To ensure the confidentiality of the data transfer against personal data leaks, an SSL encryption code is used on the company’s online sales platform (www.cannaoro.gr):
The purpose of collecting, storing and processing personal data of users and visitors of the website is to execute a contract (selling products at a distance) as well as to inform them about new products and offers through the promotion of advertising material.
- Type of data
The details of users (name, surname, e-mail address, residential address, landline phone, mobile phone) entered in the online store are considered confidential and they are collected, stored and processed according to Art. 5 of the European General Data Protection Regulation (GDPR).
The recipients of the above-mentioned processing data by order of ELVIKANN IKE and with the aim of conducting the business activity with the specific purposes mentioned above are:
ELVIKANN IKE , the advertising company LETSIOS VASILEIOS with trade name “WEB FORCE” and the courier company “Geniki Tachydromiki” within the execution of the contract drawn up by the aforementioned companies and ELVIKANN IKE. The aforementioned companies hereby confirm that only authorized employees (personal data processing staff) have access to personal data information, only when necessary.
- Sending E-Mail and Promotional Messages
The users’ personal data entered in the online store are used exclusively by the online store or the above-mentioned affiliated companies to support, promote and execute, to process the transaction and provide goods and information to the customers. The advertising promotion and information of customers is carried out by the following means: 1) Sending informative emails, 2) Sending messages of advertising/ commercial content (SMS) 3) Sending advertising messages through the Viber platform.
The user also has the right to revoke the already given consent to process his personal data according to Art. 7 of the European General Data Protection Regulation (GDPR). Therefore, if you do not wish to receive such communication from cannaoro.gr, you can use this form to request your deletion at any time.
As far as newsletters are concerned, you can unsubscribe from the contact lists at any time by clicking on the corresponding link at the end of each newsletter.
Beyond the above, the company undertakes not to disclose the details of customers and their transactions, unless it has a written authorization from them, or this is required by a court decision or decision by another public authority.
- Declaration of Consent
Α) Each user of the online store, once he/she registers his/her personal data, is invited to agree and accept that these data be subject to legal processing by the company, the recipients and processors commissioned by the company for the purpose of processing and executing the orders (in the context of a transactional relationship) .
B) Each user of the online store at the time of registration of the data is invited to consent that these data be subject to legal processing by the company, the recipients and processors commissioned by the company for the purpose of advertising products and services to the user on behalf of the company by the means described above and for the electronic communication with the user for the purpose of evaluating the services and products provided from the online store (Art. 6 of GDPR 2016/679)
- Accessing, Changing and Deleting Personal Data
If you wish to check, correct, update or delete information and personal data that you have provided to us through www.cannaoro.gr, you can apply by filling out this form. You can also visit the website www.cannaoro.gr and delete your account and any related information at any time, by linking to your account in the section “Personal settings”.
Access to personal data and transaction information is available only to authorized employees, associates and above-mentioned third parties performing the processing of the above data by order of the company, only whenever and to the extent necessary (Art. 6 GDPR 2016/679).
Personal Data Entity Rights under the European General Data Protection Regulation (GDPR 2016/619):
The customer in relation to his personal data has also the following rights and the ability to exercise them in accordance with the following articles of GDPR 2016/679:
Right to receive information (Art. 12,13,14). Right to object (Art.21). Right of access to data (Art. 15). Right of correction of inaccurate or incomplete data (Art.16). Right of deletion of data (Art. 17). Right to restrict processing data (Art. 18). Right of portability, i.e. the transfer of personal data from one processor to another (Art.20).
Cookies can be disabled/ deleted from your computer at any time using your browser settings.
- Third Party Websites