Privacy Policy

PRIVACY POLICY
The Company with the name "Standard Hidraulica Hellas Plumbing and Heating Equipment S.A" which is based in Acharnes, Attica (Iviskou and Andrianou Street) and is a member of the STH Group, attaches great importance to safety and legal processing, your personal data, in whatever capacity you communicate or collaborate with it, such as, for example, prospective or active customers, consumers, website visitors, employees, suppliers, professionals, individuals, or collaborating third parties. With this policy, it defines and discloses the terms under which, acting, as defined by law a "Processor", it collects, stores, uses, and generally processes your personal data, which it collects when you visit, register to, or use the Company's websites (hereinafter referred to as the "Websites"). This Privacy Policy also describes how you use, disclose and protect your personal data, the options you have regarding your personal data, and how you can contact us. This Protection Policy is in accordance with the terms arising from European Regulation 679/2016 and any other relevant applicable legislation. The collection, storage, and maintenance of up-to-date communication data are done with the sole purpose of verifying the submitted data, ensuring the continuity of services and service of the above-mentioned persons, within the framework of the company's data operation and security regulations and its contractual and legal obligations to provide satisfactory services to its customers.

Please read these terms and conditions as well as the relevant Security and Privacy Policy of the Company carefully. By using our website and signing the relevant statement of consent, you unconditionally accept the practices described herein, the terms of which govern the contractual relationship between us and are incorporated into the terms of use of each of our services.
For any questions regarding this Privacy Policy, as well as any issues related to the processing of your data and the exercise of your rights, you may contact sth.hellas@sth.email.

1. The Website of the Company
The site www.standardhidraulica.gr is the website of the Group, where the online store for presentation and sale of products and services of the Company is located and through which and via the applications of the company you can access a range of services provided by the Company, such as:
access to the electronic content of installation's technical applications information on maintenance issues etc.
information on content applications for mobile devices
information about  sth.hellas@sth.email sending informative/advertising newsletter

2. What is Personal Data

The term "personal data" refers to any information concerning a natural person in printed or electronic form, such as, as the case may be, name, postal address, e-mail address, contact telephone number, VAT number, etc., which either directly or in combination with others, identifies or may determine your identity, or lead to your identification hereinafter "Personal Data or Data" according to the provisions of GDPR 4624/2019, current Greek legislation and the decisions of the Personal Data Protection Authority (PDPA).

3. What is the Processing of Personal Data

Any operation or sequence of operations performed with or without the use of automated means, on personal data or personal data sets, such as the collection, registration, organization, structure, storage, adaptation or modification, retrieval, a search of information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction.

4. Obligation of providing your Personal Data

The provision of the Data to the Company may be necessary to achieve the purposes set out in this Privacy Policy or be optional.
The mandatory or optional nature of the Data assignment is indicated by an asterisk (*) next to the personal data of a mandatory nature.

If you refuse to provide the information marked as mandatory on the Websites, it will be impossible to achieve the main purpose for which the specific Data is collected, and it may, for example, make it impossible for the Company to fulfill the sales contract or provide you with the other services available on its Website.

The provision of additional Data to the Company, in addition to those that are marked as mandatory, is optional and does not affect the main purposes of Data collection, as their provision serves only to optimize the quality of services provided by us.

5. Personal Data that we collect and ways of collecting it

Any internet user who visits https: // www. standardhidraulica.gr is not required to submit personal information to visit the website. If you wish to fill in the Company contact form, then you will be asked to provide the following information:
name and surname (for a natural person)
name (for legal entity)
city of residence or the registered office of a legal person
landline and/or mobile phone
e-mail address

If you choose to contact us via the contact form or using an email link, none of the data you provide will be stored on this website or transferred or processed by any third-party data processing provider.
Instead, this data will be sent to us by e-mail via the Simple Mail Transfer Protocol (SMTP). Our SMTP servers are protected by a TLS security protocol, which means that e-mail content is encrypted before being sent over the Internet. The content of the email is decrypted by our local computers and devices.
If you wish to comment on any post on our blog, you will be asked to provide the following information: your name and your e-mail address which will be stored in the database of this site together with the IP address of your computer and the time and date you submitted the comment. This information is used only to identify you as contributors to the comments section of the respective blog post and is not passed on to any of those performing the process described in detail below. Only your name will appear on the site that the public sees. Your comment and related personal information will remain on this site until 1.) you remove the comment or 2.) you remove the blog post. If you want to delete your comment and related personal data, contact us at sth.hellas@sth.email  using the email address with which you commented.

If you register and create a user account on the Website, we take care to collect only your absolutely necessary Personal Data, which are appropriate and clear for the purpose intended after the acceptance of terms of use of each of our services. This Data includes the following:

a. Data that you provide to us during your registration and the creation of a user account on the Website via the internet or through your personal contact with our sellers and specific data such as e-mail address* and login password (as required) and name, surname, postal address, telephone number (as optional).

b. Data and information that you provide to us through our transactions (purchases, orders, inquiries, opinions, complaints, etc.) and the communication between our sellers, call center, e-mail, or through any other way/means) and are required to verify the validity of the contract (e.g., age).

c. Data regarding the payment method for the transactions you make with us.

d. Data you provide to us when you subscribe to our newsletter.

e. Data on the products and services that you usually prefer, in order to suggest you products or services of your interest and to further improve your shopping experience with us. Of course, you always have the option not to share such information with us.

f. Information collected from the use of cookies in your browser by your terminal device, (such as your Internet Protocol (IP) address, the operating system you use, the type and version of your browser, etc.).
Learn more about how to use cookies here.

g. To provide the best possible website experience, we collect technical information about your internet connection and your browser, as well as the country and phone code where your computer is located, the web pages that appear during your visit, the ads which you click on and whatever search terms you use.

h. Your social media username, if you interact with us through these channels, to help us answer your comments or questions.

5. Legal processing - Principles of Collection and processing

The Company will use your information for the following lawful processing purposes (according to article 6 of the GDPR), as the case may be, with your explicit consent which you are free to revoke at any time, either for the execution of a contract or pre-contractual relationship with you or for the service in our legitimate interest or to defend your vital interest, namely:
To manage your calls for information in order to complete your requests, purchases, and orders.
To answer your requests and questions about our products as well as information and answers to your suggestions and comments on improving our products and services.

To analyze the traffic of our website and improve your experience as well as to provide you with information related to products, services, special offers, and promotions.

For our internal operations and analysis, such as internal management, fraud prevention, use by management, billing, accounting, charge, and control information systems.

In any case, you can change your preferences at any time using the unsubscribe link at the end of each email you receive from us (unsubscribe).

This Privacy Policy is intended to inform you of the terms of collection, processing, and transmission of your personal data that we may collect as Processors or Executors. The Company and its trained staff apply the ten Processing Principles of GDPR 2016/679 (legality, objectivity, transparency, purpose limitation, data minimization, accuracy, limitation of storage time, integrity, confidentiality, and accountability). The company protects and secures your eight rights regarding the use of your personal data (information, access, correction, deletion, processing restriction, portability, objection, and non-automated profile-based decision-making, as specified in applicable national law). The above applies without discrimination and applies to all processes we perform and all services we provide.
The Company keeps your personal data only for as long as required by the contractual terms of each service, in combination with the current legislation, based on the respective purpose of processing, and then anonymizes or destroys them. You can ask us and find out what data we collect about you and correct or delete it by completing a relevant application that we have available unless its maintenance is required by tax law, evidentiary or judicial purposes and to prosecute illegal acts.

6. Use of Personal Data (Cookies Policy)

According to the European Directive E-Privacy 2009/136 / ΣΕ (which will be replaced by the e-Privacy Regulation) and the 25.2.2020 Instructions of PDPA, our website accepts the use of "cookies". These are online tools for collecting and analyzing information from social networking platforms or partner third-party websites, in order to measure traffic, improve the functionality, content, and overall appearance of our website, and adapt it to the needs of our customers. In particular, we use your Data in the following cases:
To complete your product orders: The Company processes your Data in order to fulfill its contractual relationship, to process product orders, to provide customer service, to comply with legal obligations, to oppose, raise or enforce legal requirements. If we do not collect your Data upon completion of the order (through our physical stores, lifetime, or through a service phone from our sellers or through our online store, we will not be able to process your order and comply with our legal responsibilities. Please note that your data may need to be transferred to third parties to deliver the product or service you ordered (For details on how we provide personal data to third parties, see terms 9, 10, 11, and 12 below).

In addition, we may retain your Data for a reasonable time period in order to meet our contractual obligations, for example, product returns, as required by law.

To create a User Account: The Company processes your data in order to provide you with the account functions and to facilitate the purchase of the products.

For Communication: The Company uses your Data to respond to your requests/inquiries, refund requests and/or any complaints. The information you share with us enables us to manage your requests and respond to you in the best possible way. We may also maintain a record of your inquiries/requests in order to better respond to any future communication. We do this based on our contractual obligations to you, our legal obligations, and our legitimate interests, in order to provide you with the best possible service and to be able to improve our services based on your personal experience.

For Sending newsletter/offers: With your consent, we will use your personal data, your preferences, and transaction details to inform you via e-mail, internet, phone, and/or social media networking for related products and services, including personalized offers, etc. You can revoke this consent at any time.

For the Development and Improvement of the products, we provide you. This is done based on our legitimate business interests. Because we want to provide you with offers and suggestions that are more relevant to your interests and needs.

To ensure that you will always see the most interesting content on our Websites or applications, we will use the data you have provided to us giving your consent to place cookies on your device. For example, we may display a list of recently viewed products or offer recommendations based on your shopping history and any other data you have shared with us.

To send you research and evaluation requests so we can improve our services. These messages will not contain promotional content and do not require prior consent when sent by email or text message (SMS). We have a legitimate interest in doing so, as this helps make our products or services more relevant to you. You can at any time refuse to receive these requests from us by updating your preferences on your online account.

To protect your account from fraud and other illegal activities: This includes the use of your data to maintain, update and protect your account. We also monitor browsing activity with us to quickly identify and resolve any issues and protect the integrity of our website. All of the above are part of our legitimate interest. For example, we check your password when you log in and use automated IP address tracking to detect potential false logins from unexpected locations.

To process payments and prevent fraudulent transactions: We do this based on our legitimate business interests and it also helps protect our customers from fraud.
To comply with our contractual obligations to you or in accordance with the provisions of law or for the execution of court decisions.

Finally, we inform you that the processing of your data is carried out either by the specially authorized personnel of the Company or through computer systems and electronic devices by the group and exceptionally by third parties, who, having contractually committed to the confidentiality and protection of your data performs tasks that are necessary to achieve the purposes that are strictly related to the use of our Websites, its services and the sale of products through our Websites. Information on this can be found below in terms 9 and 10.

7. What is the legal basis for the processing of your Data by the Company

Law regarding Data protection specifies the various reasons why a company may collect and process your personal data, including the terms of our contractual relationship.

Your consent, where required. For example when you choose to receive a newsletter. When collecting your personal data, we will always let you know what data is necessary for relation to a particular service.

The group's liabilities arising from the law (e.g., tax legislation, e-commerce legislation, etc.)
The legal interest of our group. In certain cases, we collect your Data in a way that is reasonably expected as part of the operation of our business and that does not substantially affect your rights, freedoms, or interests.

8. Who are the recipients of your Data?
Access to your Data has only the absolutely necessary staff of the Company, which is committed to maintaining the confidentiality, and our partner companies or third-party service providers, who process your Data as Processors on our behalf and by our orders.
Furthermore, when using our website, your personal data is processed by third parties, such as social networks and search engines (e.g., Google Analytics, Facebook social plug-ins, etc.) without any involvement, influence, or control on our part and transmitted either within or outside the European Economic Area for which such third parties are solely responsible. If you do not wish third parties to receive information from your browser, when you visit the group website you may opt-out of the terms provided by the respective Terms of Use on the website of any such third party. Although most browsers automatically accept the use of cookies, you can always change the settings on your computer by choosing not to accept them or being asked to accept each one individually. However, you should be aware that this will limit the range of browsing capabilities available to you on any website as well as the user experience.

9. Transfer of your Data to third parties
Data Transfer from our Company
The Company shares your data with:
Third-party service providers that process personal data on its behalf, for example (indicatively mentioned) for credit card and payment processing, transfers, and deliveries, hosting, management and maintenance of our data, email distribution, research and analysis, promotion management, and management of certain services and items. When we use third-party service providers we enter into agreements that oblige them to implement appropriate technical and organizational measures to protect your personal data.

Other third parties, to the extent that it is required for the following purposes: (i) compliance at the request of a body of the Hellenic State, court decision or applicable law, (ii) prevention of illegal uses of our Websites and Applications or violations of the Terms of Use of our Websites, Applications and our policies, (iii) our own protection against third party claims, and (iv) helping to prevent or investigate fraud (e.g., counterfeiting).

Other third parties to whom you have given your consent by your own.

Disclosure of Data by you
When you use your social media information on our Websites or Apps, you can create a public profile that includes information such as username, profile picture, and city. You can also share content with your friends or the general public, including information about how you interact with the group. We encourage you to use the tools we provide to manage your company's social media sharing in order to control the information you make available through the company's social media data.

10. What is our policy with third-party Data Processing Operators in accordance with the above-mentioned:

We provide only the information needed to perform their specific services.

They may use your Data only for the exact purposes outlined in our contract with them.

We work closely with them to ensure that your privacy is respected and protected at all times.

If we stop using their services, any of the data they hold will be deleted or made anonymous.

To enhance your experience as a customer on our Website and Applications, we use the following companies, which will process your Personal Data as part of their contracts with us:

Facebook
LinkedIn
YouTube

In case you wish to receive more information regarding the disclosure of your data to third parties, please contact us by email at sth.hellas@sth.email.

11. Ensure that Editors respect your Data

The Executors on our behalf have agreed and contractually contracted with the Company:
to maintain confidentiality,
not to send your Data to third parties without the permission of the Company,
to take appropriate security measures,
to comply with the legal framework for the protection of personal data and in particular Regulation 979/2016 / EU (otherwise GDPR).

12. Data Transfer

The personal data we collect (or process) within the Websites will be stored within the European Union. However, some of the recipients of the Data with whom the Company shares your Personal Data may be located in countries other than the one in which your Personal Data was originally collected. Legislation in those countries may not provide the same level of data protection as the country that originally provided your Personal Data. However, when we transfer your Personal Data to recipients in other countries, including the US, we are committed to protecting your Personal Data as described in this Privacy Policy and in accordance with the applicable law.
We take steps to comply with applicable legal requirements for the transfer of personal data to recipients in countries outside the European Economic Area or Switzerland that do not provide an adequate level of protection. We use various measures to ensure that your Personal Data transferred to these countries meets adequate protection in accordance with data protection rules. These include signing the Contract Clauses, certifying that the recipient has adopted European binding rules, or complying with the EU-US and Switzerland-US Privacy Shield.

13. Retention time of your Data
We retain your Personal Data for as long as necessary to fulfill the purposes outlined in this Privacy Policy (unless a longer retention period is required by applicable law). Generally, this means that we will keep your Personal Data for as long as you have an account in our Company. Regarding your Personal Data related to product purchases, we retain this data for a longer time period to comply with our legal obligations (such as tax and commercial law and for warranty purposes). At the end of this retention period, your data will be completely or anonymously deleted, for example by aggregation with other data, so that it can be used in an unrecognizable way for statistical analysis and business planning.

Some examples of Customer Data Retention Periods:
Orders
From the completion of an order, we retain the personal data you have given us for five years so that we can comply with our legal and contractual obligations.
Guarantees
If your order included a warranty, the relevant Personal Data will be retained until the end of the warranty period.
Newsletter
Your statement of consent for sending a newsletter (newsletter) is kept for as long as a newsletter is sent to you by the Company and in any case no more than six months from the cessation of sending a newsletter.

14. Security of your Personal Data
Recognizing the importance of the security of your Personal Data, we take all appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of your data. We aim to ensure that your personal information is transferred, stored, and processed in accordance with appropriate international security standards and procedures. At the Company, we have trained and responsible staff, Security Officer, and Personal Data Protection Officer while recognizing the importance of protecting the privacy and all your personal information. To this end, we have appropriate security policies and use the appropriate technical and operational tools, such as anonymization, pseudonymization, data encryption, tokenization, use of firewalls, establishment of access levels, authorized staff, staff training, periodic compliance checks, and compliance business continuity for the security and protection of your Data from any form of accidental or improper processing to be ensured. We use the most modern and advanced methods, to ensure maximum safety.
These measures shall be reviewed and amended when and where necessary.
Any partner who has access to the above information uses it to serve exclusively the above purposes. We share the information you give us exclusively in the ways described in this Policy and in accordance with your express and specific consent per type of processing which you can at any time and freely revoke by contacting us.

15. Links to third party websites

Our Company websites may contain links that lead to other websites of third parties, independent operators which operate exclusively by them and which we do not control. Therefore, our company bears no responsibility for the content, actions, or policies of these websites. Please read carefully the respective data protection policies on the websites you visit as they may differ significantly from ours.

16. Unsolicited commercial communication

The Company does not allow the use of its website or its services for the transmission of bulk or unsolicited commercial e-mails (spam). We also do not allow messages to and from our customers that use or contain invalid or fake headings, invalid or non-existent country names (domain name), techniques for hiding the origin of each message, false or misleading information, or violating the terms of use of our websites. We do not in any way allow the collection of e-mail addresses or general information of our customers through our website. We do not allow any attempt to use our services in a way that could harm, disable, encumber any part of our services or prevent anyone wishing to use them lawfully. In case of unauthorized or inappropriate use in any of our services, we may, without notice, in our sole discretion take the appropriate measures to block messages from a specific internet space (domain), an e-mail server, or an IP address. Also, immediately delete any account that uses our services, which at our sole discretion transmits or is associated with the transmission of any messages that violate this policy.

17. Rights - exercise

Right of access to your Personal Data

You have the right to be informed by us whether we process your Data. If we process your Data you can ask to be informed about the purpose of processing, the type of Data we hold, to whom we give it, how long we store it, if automated decisions are made, but also about your other rights, such as correction, deletion of data, restriction of processing and submission of a complaint to the Personal Data Protection Authority.

Right to correct inaccurate personal data

If you find that there is an error in your Data you can ask us to correct it (e.g., name correction or change of address notification).

Right to delete / right to forget

You can ask us to delete your data if it is no longer necessary for the above-mentioned processing purposes or you wish to revoke your consent.

Right to portability of your Data

You can request that the Data you have provided be in a readable form for you or ask us to pass it on to another processor.

Right to restrict processing

You may request to limit the processing of your Data for as long as the processing of your objections to the processing is pending.

Right to object and revoke consent to the processing of your Data

You may object to the processing of your Data and we will stop the processing of the Data unless there are other compelling and legitimate reasons prevailing over your right. If you have given your consent to the collection, processing, and use of your personal data, you may revoke your consent at any time with future effect:

To exercise your rights you can submit a request to us at the e-mail address sth.hellas@sth.email  entitled "Exercise of Right" and we will examine it and answer you as soon as possible.

18. Communication for questions and comments

If you have any questions or comments regarding this Privacy Policy or if you feel that we have not followed the principles outlined in it, please email us at sth.hellas@sth.email
or contact us at Iviskou & Andrianou, 13677 Axarnes.

We respond to your requests free of charge without delay, and in any case within (1) one month from the time we receive your request. However, if your request is complex or there is a large number of requests, we will inform you within the month if we need to receive an extension of another (2) two months within which you will receive a complete answer.
Exceptionally:
If you wish to correct your Data in your user account, you can log in to it and make any correction/change without the need to submit a Request.

If you wish to withdraw your consent to send a newsletter (newsletter) you can do so by selecting the link "To delete from the" newsletter mailing list "click here" located at the bottom of each newsletter.

If you wish not to receive web push notifications from the Company you can disable the option from your browser setting.

Identity check

To protect the confidentiality of your information, we will ask you to verify your identity before making any request under this Privacy Policy. If you have authorized a third party to submit a request on your behalf, we will ask them to prove that they have your permission to act for this purpose.

19. Applicable law

Applicable Law is the Greek Law, as formulated according to the General Regulation for the Protection of Personal Data 2016/679 / EU, and in general the current national and European legislation and regulatory framework for the protection of personal data.

Any dispute arising out of or in connection with the protection of your Personal Data is subject to mediation in accordance with the Mediation Regulation of the European Agency for Mediation and Arbitration (EODID). In the event that the dispute or part of it is not resolved through mediation, the dispute or its unresolved part is resolved exclusively, final, and irrevocably by an arbitral court, which determines and conducts the arbitration in accordance with the Arbitration Rules of EODID.

20. Violation of the applicable law for the protection of Personal Data

You have the right to file a complaint to the Authority of Personal Data Protection if you consider that the processing of your Personal Data violates the applicable national and supranational regulatory framework law for the protection of personal data:

Personal Data Protection Authority, Postal address: 1-3 Kifissias, PC 115 23, Athens, tel. 210. 6475600, e-mail address - e-mail contact@dpa.gr

21. Validity of the Privacy Policy

This Privacy Policy was published by the Company on 10/11/2021 and is subject to periodic improvement and revision. If there are significant changes to the Privacy Policy or the way we use your Personal Data, we will post this update on our website before the changes take effect and we will notify you in any appropriate way.

We encourage you to read this Policy from time to time for you to know how your data is protected.