Privacy Policy

«Kleissonic Pedals» attaches great importance to the protection of privacy and personal data of visitors/users. It should be noted that personal data are defined by the relevant legislation (General Data Protection Regulation 2016/679/E.U.) only those information relating to an identified or – based on specific characteristics – identifiable natural person (data subject). Information relating to legal persons and groups of persons or statistical information from which it is impossible to trace back to an identified or identifiable natural person does not fall into this category and is excluded from the scope of the relevant legislation.

This Privacy Policy is compatible with the European Regulation on the Protection of Natural Persons about Processing Personal Data (E.U./2016/679) and Greek Legislation (Law 4624/2019).

Who we are

Data Controller is the company “Kleissonic Pedals” based at Marathonos 74, Katerini, 60132, Greece.
VAT Number: EL049495052.
Business registry number: 148778448000

This policy may need to be amended in the future regarding the processing of personal data. If the modification of these terms is of such nature and extent that it is not covered by the above data processing terms, the Company will publish the new version of the policy. By navigating and using our website, visitors/users acknowledge that they have read, understood, and unconditionally accepted the Privacy Policy.

In the following terms, you will find important information regarding the purpose of using your data, their protection, and your rights as data subjects. For clarification, contact as via our contact form.

 Definitions

1. “Personal Data”: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
2. “processing”means any operation or set of operations that are performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, Use, disclosure by transmission, dissemination or otherwise making available; association or combination, restriction, erasure or destruction;
3. “Restriction of Processing”: the marking of stored personal data to limit their processing in the future;
4. “Filing system” means any structured set of personal data accessible according to specific criteria, whether centralized, decentralized, or dispersed on a functional or geographical basis;
5. “Controller”: the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data, where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its appointment may be provided for by Union or Member State,
6. “Processor”: the natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller;
7. ‘Recipient’ means a natural or legal person, public authority, agency, or other body to whom personal data are disclosed, whether a third party or not. However, public authorities that may receive personal data in the context of a specific investigation by Union or Member State law shall not be considered as recipients; such data are processed by those public authorities by applicable data protection rules depending on the purposes of the processing;
8. ‘Third party’ means any natural or legal person, public authority, agency, or body, except the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data;
9. “Consent” of the data subject: any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they, by a statement or by explicit affirmative action, signify agreement to the processing of personal data relating to them;
10. “Personal Data Breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed;
11. “Special Categories Data”: personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data to uniquely identify a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

Personal data we collect

You are not obliged to provide us with your personal information while visiting our website. Small data concerning the type of your device and the time of visit are stored through cookie mechanisms. Part of them may be transmitted to third parties if you have chosen to send them by activating selective cookie mechanisms.

Visitors to our website are also asked to provide us with their data only if they want to order product(s) to send an email to our Company.

The Company collects the following types of information about users:

1. information that the user gives us to execute his order from our online store,
2. information that the user gives us in competitions that take place from time to time

When filling out any order form from our online store, you will be asked to:

1. Country
2. Name
3. Company name
4. Address
5. Prefecture
6. Geographical District
7. Postal code of your area,
8. Your email address,
9. Your phone number,
10. Part of your credit card information (which you submit directly to the https://checkout.stripe.com/ environment)

When the user communicates with the Company, the following information is collected:

1. Name
2. Email
3. Country
4. Free text message

For the implementation of the Education pricing initiative, the following information is collected:

1. Full name
2. Qualification (student or teacher)
3. Scan of the student-educational ID card or other document that certifies their status
4. Name and contact email of the educational organization they are registered or working for

Each order processing requires collecting personal information for delivery or reservation of an order. Your submission of your data means that you consent to these data being processed by our Company for the above reasons. In no other case the Company may share your personal information with others without your prior consent unless required by law. Please note that under certain circumstances permitted or required by law or court order, the collection, Use, and disclosure of your data is done online without your prior consent (for example, in the case of a court order).

Our Company has accounts on the following social media:

• Facebook
• Instagram
• YouTube

In the above media, our Company processes personal data (such as your username and possibly your photo) to provide information about our activities and services and as an additional way of communication.

With actions such as liking or following our specific page, you declare consent to the relevant processing, i.e., to the processing of the username you use and any photo of you that accompanies it. The social media themselves make the withdrawal of consent with the same but reverse procedure (unlike unfollowing).

In any case, we declare that we do not know and are not responsible for whether these social networks further process personal data, whether they have additional processing purposes, whether they transfer to third countries, whether they use processors and sub-processors, whether they profile and how they carry out the processing of personal data as a whole.

Before providing any consent, we recommend that you consult the privacy policy of these social networks. If you upload your photos to our page in the above media or additional personal data, you are responsible for this processing. Due to the ease of sharing photos and other personal data on social media, we recommend using them to assess the potential risks arising from their disclosure.

Our Company does not and cannot exercise influence and control over the nature and extent of personal data collected and maintained by social media platforms as a condition or result of their Use and bears no responsibility for collecting and processing personal data. For more information on the purposes of collection and further processing and Use of personal data by social media platforms, as well as on the rights and available settings to protect your privacy and personal data, please consult the privacy policy of each social media platform.

Purpose and principles of personal data collection

“Kleissonic Pedals” uses the information you provide to us to contact you about:

1. the delivery of the order at your place,
2. to confirm and identify the customer in any necessary case,
3. for new or alternative products offered by “Kleissonic pedals.”
4. special offers of “Kleissonic pedals”
5. receipt of prizes following a competition draw,
6. Continuous improvement and enhancement of our services

You can choose whether or not you want to receive such communications from our Company through the relevant information fields or by sending your request via our contact form. The processing is limited to personal data that are necessary and appropriate for fulfilling the purposes and functions. The Company complies with the principles governing the processing of personal data. Personal data (Article 5 G.D.P.R.):

1. They shall be processed lawfully, fairly, and transparently about the data subject (‘lawfulness, fairness and transparency’).
2. They are collected for specified, explicit, and legitimate purposes and are not further processed in a manner incompatible with those purposes. Further processing for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes shall not be considered incompatible with the original purposes under Article 89(1) (‘purpose limitation’).
3. They are adequate, relevant, and limited to what is necessary for the purposes for which they are processed (‘data minimization’).
4. They shall be accurate and, where necessary, updated; all reasonable steps must be taken to immediately erase or rectify inaccurate personal data about the purposes of the processing (“accuracy”).
5. They shall be kept in a form that permits the identification of data subjects only for the period necessary to process the personal data. Personal data may be stored for more extended periods provided that the personal data will only be processed for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes by Article 89(1) and that appropriate technical and organizational measures required by this Regulation to safeguard the rights and freedoms of the data subject are implemented (“storage limitation”).
6. They shall be processed to ensure appropriate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage, using appropriate technical or organizational measures (integrity and confidentiality).

Legal bases for processing

The Company may collect and process personal data of customers and visitors for the purposes mentioned above based on the following legal bases for processing:

Use of personal data we collect

The provision of your data to the Company “Kleissonic pedals” is sometimes mandatory and sometimes optional.

It is usually mandatory in cases where your data is necessary to provide you with our services, fulfill a contract, or comply with legal requirements. If you provide them to us in these cases, it will be possible for us to provide you with our services.

It becomes optional in cases where we request some of your data to improve/upgrade our services, to create additional value from our communication, or to provide you with other services without prejudice to the primary processing purposes.

You can choose whether or not you want to receive advertising/promotional material by following the instructions in the email you receive.

In any case, we will inform you when processing is mandatory and when it is not. In the latter case, we will ask you for your prior explicit consent to the relevant processing operations.

Data Recipients

The Company reserves the right to transmit your personal information to agents and subcontractors to support, promote, and execute your business relationship with us, but always under conditions that fully ensure that your personal information does not undergo any unlawful processing, i.e., other than the purpose of transmission by the above. For example, we reserve the right to transmit your data for the above purposes to the transport companies mentioned in terms of Use for sending to you the products you have purchased from our Online Store to credit card providers to process a payment on your behalf, as a consequence of your purchase from our Online Store, to third parties – natural or legal persons – who may provide promotion and marketing services on our behalf, both of our business and our products or services, or to our third-party partners, who provide us with technical services, such as hosting and technical support services.

Personal Data Retention Period

Your data will be retained and processed by our Company until the completion of your order. The personal data of the registered user/customer will be kept and processed until the registered user/customer requests the deletion of his account or for any processing of his data based on his consent until he declares the withdrawal of his consent to provide the Company’s services. Nevertheless, some necessary personal data relating to their business relations with the Company, as well as the information, consent, and withdrawal of the member’s consent to the processing of their data, will remain as information for the registered user/customer to ensure proof of the legality of the processing of their data by the Company and to safeguard the legal claims of the parties. Once the limitation period for each claim has expired, we will proceed to delete the personal data. In any case, each registered user/customer, as a personal data subject, has the right to submit a question to the Contact Person for Personal Data Issues on how to process and protect their data. Suppose they need to consider that they are satisfied with the answer. In that case, they have the right to complain to the competent supervisory authority (Personal Data Protection Authority) (1-3 Kifissias Avenue, 11523 Ampelokipoi, tel. 210.647.5600, www.dpa.gr).

Rights of Data Subjects

Data subjects have the right to:

1. They are informed about the processing of personal data.
2. They gain access to their data.
3. They request the correction of incorrect, inaccurate, or incomplete personal data.
4. Submit a request to erasure personal data when it is no longer necessary or if the processing is unlawful.
5. Object to processing personal data for reasons related to their particular situation, subject to art.21 par.6 G.D.P.R.
6. They submit a request to restrict the processing of personal data in specific cases.
7. File a complaint with the Personal Data Protection Authority (1-3 Kifissias Avenue, 11523 Ampelokipoi, tel. 210.647.5600, www.dpa.gr) or with the supervisory authority of the E.U. Member State where they reside or work or with the supervisory authority of the place of the alleged infringement.

Social Media Privacy Policy

This document is part of the privacy policy of “Kleissonic pedals” as the controller of personal data (hereinreferred to as “Kleissonic Pedals”). In this text, you will find information on how the processing of personal data is carried out on this page.

The pages:

https://www.facebook.com/kleissonic

https://www.instagram.com/kleissonic

https://www.youtube.com/kleissonic

constitute the creation of “Kleissonic Pedals”.

For any issue related to personal data protection, contact us via our contact form.

For the processing carried out through the pages above (i.e., the specific pages of the forementioned social networks), we inform you that we are joint controllers with the companies Meta Platforms, Inc. (for the Facebook page & the Instagram page), Google (for the YouTube page).

Purpose of processing

“Kleissonic Pedals” processes personal data through this page to:

• inform you about its activities,
• provide you with an additional means of communication.

Page Content

Our content on these pages consists mainly of posts about our activities, photos, and videos. When the content of the posts includes personal data, we ensure that it is lawfully processed. If you believe that the posted content violates your or third parties’ rights, please contact us directly.

Legal basis for processing

The legal basis for the processing carried out on this page is your consent. With actions such as “like” and “follow,” you declare your consent to the processing of our posts and concerns the username and possibly the photo that you may publish in your profile. By doing so, you declare simultaneously that you accept the terms of this policy. The withdrawal of your consent is done in the same but reverse way (unlike unfollowing).

If you browse our page, and only without taking such actions, we declare that we do not process your data. However, as discussed below, we draw your attention to the fact that the same does not apply to the companies that manage these social networks (Meta Platforms, Google).

What data do we collect through the page?

Through the pages above, we collect and process specific personal data, such as your username and profile picture, as well as any comments or messages.

The collection and general processing (retention, etc.) of personal data on these pages is implemented only if you act like or follow.

In addition, these pages allow us to collect anonymized/statistical data about visits to them.

However, we inform you that the companies that manage these social networks (Meta Platforms,Google).They probably carry out other processing operations by collecting your other data (IP, visit history, etc.), the scope and extent of which we do not control and cannot influence. Please refer to these social networks’ Terms of Use and Privacy Policy below.

Place – retention time

Your data is stored by the Terms of Use and Privacy Policy of the companies that manage these social networks (Meta Platforms, Google).

We retain your data solely for the time necessary for the above processing purposes. In any case, we review the personal data we have processed every three years and delete them on a case-by-case basis.

Comments

You have the opportunity to submit comments to our relevant posts. However, we encourage you to avoid taking advantage of this possibility by notifying us or publishing general third-party data. If we become aware of such action or comment containing illegal, immoral content that offends or endangers “Kleissonic Pedals” we will delete them without any warning.

Rights

You have the right to access, rectify, and withdraw consent without prejudice to the lawfulness of the previous processing, deletion, restriction of processing, and portability of your data. In addition, if you consider that this processing violates the relevant data protection legislation, you have the right to complain to the Personal Data Protection Authority.

Clarification: exercising the above rights may technically be limited due to the choices and terms of use of the companies that operate these social networks (Meta Platforms, Google).

Information Security

The company’s staff that manages the forementioned pages is covered by an explicit obligation of confidentiality and specific security measures while managing the related accounts.

We inform you that we do not know how the companies (Meta Platforms,Google) For more information, please consult these media’s Terms of Use and Privacy Policy as set out below.

Transfer of data

We inform you that personal data posted is transferred to the U.S. or other countries outside of EU. Following the repeal by the Court of Justice of the European Union Schrems II of the EU-US Privacy Shield on transatlantic data transfers (“Privacy Shield”), these companies use Standard Contractual Clauses approved by the European Commission. Under certain conditions, they remain in force. For more information, please consult the European Commission’s link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

Notice – Disclaimer

Before you consent to action on these pages, consult these social networks’ Terms of Use and Privacy Policy. If, by your actions, you upload photos of yourself or third parties to our page on the above medium or additional personal data, you are responsible for this processing. Due to the ease of sharing photos and other personal data on social media, we recommend that you use them to assess the potential risks arising from their disclosure. We reiterate that we cannot influence the terms of use and data protection policy of the companies that manage these social media or the way they work the processing of personal data as a whole.

In any case, we declare that we do not know and are not responsible for whether these social networks further process personal data, whether they collect additional categories of data (visit history, IP, etc.), whether they pursue other processing purposes, whether they use processors and subprocessors, whether they profile, whether they comply with the published protection policies and the way they carry out the total processing of personal data. For this reason, we present to you the Terms of Use and the Data Policy of these social networks, and we invite you to consult them before any action and inform you that, taking into account the above, we make every reasonable use of them, understanding the potential risks.

Facebook

• Terms of Use
• Privacy Policy

Instagram

• Terms of Use
• Data Protection Policy

YouTube

Data Protection Policy

Terms of Use