The website “www.kotsovolos.gr”
is an online store for the sale of products and services via the Internet, created and operated by the company “NEXT GEN RETAIL SERVICES ELECTRICAL, INFORMATION TECHNOLOGY, TELECOMMUNICATIONS AND INSURANCE INTERMEDIARIES SINGLE MEMBER S.A.”, based in Heraklion, Attica, at 90 Marinou Antypa Street.
The protection of your personal data is a priority for our Company. For this reason, we maintain this Privacy Policy, to help you understand why we collect your personal data and how we use it, and to demonstrate our compliance with the applicable data protection legislation.
This Policy defines the terms and conditions observed by our Company regarding the protection of your personal data as users of our Website. It includes the rules under which we collect and process your personal information and ensure the confidentiality of such information when purchasing or using our products or services, whether through our points of sale (stores), by telephone, through applications, or via our Website.
2.1. For the purposes of interpreting this Policy, the following definitions apply:
2.2. All other definitions are in accordance with Article 4 of the GDPR and Article 4 of Law 4624/2019.
3.1. When you purchase products, receive our services, or communicate with us or our partners, it is necessary for us to process your personal data.
3.2. We comply with the applicable law and consider your opinions and wishes to understand your expectations and reflect them in our business decisions.
3.3. This Privacy Policy provides detailed information on when and why we collect your data, how we use and process it, how long we retain it, and under what conditions we may share it.
3.4. This Policy applies only to our Website. Our Website may contain links to other sites, for which we bear no responsibility regarding data protection practices or content.
4.1. We may process your personal data to ensure the technical operation and enhance your browsing experience on our Website, using cookies. Full details are provided in our Cookies Policy.
4.2. The personal data we process include: IP address, browser type and version, operating system, referring website, date/time of access, ISP, browsing data, and purchasing behavior.
4.3. Processing purposes include providing and maintaining the Website, improving user experience, targeted advertising, and technical functionality.
4.4. The legal basis for processing necessary for operation: Article 6(1)(f) GDPR (legitimate interest).
4.5. For personalization and advertising: Article 6(1)(a) GDPR (consent).
4.6.–4.7. Retention periods range from the end of a session to 18 months, depending on purpose.
5.1.–5.7. When you purchase products or services, we process data such as your name, email, address, contact number, tax details, payment and transaction data, and recorded calls.
Purpose: contract execution, service provision, invoicing, and tax compliance.
Legal bases:
When contacting us (chat, phone, contact form, etc.), we process your name, order number, phone, email, postal code, and message content.
Purpose: Customer service and issue resolution.
Legal basis: Article 6(1)(f) GDPR (legitimate interest).
Retention: call recordings for 120 days; other data for up to 5 years after the last transaction.
Collected data: name, email, phone.
Purpose: personalized user experience.
Legal basis: Article 6(1)(b) GDPR (contract).
Retention: as long as services are provided and for 5 years after termination.
Data: email address, reading behavior.
Purpose: sending news and promotions.
Legal basis: Article 6(1)(a) GDPR (consent).
Retention: until consent withdrawal.
You may unsubscribe at any time.
When joining our marketing list, you consent to receive promotional emails, SMS, or calls.
Processed data include name, contact details, purchase history, satisfaction level, comments, and social media data.
Legal basis: Article 6(1)(a) GDPR (consent).
Retention: until consent withdrawal or up to 10 years.
We use anonymous direct marketing interactive screens that analyze facial features (without storing or photographing) to suggest products.
We use Facebook, Google, YouTube, Instagram, and Twitter to promote our products.
Your interactions (likes, comments, follows) may be processed.
Legal basis: Article 6(1)(a) GDPR (consent).
Retention: until withdrawal or up to 10 years.
With your consent, we may create a transactional profile to send personalized offers.
Data include name, customer ID, satisfaction level, demographics, and purchase history.
Legal basis: Article 6(1)(a) GDPR.
Retention: until withdrawal or up to 10 years.
With your consent, we process credit-related data to assess your creditworthiness, possibly from banks or public sources.
Legal basis: Article 6(1)(a) GDPR.
Retention: until withdrawal.
We retain data only as long as necessary for processing purposes, for legal obligations, defense of claims, or anonymized organizational use. Afterward, data are securely destroyed.
Your data may be shared with:
Transfers outside the EEA occur only under GDPR Articles 44–49, with appropriate safeguards (e.g., EU Standard Contractual Clauses).
We apply technical and organizational measures to ensure data integrity, confidentiality, and protection against unauthorized access, in compliance with legal standards.
You have the following rights:
Requests can be made via email (Personaldata@kotsovolos.gr
), post (90 Marinou Antypa St., Heraklion, Attica, 14121), or in-store.
Responses are provided within 30 days (extendable by 2 months).
Requests are free unless excessive or repetitive.
You must provide true, accurate, and complete data and update them when changes occur.
Users must be over 16 years old; minors require parental consent.
We are not liable for violations of this rule if verification is not reasonably possible.
For questions or complaints about this Policy:
We reserve the right to revise this Policy by posting an updated version on our Website.
Effective from the date of publication.
Last revised: May 2023.
This notice provides information about how the Company processes personal data collected via its CCTV system at its premises.
22.1. Legal Basis and Purpose
Processing is carried out to protect employees, customers, visitors, and company property, based on legitimate interests (Article 6(1)(f) GDPR).
Only image data from high-risk areas (entrances, cash registers) are collected.
22.2. Processed Data
Personal data consist of the image of individuals captured within the premises.
22.3. Data Disclosure
Access is limited to authorized employees and system support providers.
Data may be disclosed to police or judicial authorities if legally required.
No transfers outside the EEA.
22.4. Retention
Data are stored for 15 days, unless required longer for security incident investigations.
22.5. Your Rights
You have rights of access, rectification, restriction, portability, objection, and to lodge a complaint with the Hellenic DPA (complaints@dpa.gr
).
22.6. Security
Appropriate organizational and technical measures ensure the security and integrity of data.
22.7. Contact
For questions or to exercise your rights: