Privacy Policy

Privacy Policy and GDPR Compliance

(General Data Protection Regulation)

We, the GPScom Technologies team, treat the protection of your personal data as a responsibility, and we collect and process your details only where it is strictly necessary. For that reason the website www.gpscom.gr has been designed with appropriate operational and internal systems and complies with European data protection legislation (EU Regulation 679/2016 — GDPR).

This Policy has been adopted by the company under the name “ZERVOUDAKIS COMMUNICATIONS SINGLE-MEMBER P.C.”, trading as GPScom Technologies. Our registered office is at KORINTHOU 7, THESSALONIKI, POSTCODE 54453, VAT number 802646853, Tax Office: 7th Thessaloniki, and it is the controller of the personal data you provide to us. Our company is responsible for protecting you whenever you use www.gpscom.gr whether as an ordinary user, as a consumer-purchaser or as a Member, and for informing you of everything you need to know, in accordance with Articles 12, 13 and 14 of the new GDPR which has applied at European level since 25 May 2018.

What personal data does GPScom Technologies collect, and for what purposes is it processed?

Personal Data means any information relating to you, or that can be attributed to you. Our company may collect ordinary personal data such as first name, surname, postcode, city, country, telephone and mobile number, as well as data of a technical nature such as your email address, IP address, username and password for our e-shop, and others, which it processes as explained below. Should we receive personal data of yours belonging to a special category (for example data relating to your state of health), we undertake to process it with even greater care and only with your explicit consent, or in a manner permitted by the relevant legislation.

We may collect your data by telephone (for example a telephone order), online (for example registering as a member, submitting an online order) or in person (for example if you visit our shop), as follows:

If you call us, and solely for the purpose of evidencing your telephone communications and/or orders, the telephone calls received and made by our call centre are recorded. This is lawfully disclosed to you as soon as you call us and before you give us any personal information.

Specifically, GPScom Technologies collects and processes the following personal data and information about you:

1. Browsing the website — Cookies

Like most websites, this one, when you browse www.gpscom.grregister as a Member of our online shop, subscribe to the Newsletter service or submit a purchase order in our online shop, collects and processes personal data and information concerning you, either through cookies or directly from you when you provide it to us.

Google Analytics: We also use Google Analytics (GA) to monitor user activity. We use this data to determine the number of people using our website, to understand better how they find and use our site, and to see the path they take through it.

Although GA records data such as your geographic location, your device, your web browser and your operating system, none of this information identifies you to us personally. GA also records your computer's IP address, which could be used to identify you, but Google does not give us access to it. We regard Google as a third-party data processor, as stated below.

With your explicit consent we may also analyse your usage behaviour on our website in order to provide you with personalised information. The assessment of usage behaviour covers in particular the areas of the website where you spent time and the links you activated (for example the shopping basket). From this information we create usage profiles classified by person and/or email address, so that advertising — in particular in the form of a newsletter, advertising messages on the website and printed advertising — can be better tailored to your personal interests and our online offers improved.

Cookies: Browsing the website or online shop does not require you to register, and therefore does not require you to provide us directly with your personal data or other information concerning you. However, while you browse the GPScom Technologies website and transact with us through our services, the Company collects personal data and other information about you through our own cookies (first-party cookies) and those of third parties we work with (third-party cookies). We may use that data for advertising and promotional purposes, for statistical purposes, for market research aimed at improving our products and services, for profiling, for measuring the effectiveness of the website, for improving and upgrading its content, for adapting it to users' demand and needs, and for measuring the effectiveness of the presentation and display of GPScom Technologies on third-party websites.

In addition, we use them to sign you in to your Account, to remember the products held in your basket, to let you sign in to your Account without having to open a new account each time you want to make a purchase in our shop, to diagnose problems on our server, and for similar purposes.

Cookies are small text files placed temporarily on your computer or electronic device and transmitted to our server when you visit GPScom Technologies, via the browser you are using. None of the cookies used on the website collects information from, or gains knowledge of, any document or file on your computer.

The information cookies collect for the above purposes may include the type of browser you use, the type of computer, its operating system, internet service providers, the locations you visit and the third-party links you may follow from our website, the products and advertisements you view, the IP address of the computer from which you access our website, your user name, user ID and password, your operating system and browser settings, and demographic details about you such as gender, age, place of residence and other purchasing habits and online behaviour.

By browsing the website and making purchases through our online shop, you consent to the processing by GPScom Technologies of the information it collects from you through cookies. You can, however, edit your preferences through our site's dedicated cookie settings.

2. Member registration — opening an Account

During the Member registration process, GPScom Technologies collects the personal data that Users voluntarily declare when registering as Members of our online shop in order to open an Account. Specifically, in this case we collect your email address and password, first name, surname, address, postcode and city, which are encrypted as explained below. Our Company uses the above personal data in order to open an Account for you through which you can view your transaction history. At the same time, by providing these details to the Company you consent to its retaining your password so as to permit access to your Account each time you sign in with it.

If you are under 16, you MUST have your parents' consent before registering with www.gpscom.gr

3. Subscribing to the Newsletter service

We will not send you any Newsletter, for any purpose of advertising or promoting our products, unless you choose to subscribe to our Newsletter service. If you subscribe, GPScom Technologies will collect your email address and will send you information about the products in our GPScom Technologies online shop, any product offers, gift vouchers and points, product advertising, commercial partnerships and similar material.

If you choose to join our email newsletter, the email address you submit to us will be forwarded to MailChimp, which provides us with marketing services. We regard MailChimp as a third-party data processor, as noted below. The email address you submit will not be stored in the database within the website or in any of our computer systems.

Your email address will remain in MailChimp's database for as long as we continue to use MailChimp's services for our email marketing, or until you expressly request its removal from the list.

If you do not wish to receive GPScom Technologies Newsletters or promotional material generally, you may at any time request removal from our recipient list, either by following the instructions provided in the Newsletters or by sending the relevant request to info@gpscom.gr. From the emails our Company sends you as part of the Newsletter service, the Company records, by means of cookies, the open rates of the messages you receive from us through the Newsletter service and the number of clicks on particular links.

If you are under 16, you MUST have your parents' consent before subscribing to our email newsletter.

4. Product arrival notification service

If, while browsing our website, you wish to buy a product that is not yet available in our warehouse but which we expect to receive shortly, then — and only if you ask us to and give us your explicit consent — we will contact you when we receive that product. That contact will be made by the email address you have given us and will be solely for the purpose of informing you. We state that we will not use your email address for any other purpose, and that we will delete it from our records in any event after 3 months (even if we have not received the product).

5. Purchasing products from the GPScom Technologies online shop

To complete and fulfil any online order, whether you choose to purchase as an ordinary visitor or as a Member of GPScom Technologies, you must provide personal information, relating mainly to your payment preferences, your contact details and the place of delivery of your products. Our Company uses this data to perform the contract between us — that is, to fulfil your order by selling the products and delivering them to the address you give us, and to take payment from you. Once you have provided your personal details at the order stage and for the performance of the contract between us, we will send to the email address you have given us the notification of receipt and fulfilment of the order by the courier company we work with. We may also use both your email address and your telephone number to send you a message if we encounter a problem in fulfilling your order, or so that the employee of the courier company delivering your products can contact you in the event of a problem, or for any other communication with you or notification

6. Payment by credit card

If you choose to pay by credit card for the product or products you buy from GPScom Technologies, you must provide us, for the purpose of payment, with the card type and number, its expiry date and the CCV, by completing all the required fields on the secure order form. We accept credit cards. Card transactions in our online shop are protected by the highest online security systems; specifically, transactions are completed through the interbank system of VIVA Payments, ensuring a secure transaction environment. GPScom Technologies processes your card details solely and exclusively in order to complete the transaction, that is, to take payment for the purchase of the products from our online shop. We do not store the card number, so for each purchase in our online shop that you wish to pay for by credit card you will need to enter your card details again. In this case you are redirected to the payment service provider's website. Your credit card details are handled securely and under its own responsibility by the payment service provider, as disclosed to you below.

If you choose to complete the transaction through PayPal, you are transferred automatically to the PayPal environment, which handles your payment. We neither learn nor retain your account details or your passwords.

7. Employee details — CVs

Our company collects, holds and processes the personal data of its employees — for example full name, home address, date of birth, identity card number, tax number and social security number (AMKA) — for the purpose of performing the employment contract and running payroll, and in accordance with the requirements of the relevant employment and tax legislation.

From time to time our company may also receive CVs from prospective colleagues, in which they disclose personal information about themselves, professional qualifications, work experience and similar details. We collect this data, updating it whenever necessary, always maintaining appropriate organisational and technical security measures, and for as long as is necessary for the performance of the contract between us or where this is justified in view of possible future cooperation.

8. Signing in with a Facebook or Instagram account

You can register on the website or place an order using your Facebook account. In that case GPScom Technologies will ask you to give permission for us to access the information you have set as public on Facebook. By choosing to give that permission, you consent to GPScom Technologies accessing the details of your Facebook Account that are public, for the purpose of building a profile of you, for advertising its products in a manner targeted on the basis of your profile, and for statistical purposes.

Lawful basis for processing your data

As is clear from what we have already described, we never process your data unless that processing is necessary and is based either on (1) the performance of a contract of sale between our company and you as a customer, or (2) our legitimate interests in maintaining our relationship with you as our customer, or (3) your prior consent to receive updates about our Company's activity and products.

More specifically, our Company will under no circumstances obtain from you more personal data than is necessary for each purpose for which it collects it, nor will it disclose your data to third parties, unless this is strictly necessary for us to perform a service whose provision you have requested and which relates to the contract of sale between us (for example product delivery), or processing by a third party is necessary for the purposes of our legitimate interests (for example carrying out a credit check), or you have given your prior consent, and/or where the law requires it (for example to give effect to a court judgment, a prosecutor's order, and so on).

Finally, our Company does not sell, rent or transfer your personal data to third parties, save in compliance with relevant legal requirements and then only to the competent authorities, and it does not collect or process the personal data of minors unless it has the explicit consent of their parents.

Recipients of your data

GPScom Technologies may transfer the personal data it collects about you, in accordance with the terms of this Policy, to third parties, but always under conditions that fully ensure your personal data is not subjected to any unlawful processing — that is, any processing other than the purpose of the transfer — and always under a prior written agreement between GPScom Technologies and them. These organisations are always carefully selected by us and comply with the relevant legislation. In addition, your data may be transferred to countries within the European Economic Area, where all security requirements are met. Should we need to transfer your data outside the EEA, this will be done only in accordance with international security requirements and with the maximum protection of your data in mind.

The details held in our records may be disclosed to the competent judicial, police and other administrative authorities upon their lawful request and in accordance with the legislative provisions in force at the time. Furthermore, in the event of a lawful order, an official instruction or a formal preliminary investigation, the Company has the right, without more, to make the relevant details available to the service concerned.

Specifically, we may transfer your data as follows:

• To Google, as already stated above, in particular for the use of the Google Analytics and Google Ads services for the Google Display advertising network and the Google Search network
• To Mailchimp, as already stated above, in particular for the provision of Newsletter services.
• To PayPal, for completing payment of your orders, as described above.
• To Facebook, for displaying targeted advertising if you are a user of that application and accept its terms.

All of the above organisations are established in the USA and comply with the intergovernmental agreement known as the EU-U.S. Privacy Shield.

• To advertising companies and advertising service providers generally: GPScom Technologies does not disclose personal data without the consent of the data subjects. However, GPScom Technologies may share with third-party advertising service providers statistical information about the products purchased, demographic details, details of the technical characteristics of the mobile devices used by Users to access our online shop and so on, from which you cannot be identified.
• To third parties who provide GPScom Technologies with services relating to the operation of the online shop — for example developers, data analysts, suppliers and providers of security services for data subjects' data and information — strictly for the purpose of carrying out their services for us.
• To service providers, for hosting our customer database and for technical support and administration.
• To data security service providers.
• To companies providing guarding and/or premises monitoring services using external security systems (for example cameras/CCTV).
• To credit institutions, for access to our platform and for completion of your order directly by those credit institutions, as already described.
• To courier companies, for delivery of your order
• To particular successors: should GPScom Technologies undergo a business change such as a merger, joint venture, acquisition by another company, or the sale of all or part of its assets, it may transfer all Users' information and data, including personal information, to the successor organisation. If material changes occur in GPScom Technologies' personal data protection practices as a result of the business transition, GPScom Technologies will inform you before transferring your personal data.

GPScom Technologies informs you that the above categories of recipients of your personal data and information are processors acting on our behalf within the meaning of the new Regulation and that, as such, they carry out no processing of your data beyond the above purposes of transfer and always act on our express instructions and directions.

In every case, the GPScom Technologies employees who have access to your personal data as described above are specific, identified and suitably trained individuals, and access to your data by unauthorised persons is prohibited.

Retention period

Your data will be kept in our database only for as long as we have a contractual or legal right to keep it, or for as long as it is necessary to do so. Since we cannot determine this in advance, the retention period may differ from User to User. If, for any reason, our contractual relationship ends, we may keep some of your data for as long as is still required (for example where the product you bought is covered by a warranty) and in any event until the limitation period for any related claims of ours has expired.

Naturally, all the data we hold about you will be deleted if you choose to delete your GPScom Technologies Account, or if you ask us to do so, unless we are obliged to keep all or some of it for a longer period by law (for example in relation to the tax documents for sales to you) or in order to protect a vital interest of yours (for example reasons relating to your health).

However, if you simply request removal from our newsletter, your data will be deleted directly by the relevant email distributors (for example MailChimp). Also, when you visit our online shop without registering as a member (as a guest visitor), some of your data (for example your IP address) may be kept in our database for up to 6 months (for example for reasons relating to any defect that may be identified in a product, or any other problem that may arise with your transaction). Although we may keep your data for a period necessary for the operation of our company, we will never contact you without your explicit consent or unless it is strictly necessary in order to fulfil or confirm an order of yours.

As described below, and with full respect for the particular characteristics of some of the products you may buy, access to your previous orders in our database is given only to those of our employees and associates for whom it is necessary in order to fulfil and complete each order; and we encrypt the details of those customers who bought online without being registered users, as described above.

Your rights

We undertake to enable you to exercise all of your rights under the GDPR, namely the rights to be informed, to access your data, to have it rectified or erased, and to restrict processing.

Whenever you wish to exercise any of your rights in relation to personal data of yours that we hold, you may write to GPScom Technologies at info@gpscom.gr. You may submit a request to us for free access to your data; however, depending on the volume of data GPScom Technologies holds about you, we may charge you our Company's cost of providing information about your data or any other information we hold about you.

If you wish to delete your Account, or not to receive our newsletters or other promotional communications, you should again contact us on tel. 2310 944433 or at info@gpscom.gr, and we will do what is necessary as promptly as possible.

Under the new Regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, you have the right of:

1. Access and information, that is, to be informed by us which of your data we have collected, for what purpose we collected it, how long we will keep it, and the recipients to whom it has been transferred, in particular recipients in third countries

2. Rectification, that is, to ask us to correct or complete any incomplete or inaccurate information we hold about you,

3. Restriction of and objection to processing, that is, to ask us to restrict or stop the processing of your personal data and the creation of profiles if you consider the details we have collected and hold to be inaccurate, or if you no longer wish to receive informational and promotional messages about our products and services,

4.Portability, that is, to ask us to give you a copy of the data of yours that we hold and/or to transmit it to another controller on your behalf,

5. Erasure, that is, to ask us to erase your personal data — the details and information we hold — if you wish to withdraw your consent to our retaining and processing it as described above, and of course if your data is subjected to unlawful processing in breach of the data protection regulation.

We remind you that the authority responsible for applying the regulatory framework on personal data in Greece is the Hellenic Data Protection Authority, whose contact details you can find at http://www.dpa.gr/.

Security of your data

As soon as GPScom Technologies receives your details, the procedures and security measures to prevent unauthorised access to it are activated.

Storage of records in physical form: Our company may keep records in physical, paper form which contain personal data of yours (such as contracts, invoices, consent forms and so on). We keep these records in secured areas protected by locks, to which only those of our employees or associates who need it for the purposes described in their employment contract have access. Finally, to destroy physical records we use a document shredder, so as to rule out the possibility of anyone gaining access to them without being authorised by us.

Electronic storage: Some of your personal information will be stored in the database of the websites we maintain. We have implemented tiered access to files containing personal data on our network, which is protected by a VPN (Virtual Private Network). Under this tiered access, specific passwords are required, and these are given only to those of our employees or associates who need access to those files. Our network is additionally protected by antivirus software and a firewall.

File transfer: All internet traffic (file transfer) between this website and your browser is encrypted and transmitted using the SSL 128-bit protocol. Encryption is essentially a way of encoding information until it reaches its designated recipient, who is then able to decode it using the appropriate key.

Electronic communication: Data sent to us by email is protected by the SMTP (Simple Mail Transfer Protocol). Our SMTP servers are protected by the TLS security protocol (sometimes also known as SSL), which means that email content is encrypted using SHA-2, 256-bit encryption before being sent over the internet. Email content is decrypted by our local computers and devices. In addition, our email platform is hosted by Microsoft using Office 365, which is fully GDPR compliant.

Card details: In addition, we do not store the details of the cards you use over the web. Your card details are not visible to GPScom Technologies, because you are transferred automatically to a secure banking environment to complete your order. At the same time, you too must take every possible measure to prevent third parties gaining access to your account — for example, by not disclosing your password.

We will report any unlawful breach of this website's database, or of the database of any third-party data processor, to all those directly concerned and to the authorities within 72 hours of the breach, where it is apparent that personal data stored in identifiable form has been stolen.

Changes to the privacy policy

This privacy policy may change from time to time in line with legislation or developments in the sector, without prior notice. We therefore invite you to check this page regularly.

Contact us

Before browsing the website or entering into any transaction with us — for example subscribing to the Newsletter service, opening a Member Account or making a purchase from our online shop — we invite you to consult this Policy as well and to satisfy yourself that you agree with the terms and conditions on which we collect and process your personal data.

If, however, you would like clarification or information regarding the terms of this Policy, or you have any disagreement, reservation or question, you may contact our Company on tel. 2310 944433, or by sending an email to info@gpscom.gr