Confidentiality and personal data protection statement
Vipa acknowledges that the protection and safeguarding of your personal data is of the utmost importance and is therefore committed to respecting your privacy and to the protection of such data.
The present Confidentiality and personal data protection statement lays out the way Vipa uses your personal data, as well as the measures it has taken to protect and safeguard such data. This applies to you in the case you purchase products or receive services from us, participate in our events or marketing activities, or interact with us in any other way, including by using any of our sites or contacting us through social media.
Take some time to review this statement in detail, while, in case you are already a customer or associate of ours, more details about how we use your personal data may be found in our contract. Further information, referring to further use of your personal data, as well as to the option to oppose it, may also be provided during the process of collecting your personal data.
The data we collect and their use
- We collect and process the personal data you provide us with, under the following legal bases:
- Vested interest as required to perform the services provided
- Legal obligation to comply with the applicable laws and regulations
- Our contractual obligation in the context of our transaction
- Your consent where required, which you may withdraw in the context of your rights, which we are to we inform you of next
- We do not process personal data without your consent or without you being our customers or having provided the data to the business yourself.
- We do not collect or process personal data of children under 16 years of age
- We only collect personal data that is necessary for the proper and complete provision of the relevant services, such as name, surname, VAT no, telephone no, e-mail, address, etc. We note that you are responsible for the accuracy of the data you provide us with
- We collect and maintain your personal data for as long as the law requires in the context of our contractual relationship with you
In any event, we inform you of the processing purposes prior to the collection of the data, while every piece of information we collect is determined by this statement.
Transmission and disclosure of your personal data
We do not market or transmit your personal data to third parties except as set forth in this Confidentiality statement and as required by law. Specifically, in order to provide our services, we may share your personal information with certain third parties acting on our behalf (as processors) in order to provide you with the best service possible (such as shipping
companies, communication and marketing services companies, accounting, consulting and / or auditing firms, etc.). Vipa ensures the processing of your personal data by our affiliated third parties by means of contractual clauses restricting the purpose of processing and adhering to the GDPR technical and organizational measures for the correct and secure processing of your personal data.
We do not transmit your personal data to third countries and / or outside the European Union.
VIPA will use the user / customer e-mail and contact information, or any other information, to directly promote its similar products or services, to inform users of the status of test applications, and to serve similar purposes, except if the user / customer informs Vipa at [email protected] , that they do not consent to the collection and use of their electronic information on such purposes.
Access to personal data is strictly limited to Vipa staff, who implement the appropriate technical and organizational measures to ensure their proper level of security and only to achieve the intended purpose.
At Vipa we take all necessary information protection and security measures. In particular, we have developed and implemented optimum technical and organizational security and information protection mechanisms to protect its integrity, availability and confidentiality.
Data retention period
We collect and retain your personal data for as long as the law requires in the context of our contractual relationship.
In case you consent to the use of your data for marketing purposes, we will retain your data until you request otherwise or even withdraw your consent.
At Vipa we recognize and safeguard your following rights:
- The right to transparent information with regard to the exercise of your rights (articles 12, 13, 14 GDPR),
- The right of access (article 15 GDPR) to the personal data we have collected from you
- The right to correction (article 16 GDPR) of inaccurate personal information we hold about you
- The right to erasure («right to be forgotten») (article 17 GDPR) of the Member-User account and the information we hold about you. We note that exercising the right to erasure of an active subscriber means we shall not be able to continue providing the services you may have requested.
- The right to restrict the processing of your personal data (article 18 GDPR) where possible
- The right to object (article 21 GDPR) to the processing of your personal data
- The right to withdraw your already given consent (article 7 GDPR), ie. to withdraw your consent at any time for consent-based processing. The lawful character of the processing of your data shall not be affected by the withdrawal of consent until the time when you requested the withdrawal.
- The right to lodge a complaint with the competent supervisory authority, the Personal Data Protection Authority
You have every right to exercise your rights by e-mailing the Legal Department of the company ([email protected] ). We kindly ask that your relevant requests be accompanied by the appropriate documentation of identification of you as a person, without prejudice to the company requesting the provision of additional information for the purpose of identifying and confirming your information.
Filing requests and / or complaints
Vipa collects and processes personal data in accordance with the terms and conditions set out in this statement and the applicable laws. If, however, it is considered that such processing is not lawful, you have the right to file a complaint with the competent and independent Personal Data Protection Authority (PDPA).