Personal Data Protection and Privacy Policy

This describes our policy regarding the personal data we collect from visitors to our pages (hereinafter referred to as “users”).

The Data Controller is DIMITRA TZAMPAZI, based in Alexandroupoli, 123 Dimokratias Ave., Postal Code 68132, Tax Identification Number 168243797, Tax Office of Alexandroupoli, and e-mail: info@pickndrive.gr. (« Controller »).

In the daily activities of our business and our website, we process data concerning natural persons, including:

• Customers
• Partners, processors on our
• Visitors to our website
• Other interested parties (employees, suppliers)

Our business complies with the General Data Protection Regulation (2016/679 EU GDPR) and any other European and national legislation concerning the protection of personal data, electronic communications, etc. and is committed to ensuring at all times the protection of your Data:

• The data is collected for specific, explicit and legitimate purposes and is not further processed in a manner incompatible with those
• We collect the necessary personal data for each processing purpose and process them lawfully, fairly and in a transparent manner in relation to the data data.
• We ensure that it is, as far as possible, accurate and up-to-date and we retain it only for the period necessary for the purposes for which it is
• In any case, the criterion we use to determine the storage period is based on and takes due account of the need to comply with any relevant legal requirements as well as the principle of data
• We process the Data electronically and manually and take all appropriate measures to protect personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational

Collection, purpose, legal basis for processing and retention time of your data

1. Data we collect automatically through our website

The website uses the SSL (Secure Sockets Layer) protocol which uses methods to encrypt data exchanged between two devices (most commonly Computers), establishing a secure connection between them via the internet, which results in the protection of your personal data.

When you visit our website https://pickndrive.gr/, our server collects the so-called server logs (log files), specifically:

• Date and time of entry to the
• The volume of data sent in
• The browser and operating system you used to enter the
• Internet Protocol address (IP address), when you enter the The IP address is personal data along with the date and time of your visit, although we cannot identify you with this data alone.

The legal basis for which we collect your IP address and keep it in special files (log files) is our legitimate interest in processing this data in order to ensure the security of networks, information and services from accidental events or illegal or malicious actions that compromise the availability, authenticity, integrity and confidentiality of stored or transmitted data (e.g. control of DDoS attacks “denial of service”), as well as our legal obligation to provide a more secure environment for the processing of your personal data (GDPR Article 6, paragraph 1, point f and c). The data will not be transferred or used in any other way. However, we reserve the right to check the server logs (server logs) if specific indications of unauthorized use are detected.

2. Customer Data.

When you visit our business, we collect your personal data such as name, surname, E- mail, postal address, gender, age, profession, address, and any other information related to the provision of our services to you.

The purpose of the processing of your data is to provide you with the requested services and the legal basis for the processing is the execution of the contract between us. contract (article 6 par. 1b’ and 9 par. 2h’ GDPR), as well as our compliance with legal obligations. The retention period of your data is that required by the possibly and longer if legal claims arise.

It is clarified that we do not have a publicly accessible list of email addresses of our subscribers/users. Therefore, any personal data (e.g. login names, etc.) that appear

anywhere on the pages and services of the Controller’s website are intended exclusively and solely for ensuring the operation of the respective service and may not be used by any third party, without complying with the provisions of the legislation on the protection of personal data processing, as it is in force at any time. The Controller acts in accordance with the applicable legislation and aims to better implement good practice with regard to the Internet. Your personal data is kept securely for as long as you are registered in a service of the Controller and is deleted after the termination of your transactional relationship with the Controller in any way.

 

3. Data we collect via email and the Contact Form

In the context of communication between us via email and the Contact Form, we collect your name, email address and any other information you provide to us. This data is stored and used exclusively to respond to your request. The legal basis for the processing of your personal data is your consent (GDPR, Article 6 para. 1a). Your data will be deleted after the final processing of our communication. This will happen after the purpose and scope of our communication have been completed, provided that there are no legal requirements for the storage of such data.

4. Send newsletter

With your consent, we will collect your email in order to send you newsletters with our Company news and articles that you may find interesting. The legal basis for the processing is your consent (GDPR, Article 6 para. 1a) and you have the right to withdraw it at any time.

5. Supplier data

For the execution of the contract between us, we collect the data of our suppliers such as name, address, contact details, shipping details, financial data, which you provide to us yourself. The legal basis for the processing of your data is the execution of the contract and our compliance with legal obligations (GDPR article 6 par. 1b and c), and we retain it for a period of up to twelve years from the last provision of services, or as required by tax and any other relevant legislation.

Who has access to your data. Data transfers.

Your data is accessible by our employees as well as by any other person authorized to process your data in the course of their duties. In addition, we collaborate with third parties, natural or legal, professionals, independent consultants, etc. who provide us with commercial, professional or technical services (e.g. website hosting, accounting services, transport services) for the purposes mentioned above, and support our business in whole or in part, in relation to our activities. Where applicable, these natural/legal persons will act as Joint or Independent Processors, Processors or persons authorized to process personal data for the same purposes mentioned above, with the same security measures and in accordance with applicable legal obligations.

Before the third party receives Personal Data, we must: (1) complete a privacy audit to assess the privacy practices and risks associated with such third parties; (2) obtain contractual assurances from such third parties that they will process Personal Data in accordance with our instructions and in accordance with this Policy and applicable law, that they will promptly notify our business of any Privacy or Security incidents, failure to comply with the standards set out in this Policy and applicable law, that they will cooperate in remediating any such incident, that they will assist us in meeting the rights of individuals set out below, and that they will allow the Controller to monitor their processing for compliance with these requirements.

Finally, the data may be further transmitted to public authorities and institutions, as well as to our legal supporters (lawyers and insurance companies), for legitimate purposes.

In addition to the above, the Data will not be disclosed to third parties, individuals or legal entities and will not be disseminated.

Our company does not transfer Personal Data outside the EU, and if necessary (for example, in order to use Cloud services) this will be done under the terms and conditions provided for in articles 44 et seq. of the GDPR, such as with your consent, the application of standard contractual clauses approved by the European Commission or in countries considered safe by the European Commission.

Use of cookies

For the proper functioning of the website and your better navigation, as well as for the better provision of our services, we use cookies. Cookies are text files with information, which the web server (web server of the Controller) stores on your computer when you visit this website. In this way, the website remembers your actions and your preferences for a period of time, in order to, for example, personalize online advertisements, analyze traffic or other statistical analysis, and provide the services you have requested. In this way, you do not need to enter these preferences every time

 

you visit the website or browse its pages. Only the Controller and its specially authorized partners have access to any information regarding cookies.

 

 

You can control and/or delete cookies according to your wishes. Details can be found on the website: aboutcookies.org. If you choose to disable cookies on the website https://pickndrive.gr/ the functionality of some pages may be lost or reduced.

See here which Cookies we use:

Cookie	Duration	Description
cookieyes-consent	1 year	Cookie Yes sets this cookie to remember users’ consent preferences so that their preferences are respected on subsequent visits to this website. It does not collect or store any personal information of website visitors. Necessary cookies are required to enable basic functionalities of this website, such as providing a secure login or customizing consent preferences. These cookies do not store any personal data.
PHPSESSID	Session	A cookie generated by applications based on the PHP language. It is a general-purpose identifier used to maintain user session variables. It is usually a randomly generated number, how it is used can vary from site to site, but a good example is to maintain a user’s login state between pages.
wp-wpml_current_language	Session	The WordPress multilingual plugin sets this cookie to store the current language/language settings.
_ga_*	1 year 1 month 4 days	Google Analytics sets this cookie to store and count page views.
_ga	1 year 1 month 4 days	The _ga cookie, which is set by Google Analytics, calculates visitor, session and campaign data and also tracks website usage for the website analytics report. The cookie stores information anonymously and assigns a randomly generated number to identify unique visitors.

More information about the use and management of cookies on the website can be found on the following websites:

About cookies and their management:

http://www.aboutcookies.org/default.aspx http://www.whatarecookies.com/

About Google’s policy:

https://www.google.com/about/company/user-consent-policy.html https://www.google.com/policies/technologies/cookies/ http://www.google.com/intl/el/policies/privacy/partners/

Data Security and Integrity 

The Controller implements reasonable technical and organizational security policies and procedures to protect personal data and information from loss, misuse, alteration or destruction.

In addition, we strive to ensure that access to your personal data is limited to those who have a need to know it. Individuals who have access to the data are required to maintain the confidentiality of this data.

Please note that the transmission of information over the internet is not completely secure. Although we make every effort to protect your personal data, we cannot guarantee the security of the data transmitted to our website. After receiving your information, we will implement strict security procedures and features to try to prevent unauthorized access.

We make every reasonable effort to retain the personal data we collect from you only for as long as we need the data for the purpose for which it was collected or until you request its deletion (if this occurs earlier), unless we continue to retain it as required by applicable law.

Links to Other Sites 

Our site may contain links to other sites, which are governed by different privacy statements, the content of which may differ from this Privacy Statement. Please review the privacy policy of each site you visit before submitting any personal information to it. While we strive to provide links only to sites that share our high standards and respect for privacy, we are not responsible for the content, security or privacy practices of other sites.

Minors’ data

When we need to process data of minors (e.g. data of minor patients), i.e., according to the GDPR, those who have not reached the age of 15, the processing is carried out only with the written and expressly expressed consent of the persons who have parental responsibility for the minor. In any case, we make reasonable efforts to verify that the consent is provided or approved by the person who actually has parental responsibility for the child, i.e. by checking identity and any other available information.

Rights of the Subjects

You may contact us by post or email at the addresses mentioned in paragraph (1) above, to exercise your rights in accordance with Articles 15 et seq. of the GDPR. You may, for example, request an updated list of the persons who have access to your data, obtain confirmation as to whether or not we are processing personal data relating to you, check their content, source, accuracy and location (also in relation to any third country), request a copy, request their correction and restriction of their processing, even their deletion, if applicable. Similarly, you can always report comments and submit complaints to the Hellenic Data Protection Authority, 1-3 Kifissias Ave., GR 115 23, Athens, Call Center: + 30-210 6475600 or at http://www.dpa.gr/

Changes to this Policy

The Controller keeps this Policy under frequent review and may amend or revise it periodically at our sole discretion. When we make any changes, we will record the date of amendment or revision in the Policy. The updated Policy will apply to you and your information from that date. We encourage you to periodically review this Policy to review whether there are any changes to the way we handle your personal data. This Statement was last updated in April 2025.

Contact us 

If you have any questions, comments or complaints regarding our handling or protection of your personal data or if you wish to modify your personal data or exercise any of your rights as a data subject, please contact us at info@pickndrive.gr.