Sirra Organics, based in Eptamili-Serres (Greece) is the party responsible for data processing for the personal data of the organization’s website users and the management and protection of the data is governed under the EU GDPR 2016/679.

Our organization commits to protect your personal information. The present policy is fundamental part of the Terms and Conditions of our website and vice versa our Terms and Conditions fully govern this policy, the function of the e-shop and all transactions on it.

Personal data collection

For any transaction through our e-shop www.sirraorganics.com and for an order completion you will be asked for some personal client information.

The personal data that the website collects are not shared with third parties (exempting those under the Law and the authorities) and its private nature is preserved.

The personal information we collect refers to:

1. The process of completion, tracking and mailing of the order and includes contact information such as the full name, address, email and telephone number, landline or mobile.

2. Invoicing information which is necessary for the order completion (service provision and product supply) such as VAT/PO number, bank card information, payment method, etc.

3. Information for the improvement of our products or services.

4. Updates regarding our offers, services and products.

5. Updates on new services and functions of our website.

6. Response to potential user or customer queries in relation to our services or products provided via www.sirraorganics.com.

We will use your personal information for the purposes as described above. We do not collect or process additional or other type of data than the necessary for each purpose. We will use the data strictly according to the present privacy policy unless you have specifically provided consent to other use of your information.

If we intent to use your personal data for purposes other than those you have consented to, we will notify you in advance and when you have provided consent, we will use it for a different purpose with your permission.

Furthermore, we collect and process data beyond your consent only when this is dictated by Law or upon warrant from the authorities or Court of Law.

Duration of personal data storage

Data is stored for the duration of time deemed necessary to achieve the goal for which it has been collected. Upon fulfillment of the goal or when the purpose of having the data stored is surpassed the data will be deleted, unless mandated differently by Law in compliance to data storage.

More specifically, for the duration of the time a user or member of our website has an active account on our website, their data storage is necessary. For the duration of the time a supplier is working with our organization their data will be stored.

Personal information sharing

Personal data is shared exclusively with the employees and suppliers of the organization, who process the data for the fulfillment of our services. Beyond this we never share or populate personal data to any third party. The stored data may be shared with Court, Police or other authorities upon a legal warrant and in accordance to the current legal regulation. The customer has the right to be informed and to object in compliance to legislation on telecommunications and articles 11 to 13 of regulation 2472/1997.

Personal information and data that we receive for you from third parties

If we come across personal data provided by third parties, the responsibility for that data storage, sharing, consent and processing is with the third party. Our organization aims to consistently ascertain and check that the information processing was in accordance to the legal requirements.

Personal data protection

The organization has adapted processes that protect the personal data users of the website have provided. The user data are protected from any unauthorized access or discovery, loss, alteration or abuse.

www.sirraorganics.com does not store bank information, as all payment transactions are fulfilled in the environment of the linked payment institutions and organizations (PayPal). User’s connection to the website as well as data exchange with the organization is made via secure connection and with the use of the installed security certificate software SSL. In addition, the payment institutions and organizations secure transactions by taking the necessary measures for the transactions and the users’ data protection.

Our dedication to your data protection is permanent and consistent. We continuously take the legally approved and required measures which will allow us to protect your data and personal information. We consistently update and improve our security practice. Similarly, our procurement procedures include and implement these requirements and extend to physical and legal parties, who guarantee the same level of safe and confidential treatment of the data. In the unlikely instance that we may discover data leak or misuse, our organization will take all legal actions to inform you and the authorities. If you happen to become aware of an information leak or data misuse, you are required to make us aware within 24 hours from discovery.

Right to access-update your personal data

You always have the right upon request to fully access and update the data we store for you.

Right to process-correct-restrict processing-removal

If the data which we store for you is incorrect, incomplete or inaccurate you have the right to request correction, completion or update.

You also have the right to request restriction of the ways in which we process your information. This means that we can retain your information without further processing, retaining only what is required for future reference.

All of your above rights as well as your right to recall your consent can be exercised by sending your request to info@sirraorganics.com. Furthermore, you can mail your request to the organization, who is the legal Processor of Personal Data.

You have the right to request us to delete your personal information, if this is compliant with the Law (ex not restricted for tax office purposes).

Right to amend the present policy

The organization may amend the present policy of personal data protection when it deems this necessary. Changes will be announced on the website and will apply from the day of publication. You should check the website frequently to be aware of the up-to-date policy on GDPR.

Contact

You can contact us with questions on our GDPR policy using the contact options available at www.sirraorganics.com.