of this Policy.
Your rights in relation to the processing of your Personal Data are detailed in point X of this Policy.

2. ORDER SUBMISSION

The Controller of your Personal Data is the entity referred to in point II of this Policy.
Your Personal Data provided by you in connection with placing the order, as well as other data collected in connection with your activity in the Online Store and the use of our services (specifically: first and last name; e-mail address; telephone number contact; address [street, house number, apartment number, postal code, city, country], residential/business/registered office address [if different from the delivery address], bank account number and, in the case of non-consumer Customers, in addition, company name and tax registration number [VAT] are or may be processed for the following purposes:

a) execution of your order and the execution of the contract concluded – in particular to confirm its submission and reservation (if there is such an option and you have chosen it) or to send to you or to the point of collection of the selected product, as and, if necessary, to contact you on this matter – the legal basis: Article 6(1)(b) of the GDPR, i.e. the necessity for the execution of the sales contract you enter into after placing an order or a contract reservation (if such an option exists and you have selected it);
b) marketing activities, analytical and statistical activities of the Administrator or its partners (the third parties mentioned in point 11 of the Cookies Policy) or other so-called third parties with whom we cooperate, e.g. presentation of advertisements and offers, also tailored to your interests based on profiling (in a simplified way we analyze your activity (e.g. your purchase history and behavior on our website) so that we can better adapt not only to specific , general groups of our Customers, but also to your preferences)). However, our activities do not significantly influence your decisions, e.g. purchase decisions – legal basis: Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the Controller or a third party;
c) determination, defense and assertion of the claims that may arise in the context of the relationship between you and the Administrator and the other purposes necessary for the realization of the justified interests of the Administrator or a third party – legal basis: Article 6, paragraph 1, letter f) of the GDPR, i.e. the legitimate interest pursued by the Controller or a third party;
d) issuing and storing invoices and accounting documents, as well as examining complaints and returns within the deadline and in the form set out in the regulations – legal basis: Article 6 paragraph 1 point c) of the GDPR, i.e. necessity to fulfill the legal obligation of the Controller.

The provision of Personal Data is voluntary, but necessary to place the order.
In order to fulfill your order, we will process your data for the duration of the contract, as well as for the period required by law (e.g. tax, accounting), in the case of marketing activities – until you object, unless the longer period results from their storage in case of possible claims, for the limitation period defined by law, in particular the Civil Code, or in case of other purposes resulting from the application of our legal interests. In any case, the longest period of storage of Personal Data is decisive.
Information about recipients of Personal Data is detailed in point VIII of this Policy.
Information regarding the possible transfer of your Personal Data to third countries (outside the European Economic Area) is detailed in point IX of this Policy.
Your rights in relation to the processing of your Personal Data are detailed in point X of this Policy.

3. COMPLAINT FORM

The Controller of your Personal Data is the entity referred to in point II of this Policy.
Your Personal Data provided by you in connection with the submission of the complaint (Contact Form) and collected in the event of possible further communication, is or may be processed for the following purposes:

a) examination of your complaint, keeping records and settlements related to the investigated complaints – legal basis: Article 6 paragraph 1 point c) of the GDPR, i.e. the necessity to fulfill the legal obligation of the Controller;
b) determination, defense and assertion of claims that may arise in the context of the relationship between you and the Administrator and the other purposes necessary for the implementation of the justified interests of the Administrator or a third party – legal basis: Article 6, paragraph 1, letter f) of the GDPR, i.e. the legal interest pursued by the Administrator or a third party;

The provision of Personal Data is voluntary, but necessary for the submission of the complaint.
We will process your Personal Data during the execution of your complaint, unless the law (e.g. accounting) obliges us to process this data for a longer period of time or we will store it longer in case of possible claims, for the limitation period defined by law, in particular the Civil Code, or in case of other purposes resulting from the application of our legal interests. In any case, the longest period of storage of Personal Data is decisive.
Information about recipients of Personal Data is detailed in point VIII of this Policy.
Information regarding the possible transfer of your Personal Data to third countries (outside the European Economic Area) is detailed in point IX of this Policy.
Your rights in relation to the processing of your Personal Data are detailed in point X of this Policy.

4. FORM OF COMMUNICATION

The Controller of your Personal Data is the entity referred to in point II of this Policy.
Your Personal Data provided by you through the Contact Form and collected in the event of possible further communication, is or may be processed for the following purposes:

a) communicating with you and replying to your message – legal basis: Article 6 paragraph 1 point f) of the GDPR, i.e. the legal interest pursued by the Controller;
b) depending on the content of the communication, taking action at your request before from the conclusion of the relevant contract – legal basis: Article 6(1)(f) of the GDPR, i.e. the necessity of taking action before the conclusion of the contract;
c) depending on the content of your message, marketing activities, analytical and statistical activities of the Administrator or partners (the third parties referred to in point 11 of the Cookies Policy) or other so-called third parties with whom we cooperate – legal basis: Article 6 paragraph 1 point f) of the GDPR, i.e. the legitimate interest of the Controller or a third party;
d) establishing, defending and asserting the claims that may arise in the context of the relationship between you and the Controller and the other purposes necessary for the implementation of the legal interests of the Administrator or a third party – legal basis: Article 6(1)(f) GDPR, i.e. the legitimate interest pursued by the Administrator or a third party.

The provision of Personal Data is voluntary, but necessary for effective communication with us.
We will process your data until the communication with you is completed, and in the case of marketing activities – until you object, unless the law obliges us to process this data longer or store it longer in case of possible claims, for the limitation period defined by law, in particular the Civil Code, or in case of other purposes resulting from the application of our legal interests. In any case, the longest period of storage of Personal Data is decisive.
Information about recipients of Personal Data is detailed in point VIII of this Policy.
Information regarding the possible transfer of your Personal Data to third countries (outside the European Economic Area) is detailed in point IX of this Policy.
Your rights in relation to the processing of your Personal Data are detailed in point X of this Policy.

5. NEWSLETTER

The Controller of your Personal Data is the entity referred to in point II of this Policy.
Your Personal Data, including that provided in connection with subscribing to the Newsletter, is or may be processed for the following purposes:

a) implementation of the contract for the provision of the Newsletter – legal basis: Article 6 paragraph 1 point b) of the GDPR, i.e. the necessity of executing the concluded contract (Regulation of the Newsletter service) – to send you e.g. by email or via sms, mms, push or messengers that have a similar application for you assigned directly to your phone number (eg Messenger, WhatsApp), attractive advertisements and offers.
Of course, you can unsubscribe anytime from the newsletter.
b) marketing activities, analytical and statistical activities of the Administrator or its partners (the third parties mentioned in point 11 of the Cookies Policy) or other so-called third parties with whom we cooperate, e.g. presentation of advertisements and offers, also tailored to your interests based on profiling (in a simplified way we analyze your activity (e.g. your purchase history and behavior on our website) so that we can better adapt not only to specific , general groups of our Customers, but also to your preferences)). However, our activities do not significantly influence your decisions, e.g. purchase decisions – legal basis: Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the Controller or a third party;
c) determination, defense and assertion of the claims that may arise in the context of the relationship between you and the Administrator and the other purposes necessary for the realization of the justified interests of the Administrator or a third party – legal basis: Article 6, paragraph 1, letter f) of the GDPR, i.e. the legitimate interest pursued by the Administrator or a third party.

The provision of Personal Data is voluntary, but necessary to register for the Newsletter.
We will process your data for the period required for the performance of the contract (opt-out of the newsletter), until you object, as well as for the period required by law (e.g. tax, accounting), unless it arises a longer period than their storage in case of possible claims for the limitation period defined by law, in particular the Civil Code, or in case of other purposes arising from the application of our legal interests. In any case, the longest period of storage of Personal Data is decisive.
Information about recipients of Personal Data is detailed in point VIII of this Policy.
Information regarding the possible transfer of your Personal Data to third countries (outside the European Economic Area) is detailed in point IX of this Policy.
Your rights in relation to the processing of your Personal Data are detailed in point X of this Policy.

6. A PROFILE ON SOCIAL MEDIA

The Controller of your Personal Data is the entity referred to in point II of this Policy.
Your Personal Data, including those you leave when you visit our social media profiles (among others: comments, likes, online identifiers), are or may be processed for the following purposes:
a) marketing activities, analytical and statistical activities in the form that will allow you to be active on the profile, to effectively run our profile, presenting you with information about our initiatives and other activities, and in connection with the promotion of various types of events, services and products (including partners (the third parties referred to in point 11 of the Cookies Policy)) or other so-called third parties with whom we cooperate) – legal basis: Article 6 paragraph 1 point f) of the GDPR, i.e. the legitimate interest pursued by Administrator;
b) determination, defense and assertion of the claims that may arise in the context of the relationship between you and the Administrator and the other purposes necessary for the realization of the justified interests of the Administrator or a third party – legal basis: Article 6, paragraph 1, letter f) of the GDPR, i.e. the legitimate interest pursued by the Administrator or a third party.
The provision of Personal Data is voluntary, but necessary to fully use the functionality of our social media profiles.
Your Personal Data will be processed for the period required to implement the above purposes or until you effectively object, as well as for the period required by law (e.g. tax, accounting), unless the longer period results from their storage in case of possible claims, for the limitation period defined by law, in particular the Civil Code or in case of other purposes arising from the application of our legal interests. In any case, the longest period of storage of Personal Data is decisive.
Information about recipients of Personal Data is detailed in point VIII of this Policy.
Information regarding the possible transfer of your Personal Data to third countries (outside the European Economic Area) is detailed in point IX of this Policy.
Your rights in relation to the processing of your Personal Data are detailed in point X of this Policy.

7. LIVECHAT

The Controller of your Personal Data is the entity referred to in point II of this Policy
Your Personal Data that you provide through LiveChat located on the Online Store website is submitted or may be submitted for the following purposes:

a) handling queries via chat – legal basis: Article 6, paragraph 1, point f) GDPR, i.e. the legitimate interest pursued by the Controller;
b) depending on the content of the communication, taking action on your request before the conclusion of the relevant contract – legal basis: Article 6 paragraph 1 point b) of the GDPR, i.e. the necessity of taking action before the conclusion of the contract;
c)depending on the content of your messages, marketing activities, analytical and statistical activities of the Administrator or partners (the third parties mentioned in point 11 of the Cookies Policy) or other so-called third parties with whom we cooperate – legal basis: Article 6, paragraph 1, point f) of the GDPR, i.e. the legitimate interest of the Controller or a third party;
d) establishing, defending and asserting the claims that may arise in the context of the relationship between you and the Controller and the other purposes necessary for the implementation of the justified interests of the Administrator or a third party – legal basis: Article 6, paragraph 1, point f) of the GDPR, i.e. the legitimate interest pursued by the Administrator or a third party.

The provision of Personal Data is voluntary, but necessary to use the LiveChat function (to communicate effectively with us).
We will process your data until the communication with you is completed, and in the case of marketing activities – until you object, unless the law obliges us to process this data longer or store it longer in case of possible claims, for the limitation period defined by law, in particular the Civil Code, or in case of other purposes resulting from the application of our legal interests. In any case, the longest period of storage of Personal Data is decisive.
Information about recipients of Personal Data is detailed in point VIII of this Policy.
Information regarding the possible transfer of your Personal Data to third countries (outside the European Economic Area) is detailed in point IX of this Policy.
Your rights in relation to the processing of your Personal Data are detailed in point X of this Policy.

8. NOTICE OF PRODUCT AVAILABILITY

The Controller of your Personal Data is the entity referred to in point II of this Policy.
Your Personal Data provided in connection with the desire to use the product availability notification service is or may be processed for the following purposes:

a) sending a product availability notification – legal basis: Article 6, paragraph 1, point b) of the GDPR, i.e. the necessity to perform the service contract regarding the product availability notification;
b) marketing activities, analytical and statistical activities of the Administrator or of the partners (the third parties referred to in point 11 of the Cookies Policy) or other so-called third parties with whom we cooperate – legal basis: Article 6, paragraph 1, point f) of the GDPR, i.e. the legitimate interest of the Controller or a third party;
c) determination, defense and assertion of the claims that may arise in the context of the relationship between you and the Administrator and the other purposes necessary for the realization of the justified interests of the Administrator or a third party – legal basis: Article 6, paragraph 1, letter f) of the GDPR, i.e. the legitimate interest pursued by the Administrator or a third party.

Providing Personal Data is voluntary, but necessary to receive notification of product availability.
We will process your data for the period required to inform you about the availability of the product (this period may vary depending on the product you selected), and in the case of marketing activities – until you object, unless the law will compel us to process this data longer or we will store it longer in case of possible claims, for the limitation period defined by law, in particular the Civil Code, or in case of other purposes resulting from the application of our legal interests. In any case, the longest period of storage of Personal Data is decisive.
Information about recipients of Personal Data is detailed in point VIII of this Policy.
Information regarding the possible transfer of your Personal Data to third countries (outside the European Economic Area) is detailed in point IX of this Policy.
Your rights in relation to the processing of your Personal Data are detailed in point X of this Policy.

9. ORGANIZATION OF COMPETITIONS

The Controller of your Personal Data is the entity referred to in point II of this Policy.
In case you decide to take part in a contest organized by the Administrator, your Personal Data is or may be processed for the following purposes:

a) conducting a competition, selecting winners and awarding prizes – legal basis: Article 6 paragraph 1 point f) of the GDPR, i.e. the legitimate interest pursued by the Controller;
b) implementation of the Controller’s legal obligations, in particular those arising from the provisions which regulate the issues of tax obligations – legal basis: Article 6 paragraph 1 point c) of the GDPR, i.e. the necessity to fulfill the legal obligation of the Controller;
c) marketing activities, analytical and statistical activities of the Administrator or its partners (the third parties mentioned in point 11 of the Cookies Policy) or other so-called third parties with whom we cooperate, e.g. presentation of advertisements and offers, also tailored to your interests based on profiling (in a simplified way we analyze your activity (e.g. your purchase history and behavior on our website) so that we can better adapt not only to specific , general groups of our Customers, but also to your preferences)). However, our activities do not significantly influence your decisions, e.g. purchase decisions – legal basis: Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the Controller or a third party;
d) determination, defense and assertion of the claims that may arise in the context of the relationship between you and the Administrator and the other purposes necessary for the realization of the justified interests of the Administrator or a third party – legal basis: Article 6, paragraph 1, letter f) of the GDPR, i.e. the legitimate interest pursued by the Administrator or a third party.

The provision of Personal Data is voluntary, but necessary to participate in the organized competition.
We will process your data for the period required to run the competition, select the winners and award the prizes, and in the case of marketing activities – until you object, unless the longer period results from storing them in case of possible claims , for the limitation period defined by law, in particular the Civil Code, or in case of other purposes resulting from the application of our legal interests. In any case, the longest period of storage of Personal Data is decisive.
Information about recipients of Personal Data is detailed in point VIII of this Policy.
Information regarding the possible transfer of your Personal Data to third countries (outside the European Economic Area) is detailed in point IX of this Policy.
Your rights in relation to the processing of your Personal Data are detailed in point X of this Policy.

10. CUSTOMER SATISFACTION SURVEY

The Controller of your Personal Data is the entity referred to in point II of this Policy.
Your Personal Data provided to us in connection with the survey of your satisfaction with the services we provide is or may be processed by us for the following purposes:

a) customer satisfaction research (e.g. through the use of various types of surveys), improvement of the Online Store or the Application and the quality of services offered by the Operator – legal basis: Article 6 paragraph 1 point f) of the GDPR, i.e. the legal interest pursued by the Administrator or a third party;
b) determination, defense and assertion of claims that may arise in the context of the relationship between you and the Administrator and the other purposes necessary for the realization of the justified interests of the Administrator or a third party – legal basis: Article 6(1)(f) GDPR, i.e. the legitimate interest pursued by the Controller or a third party.

The provision of Personal Data is voluntary, however failure to provide it may prevent you from participating in the satisfaction survey. Providing them will allow us to know your opinion about the services we provide and will allow us to improve the Online Store or the Application.
We will process your data for the period required to carry out a satisfaction survey and to process and implement solutions aimed at improving the Online Store or the Application and the quality of the services provided, unless the law obliges us to process these data longer or we will store it longer in case of possible claims, for the limitation period defined by law, in particular the Civil Code, or in case of other purposes arising from the application of our legal interests. In any case, the longest period of storage of Personal Data is decisive.
Information about recipients of Personal Data is detailed in point VIII of this Policy.
Information regarding the possible transfer of your Personal Data to third countries (outside the European Economic Area) is detailed in point IX of this Policy.
Your rights in relation to the processing of your Personal Data are detailed in point X of this Policy.

11. MINIERA LTD

The Controller of your Personal Data is the entity referred to in point II of this Policy.
Your Personal Data (provided when creating an Account or at the time of subsequent registration with www.GlorySmile.gr and collected during participation in MINIERA GROUP of companies) is or may be processed by us for the following purposes:

a) implementation of services covered by the www.GlorySmile.gr reward program, including the presentation, creation, granting and implementation of advertisements and offers (discounts) tailored to your preferences, also as a result of automated decision-making – legal basis: Article 6, paragraph 1; point f) of the GDPR, i.e. the necessity to perform the contract related to the participation in MINIERA GROUP of companies.
b) determination, defense and assertion of the claims that may arise in the context of the relationship between you and the Administrator and the other purposes necessary for the realization of the justified interests of the Administrator or a third party – legal basis: Article 6, paragraph 1, letter f) of the GDPR, i.e. the legitimate interest pursued by the Controller or a third party;
c) fulfillment of legal obligations arising from applicable legislation – legal basis: Article 6, paragraph 1, point c) of the GDPR, i.e. necessity to fulfill the legal obligations of the Controller .

The provision of the data is voluntary, but necessary for the registration and participation in MINIERA GROUP of companies (for the conclusion and execution of the contract related to the participation in the MINIERA GROUP of companies reward program).
We will process your data for the duration of your participation in MINIERA GROUP of companies (but we may delete your data after three years from your last activity on www.GlorySmile.gr), unless we are required by law to process this data longer or we will store them longer in case of possible claims, for the limitation period defined by law, in particular the Civil Code, or in case of other purposes resulting from the application of our legal interests. In any case, the longest period of storage of Personal Data is decisive.
Information about recipients of Personal Data is detailed in point VIII of this Policy.
Information regarding the possible transfer of your Personal Data to third countries (outside the European Economic Area) is detailed in point IX of this Policy.
Your rights in relation to the processing of your Personal Data are detailed in point X of this Policy.

V. ARE YOU OBLIGED TO PROVIDE YOUR DATA AND WHAT ARE THE POSSIBLE CONSEQUENCES OF NOT PROVIDING THEM?

The provision of Personal Data by the Customer to the Online Store is voluntary, but it is necessary for the use of certain functions of our store, for example, for the submission of an Order by the Customer and its settlement (conclusion and execution of the Contract of Sale), registration of an Account or making a Booking (conclusion and execution of a Service Provision Agreement), registration to the Newsletter or for the use of our forms.
Each time, the range of data required for the conclusion of a specific contract is first mentioned in the Online Store (we note the data the provision of which is necessary for the conclusion of the contract/use of a specific functionality), in the context of other communication channels with the Customer or in the Regulations. The consequence of not providing Personal Data may be the impossibility of effectively performing the above actions.

VI. IS YOUR DATA PROFILED AND WHAT DOES THIS MEAN FOR YOU?

The Administrator, in order to present general advertisements, products or offers (discounts) intended for all Customers, in a way adapted to the interests of a specific Customer, may learn his preferences, e.g. analyzing how often he visits the Online Store. This allows the Administrator to better understand the Client’s expectations and adapt to their needs, without significantly influencing their decisions. Thanks to the use of advanced technologies by the Administrator, the above activities will often be performed by the system in an automated way, thanks to which the content sent will be the most up-to-date and the Client will be able to quickly familiarize himself with it.
The Administrator may also process information about the Client’s preferences, which may sometimes have the nature of Personal Data, and which have been provided by the Client to the Administrator voluntarily through the functionality in the Online Store, including limiting the presented Products or Offers in a specific size (eg size) or in specific categories (eg Men’s/Women’s/Kids’ Products).
Analysis of visits to our website and information collected about how it is used may also help us detect ad fraud.

VII. YOU GIVE US ACCESS TO AREAS OF B.C. OF YOUR MOBILE WHEN USING OUR WEBSITE?

In order to initiate the functionality of the website which includes scanning and storing the barcodes of the Products, scanning the leg, presenting Products based on photos you have uploaded, storing information that allows the Application to work offline, searching through the geographical location of a physical store of the Seller or a specific parcel collection point, the Administrator may obtain, including with your consent, access to the following areas of your mobile device:

a) camera;
b) device memory;
c) geographic location.

VIII. WHO CAN BE THE RECIPIENT OF YOUR DATA?

Each time, the list of recipients of Personal Data processed by the Controller results mainly from the scope of services used by the Client.
The list of recipients of the data also results from the Customer’s consent or from the provisions of the law and becomes more accurate as a result of the actions taken in the Online Store or the Application.
The Administrator’s partners may participate in the processing of Personal Data to a limited extent, in particular entities that technically assist in the effective operation of the Online Store or Application, including communication with our Customers (e.g. support us in sending emails mail and in the case of advertising activities – also in marketing campaigns), the providers of website hosting services or ICT services, carriers or intermediaries that carry out shipments of Orders, entities that handle electronic or credit card payments in the Online Store, entities that offer to conclude of the consumer loan agreement, companies that provide software,support the Administrator in marketing campaigns as well as the providers of legal and consulting services.
According to the above rules, the Customer’s Personal Data may also be transferred to the MINIERA GROUP of companies mentioned in point XIII of the Policy.
First of all, in the context of marketing (advertising) activity, the Administrator uses the services of third parties that use cookies or similar technologies in the Online Store / Application. The list of these entities is detailed in point 11 of the Cookies Policy.

IX. IS YOUR DATA TRANSFERRED TO THIRD COUNTRIES (OUTSIDE THE EUROPEAN ECONOMIC AREA)?

In the context of the Administrator’s use of the tools supporting its current activity provided, for example, by the company Google, the Customer’s Personal Data may be transferred to a country outside the European Economic Area, where the entity it cooperates with maintains tools for the processing of Personal Data in collaboration with the Administrator.
The Administrator has ensured adequate security of the Personal Data provided through the use of standard data protection clauses approved in accordance with the decisions of the European Commission and data outsourcing contracts for processing, which meet the requirements of the GDPR. In case of data transfer to countries outside the European Economic Area, we make take every effort to ensure that our partners provide an adequate level of protection by taking additional security measures to protect Personal Data.
The Customer has the right to obtain a copy of the security measures implemented by the Administrator regarding the transfer of Personal Data to a third country by contacting us (contact details in point II of the Policy).

X. WHAT ARE YOUR RIGHTS

Each Customer has the right at any time to:

a) submits a complaint to the Office of the Commissioner for Personal Data Protection;
b) transfers the Personal Data provided to the Administrator and processed in an automated manner and their processing is based on consent or a contract, e.g. to another manager;
c) has access to his Personal Data (including e.g. obtaining information which Personal Data are processed, or obtaining copies thereof);
d) requests correction or restriction of processing (e.g. when the Personal Data is incorrect) or deletion of Personal Data (e.g. if processed unlawfully);
e) withdraw any consent given to the Controller at any time, but the withdrawal of consent does not affect the processing carried out by the Controller in accordance with the law before its withdrawal;
f) object to the processing of the Personal Data concerning him, which is carried out for the implementation of the legal interests of the Administrator or a third party (if there are no other valid legal reasons for the processing of the superior interests in relation to the interests of the Client). If the Personal Data is processed for the purposes of direct marketing, the Customer has the right to object at any time to the processing of the Personal Data concerning him for the purposes of such marketing, including profiling, to the extent that the processing is related to such direct marketing – in this case, the Personal Data can no longer be processed for such purposes.

XI. WILL YOU BE SENT COMMERCIAL INFORMATION (EG TO YOUR EMAIL ADDRESS)?

The Administrator has the technical ability to communicate with the Customer remotely (e.g. via email, sms).
Commercial information related to the commercial activities conducted by the Administrator or entities cooperating with it (including entities from the MINIERA GROUP of companies) may be sent upon the Client’s consent to receive commercial information, even after accepting the regulation of the Newsletter service.

XII. HOW DO WE PROTECT YOUR DATA?

The Administrator, taking into account the state of technical knowledge, the cost of implementation as well as the nature, scope, context and purposes of the processing, as well as the risk of violation of the rights or freedoms of natural persons with different probability and severity of the threat , implements the appropriate technical and organizational measures that ensure the protection of the processed Personal Data appropriate to the threats and categories of data covered by the protection, and in particular protects the data from dissemination to unauthorized persons, acquisition by an unauthorized person, processing in violation of applicable regulations and modification, loss, damage or destruction. Providing information about the technical and organizational measures implemented to ensure the protection of the processing, may reduce their effectiveness, which jeopardizes the adequate protection of Personal Data.
The Administrator provides, for example, the following technical measures to prevent unauthorized acquisition and modification of Personal Data sent electronically:

a) securing the data set from unauthorized access;
b) SSL certificate on the websites of the Online Store where Personal Data is provided;
c) encryption of data used to authorize a person using the functions of the Online Store;
d) access to the account only after providing the individual username and password.

XIII. WHICH ENTITIES ARE INCLUDED IN THE MINIERA GROUP of companies?

The MINIERA GROUP of companies includes the following websites:

a) www.GlorySmile-Europe.eu
b) www.GlorySmile.gr
c) www.minieragroup.eu
d) www.miniera.gr

XIV. LINKS TO OTHER WEBSITES

The Online Store may contain links to other websites. The Administrator encourages you to read the regulations and privacy policies of other websites. This Policy applies only to the indicated activities of the Administrator.

XV. CAN THIS POLICY CHANGE AND HOW WILL YOU KNOW?

The Administrator may change the Policy in the future. Each time it will place information about such a change in the context of the Online Store website and the Application. With each change a new version of the Policy will appear with a new date.

XVI. WHEN IS THIS VERSION OF THE POLICY EFFECTIVE?

This version of the Policy is valid from 25/01/2022