Privacy Policy

1. PROTECTION OF PERSONAL DATA AND PRIVACY

Our company, ‘COMPANIA MADEIRA SYSTEMS S.A.’, considers the protection of personal data of the visitors/users of our website ‘www.cms-wood.gr’ to be of paramount importance.

For this reason, we have taken all the necessary actions to fully comply with the EU Regulation 2016/679 General Data Protection Regulation (GDPR), as well as with the national legislation Law 4624/2019, as applicable, to ensure the fulfillment and safeguarding of the requirements regarding the protection of personal data, which we collect during your browsing on this website and the use of the services provided.

We assure you that when you provide us with personal data or when we collect personal data concerning you, we always use them in accordance with this Policy, and they remain strictly confidential.

We would also like to assure you that we do not collect personal data from minors under the age of 18, nor do we process sensitive personal data of the visitors/users of our online store.

Please read this Privacy Policy carefully, as acceptance of it is considered a free declaration of your consent for the collection, use, and further transmission of your personal data for purposes related to browsing/using this website and the services provided on it. If you do not agree with any part of this Policy, you are requested to refrain from any action, interaction, access, transaction, and use of this website; otherwise, your consent is implied.

2. WHAT ARE ‘PERSONAL DATA’

Personal data is any information related to an identified or identifiable natural person (data subject), such as, for example, name, email address, home address, mobile phone number, purchasing habits, IP address of the computer, user-generated content, financial information, and social welfare information.

3. PERSONAL DATA COLLECTED BY THE COMPANY

The Company’s goal is to collect only the necessary data required for the intended purpose. Some of the data we collect are mandatory in order to fulfill our purposes (e.g., order shipment), while others are optional for optimizing the functionality of this website.

Furthermore, during your browsing on «www.cms-wood.gr», we automatically collect information about you, such as your Internet Protocol (IP) address and your domain name. This information may be used to provide you with a more personalized experience while visiting our online store.

However, in order to use the services of this website, place orders, and enjoy the services provided, you will be asked to provide personal data such as: full name, postal address, phone number, email address, and if you wish an invoice for the purchase of our products, you will also be required to provide the name of your company, profession, tax identification number, and the tax office to which you are subject.

In order to stay updated on our product and service offers, you are invited to register your email on this website so that we can send you the related newsletter.

Additionally, you may be asked to provide information regarding your location or your personal preferences and interests, in order to offer you more personalized services.

All the provided information will be stored in databases that are installed and operate exclusively within our company, either manually and/or electronically.

In any case, the company provides you with the necessary information so that you can give prior consent for the processing of your personal data for one or more specific processing purposes. You can revoke your consent at any time, easily and immediately. In cases where you are not provided with the option to automate the withdrawal of your consent, please contact our company through any means, and we will provide you with all necessary information for the desired withdrawal.

Our company does not collect or process sensitive personal data of its customers, which relate to the physical, physiological, genetic, psychological, economic, political, cultural, or social identity of the individual.

4. Purposes for the Use of Personal Data

The legal basis for the processing of your personal data may be based either on your consent, on the obligation to execute a contract in which you are a party, or on legitimate interests pursued by our company or a third party.

Our company, through its website “www.cms-wood.gr”, in compliance with the relevant provisions of the law, uses the personal data of visitors/users it collects for the following purposes:

Communication of our company with you (to respond to a request you have made to our company).
Subscription to the newsletter recipients list (newsletter with information on product and service offers, company news, events and activities of the company or/and third-party related businesses, discount coupons, and competitions).
Registration for our competitions.
Procurement of our products. Your personal data will be used for the issuance of the relevant document from your transaction with our company and the delivery of the ordered products to your location through our partnered courier companies.
Sending personalized information regarding new products and services.
Sending regular updates that the Company deems interesting for the user.
Sending information upon request regarding products and services.
For market research and marketing purposes.
For the service of internal purposes of the company’s management and improvement of the services provided.
For “direct promotion” actions, which include any communication from the Company for the purpose of promoting products and services.

All personal data collected and further processed by the Company are appropriate, adequate, and limited to the needs and purposes for which they were collected. Furthermore, we process your personal data in a manner that ensures their accuracy, continuous updating, and security, including protection against unauthorized or illegal processing, accidental loss, destruction, or damage, by taking all necessary technical and organizational measures deemed appropriate for this purpose, particularly through encryption, coding, pseudonymization, and anonymization of personal data, as well as the monitoring and regular recording of all processing procedures.

When consent is given for automated processing of your personal data, the Company collects and processes information based on your personal preferences and interests, solely to provide you with personalized information and/or notifications regarding the Company’s services and activities through direct marketing actions.

The Company is committed to maintaining strict confidentiality of all the data it collects, granting access to this data exclusively as required by its usual activities.

5. YOUR RIGHTS AND CHOICES

The Company provides you with the opportunity to exercise your rights under the law regarding the personal data it collects by contacting the email address: “kyriakos@cms-wood.gr.” Specifically, for the personal data concerning you, you have the following rights:

Right of Access – Information: You have the right to be informed about whether we process your data, what data we have collected, to whom we disclose it, the purpose of the processing, and for how long we will retain it. Additionally, you have the right to request any available information regarding the source of your data when it has not been provided by you, any profiling conducted by our Company, the methodology used to create it, as well as the safeguards regarding the policy we follow when sharing your data with third countries.
Right to Correct Inaccurate Information: You have the right to request that we correct information about you that is inaccurate or even to supplement additional information. You can exercise this right yourself by logging into your account and correcting the relevant fields in your profile.
Right to Restrict Processing: You have the right to request that we restrict or even exclude the processing of some of your personal data.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and you can transmit this data to another data controller.
Right to Object: You have the right to object to the processing of your personal data for certain purposes, including direct marketing. You can also object if the processing is based on legitimate interests or public interest.
Right to Withdraw Consent: You have the right to request in writing the deletion of your personal data, provided that there are no legal grounds that outweigh your right (e.g., tax and commercial legislation), either because the data is no longer necessary for the purposes for which it was collected, or because the data was collected for a purpose that you deem illegal. Additionally, you have the right to withdraw your consent for the processing of your data based on your consent, without affecting the legality of the processing prior to your withdrawal.
You have the right not to receive marketing-related updates. You have the right to refuse receiving notifications at any time by clicking the “Unsubscribe” link in any email or newsletter we send you. Alternatively, you can contact us using the contact details provided at the end of the text.

Our Company, after reviewing each request based on the applicable provisions, will respond in writing within 30 days of receiving the request and verifying the identity of the requester. This deadline may be extended by an additional two months if required, considering the complexity of the request and the number of requests.

In addition, in the case of exercising one or more of the aforementioned rights, these will be forwarded by us to any third party recipient to whom they may have been transferred for the purposes of processing.

6. TRANSMISSION OF PERSONAL DATA

Access to your personal data is limited to the absolutely necessary personnel of our company or affiliated companies, who are committed to maintaining confidentiality. Some of your data, and in any case, the strictly necessary data, may be shared with our partners who provide transportation, advertising, statistical or research, communication, contest management, and website or commercial program support services, as well as with lawyers, notaries, auditors, and banking or commercial partners, always in accordance with the provisions outlined in this Privacy Policy. These partners are prohibited from using or disclosing the aforementioned information for any purpose other than providing services on our behalf. The affiliated companies are committed to maintaining confidentiality regarding your data and not disclosing it to third parties without the company’s permission, as well as ensuring appropriate security measures are in place and complying with the legal framework for personal data protection. Finally, there may be situations where our company is legally obligated or required by a judicial or other competent authority (e.g., tax authority) to disclose your personal data.

7. Retention Period of Personal Data

All personal data is retained by our company for a predefined and limited period, depending on the purpose of processing, after which the data will be deleted from our databases. The personal data you provide to our company through this website or through other means will be retained for as long as you wish to enjoy our services and the related updates mentioned above. In the case of a sales contract with our company via the website www.cms-wood.gr, the reasonable retention period for your personal data is five years from the completion of the sales contract. The period for which your personal data may be retained by our company also depends on the relevant obligations of our company as prescribed by applicable legislation (tax, commercial, etc.) and legal provisions for the maximum retention period.

TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION

In the case of transferring personal data from our Company to a country outside the European Union, which has been recognized by the European Commission as providing an adequate level of protection for personal data (adequacy decision), the personal data can be transferred securely without the need for additional safeguards.

In the case where the transfer of personal data takes place to countries outside the European Union, for which there is no corresponding adequacy decision by the European Commission, our Company will proceed with the transfer by providing appropriate safeguards and under the condition that individuals have enforceable rights and legal remedies. Such safeguards include the following:

Contractual arrangements with the recipient of the personal data, through the use of standardized contractual clauses approved by the European Commission, or
Binding corporate rules, if applicable, especially in the case of a corporate group or group of companies engaged in a common economic activity, or
Adherence to a code of conduct or certification mechanism, along with obtaining binding and enforceable commitments from the recipient regarding the implementation of the necessary safeguards for the protection of the transferred data.

In the event that the transfer of personal data is made to third countries for which there is no adequacy decision or appropriate safeguards are not provided, the transfer of data will only be possible based on certain exceptions for specific circumstances, such as when the data subject has explicitly consented to the proposed transfer, after being provided with all necessary information regarding the potential risks.

To receive a copy of these safeguards or details regarding where they are available, you can submit a written request as specified in Article 5.

Video recording of the area

9.1. Purpose: The collection, processing, and storage of your data regarding the identification of your identity and the duration of your stay at the company’s premises (offices, storage areas, etc.) are carried out exclusively with the aim of ensuring the safety and protection of both the individuals present on the company’s premises (e.g., employees, visitors) as well as the overall equipment (including building, electronic, etc.) or products stored within the company’s premises.

9.2. Legal Basis for Processing: The legal basis for processing your data is the protection of public interest, according to Article 6, paragraph 1, point (e) of the General Data Protection Regulation (GDPR), and/or the legal obligation to take measures for the protection of premises, as required or imposed by applicable law. The legitimate interest consists of the need to protect the company’s premises and the goods located within them from illegal acts, such as theft or burglary. This also applies to the protection of the life, physical integrity, health, and property of the company’s staff and third parties lawfully present in the monitored area. Only image data is collected, and the recording takes place in areas where there is an increased likelihood of illegal acts, e.g., theft. Data collection does not take place in areas where the privacy of individuals whose image is captured might be excessively restricted, including their right to respect for personal data.

9.3. Recipients of Data: The stored material is accessible only by the responsible/authorized personnel of the Company, who are entrusted with the security of the premises. This material is not disclosed to third parties, except in the following cases:a) To the competent judicial, prosecutorial, and police authorities when it is deemed necessary for the investigation of criminal acts concerning the persons or property of the data controller.b) To the competent judicial, prosecutorial, and police authorities when they lawfully request data in the course of performing their duties.c) To the victim or the perpetrator of a criminal act, when it concerns data that may serve as evidence of the act.

9.4. Data Retention Period: The recorded footage is kept at the Company’s premises for seven (7) days, after which it is automatically deleted. In the event that an incident is identified during this period, a portion of the recorded footage is isolated and kept for up to one (1) additional year, solely for the purpose of investigating the incident and initiating legal procedures to defend the legal interests of our Company. If the incident involves a third party, the recording will be kept for up to an additional six (6) months.

9.5. The data subjects have the following rights:

Right of access: You have the right to know if we are processing your image and, if so, to receive a copy of it.
Right of restriction: You have the right to request that we restrict the processing, such as not deleting data that you consider necessary for the establishment, exercise, or defense of legal claims.
Right to object: You have the right to object to the processing.
Right to erasure: You have the right to request the deletion of your data.

To exercise any of the above rights, you can contact us at the email: kyriakos@cms-wood.gr. We also note that exercising the right to object or erasure does not automatically result in the immediate deletion of data or modification of processing. In any case, we will respond to you in detail as soon as possible, within the deadlines set by the GDPR

10. COOKIE POLICY

Some of your data may be automatically collected by the Company through the use of Cookies. Cookies are small text files that are installed on your computer, tablet, mobile phone, and generally on the device you use to browse our website. They are widely used to make websites work better and more efficiently. These files have the ability to recognize and “remember” important information that will make your internet usage easier (e.g., remembering user preferences). The automated collection is done to personalize the user experience on the website and to assess the activities related to our products and services.

The following categories are used on this website Cookies:

a) Necessary cookies

Necessary cookies are required for the proper functioning of the website. By using these cookies, you can navigate the site, log into your account, complete your order, and finalize your online payment. Without these cookies, our online store cannot function, and therefore, it is not possible to disable them while using the website.

b) Performance Cookies

Performance cookies are used to collect information about how visitors use the website. These cookies help us analyze data such as the number of visitors, the pages they visit, and the time spent on the site. This information is used to improve the performance and functionality of the website, ensuring a better user experience. The data collected is aggregated and anonymous.

c) Functionalities Cookies(preferences)

These cookies store the user’s preferences with the aim of improving the functionality of our online store. In this way, the user’s choices, such as username, language, and preferred display options for search results, are remembered so that the website www.cms-wood.gr can provide enhanced functionality, personalized to your preferences.

d) Advertizing Cookies

With advertising cookies, we can display personalized advertisements based on your preferences and interests. This allows us to send targeted newsletters and other promotional messages and offers, aiming to limit the number of messages you receive. Additionally, we can measure the effectiveness of our advertising efforts to continuously improve them.

e) Google Cookies

On this website we use Google services to record traffic statistics and to display targeted advertisements.

You can enable or revoke your consent to the use of cookies, as well as control or delete cookies from the settings of the browser you use.

9. INFORMATION PROTECTION

Our Company, in order to prevent unauthorized access, maintain data accuracy and ensure its appropriate use, has taken all necessary organizational and technical measures to protect your personal data. However, no method of transmission over the Internet or method of electronic storage is 100% secure.

If you believe that your personal data has been affected in any way, you can contact or file a complaint with the Personal Data Protection Authority, as follows:

Website: www.dpa.gr

Postal Address: 1-3 Kifissias Avenue, P.C. 115 23, Athens

Call center: +30 210 6475600

E-mail: contact@dpa.gr

10. PRIVACY POLICY CHANGES

The Company may at any time update or modify this Privacy Policy in order to respond to any changes in the operation of this website, the services it offers and any changes in the provisions of the law. The most recent modification is always considered valid.For this reason, you should check this Privacy Policy regularly to be informed of its most recent version.

11. DATA CONTROLLER DETAILS

Company: «COMPANIA MADEIRA SYSTEMS Α.Ε.»

Editor: Kyriakos Sotiriadis

Address: 2nd^kmSINDOS – CHALASTRAS P.O. Box 27, Postal Code 574 00

Contact Phone:: 2310795080 Ext.:110

Email: kyriakos@cms-wood.gr