Introduction

Personal data is information that can directly or indirectly lead to the identification of the person, name and surname, address, telephone number, date of birth, location data or e-mail address. We consider the protection of your personal data very important and we want you to feel secure when you visit www.simplybetter.gr and our order entry application website. By accepting this privacy policy, you agree to the collection, processing and use of personal data by us in accordance with the General Data Protection Regulation (GDPR) and the following terms of use.

Processing of personal data

As data controllers, we are responsible for ensuring that all processing activities comply with legal requirements, but also with your reasonable expectation of the processing of your personal data. The processing of your personal data, which is carried out through the website www.simplybetter.gr or which may be collected through a contact form, is carried out in accordance with the applicable data protection legislation (Regulation (EU) 2016/679 - hereinafter "GDPR") and the Website's Privacy Policy. Data is stored for as long as it is strictly necessary to achieve the purposes for which it was collected. In any case, the criterion used to determine this period shall be based on compliance with the time limits laid down by law and the principles of data minimisation, storage limitation and rational management of records. If you have any questions about the protection of your personal data, you can also contact our data protection officer at any time at the email address: info@simplybetter.gr.

The data we process

With your consent, we process the following ordinary and sensitive personal data that you provide when you interact with the Website and use the services and features it provides. The data provided by you through contact forms, direct messages or e-mails, through the Website or directly to Simply Better staff, are included in a personal data system created and maintained under the responsibility of the administrators, which is necessary to provide the services requested by users. In general, we process the following categories of personal data: Contact details Name, telephone number, e-mail address If you contact us via the contact form or email, we collect this data because we need to know who we are talking to and why so that we can contact you in turn and help you. In order to fulfil the requests you submit via the contact form and/or to provide updates on adverse actions, it is necessary for you to consent to the processing of the data marked with an asterisk (*). Without this mandatory data or your consent we cannot proceed further. On the contrary, the information requested in fields not marked with an asterisk and your consent to receive informative material is optional: not providing it has no consequence. Account data (profile) Name, email address, user ID, password, phone number, delivery addresses This data is basic data for the creation of your personal account (profile) as a user. We need your consent in order to store this basic data in our information systems and in the future to serve you much more directly for the delivery of orders. When creating a user account you will be asked to enter your basic data. Your email address and phone number are particularly important data, as we can use them the next time you log in. In addition, we would like to ask you to carefully select your password. Do not use the same password on multiple sites and follow the policy we have set. Device information and access data When you visit the Website or our Application Site by scanning a QR Code, but do not register and order without using a user account, we collect the following data: Device identifiers, operating system and corresponding version, access time, information about the internet connection (IP address) Login details (Time, date, duration of visit, user's place of origin, IP Address and other details related to the connection protocol.) This information is collected to inform us about your visit to the Website or the Site. You do not need to provide any personal information. We limit the collection of data to what is strictly necessary in order to achieve compliance with the data processing principle, which is to minimise the processing of data. Each time you access our Website or the Application Website, this information is stored by us for technical reasons. We also use some of this information to detect suspicious behaviour in a timely manner and to prevent damage. Shipping information Delivery Address, Postal Code, City, Country In case you use our Application Website to order products at your home or office, we use the data you provide as a user of the Application to be delivered by our Customers' businesses to you. The delivery is made by our Customer businesses with their own distributors. The restaurants have no claim in relation to your personal data and under no circumstances can they use it for their own purposes. However, if you are contacted by a restaurant without your prior consent, we ask you to report it to us immediately. In accordance with the principle of data minimisation, we only provide partner restaurants with the information they need to prepare and deliver your order. Order Information Order history, selected restaurants, invoices, order ID, comments on orders, information on how to pay, delivery address and successful orders Each time you place an order, this information will be added to your profile. You can view all this information in your profile at any time. The information will give you an overview of your choices and your previous orders. We will also use the same information to improve our service. In addition, we will anonymize this information when you request deletion or when your profile becomes inactive so that we can continue to use it in an anonymous form and improve our services. Please provide only as much information as is necessary to provide the service. Saved payment methods To make the ordering process even easier for you, we suggest you save your preferred payment method. This means you don't have to enter your payment details the next time you place an order. Saving this data requires your prior consent. You can save the payment data by clicking on the consent field. You can withdraw your consent for the future at any time by deleting your preferred payment methods. Advertising and marketing. Direct marketing. Informative communication If you have provided us with your email address when you created an account as a user and/or purchased goods or services, we reserve the right to send you offers by email. The content of our informational communications varies as the technologies and criteria we use to design our communications and categorize our users into groups vary. You have the right to object to the use of your email address for the aforementioned promotional purposes at any time and with future effect either through any email we send you, through your profile or by informing us at info@simplybetter.gr. In this case, the use of your email address for advertising purposes will cease immediately.

Time for which we keep your data

We keep your personal information for as long as required by the applicable regulatory framework. In general, the period of time we keep your information is limited to three years, with the sole exception of marketing contact information which is kept for a period of five years. Where required, we may also retain your data for a longer period of time where this is necessary to comply with the regulatory framework. If we do not need to keep the information for this three-year period, we may destroy, delete or anonymise it immediately before then.

Third parties

Our staff and/or third parties have been informed about our privacy policy and we require them to comply with it by protecting your personal data to the highest degree. In addition to data processors, we also work with third parties to whom we transfer your personal data, but they are not bound by our guidelines. These are, for example, our consultants, lawyers or tax advisors who receive your data from us under contract and process this data for legal purposes or to protect our interests. Under no circumstances do we sell or rent your personal data to third parties. This will never take place without your explicit consent. With whom we may share your data We may share your information with others where we are required to do so by law or where it is necessary for us to provide you (or for third parties to provide you on our behalf) with products or services you have requested. We may also share your information where necessary in connection with regulatory compliance reporting, litigation, or asserting or defending our legitimate rights and interests. We share your personal information with third parties when we have a legitimate and lawful business reason to do so e.g. to verify your identity, to facilitate another company to provide you with the services you have requested, or to assess your suitability for the products or services you have requested. Finally we share your information when we have asked your permission to share/share this information and you have agreed.

Purpose for which we may share your information with third parties

We may share your information with third parties and for other purposes such as with other affiliated companies and any subcontractors, agents or service providers who work for us or provide services to us. We may also share your information with governmental bodies and agencies, courts, our supervisory and regulatory bodies, our auditors and anyone else who has been appointed, or requested, by our supervisory and regulatory bodies to conduct investigations or audits of our operations. Finally, we may share your information with other parties involved in disputes, including any disputed transactions.

Your rights

You can contact the Data Controller by e-mail at privacy@simplybetter.gr, to be informed to ask us to correct incorrect data we hold about you (right to rectification), to ask us to delete the data we hold about you (right to erasure) or to restrict the processing (right to restriction), to withdraw your consent to the processing of your data (right to object to processing), to request the portability of your personal data (right to portability), to request that your personal data be processed in accordance with the law (right to object to processing), to request the processing of your personal data (right to data portability), to request that your personal data be processed in accordance with the law (right to data portability). We will respond to your above requests within one (1) month of receipt, and this deadline may be extended by an additional two (2) months if additional time is required.