Security and privacy policy

The company with the name “FUNKY TAVERNA IKE“, which has been established and operates under Greek Law, is headquartered in Athens – Thisio, Irakleidon 19A, Postal Code 11851, with VAT number 802198831, Tax Office A Athens, with number GEMI171938301000, hereinafter referred to as the “Company”, as Data Controller, considers the security and protection of your personal data as a top priority, in whatever capacity you communicate or collaborate with us, such as, but not limited to, prospective or active customers, employees, suppliers, professionals, individuals, consumers or collaborating third parties.

Your personal data includes any information that can lead, either directly or in combination with others, to your unique identification or identification as a natural person. This category includes indicative data such as your name, tax registration number (AFM), social security registration number (AMKA), your physical and electronic addresses, your landline and mobile phone numbers, your bank/debit/prepaid card numbers, your email addresses, your transaction details, your telephone and internet communications, your payment data, identification details of your equipment or terminal devices, such as POS, computer, smartphone, tablet, your internet search history (log files, cookies etc.), and any other information that allows your unique identification in accordance with the provisions of the General Data Protection Regulation (GDPR 2016/679), the Greek legislation in force at any time and the decisions of the Authority. Personal Data Protection (PDPP).

Please read this Company’s Security and Privacy Policy. By using our website and signing the relevant consent statement, where required, you unconditionally accept the practices described herein, the terms of which govern the contractual relationship between us and are incorporated into the terms of use of each service.

Subject

This Security and Privacy Policy aims to inform you about the terms of collection, processing and transmission of your personal data that we may collect as Controllers or Processors.
The Company and its trained staff apply the ten Processing Principles of GDPR 2016/679 (lawfulness, objectivity, transparency, purpose limitation, data minimization, accuracy, storage time limitation, integrity, confidentiality and accountability) with the aim of protecting your eight Rights regarding the use of your Personal Data (information, access, correction, deletion, restriction of processing, portability, objection and non-automated decision-making based on profiles, as specified in Greek legislation). The above applies without any discrimination and applies to all processing operations carried out and to all services provided by the group companies.

Methods of collecting personal data

The “Company” will always ask you for the minimum personal data required by law in order to purchase our products or services or to participate in competitions and promotions. These include, by way of example, name, contact numbers, e-mail address (email), postal address for issuing or sending an invoice or proof of service provision, as well as delivery details of your order.

The “Company” retains your personal data only for as long as required by the contractual terms of each service, in combination with the applicable financial, banking, tax, telecommunications and other legislation, based on the respective purpose of processing, and then anonymizes or destroys them.

Cases of personal data collection

The “Company” collects your personal data in the following cases:

• When you complete an application – form on our website to purchase a service and if permitted by law to validly contract with us.

When you voluntarily register in printed or electronic catalogs in order to receive printed, electronic or SMS informative material or other marketing material or to renew your preferences or when you participate in competitions, questionnaires and surveys.
• When you communicate with our offices or with our customer service department staff by recording the content of your calls and any communication with our call center, with your comments and preferences for purchases, for the products you have searched for and for posting your opinion or comments.
• When you visit and navigate our websites where we collect, with appropriate data collection means, such as cookies, information from your terminal device, such as your Internet Protocol address (IP), the operating system you use, the type and version of your browser, etc.
• When submitting to us documents, pleadings, orders, reports, seizures, warrants, etc. from third parties, such as supervisory, prosecutorial, judicial, tax authorities, banking institutions, card issuing institutions, payment and credit card control institutions, credit rating information companies to protect you against fraud or money laundering or to combat financial and electronic crime.
• When we receive your necessary data for your identification (
KYC), in compliance with Regulation (EU) 2022/2065 or the Digital Services Act (Digital Services ActDSA) as well as in the context of exercising our legitimate interests, directly from you or third party trusted organizations and sources.

Cookies Policy

Our website uses small files, known as «cookies» in order to function better and improve your experience. These files are stored on your device, as long as they are necessary for the operation of this website. For all other types of cookies, we obtain your consent through an appropriate mechanism.

To learn more about how we use cookies, please refer to our cookie policy.

Processing principles

We are committed to protecting your privacy and handling your data transparently, therefore, we process your personal data in accordance with the GDPR and Greek data protection legislation for at least one of the following reasons:

For the performance of a contract

We process personal data in order to carry out transactions and offer our services based on them terms of use of our services, but also to be able to complete the process of concluding contracts with prospective partners and customers. The purpose of processing personal data depends on the requirements for each service and the contractual terms and conditions provide more details on the relevant purposes.

B. To comply with a legal obligation

There are certain legal obligations arising from the relevant laws applicable to us as well as regulatory/statutory requirements, e.g. the Money Laundering Act, consumer protection legislation, tax legislation, e-commerce legislation, the Digital Services Act or
DSA (Digital Services Act) as well as relevant national legislation on digital services, payment services legislation. There are also various supervisory authorities whose regulations we are required to apply, such as the National Telecommunications and Post Commission (EETT). Such obligations and requirements impose on us the necessary personal data processing activities for identity verification, compliance with court decisions/warrants, fraud reporting obligations and anti-money laundering checks.

C. For reasons of protection of legitimate interests

We process personal data in order to safeguard the legitimate interests pursued by us or by third parties. A legitimate interest exists when we have a business or commercial reason for using your information. But, even then, it should not unreasonably conflict with what is right and best for you. Examples of such processing activities include the following:

• Installing surveillance systems (closed-circuit television cameras – CCTV) to prevent criminal activity and protect people and property.
• Establishing legal claims and preparing our defense in legal disputes.
• Measures and procedures that we take to ensure the security of our systems and to deter potential criminal activity.
• Measures and procedures for the development of new services and the expansion/management of our activities.
• To communicate and inform our customers about new services or offers.
• To provide technical support.
• The risk management of morecom

D. Where you have given your consent, the lawfulness of this processing is based on that consent. You have the right to withdraw your consent at any time. However, any processing of personal data carried out before the receipt of your withdrawal shall not be affected.

Transfer to third parties

When you use our website and provide us with personal information, we at the “Company” act as intermediaries and do not transmit or share your information, either between group companies or with third parties, except to the extent necessary to complete your order and fulfill requests regarding the services provided by us or to suggest ways to improve your overall experience within the context of the services provided.

Finally, we may transmit or disclose your personal information to official, domestic or foreign, government and supervisory bodies (e.g. police, Bank of Greece, international tax authorities, etc.), when we are called upon to comply with the law and to prevent illegal actions against us and our customers (e.g. fraud, money laundering, etc.).

Personal data security

We at the “Company” have trained and responsible staff, while we recognize the importance of protecting your privacy and all your personal information. For this purpose, we have appropriate security policies in place and use appropriate technical and operational tools, such as anonymization, pseudonymization, data encryption, use of firewalls, establishment of access levels, authorized employees, staff training, periodic audits, compliance with international security and business continuity standards, etc.

Any of our partners who have access to the above information uses it exclusively to serve the above purposes. We share the information you provide us exclusively in the ways described in this Policy and in accordance with your explicit and specific consent per type of processing, which you can freely withdraw at any time by contacting us.

Displaying targeted ads

We may use your personal data together with other information we have collected, after human intervention by our commercial department, to display advertisements related to your apparent preferences, on our website or on another website.

However, we never associate automated customer data from different companies of the “Company” regarding your consumer profile and your general preferences with other personal information (such as your email address) to display advertisements or send you personalized offers based on profiling. Additionally, we do not share your personal information with third parties so that they can send you relevant advertisements.

If you would like us to stop sending you updates or offers, you can use the unsubscribe link at the end of the email you received from us.