The protection of your personal data is important to us.
With this policy, “NOMIKI BIBLIOTHIKI ANONYMOUS COMMERCIAL AND INDUSTRIAL COMPANY” GROUP OF PUBLISHING AND TRADING COMPANIES (hereinafter referred to as the “Company” or “we” or “our”), which is located in Athens, (23 Mavromichali 23, P.O. Box 10680), sets forth and discloses the terms under which, acting as the law defines it as a “Data Controller”, collects, stores, uses and generally processes your personal data, which it collects when you visit, register or use its websites (hereinafter the “Websites”) and its mobile applications (hereinafter the “Applications”), as well as when you interact with its physical stores.
This Privacy Policy also describes how we use, share and protect your personal data, the choices you have regarding your personal data, and how you can contact us. This Privacy Policy complies with the terms under Regulation (EU) 679/2016 and any other relevant applicable legislation.
If you have any questions regarding this Privacy Policy, as well as any issue related to the processing of your Data and the exercise of your rights, you may contact us at the following e-mail address (e-mail) dataprotection@nb.org
The Company’s website college.nb.org is the online store for the presentation and sale of products and services.
In addition, through the NOMIKI BIBLIOTHIKI websites and applications, you can access a range of services provided by the Company, such as:
The term “personal data” refers to any information concerning an identified or identifiable natural person (i.e. information of natural persons, such as name, postal address, e-mail address, contact telephone number, etc.) which identifies or can identify you, hereinafter referred to as “Personal Data or Data”.
Any operation or set of operations which is performed, whether or not by automated means, on personal data or on sets of personal data (such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, information search, use, disclosure by transmission, dissemination or any other form of making available, alignment or combination, restriction, erasure or destruction).
The provision of the Data to the Company may be necessary to achieve the purposes specified in this Privacy Policy or may be optional.
The mandatory or optional nature of the provision of Data is indicated by an asterisk (*) next to Personal Data of a mandatory nature.
If you refuse to provide the data marked as mandatory on the Sites, it will be impossible for the main purpose for which the Data is collected to be achieved and it may make it impossible for the Company to fulfil the sales contract or provide the other services available on the Sites.
The provision of additional Data to the Company, in addition to those marked as mandatory, is optional and does not entail any consequences in relation to the main purposes of Data collection, since their provision serves exclusively to optimise the quality of the services provided by us.
We only collect the strictly necessary Personal Data that is appropriate and clear for the purpose for which it is intended. This Data includes the following:
a. Data that you provide to us when you register and create a user account on the Company’s Sites or applications, via the internet or your mobile phone, or through your personal contact with our stores or our salespeople, and specifically data such as your email address (e-mail)* and password / login password (as required) and name, surname, postal address, telephone number (as optional):
b. Data and information that you provide us through transactions between us (purchases, orders, etc.) and communication between us (through our physical stores, our online store, our salespeople, telephone, e-mail or any other way / medium).
c. Data relating to the payment method for the transactions you carry out with us.
d. Data that you provide to us when you subscribe to our newsletter.
e. Data about the products and services that you usually preferably choose, in order to recommend products or services of interest to you and to further improve your shopping experience with us. Of course, you always have the option not to share such data with us.
f. Traffic data of our website.
g. Information for the registration / listing of your advertisement (Name, Surname, Phone, Email, Content)
h. Data for the registration for the trial period of the Qualex platform, such as name, email, county and phone number.
i. Information collected from the use of cookies in your browser. Learn more about how cookies are used here: (Policy Cookies)
j. To provide the best possible website experience, we collect technical information about your internet connection and browser, as well as the country and phone code where your computer is located, the web pages that appear during your visit, the ads you click on, and any search terms you used.
k. Your social media username, if you interact with us through these channels to help us respond to your comments or questions.
l. Educational data, such as education, skills, knowledge of foreign languages, professional experience (only in cases where you are responding to a job advertisement).
Where applicable we use your Data:
In addition, we may retain your Data for a reasonable period of time in order to fulfil our contractual obligations, for example product returns, as required by the relevant consumer protection legislation, as well as to comply with our legal obligations regarding the specific legislation in force (tax, etc.)
Finally, we inform you that the processing of your Data is carried out either by the Company’s specially authorized personnel or through computer systems and electronic devices by the Company and exceptionally by third parties, who, having been contractually bound to maintain confidentiality and protect your Data, carry out tasks necessary to achieve the purposes strictly related to the use of our Sites, its services and the sale of products through our Sites. Information about this can be found below in terms 9 and 10.
As regards the use of Cookies by our Company, please refer to here: (Πολιτική Cookies)
Access to your Data is available to the Company’s authorized personnel, which is limited to the absolutely necessary persons and who are bound by confidentiality, and to our affiliated companies or third party service providers, which process your Data as Processors on our behalf, in accordance with our instructions and on the basis of a specific agreement for the processing of your Data.
Disclosure of Data by our Company
The Company shares your Data with:
Disclosure of Data by you
To improve your customer experience on our Sites and Apps, we use the following companies who will process your Personal Data as part of their contracts with us:
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
If you wish to receive more information about the disclosure of your Data to third parties, please contact us by e-mail atdataprotection@nb.org
The Processors processing on our behalf have agreed and contractually bound themselves to the Company:
The personal data we collect (or process) in the context of our Sites and Applications will be stored within the European Union. However, some of the recipients of the Data with whom the Company shares your Personal Data may be located in countries other than the country in which the original collection of your Personal Data took place. The laws in those countries may not provide the same level of data protection as the country that originally provided your Personal Data. However, when we transfer your Personal Data to recipients in other countries, including the United States, we are committed to protecting your Personal Data as described in this Privacy Policy and in accordance with applicable law.
We take steps to comply with applicable legal requirements for transferring Personal Data to recipients in countries outside the European Economic Area or Switzerland that do not provide an adequate level of protection. We use various measures to ensure that your Personal Data transferred to these countries enjoy adequate protection under data protection rules. These include signing the Contractual Clauses, certifying that the recipient has adopted the European Binding Rules
We retain your Personal Data for as long as necessary in order to fulfil the purposes set out in this Privacy Policy (unless a longer retention period is required by applicable law). Generally, this means that we will retain your Personal Data for as long as you have an account with our Company. With respect to your Personal Data relating to product purchases, we retain this data for a longer period in order to comply with our legal obligations (such as tax and trade law and for warranty purposes where applicable). At the end of this retention period, your data will be deleted completely or anonymised, for example by aggregation with other data, so that it can be used in an unidentifiable way for statistical analysis and business planning.
Some examples of Customer Data retention periods:
From the completion of an order, we retain the personal data you provide for five years so that we can comply with our legal and contractual obligations.
If your order includes a guarantee, the relevant Personal Data will be retained until the end of the guarantee period.
Your declaration of consent to receive a newsletter will be kept for as long as you receive a newsletter from the Company and in any case no longer than six months after the newsletter is discontinued.
We are committed to safeguarding your Personal Data.
Recognizing the importance of the security of your Personal Data, we have taken all the appropriate organizational and technical measures to ensure the security and protection of your Data from any form of accidental or unlawful processing. We use the most modern and advanced methods to ensure maximum security.
The college.nb.org website uses the TLS 1.2 protocol, for secure online commercial transactions. This encrypts all the Data you provide, including your credit card number, name and address, so that it cannot be decrypted or altered during transmission over the Internet.
In addition, the information used to identify you as an account user is two: the Username and the Personal Secret Security Code (Password). Each time you enter your details, you are granted access to your personal account. This process is achieved securely through encryption during their transfer to the Internet and the Company’s servers. Following the same standards, you are given the opportunity to change your Personal Secret Security Code (Password) as often as you wish. After entering the desired password, the new password is encrypted and stored in the Company’s systems. For this reason, the only person who knows your password is you yourself and you are solely responsible for maintaining the secrecy of the password from third parties.
These measures are reviewed and modified when and where necessary.
You have the right to access your Personal Data.
This means that you have the right to be informed by us if we process your Data. If we process your Data, you can ask to be informed about the purpose of the processing (the type of your Data we hold, who we give it to, how long we store it, whether automated decision-making is carried out or not) and your other rights such as rectification, erasure, restriction of processing and lodging a complaint with the Data Protection Authority.
You have the right to rectify inaccurate personal data.
If you find that there is an error in your Data, you may submit a request to us to correct it (e.g., correcting your name or updating a change of address).
You have the right to erasure / right to be forgotten.
You can ask us to delete your Data if it is no longer necessary for the processing purposes listed above or you wish to withdraw your consent.
You have the right to portability of your Data.
You may request to receive the Data you have provided in a readable form or ask us to transfer it to another controller.
You have the right to restrict processing.
You have the right to request a restriction of your data processing for as long as the examination of your objections to the processing is pending.
You have the right to object to and withdraw consent to the processing of your Data.
You may object to the processing of your Data and we will stop processing the Data if there are no other compelling and legitimate reasons that override your right. If you have consented to the collection, processing and use of your Personal Data, you may withdraw your consent at any time with future effect:
You can opt out of receiving marketing communications by changing your email and SMS subscriptions by clicking the unsubscribe link or following the instructions included in the message.
Alternatively, you can contact us using the contact details provided in clause 17 below.
When we rely on our legitimate interest: When we process your personal data based on our legitimate interest, you can ask us to stop for reasons relating to your personal situation. We must then do so if we do not believe we have a legitimate compelling reason to continue to process your Personal Data.
To exercise your rights, you can submit a request to us at dataprotection@nb.org with the title “Exercise of Rights” and we will review and respond to you as soon as possible.
Exceptionally:
Identity check
To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Privacy Policy. If you have authorized a third party to make a request on your behalf, the third party will have to prove that they have your permission to act for this purpose.
We will respond to your Requests free of charge and without delay, and in any case within one (1) month after receiving your request. However, if your Request is complex or there is a large number of Requests, we will let you know within the month if we need to obtain an extension of another two (2) months within which we will respond.
The applicable law is Greek law, as formulated in accordance with the General Data Protection Regulation 2016/679/EU, Law 4624/2019 (as applicable) and in general the applicable national and European legislative and regulatory framework for the protection of personal data.
Any dispute arising from or relating to the protection of your Personal Data shall be subject to mediation in accordance with the Mediation Regulation of the European Organisation for Mediation and Arbitration (EODID). In the event that the dispute or part thereof is not resolved through mediation, the dispute or the unresolved part thereof shall be resolved exclusively, finally and irrevocably by an arbitral tribunal, appointed and conducting the arbitration in accordance with the EODID Arbitration Rules.
You have the right to lodge a complaint with the Data Protection Authority if you believe that our processing of your Personal Data violates the applicable national and regulatory framework of data protection law.
Personal Data Protection Authority, Postal address: 1-3 Kifissias Street, P.O. Box 115 23, Athens, tel.: 210. 6475600, e-mail: contact@dpa.gr
We update this Privacy Policy whenever necessary. If there are significant changes to the Privacy Policy or the way we use your Personal Data, we will post an update of this Privacy Policy on our website before the changes take effect and notify you by any appropriate means.
We encourage you to periodically read this Policy to know how your Data is protected. This Privacy Policy was last modified 13 September 2022 .
