The Company «CD MEDIA SOCIETAS EUROPAEA OF TRADING AND SALE SOFTWARE AND MULTIMEDIA OPTICAL SYSTEMS S.E.» (hereinafter “the Company”) fully shares your concern regarding your personal data in accordance to the enhanced requirements of Regulation (EU) 2016/679 (hereinafter “GDPR”), law 4624/2019, Decisions, Guidelines and Opinions of Hellenic Data Protection Authority and, the relevant legislation about the protection of Personal Data (hereinafter “Data Protection Legislation”), as the Data Controller, informs the natural persons (hereinafter “Data Subjects”, “you”) about the processing of their personal data through this Privacy Notice.
Ι. What personal data we collect, for which purposes and which are the legal bases
PURPOSE |
PERSONAL DATA COLLECTED |
LEGAL BASIS |
- Customer Support (who submit their requests in the Support Form
|
Name, surname e-mail address (email), landline and mobile phone, address, postcode, country, type and color of device, warranty details (serial number, date of purchase, proof of purchase) personal data that may be included in the "Troubleshooting" fields, "Symptom" and "Description" |
Article 6(1)(b) GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract |
- Transmission of contact details to a courier company for the transfer of the device from the customer to cdmedia or vice versa
|
Name, surname, TK address, postcode country, telephone number |
Article 6(1)(a) GDPR: the data subject’s consent |
- Responding to account transfer requests
|
Name, surname e-mail address (email), landline and mobile phone, account details such as NNID, account email, date, type and color of old device, old serial, new serial and personal data that may be included in the field “job Description do you want to be executed” |
Article 6(1)(b) GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract |
- Parental Control Removals
|
Name, surname, date e-mail address, mobile phone, device type and color, date of purchase |
Article 6(1)(b) GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract |
II. How long your personal data is retained for
Personal data shall be retained for as long as necessary for data collection purposes, as specified in section I, unless otherwise specified by law. It is our Company’s responsibility, once the retention period expires, to ensure that your data will be safely deleted or destroyed in accordance to explicitly described standards and specifications.
ΙΙΙ. To whom your personal data are disclosed and/or transmitted
Our company shall disclose your personal data to authorized employees of our Company.
Furthermore, we may disclose personal data collected through this website to:
a) Entities entrusted with the execution of specific tasks such as, but not limited to, product suppliers and/or IT service providers and/or support service providers of all kinds of computer-based information systems or electronic systems and networks. Those entities offer adequate assurance for the implementation of necessary technical and organizational measures, so that data processing is conducted in accordance to GDPR and other relevant legislation for data protection.
b) Supervisory, independent, judicial, prosecuting, public and/or other authorities, bodies or parties assigned to control/monitor the Company's activities within the scope of their responsibilities.
IV Children Data
Company’s website or Services are not directed to children. If you are under 18 years of age, then please do not use or access our Services at any time or in any manner without parental consent. Company as a Controller reserves the right to delete this information if it learns that Personal data of children under the age of 18 has been collected on the Services without parental consent, or may request the parental consent. If you are a parent or guardian and discover that your child under the age of 18 has obtained access of our Services, then you may contact our Customer Support at ncs@cdmedia.gr and request to delete that child’s personal information.
V Data Security
The Company takes the appropriate technical and organizational measures to secure personal data against loss or other form of illegal processing. These measures guarantee the appropriate level of security given the risks arising from the processing and the very nature of the personal data being protected.
VI Data transfers outside EU/EEA
The Company does not transmit personal data of its customers to countries and organizations outside the EU / EEA. Each and every transfer of personal data to a third country shall only occur if the specific requirements of Articles 44 et seq. of the GDPR have been fulfilled.
VII. Rights of the data subject
The Data Protection Legislation provides you with rights and options that we are committed to satisfying. Thus, you may:
- request information about your stored personal data and the way it is processed. If you so wish, we shall provide a copy of your personal data undergoing processing, free of charge (Right of Access).
- request rectification of inaccuracies or errors, correction of incomplete data or an update of your data (Right to rectification).
- request erasure of personal data, if no longer retained for specific, legal or stated purposes (Right to erasure or Right to be forgotten).
- request restriction of processing a) when the accuracy of the personal data is contested, b) when the processing is unlawful (but you oppose the erasure of the data), c) when the data is no longer needed for the purposes of the processing, and d) for as long as the verification whether the legitimate grounds of the controller override those of the data subject are still pending.
- object on grounds relating to your particular situation, at any time, to processing of personal data, especially when this data is processed for direct marketing purposes or profiling. More specifically, you may object to a decision based solely on automated processing. In such a case, you may exercise your right of intervention (Right to object - Automated individual decision-making).
- receive your personal data in a structured, commonly used and machine-readable format or transmit this data to another controller at your behest, where technically feasible and at all times under the specific conditions of the law (Right to data portability).
- revoke your once granted consent for your data processing at any time. As a result, we will not be allowed to continue the data processing based on this consent in the future.
For the exercise of your rights, according the Applicable Legislation, please contact us at GDPR@cdmedia.gr Our Company shall answer all your requests within one (1) month. In the extremely rare cases that such a fulfillment is proven unfeasible, we shall immediately inform you explaining the reasons in detail. If you believe that the provisions for personal data are being violated, you may file a complaint to the Hellenic Data Protection Authority (HDPA).
VIII. Contact Information
DATA CONTROLLER
«CD MEDIA SOCIETAS EUROPAEA OF TRADING AND SALE SOFTWARE AND MULTIMEDIA OPTICAL SYSTEMS S.E.»
Kifisias 32, 15125 Marousi, Athens
+30 210 6854220, +30 210 2822580
+30 2106854273, +30 2102820070
info@cdmedia.gr
