Data protection Statement

Personal data (hereinafter mostly referred to as “data”) will be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and services.

According to Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” refers to any procedure carried out with or without the help of an automated process, or any series of processes related to personal data. These procedures include collection, recording, organizing, classification, storage, adaptation or modification of said personal data, or procedures such as reading, questioning, use, or disclosure through sharing, or any other form of transfer, comparison, correlation, limitation, deletion or destruction of the data.

More specifically, we shall hereby notify you of the type, scope, purpose, duration and legal basis of this processing, to the extent that we define its purposes and means individually or with others. In addition, we will inform you in the event of use of third-party data for the purpose of user experience optimization on our website. Any processing of this data by third parties will be carried out at their own risk.

Our data protection declaration is structured as follows:

  1. Information about us as controllers
  2. Rights of users and data subjects

III. Information on data processing

  1. Information about us as controllers

The responsible controller for this website in terms of data protection compliance is the company:

ASAN SA

FOOD TRADE

88 Kifisias Avenue, 15451 Neo Psychiko

Phone: +30 2106720120

Fax: +30 2106722954

Email: info@humana.gr

  1. Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right to:

  • Confirm that the data that concerns them will be processed and updated in an appropriate manner, receive further information on the processing and copies (see also Article 15 of the GDPR).
  • Rectify or fill in incorrect or incomplete data (see also Article 16 of the GDPR).
  • Immediately delete any relative data (see also Article 17 of the GDPR) or, alternatively, if further processing is deemed necessary in accordance with Article 17, Paragraph 3 of the GDPR, request a restriction of the processing in accordance with Article 18 of the GDPR;
  • Receive any data that concerns them or is provided by them and disclose it to other providers/managers (see also Article 20 of the GDPR).
  • Submit a complaint to the supervisory authority should they deem that the processing of the above data by the provider violates any data protection provisions (see also Article 77 of the GDPR).

In addition, the provider is obliged to notify all recipients to whom data has been disclosed of any correction or deletion of data or restriction of the processing that takes place on the basis of Articles 16, 17 Paragraph 1, 18 of the GDPR . However, this obligation does not exist if this notification is impossible or involves disproportionate effort. Irrespective of this, the user has the right to receive information about these recipients.

Pursuant to Article 21 of the GDPR, data users and data subjects also have the right to object to any future processing of their data, under Article 6, Paragraph 1, (F) of the GDPR. In particular, users can oppose the processing of their data for the purpose of direct advertising.

For technical reasons, and more specifically to ensure the security and stability of the website, your browser transmits data to us or to our ISP. These so-called server logs collect information regarding your browser (type and version), the operating system, the site from which you have been redirected (referral URL), the site you are visiting, the date and time of access, and the IP connection address through which our website was used.

This data is collected and stored temporarily, to the exclusion of other personal data. The legal basis for this collection is Article 6, Paragraph 1, (F) of the GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.

The data will be deleted again after seven days, unless further collection is required for evidential purposes. Otherwise, the data will be excluded from the deletion in whole or in part until the event is finally resolved.

Cookies

  1. a) Session cookies

We use the so-called “cookies” on our website. Cookies are small text files or other storage tools that are saved on your device through your browser. Through these cookies, we can collect specific information about you, regarding e.g. your browser, your location data, or your IP address.

This processing makes our site more efficient, secure, and user-friendly, as it allows us, for example to translate it into several languages ​​or use the feature of the shopping cart.

The legal basis for the processing of data is Article 6, Paragraph 1. (B) of the GDPR, provided that the processing of these cookies is carried out for the purposes of concluding or executing a contract.

If the processing of the data does not serve the conclusion or execution of a contract, our legitimate interest is to improve the functionality of our website. In this case, the legal basis for the processing of the data is Article 6, Paragraph 1, (F) of the GDPR.

Once you close your browser, these session cookies are deleted.

  1. b) Third party cookies

Our website may also use affiliate cookies, that are processed for the purposes of advertising, analysis or functionality of our website.

Please refer to the following information for details on the purposes and legal basis of third party cookie processing.

Contract processing

The data that you disclose for the use of goods and / or services will be processed by us for the execution of the contract and are therefore required. Contract execution and processing are not possible unless this data is provided.

The legal basis for processing is Article 6 Paragraph 1 (B) GDPR.

We delete the data when the contract has been fully processed, but must observe the retention periods under tax and commercial law.

As part of contract processing, we pass on your data to the transport company commissioned with the delivery of goods or to the financial service provider, insofar as this disclosure is necessary for the delivery of goods or for payment purposes.

The legal basis for sharing this data is Art. 6 Para. 1 (b) of the GDPR.

  1. c) Possibility of data elimination

You can prevent or restrict the installation of cookies by changing your browser settings. You can also delete cookies that have already been saved at any time. However, the steps required for this depend on your current browser. In case of questions, use the help tool, follow the instructions on your browser or contact the manufacturer and Customer Service Team. Of course, in the case of the so-called flash cookies, processing cannot be avoided by modifying your browser settings. Instead, you need to change the Flash Player settings. The steps and actions required for this depend on the Flash player you are using. For any questions, please use the Flash Player help tool, follow the instructions provided or contact the manufacturer and Customer Service Team.

If you prevent or restrict cookies from being installed on your computer, the functions of the website may not be used in their entirety.

 

Contract execution

The data you transmit in order to use the full range of our goods and/or services will be processed by us for the purposes of executing the contract and are therefore necessary. The conclusion and execution of the contract are not possible without prior provision of your data.

The legal basis for the processing is Article 6, Paragraph 1, (B) of the GDPR.

We delete your data when the contract is executed, but we must comply with the retention periods set out by tax and commercial law.

In the context of contract execution, we transfer your data to the freight company that has undertaken the shipping of our goods or to the provider of financial services, to the extent that this transfer is necessary for the shipping of the goods or for the purposes of payment.

The legal basis for the transfer of data is then Article 6, Paragraph 1, (B) of the GDPR.

 

Client Account / Registration Mode

Once you have created a client account through our website, we will collect and store the data you entered during registration (ex. your name, physical address or email address) exclusively for contractual services, contract execution or customer service (ex. providing an overview of your previous orders or bookmarking). At the same time, we save the IP address, as well as the date and time of your registration. Of course, this data will not be disclosed to third parties.

In the context of the following registration process, your consent to the processing of the data is obtained with regards to this statement. The data collected by us will only be used to create a client account.

Provided that you consent to this processing, its legal basis is defined in Article 6, Paragraph 1, (A) of the GDPR.

If the opening of the client account also serves the conclusion or execution of the contract, the legal basis for this processing is defined in Article 6, Paragraph 1, (B) of the GDPR.

The consent given to us for opening and maintaining a client account may be revoked in the future at any time, in accordance with Article 7, Paragraph 3 of the GDPR. All you have to do is notify us of your decision.

The data collected in this context will be deleted as soon as their processing is no longer required. In this case, we must comply with the retention periods set out in tax and commercial law.

 

Questions / contact details

When you contact us via the contact form or email, the data you provide will be used to process your request. The disclosure of data is therefore essential. If you do not provide this information, we will not be able to respond or will do so to a limited extent.

The legal basis for this processing is Article 6, Paragraph 1, (B) of the GDPR.

Your data will be deleted, when your request has been answered, and provided that its deletion does not contradict any retention requirement, for example in the case of future processing of the contract.

 

Google Tag Manager

This site uses Google Tag Manager. This service allows us to manage website tags on an interface. Google Tag Manager only installs tags, i.e pieces of code used to categorize content and topics. On our website, tags are used, inter alia, to measure traffic and evaluate visitor behavior, as well as the impact of online ads and social media channels, and to control and optimize websites. No additional cookies are installed, and no personal information is stored via this service. Even if you have disabled the corresponding cookies, they will remain active in Google Tag Manager. More information about Google Tag Manager can be found here: https://www.google.com/intl/de/tagmanager/use-policy.html.

 

Google Ads

To evaluate the impact of our ads on Google (“Google Ads”), this website uses the Google Conversion Tracking tool, an analysis service provided by Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA, “Google”) . When you are redirected to our site through a Google ad, Google Ads installs a cookie on your computer (“Conversion Cookie”). These cookies are disabled after 30 days and are not used for personal identification. Their sole purpose is to count user clicks. This cookie records the total number of users who clicked on an ad and were redirected to our website. We do not collect any information that could lead to the identification of users. Through this conversion evaluation, Google collects personal data that is stored and processed on US servers. At present, no decision has been taken by the European Commission that is binding for the US or that enforces an adequate level of data protection. However, Google has committed to comply with the US Department of Commerce’s Privacy Shield, which relates to the processing of personal data by EU Member States. More information can be found here: https://policies.google.com/privacy/frameworks?hl=de&gl=de. You can also find more information about Google Data Protection at: https://policies.google.com/privacy?gl=de. If you do not wish to participate in the Tracking process, you can turn it off by using the Ads Preference Management Tool (https://www.google.com/settings/ads/onweb/?hl=de). You can also turn off Conversion-Tracking cookies and block them from the URL “googleadservices.com” in Settings. The legal basis for the corresponding processing of your data is Article 6, Paragraph 1,  (F) of the GDPR (reconciliation of interests, based on a legitimate interest of online advertising conversion evaluation and therefore better control of advertising strategies).

Facebook Pixel

Facebook Remarketing / Retargeting: These are Remarketing tags set by the social media website Facebook, (1601 South California Avenue, Palo Alto, CA 94304, USA) and incorporated into our website. Remarketing tags create a direct link between your browser and your Facebook server when you visit our website. As a result, Facebook collects the information that you use, every time you visit our website with your IP address, therefore linking your visit to the respective user account. Our company can thus use your information to display Facebook ads. We would like to point out that, as the provider of the pages, we have no knowledge of the disclosed data or how it is used on Facebook. More information about this can be found in the Facebook Data Protection Statement at: https://www.facebook.com/about/privacy/. If you would like to object to the collection of your data through Custom Audience, you can disable this feature on the following link: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

Google Analytics

Our site uses Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043 USA; hereinafter referred to as “Google”).

Through the EU-US Privacy Shield certification, https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active, Google guarantees that EU protection requirements will be met in the US.

Google Analytics is used to analyze user behavior on our site. The legal basis for the above is Article 6, Paragraph 1, (F) of the GDPR. Our legitimate interest lies in the analysis, optimization and financial operation of our website.

Information regarding user behavior, such as IP address, location, time, or frequency of visits, is recorded to and stored on the Google server. Google Analytics is implemented through the anonymization feature, which provides an IP address shortcut within the EU or EEA.

The data collected in this way is in turn used by Google to evaluate traffic and user activities on our site. This data may also be implemented in order to provide other services related to the use of our website, as well as the internet.

Google will not associate your IP address with any other data. More information on how to prevent data usage is available here: https://www.google.com/intl/de/policies/privacy/partners, e.g.

On this website, https://tools.google.com/dlpage/gaoptout?hl=de. Google is offering a disabling add-on, as well as instructions on how to use it. This add-on can be installed on regular browsers and give you more control over the data that we collect during your visit. It informs the Google Analytics JavaScript service (ga.js) that the information you provided during your visit is not to be transmitted to Google Analytics. Nevertheless, this feature may interfere with the disclosure of information on our site or other web analytics services. Naturally, you can find more information regarding web analytics services on this Data Protection Statement.

Google Fonts

Google Fonts is used to display external fonts on our site. It is a service provided by Google LLC, (1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”).

Google adheres to the EU-US Privacy Shield, https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active, which guarantees that EU protection requirements will be met when processing data in the US.

Upon accessing our site, a connection to the Google server in the US is enabled for the purposes of displaying a font.

The legal basis is Article 6, Paragraph 1, (F) of the GDPR. Our legitimate interest lies in the optimization and financial operation of our website.

The Google connection that you generate when you access our site allows us to determine the webpage from which the request was sent and to which IP address the font is to be displayed.

Google provides more information on how to prevent data usage at the following address, https://adssettings.google.com/authenticated, https://policies.google.com/privacy.

Sample data protection statement from law firm Weiß & Partner