Privacy Policy
Aqua Genesi is committed to protecting the personal data of our website users and customers, in full compliance with the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679), as well as Greek laws regarding privacy protection. This policy explains how we collect, use, store, and protect personal data, as well as the rights you have as data subjects.
1. What and whom does this privacy policy cover?
The Company is the data controller of the personal data (e.g., information that identifies a specific individual, such as full name or email address) that we collect from and about you through the Company’s services, which are processed in accordance with the terms of this Privacy Policy.
This Privacy Policy, along with our Cookie Policy, applies to all users, including those who use the Company’s services without registering or subscribing and those who have registered or subscribed to a Company service.
As specified in our Terms of Use, the Company’s services are intended for a general audience, not directed at children, and we do not knowingly collect personal data from children under the age of 16.
2. What types of data do we collect?
During your interaction with our website and services, we may collect various types of personal data. Specifically, we collect (1) registration data when you sign up or subscribe to a Company service, (2) public data and posts you share through the Company’s services, (3) data that you have allowed social networks to share with the Company, and (4) activity data when you access and interact with a Company service. Specifically, the Company collects the following types of data from and about you:
- Registration data: Information you submit to register for a Company service, for example, to create an account, post comments, receive a newsletter, or participate in a contest. Registration data may include your name, email address, gender, country, postal code, and date of birth.
- Public data and posts: Consist of comments or content you post through the Company’s services and the personal data that accompanies such posts or content, which may include your username, comments, likes, status, profile information, and photo. Public information and posts are always public, meaning they are available to everyone and may appear in search results on external search engines.
- Social network data: If you access or log in to a Company service through a social media service or link a Company service to a social media service, the data we collect may include your social media user ID and/or username, profile photo, email address, or friend lists, as well as any personal data you have made public in connection with that social media service. When you access the Company’s services via social media, you authorize the Company to collect, store, and use such data in accordance with this Privacy Policy.
- Activity data: When you access and interact with the Company’s services, we may collect certain information about these visits. For instance, to enable your connection to the Company’s services, our servers receive and record information about your computer, device, and browser, which may include your IP address, browser type, and other software or hardware information. If you access Company services from a mobile or other device, we may collect a unique device identifier, location data, or other transaction information for that device. We may also collect cookies and other tracking technologies (such as browser cookies, pixels, beacons, and Adobe Flash technology known as "Flash cookies"). These technologies can be used to collect and store information about your use of the Company’s services, such as the pages you visited, the content you viewed, search queries you submitted, and ads you saw. For more information, please refer to our Cookie Policy.
- Information from other sources: We may supplement the information we collect with publicly available online and offline information from social networks and commercially available sources.
We do not collect:
- Financial information from any payment service provider: In certain cases, we may use a third-party payment service to allow you to purchase a product or make payments (“Payment Service”). If you wish to purchase a product or make a payment via a Payment Service, you will be directed to the Payment Service website. Any information you provide to a Payment Service will be subject to the Payment Service’s privacy policy, not this Privacy Policy. We have no control over and are not responsible for any use by the Payment Service of the information collected through the Payment Service.
- Sensitive information: We ask that you do not send us or disclose sensitive personal data (such as social security numbers, information regarding racial or ethnic origin, political opinions, religious or other beliefs, health, criminal background, or union membership) through the Company’s services or otherwise.
3. How we use your data
The processing of your personal data is based on the following legal grounds and is carried out only for clear and specific purposes:
- Contract execution: We use your personal data to process your orders, fulfill payments, deliver products, and provide customer support. This processing is necessary for entering into or performing the contract we have with you.
- Legal obligations: We process your personal data to comply with our legal obligations, such as maintaining tax and accounting records.
- Consent: In some cases, we use your data to provide information about products, services, or offers that may interest you, provided you have given your explicit consent.
- Legitimate interests: We process your personal data for business purposes, such as:
- Measuring, analyzing, and improving our services.
- Enhancing your experience by providing relevant and interesting content.
- Allowing you to comment on content, participate in online competitions, and loyalty programs.
- Providing customer service and responding to your inquiries.
- Protecting the rights of the company and others when we believe in good faith that processing is necessary to protect, enforce, or defend our rights, safety, or property, or those of our affiliates, or third parties.
- Compliance with applicable laws or legal processes and responding to requests from governmental authorities.
Managing risks and preventing fraud.
We may also use anonymized data or data that no longer identifies you (such as statistics) for any purpose or share it with third parties.
4. Legal basis for processing your personal data
The processing of your personal data is based on different legal grounds, depending on the purpose of the processing. Specifically:
- Processing for the provision of services: The processing of your personal data for the purposes described in Section 3 (points a) to f)) is necessary for the performance of the contract you have entered into with Aqua Genesi or to take steps before entering into the contract at your request. This processing is mandatory because, without it, we would not be able to provide the services you request (e.g., order processing, payments, and product delivery).
- Processing for legal compliance: The processing of your data, as described in Section 3 (point g)), is required for compliance with our legal obligations (e.g., keeping accounting records). This processing is also mandatory.
- Processing based on legitimate interests: For certain activities, as described in Section 3 (point h)), the processing of your data is based on the company's legitimate interest in conducting its business activities efficiently and safely. Our legitimate interest is sufficiently balanced with your rights and freedoms, as the processing is carried out within strict limits. This processing is not mandatory, and you may object at any time.
- Processing based on consent: For other purposes, such as those described in Section 3 (points i), j), and k)), the processing of your personal data is carried out only with your consent. For example:
- The connection of a social media account to our service (Section 3, point i)) is optional, but without your consent, we will not be able to activate this feature.
- Receiving promotional communications and personalized offers from Aqua Genesi or third parties (Section 3, points j) and k)) is also optional, but without your consent, we will not be able to send you related material.
You may withdraw your consent at any time concerning the processing of your personal data for the above purposes by sending a notice via email to info@aquagenesi.com.
5. How do we proccess your personal data
Your personal data is processed both electronically and manually and is protected with appropriate security measures, considering the latest technological advancements, the cost of implementation, the nature, scope, context, and purpose of the processing, as well as the various probabilities and severity of risks to the rights and freedoms of individuals. Specifically, the Company uses suitable administrative, technical, personnel-related, and physical measures designed to protect the personal data in its possession from loss, theft, unauthorized use, disclosure, or alteration.
6. Who can access your personal data
The Company may share your personal data for the purposes outlined in Section 3 above with the following categories of recipients located within the European Union or outside the European Union, in accordance with the provisions of Section 7 below:
- Third-party service providers entrusted with processing activities who, when required by applicable laws, are duly appointed as processors (e.g., cloud service providers, other group entities, service providers supporting or maintaining the Company’s services, including but not limited to companies providing IT services, experts, consultants, and legal advisors or companies resulting from potential mergers, splits, or other transformations).
- Affiliated companies, in their capacity as data controllers or data processors.
- Competent authorities for compliance with applicable laws.
The data processors appointed by the Company include IT service providers. You may request from the Company a complete list of appointed data processors by contacting us at info@aquagenesi.com.
7. Are your personal data transferred abroad
Data may be transferred to countries within and outside the European Economic Area (EEA), particularly to the United States. The European Commission recognizes that certain non-EEA countries provide adequate levels of data protection according to EEA standards. The full list of such countries is available at: http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm. For transfers from the EEA to countries not deemed secure by the European Commission, we have implemented appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission pursuant to Articles 45 and 46 of Regulation (EU) 2016/679 (the “General Data Protection Regulation”).
You have the right to request a copy of these safeguards and further information regarding your personal data by contacting the Company at the address mentioned in Section 11 of this Privacy Policy.
8. Your rights
In accordance with data protection laws, you have, at any time, the right to:
- Receive confirmation as to whether your personal data exists and to be informed of its content and origin, verify its accuracy, and request corrections, updates, or modifications.
- Request the deletion, anonymization, or restriction of the processing of your personal data that has been processed unlawfully.
- Object to the processing of your personal data for legitimate reasons in all cases.
You can send your request to info@aquagenesi.com. In your request, please include your email address, name, address, and phone number, and clearly specify the information you wish to access, change, update, remove, or delete.
Please note that even after canceling your account or requesting the deletion of your personal data, copies of certain information from your account may remain visible in some instances, for example, where you have shared information with social networks or other services, or where retaining such copies is necessary for compliance with legal obligations or for legal defense purposes. Due to the nature of caching technology, your account may not be immediately inaccessible to others. We may also retain backup information related to your account on our servers for some time after cancellation or your request for deletion, to comply with applicable law.
We also provide you with many choices regarding the use and disclosure of your personal data for marketing purposes. You may revoke your consent for:
- Receiving marketing-related emails from us. If you no longer wish to receive marketing emails, you can opt-out by following the unsubscribe instructions in our communications, or by changing your preferences in your user profile settings if you are a registered user, or via our consent management tool available on our website if you are not a registered user. You may also send a request to info@aquagenesi.com. In any case, the Company may continue to send you administrative communications related to the provision of the Company’s services.
- Sharing your personal data with the Company’s subsidiaries or business partners for their own direct marketing purposes. If you prefer that we do not share your personal data on an ongoing basis with the Company’s subsidiaries or business partners for their direct marketing purposes, you may opt-out by adjusting your preferences in your user profile settings, if you are a registered user, via our consent management tool available on our website, if you are not a registered user, or by sending a request to info@aquagenesi.com.
In all of the above cases, we may contact you and request additional information necessary to properly process your request. The additional rights described in Section 9 below are effective as of May 25, 2018.
9. What is Applicable from May 25, 2018
As of May 25, 2018, the General Data Protection Regulation (GDPR) is in effect, which introduces new rules for the processing and protection of personal data. According to the GDPR, the following provisions apply to the retention of your personal data:
1. Retention periods for your personal data:
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, as described in this Policy. Specifically:
- Service provision data (Section 3, points a) to h)): These data are retained for the duration of the service provided by our company and for as long as required by law for fulfilling tax and legal obligations.
- Social media connection data (Section 3, point i)): These data are retained for as long as you remain connected to our service via the social network.
- Promotional campaigns and commercial communications (Section 3, point j)): These data are retained for the duration necessary to fulfill the processing purposes, and may be retained for longer periods if used for archival purposes, scientific or historical research, or for statistical purposes, in accordance with Article 89(1) of the GDPR, with the implementation of necessary technical and organizational measures.
At the end of the retention period, your personal data will be deleted, anonymized, or aggregated so that they can no longer identify you.
2. Additional Rights
In addition to the rights outlined in Section 8 of this Privacy Policy and following the implementation of the General Data Protection Regulation (GDPR), you also have the right, at any time, to:
- Restriction of processing: You can request that we restrict the processing of your personal data in the following cases:
- If you dispute the accuracy of your data, until we correct or verify its accuracy.
- If the processing is unlawful but you do not wish to have your data deleted.
- If we no longer need the data for processing purposes, but you need it for the establishment, exercise, or defense of legal claims.
- If you have objected to the processing based on legitimate interest, and we are verifying whether we have compelling legitimate grounds to continue processing.
- Right to object: You may object to the processing of your personal data, particularly when the processing is based on legitimate interests.
- Right to erasure: You can request the deletion of your personal data without undue delay when it is no longer necessary for the purposes of processing.
- Right to data portability: You can request to receive a copy of your data in a structured, commonly used, and machine-readable format or request that we transfer your data directly to another provider, where technically feasible. This applies only to data processed based on your consent or for the performance of a contract.
- Right to lodge a complaint: You have the right to lodge a complaint with the competent data protection authority if you believe that we are violating your data protection rights.
10. Updates to This Privacy Policy
Aqua Genesi reserves the right to modify or update this Privacy Policy for any reason, including, but not limited to, changes in applicable law, legal interpretations, decisions, opinions, or orders relating to data protection.
We recommend that you regularly review the "Effective Date" at the top of this Privacy Policy to see when it was last revised. Any changes to this Privacy Policy will be communicated in advance by posting the revised Privacy Policy on our company's services.
In the event we make material changes to this Privacy Policy that alter the nature of data processing or expand our rights regarding the use of personal data we have already collected from you, we will notify you in advance, and where required by law, we will provide you with the opportunity to choose how your personal data is used in the future.