If you use ceresjewelries.com to place an order as a customer, have an account on www.ceresjewelries.com, or just visit our Website, this Privacy Policy applies to you. It contains information about the types of personal data we may collect, why we collect them, and how we use them.

Our Role

If you are a customer placing an order and have an account on www.ceresjewelries.com or are just visiting our Website, we act as the ‘data controller’ of personal data. This means we determine how and why your data are processed. For such purposes, the data controller is Ceres Jewelries, 88 Agiou Dimitriou Street, 17341, Agios Dimitrios, Attica, Greece.

If you provide us with personal information about other people, or if others give us your information, we will only use it for the specific reason it was provided. By submitting the information, you confirm that you have the right to authorize us to process it on your behalf through this Privacy Policy.

Types of Data We Collect

1. Contact details

Your first name, last name, billing address, shipping address, city, country, postal code, telephone number, and email address. Optionally, please provide us with your company name, apartment/suite number, mobile telephone number, and fax number. If you order products from a third party, we will gain knowledge of at least their shipping address and potentially their other contact details.

2. Financial information

Please provide your credit/debit card details (type and four last digits), including your card’s security/CVV code.

3. Data relevant to your identity online and your location

Your IP address, browser type, and version, browser plug-in types, time zone setting, geolocation information about where you might be, operating system and version, and login information relevant to our Website.

4. Data relevant to your use of our Website

Your URL clickstreams (the path you take through our site), products/services viewed, page response times, download errors, how long you stay on our pages, what you do on those pages, how often, and other actions.

Special categories of data and children’s data

We don’t collect any data about you revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data to uniquely identify a natural person, data concerning health, or data concerning sex life or sexual orientation, except when we have your explicit consent, or when we have to comply with the law. We offer services and products directed to and intended only by those 18 or over. We do not target ceresjewelries.com at children, and we do not knowingly collect any personal data from any person under 16 years of age.

Our Legal Bases for Processing Your Data

To collect and use your data, we have at least one of the following legal bases:

• You have given us clear and explicit consent to process your data for one or more specific purposes. If you have previously given consent to processing your data, you can withdraw such consent at any time. You can do this by emailing us at [email protected]. If you withdraw your consent and do not have another legal basis for processing your information, then we will stop processing your personal data. If we have another legal basis for processing your information, we may continue to do so, subject to your legal rights.
• Processing your data is necessary for a contract with us (for the sale of products or otherwise) or because we have asked you to take specific steps before entering that contract.
• Legitimate interests. Processing your data is necessary for our legitimate interests or the legitimate interests of a third party, provided your rights and interests do not outweigh those interests. These legitimate interests are:
• delivering, developing, and improving our services and products
• Determining whether marketing campaigns are effective
• improving data security
• gaining insights from your behavior on our Website

In each case, these legitimate interests are only valid if your rights and interests do not outweigh them.

• Legal obligation. Processing your data is necessary to comply with a legal obligation to which we are subject (for example¨: providing you invoices).

Why do we collect your data, and how do we use them?

We use your data for the following reasons:

• You are providing you the services and items you request (legal bases: contract and legitimate interest). Manage your orders and requests, login and authenticate, remember your settings, process orders and payments, and host and back-end infrastructure.
• Customer support (legal basis: contract): We will notify you of any changes to our service or the fulfillment of your order, solve issues via email or phone support, and fix bugs.
• Marketing purposes (legal bases: legitimate interest and consent). You are sending you emails and messages about news, new features, products, services, offers/discounts, information about the brand, and content (if you are already a customer or with your explicit consent) and sending you emails to ask you if you want to continue a transaction that you started but never finished. I am writing to inform you about the activities in the area where you live.
• We are improving our services (legal basis: legitimate interest). Testing features, interacting with feedback platforms and questionnaires, managing landing pages, heat mapping our site, traffic optimization and data analysis and research, and using machine learning and other techniques over your data and, in some cases, using third parties to do this.
• Email list, newsletter, and promotional emails: Ceres Jewelries may send newsletters and promotional emails containing information about new products, offers/discounts, etc, and news and information about the brand. We will only send you newsletters and promotional emails if one of two conditions applies:
• You have subscribed to our promotional email list.
• You are an existing customer, and you might be interested in receiving information about our new products, events, and offers.

In case you have chosen to subscribe to our promotional email list, the following terms apply:

• We shall include you in our promotional email list once you have provided a valid email and pressed the “subscribe” button.
• We shall only collect the email you provided us to facilitate our communications and no other personal data for any other reason.
• We shall ask for explicit consent before we collect any other data on you that may be perceived as personal.

You can always unsubscribe by following the dedicated link at the end of each newsletter and the procedure described therein or by emailing your request to [email protected]

How We Protect Your Data

The Website and online shop ceresjewelries.com are operated according to applicable EU and Greek legislation, and they store your personal data safely. We have physical and electronic procedures (technical and organizational measures) to secure and protect the information we collect and process.

However, please keep in mind that no data transmission is guaranteed to be 100% secure. You are responsible for your username and password, so please keep them safe and secret. If you believe your privacy has been breached, please contact us without delay by emailing us at [email protected].

Your Rights

1. You have the right to access the information we hold about you. You can contact us and we shall inform you about the following:

• The categories of data we’re processing
• the purposes of data processing
• The categories of third parties to whom the data may be disclosed
• How long the data will be stored (or the criteria used to determine that period)
• Other rights you have regarding our use of your data

We can also send you a copy of this information if you wish.

2. You have the right to ask us to correct personal data about you if they need to be more accurate or complete.
3. You can object to us using your data to profile you or make automated decisions about you. Please note that exercising this right does not equal an obligation on our behalf to not show advertisements at all. Currently, we do not have such functions installed on our Website.
4. You have the right to ask us to directly transfer your data to another service, as long as it is technically feasible, or we can provide you a copy in a standard machine-readable format.

Please note that if such data also contains personal data about another person, we may not choose to include such data in our deliverables.

5. You have the right to be ‘forgotten’.

All you have to do is ask, and we will delete your data unless we have another legal reason to hold your data (such as a legal claim or a regulatory requirement).

1. You can ask us not to use your data for direct marketing purposes.

7. You can file a complaint regarding our use of your data to the Hellenic Data Protection Authority.

Please tell us first; we will happily address your concerns. If you insist on contacting the Hellenic Data Protection Authority, you can find out how to reach them and exercise your rights at their Website (www.dpa.gr) 

You can exercise all the rights mentioned above (except for 7) by emailing us at [email protected].  We shall address your request within 30 days of its receipt unless it is too complicated or we are dealing simultaneously with too many such requests. In the latter case, it may take up to two additional months to address your request, but we will let you know within 30 days of receiving your initial request.

Location of Processing and Storage of Data

The personal data we collect is processed at our offices in Athens, Greece, and in any data processing facilities operated by the third parties identified below.

By submitting your data to us, you agree to the transfer, storage, or processing of your data by us. If your information is transferred or stored outside of the EU or the EEA in this way, we will ensure that your privacy rights remain protected as outlined in this Privacy Policy.

Any personal data we store will be deleted within two years of its collection. However, we may keep your data for an extended period to exercise or defend a legal claim or in case we are obliged by a legal provision. Additionally, we will only store our customers’ email addresses for up to 5 years to send them our newsletter and marketing emails, a function from which they may unsubscribe anytime.

Third Parties and Sharing Your Information

As with most e-shops, we often resort to third-party vendors to keep www.ceresjewelries.com up and running, provide our Website’s services, and perform all its functions, as explained above.

These third parties help us host our Website and shop, facilitate your payments, communicate with you, power our emails, help you rate our products and services, analyze the performance of our Website, etc.

To that extent, sometimes, we need to share your data with them for these services to work well.

Below is our primary third-party service providers with whom we may share your personal information.

Mailchimp

We use a third-party service to send you our newsletter and promotional emails, specifically Mailchimp (https://mailchimp.com/). By subscribing to our promotional email list, you explicitly agree to our use of this service. You can learn more about how Mailchimp processes personal data and what data they collect or share with them here:

(https://mailchimp.com/legal/privacy/ )

Google (Analytics):

We use Google Analytics in order to collect aggregated, anonymized information about the use and performance of our Website.

You can learn more about how they process personal data and what data they collect, or we share with them here: (https://www.google.com/analytics/terms/us.html) and how Google, in general, processes personal data it may collect here :  (https://policies.google.com/privacy)

If you disagree with the processing of personal data performed by any of the aforementioned third parties, we urge you to refrain from using our Website and shop.

To effectively fulfill your orders, we share your information with companies that do things to get your purchases to you, such as payment service providers, warehouses, order packers, and delivery companies.

Your information and countries outside the EU or the EEA

Some of your information, as specified above, is processed, transferred, or stored outside the EU or the EEA. To that extent, as this Privacy Policy outlines, we ensure that your privacy rights remain protected. We always elect to cooperate with best-in-field third parties, which might also have appropriate accreditation for personal data protection. We also ask any third parties outside the EU or the EEA to have access to your data to provide us with proper safeguards for your information.

Cookie Policy

Like any other website, ceresjewelries.com uses cookies. Cookies are small data files placed on your computer or mobile device when you visit a website. Cookies are widely used to enable website functionality, efficiency, or reporting. The information is used to optimize the users’ experience by customizing our web page content based on visitors’ browser type and other information. These may be “session” cookies, meaning they delete themselves when you leave ceresjewelries.com, or “persistent” cookies, which do not delete themselves and help us recognize you when you return. They can be placed by the domain operating the Website or by third parties. We use the following main types of cookies on ceresjewelries.com:

• Essential website cookies: These cookies are strictly necessary to provide you with services available through our Website and to use some of its features, such as access to secure areas.
• Site functionality cookies allow you to navigate our Website and use features such as “Add to Cart.”
• Customer preference cookies remember your preferences and details, making your experience more personal and streamlined.
• Website analytics cookies allow us to analyze and improve how our customers use our site.
• Targeting or advertising cookies are used to deliver ads that might be relevant or useful to you.

Currently, all of the cookies on our Website are placed by third parties. The list of these third parties is in the section “Third Parties and Sharing Your Information” of this policy.

By using www.ceresjewelries.com, you agree to place the aforementioned cookies on your device and access them when you visit the site in the future. However, you have the right to accept, delete, block, or reject cookies by modifying your browser settings accordingly. You can learn how to do this by visiting websites such as http://www.allaboutcookies.org.

Please note that deleting or disabling future cookies may affect your user experience and prevent you from taking advantage of certain functions of our Website.

Will we update this privacy policy?

We may update this Cookie Policy from time to time in order to reflect changes in law, third-party vendors, technologies we use, etc.

Please, therefore, re-visit this Cookie Policy regularly to stay informed.

Where can you get further information?

If you have any questions about our privacy policy, please email us at [email protected] or by post to: “Ceres Jewelries,” 88 Agiou Dimitriou Street, 17341, Agios Dimitrios, Attica, Greece.