Personal Data
Privacy Policy
1. General
1.1. This Privacy Policy (hereinafter referred to as the ‘Data Policy’) describes the method of data collection by the website lavtoken.gr, the use of this data by the Company, and the terms and conditions for using this website. This Data Policy refers exclusively to your personal data, which you provide to the Company during your orders on this website, so that you are informed about the purpose of its processing by us, the categories of recipients, and the procedures you can follow to exercise your legal rights.
1.2. Personal Data is defined as any information relating to the data subject, meaning any information that refers to a natural person to whom the data pertains and whose identity is known or can be verified. Such information, as defined by law and relevant regulations, includes for example: name, address, date of birth, gender, mobile phone number, email address, as well as usage data such as username, password, and IP address.
1.3. The processing of personal data is carried out in accordance with the provisions of the General Data Protection Regulation (GDPR 2016/679), any specific national and European legislation for certain sectors, the applicable Greek legislation on the protection of personal data, as well as the legislation on the protection of personal data and privacy in the field of electronic communications (Law 3471/2006, as in force), and the decisions of the Hellenic Data Protection Authority (HDPA). Any future amendment to the above regulatory framework will be subject to this Policy.
1.4. For any clarification, question, or legal request regarding your privacy and the processing of your personal data, you may contact us at any time by submitting a request to our Customer Service Department and marking it as ‘confidential’, either via email at hello@lavtoken.gr or by sending a written letter to the Company’s registered address.
2. Collection and Processing of Personal Data
2.1. The Company has designed the website lavtoken.gr in such a way that users can visit it without having to reveal their identity, unless they choose to do so. Visitors to the website are asked to provide their personal data only if they wish to order product(s), register on the website, and/or send an email to hello@lavtoken.gr.
For your simple browsing on our online store, the Company does not require any of your personal data. However, while you browse or use the services offered by lavtoken.gr, the Company collects and processes browsing data via cookies that relate exclusively to your purchasing habits.
2.2. The categories of personal data that the Company collects and processes during your visit/browsing on the lavtoken.gr Website and Online Store are as follows:
- we collect the necessary Personal Data which, according to the Law and the Terms of Use, are considered essential for completing, executing, and dispatching your order. Among these, for example, are your first and last name, email address, contact phone number (both landline and mobile), the shipping address (street, city, postal code, country), the billing address for the order, and Payment Details, such as the credit/debit card mask, etc., as well as the type of document you would like us to issue (Receipt or Invoice). In the event that you request an Invoice, your company details will be required, including the company name, VAT number, Tax Office, business activity, headquarters address, and contact phone numbers (both landline and mobile).
- we collect your first name and last name, your email address, your personal password, your gender, and your date of birth when you register at lavtoken.gr and open an account, in order to complete your purchases from our online store
- in the event that you provide personal data of third parties (such as, for example, first name, last name, address, phone number) on lavtoken.gr (e.g., in cases of purchasing gifts for a third party), the lavtoken.gr website will protect the third party’s Personal Data in accordance with this Data Policy.
3. Purpose of the Collection and Processing of Personal Data
3.1. The personal data you provide while browsing the lavtoken.gr website are intended for and processed exclusively for the following purposes:
- for the completion and execution of the purchase of the products offered by lavtoken.gr. Upon completion of your purchase, you will be asked to provide the necessary Personal Data to secure the contractual execution actions, such as payment, the necessary fraud checks (in cases of payment with a credit/debit card), billing, product shipment, and the management of any returns
- for the provision of lavtoken.gr’s services, through your registration on the website and the use of services intended solely for Registered Users/Members. Registration on the website is possible by entering specific Personal Information, which is necessary to verify the identity of the Data Subject and to facilitate the provision of services to registered users. For this purpose, the Company may collect, for each service and its features, the necessary Personal Data required for the execution of the service requested by the Data Subject
- for sending our company’s newsletters and for commercial communication about our products and services, so that you are informed about innovations, new arrivals, exclusive products, and offers
- for our communication and the management of your inquiries through the Customer Service Department
- for improving the provided services. Always with your consent, we may use your contact details for the purpose of conducting market research and general satisfaction surveys, in order to enhance our services and our relationship with our users
- for statistical research and analysis using aggregate data, in order to understand how users interact with and use the lavtoken.gr website, thereby improving our products and services.
The above data may not be used by any third party without compliance with the applicable provisions.
3.2. We may need to use and retain your personal data for legal and compliance purposes, such as the prevention, detection, or investigation of a crime, loss prevention, fraud, or any other misuse of our services and IT systems. We may also use your personal data for internal and external audit requirements, information security purposes, or to protect or exercise our rights, privacy, security, property, or those of others.
4. Recipients of Personal Data and the Purpose of Their Transfer
4.1. Your Personal Data is processed by the Company, which acts as the Data Controller.
For organizational and operational requirements related to the provision of products and services by lavtoken.gr, the Company may transfer your personal information to its representatives and/or subcontractors for the purpose of supporting, promoting, and executing your transactional relationship with it, but always under conditions that fully ensure that your personal data is not subject to any unlawful processing, other than for the purpose of the transfer as described above.
4.2. The Company reserves the right, for the above purposes, to transfer your Personal Data to:
- to courier companies with which it cooperates, in order to ensure the shipment of the products you selected from the lavtoken.gr e-shop
- to credit card providers for processing your payment, in order to ensure the shipment of the products you selected from the lavtoken.gr e-shop
- to third parties, natural or legal persons, who may provide, on behalf of the Company, promotional and marketing services for both the Company itself and its products or services
- to our third-party partners who provide technical services, such as, for example, hosting and technical support services.
All partners, representatives, and/or subcontractors have been evaluated and selected by the Company for their proven reliability and capability, and all comply with the legislation outlined in the above paragraphs.
4.3. The Company will not sell, transfer, or disclose personal data of the Subjects of its website to third parties – other than those mentioned above – without the Subject’s consent, except in cases where required by applicable legal provisions, and only to the competent Judicial, Police, and other Administrative Authorities, upon lawful request and in accordance with the applicable legislative provisions.
5. Processing of Children's Personal Data
The Company will not collect or process personal data of children under the age of 16 unless parental consent has been provided, in accordance with applicable law. If we become aware that personal data of a child has been collected in error, we will delete that data without undue delay.
6. Correction, Modification, or Deletion of Information
lavtoken.gr allows its users to correct, modify, complete, or delete data and information that have been provided to lavtoken.gr. If you choose to delete any information, the Company will act in such a way that the information is immediately removed from its records. To access, change, or delete your personal data, to report issues regarding the operation of the website, or to make any inquiries, please contact lavtoken.gr via email at hello@lavtoken.gr
7. Your legal rights.
7.1. As a data subject, you have specific legal rights regarding the personal data that the Company collects from you. The Company will respect your rights as provided by applicable data protection laws, specifically the right to withdraw consent, the right to rectification, the right to restriction, the right of access, the right to portability, the right to deletion, the right to object, the right to lodge a complaint, etc.
7.2. The Company will attempt to fulfill your request within 30 days. However, the deadline may be extended for specific reasons related to the particular legal right or the complexity of your request. To exercise your legal rights, please contact us in writing via email at hello@lavtoken.gr.
8. Retention of Your Personal Data
8.1. The Company will delete the personal data it collects from you if it is no longer necessary to achieve the purposes for which it was originally collected. However, we may be required to retain your personal data for a longer period due to legal obligations.
8.2. The Company will not delete all of your personal data if you have requested that we do not contact you in the future. For this purpose, the Company maintains records containing information about individuals who do not wish to receive future communications (e.g., via bulk email messages).
9. Periodic Changes
lavtoken.gr continuously expands, updates, and improves its website and the products and services related to it, and may also update this policy. We recommend that you review this policy at regular intervals to stay informed about any changes to its content. This policy will be modified from time to time without prior notice to users.
10. Cookies
10.1. The Company follows a strict policy for protecting the privacy of visitors to the lavtoken.gr website.
10.2. Cookies are small text files that are stored on your device through any browser whenever you visit a website. They allow websites, such as lavtoken.gr, to function smoothly and without technical issues, to collect user preferences, recognize frequent users, facilitate their access, and enhance their online experience by storing their preferences when visiting a specific website. Cookies do not cause damage to users’ devices or to the files stored on them.
10.3. The lavtoken.gr online store uses cookies to provide personalized services and content that match the customer’s interests. These cookies do not contain personally identifiable information. We may use cookies, for example, to know whether you have visited our website before or if you are a new visitor, to help us identify which features of our website you might be most interested in, to process orders, and to allow us to present promotional and educational content relevant to your interests and needs. Most browsers automatically accept cookies, but customers usually have the option to configure their browser to block them. Even without cookies, customers can still use most of the services provided by lavtoken.gr.
10.4. At lavtoken.gr, users have the ability to configure and save their cookie preferences.
10.5. Any changes to this cookie policy will take effect once the revised cookie policy is available on our website.
11. Transaction Security
11.1. The Company is committed to ensuring the protection and integrity of the data it collects regarding users of its website. It has adopted procedures that safeguard the personal data users provide on the website or through other means (e.g., by phone). These procedures protect users’ data from any unauthorized access or disclosure, loss or misuse, alteration, or destruction. They also help ensure that this information is accurate and used properly.
11.2. The Company applies an appropriate level of security and has implemented reasonable physical, electronic, and administrative procedures to safeguard the data it collects from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data that is transmitted, stored, or otherwise processed. Access to the personal data of lavtoken.gr users is granted only to the Company’s staff or direct partners, to the extent necessary for fulfilling orders. In the event of a breach of records and information containing personal data, the Company will comply with applicable legislation regarding breach notification.
11.3 Additional personal security is provided by the password you create when you become a registered user of lavtoken.gr. In order for us to display any of your personal data, you must first provide your username and password. For this reason, you should safeguard these details carefully to prevent them from falling into the hands of third parties. We also advise you to create passwords using symbols along with alphanumeric characters.
11.4 All card transactions, whether made using credit, debit, or prepaid cards, are securely processed through the “Nexi Pay” electronic payment platform of Nexi Payments Greece S.A. The platform utilizes the TLS 1.2 encryption protocol with 128-bit Secure Sockets Layer (SSL), ensuring a high level of security for user transactions and sensitive data. Encryption is an advanced method of transforming data into encoded form, allowing access only to the authorized recipient, who can restore the original information using the appropriate decryption key.
11.5 All transactions carried out through lavtoken.gr are governed by International and European law governing matters related to electronic commerce, as well as by the Consumer Protection Law (Law 2251/1994), which regulates matters related to distance selling.
12. Newsletter Updates – Advertisements
By subscribing to the newsletter service on lavtoken.gr, you agree that the Company will process and use your personal data for advertising purposes, such as sending emails containing general or promotional information (newsletters) regarding the Company, its products, and its services. The customer has the right to remove their email address from the newsletter recipient list at any time, either by following the instructions provided within the received email or by sending an email to hello@lavtoken.gr.