Privacy and Cookie Policy

PRIVACY POLICY

Introduction

Our website https://www.diatrofi4all.gr/, aims to create fiducial relationships with you, with respect to your privacy. We wish your personal data to be and remain confidential. In order to achieve this goal, our website fully complies with the provisions of National and European legislation regarding the protection of personal data, including the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (“General Data Protection Regulation”, hereinafter “GDPR”), as applicable.

This Privacy Policy aims your detailed information on how we collect and process your personal data when using our website, including any data you may provide us through this website or due to its interaction with other websites.

This Privacy Policy should be considered along with any other relevant Privacy Notice or any other Notice about fair processing we provide when collecting and processing your personal data in special cases.

We encourage you to review our Privacy Policy, so that you will be aware of which of your personal data we use and if, how and why we use this personal data.

Who we are

Https://diatrofi4all.gr/ is an interactive website that provides advice about a healthy way of living and promotes the sale of high quality nutrition products. Herbalife Nutrition, as an independent associate of Herbalife, is fully committed to protecting the personal data of the visitors of its website and of its customers.

We aim to inform you in advance of which personal data we collect, the way we use it, the recipients of your data and the rights you are entitled to exercise under applicable data protection laws. For the purposes of data protection legislation regarding the protection of personal data, we inform you that regarding the information we collect during your online shopping through our website or during your roaming on our website, our Company is considered to be the Data Controller of your personal data. We encourage you to read carefully our Privacy Policy and the additional Cookies Policy posted on our website.

Definitions

Some of the terms included in this Privacy Policy are legal terms defined by the regulatory framework. Therefore:

Processing: means any operation or set of operations which is performed on personal data, whether or not by automated means. This indicatively includes collection, storage and organization of the personal data.

Personal Data: means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Consent: means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

Data Controller: means the natural or legal person, public authority, agency or other body which determines the purposes and means of the processing of personal data;

For more information about the definitions please see article 4 of the GDPR (https://eurlex.europa.eu/legal-content/EL/TXT/HTML/?uri=CELEX:32016R0679&from=EL)

Our Principles regarding collecting and processing your personal data

The collection and processing of your personal data by our Website is governed by the following principles, as further specified by the GDPR:

• Lawfulness, fairness and transparency

• Purpose limitation

• Data minimization

• Data accuracy

• Storage limitation

• Integrity and Confidentiality

We do everything possible to implement the above principles at all stages of interaction with you through this website.

Personal Data we collect

We collect and process your personal data solely for the purposes of fulfilling our obligations which arise out of your purchases through our online store.

When you register for an account in our website, we collect personal information such as name, surname, address, telephone numbers, coupon code, email addresses, member’s card info. Any of the data you provide optionally are provided at your discretion in order to facilitate us improving the services we provide you. Furthermore, in case you complete your order without registering on our website, you submit your personal data which is necessary to complete your order such as full delivery address, full billing address and payment details. In case you wish to enter our online store through Facebook, you provide (as mentioned in the separate pop up window) authorization to our website to collect the above necessary information. Additional information required to complete the order will be requested upon completion.

We also automatically collect information about how you use our services, such as the type of webpages you see, or you visit, or the frequency and duration of your activities. In addition, servers, logs, and other technologies automatically collect certain information to help us manage, protect and improve our services. We share personal information with third parties only as described in this policy or if required by applicable law.

Information we collect automatically -Cookies

We use cookies that help us to create a profile for our users and to facilitate your experience on our website. Some of these data will be aggregated or statistic, which means that we will not be able to track them individually. You may remove or reject browser cookies through settings in your browser or device. However, rejecting or removing cookies may affect the availability and functionality of our services. Please find more information about our cookies in our Cookie Policy.

Device information: We may also collect information about your device anytime you visit a website. If you are a registered account holder in our website, we may collect information from or about the computers, phones or other devices from where you connect to our services. We may correlate the information we collect from your different devices, so that we can provide you specialized services depending on the device you use. For instance, we collect:

• Features, such as operating system and hardware release

• Browser type and IP address

• Log files: we collect log information when you use our website. This information includes:

1. The means you used to visit our website

2. details of the device you used, such as web browser type and language
3. access times
4. pages displayed
5. Cookie-related id or other technologies that can uniquely identify your device or browser
6. pages you visited before or after browsing our website.

How we use your personal information

The table below, as defined by law, details what personal data we process, the scope of processing and the legal basis for processing.

Your consent
By navigating to our website or registering as a member of our website or by purchasing any product from our online store or by subscribing to our newsletter, you declare that you accept and consent to the Terms of this Policy, as well as you give us your explicit consent to the collection and processing of your personal information, in accordance with the terms of this Policy.
In case of purchase of products from our online store you provide us with your special consent for the following:

• By sending a request for an order, you agree to the receipt and the processing of the above contact details, a prerequisite for the correct progress of your order.
• You may also choose to receive newsletters for products and / or services that are available through our website after providing us with your consent. You can withdraw this consent at any time by signing up directly with the submission of the corresponding form posted on the website.

Who we share your data with

In order to fulfill the legal obligations arising from our contract for the sale of our products, we share your personal data with the following recipients:

• Stores and branches of Herbalife International of America
• Companies we collaborate with to handle your order, such as payment service providers, warehouses, order pickers and shipping and delivery companies.
• Companies approved by you, such as social networking websites.

How long your personal information will be kept

We will keep your personal information as long as you are logged into our website, as long as you maintain your account active or for as long as necessary to provide our services. We may continue to maintain your personal data even after your account expires/being deleted, respecting the principle of proportionality and only on the basis of the “absolute necessity of knowledge” to comply with legal or regulatory requirements, resolve disputes, or prevent fraud or any other criminal offence.

International Data Transfers

If you have chosen to register as a member on our website, the personal data you may enter may be processed in any of the countries in which Herbalife International of America operates.

Personal information published by users or linked applications on the website or submitted for publication on the website or linked applications may be made available via the Internet worldwide. The website cannot prevent the use or misuse of such information by other persons. In any case, the transfer to third countries will be made in accordance with the provisions of Regulation (EU) 2016/679 and any applicable Greek law and only in full compliance, as defined by law.

Protection of minors
Visitors / users of the website who are minors are not allowed to access the services of the website. If, however, minor users visit our website on their own and this cannot be controlled due to the nature of the services provided, the website is not responsible. In any case, services provided through the website can only be made by using a credit card, debit card or Paypal account, and it is presumed that any purchase made by any minor is actually made with the consent of the supervised parent or guardian or commissioner.Your rights as per the data the website collects

We inform you that you have the right of:  

• Access to your data: you can get information on whether and what data we process, as long as lots of information about this processing,
• Correction of your data in case of any inconsistency,   
• Erasure of your data in specific circumstances,
• >Limitation of the processing of your personal data in specific circumstances,
• Objection to the processing of your personal data for direct marketing purposes, and where the processing is carried out for purposes of public interest or for the pursuit of our legitimate interests or the legitimate interests of third parties

• Transfer of your data to another company,

• Complaint to the Data Protection Authority in the event of an unfortunate violation of your data.

The website will review and respond to your requests within one month of receipt, and this deadline may be extended by a further 2 months if further time is required.

Please note that you can contact with regards to any matter about the security of your data in our website under the following number: 6906228595, and e-mail address: rouniv@yahoo.com.

How to exercise your rights

You may exercise any of the rights described above by contacting our webmaster, Mr. Konstantinos Levassopoulos by email at: info@smartstart.gr or by phone at 2152152320.

You can submit a request, that we will satisfy as soon as possible, without any cost. However, and only in certain cases, we may charge a certain amount, and we will notify you of the possibility of such charges upon receipt of your request for access and we will await the confirmation of your desire to proceed with the satisfaction of your request.

In the case of questions related to the collection and processing of Personal Data by Herbalife International of America, you may contact our webmaster.

Security measures

We have taken all the appropriate security measures to prevent accidental loss of personal information or unauthorized use or access.

Those partners who process your personal data for the legitimate purposes explained above are subject to a confidentiality obligation.

In addition, we have procedures to deal with any data breaches.

Specifically, our website:

• Takes every organizational and technological precaution to prevent the loss, misuse or alteration of users’ personal information.

• Stores all personal information provided by users on secure servers (password protected and firewall).

• All online financial transactions running through our website or linked apps are protected by encryption technology.

The user acknowledges that sending information over the Internet presents inherent security concerns and therefore our website cannot guarantee the security of the data being trafficked through it.

The user is responsible for keeping the password he uses to enter the website or linked applications confidential. You will not be asked to tell us your password (except when the user connects to the website or linked apps).

Our website does not store any credit / debit card information you type when submitting your order. It is noted that we cannot guarantee the security of data, information, etc. we receive via e-mail. Therefore, we recommend you NOT to send us payment information by e-mail.
When you choose to pay with PayPal, your payment is subject to the PayPal Terms and Conditions and to the personal data issues that this company collects, under the relevant agreement you have accepted upon signing up for this service.

Personal Data Protection Authority

We hope that we can resolve any question or concern you may have about the use of your information. If you are unhappy with the way our website processes your personal data, you have the right to contact the competent supervisor.

The competent supervisory authority is the Personal Data Protection Authority, which is located at 1-3, Kifissias Avenue, Athens, Zipcode. 11523, tel. +30 2106475600 and with e-mail address contact@dpa.gr

Changes of this privacy notice:

The website updates this policy from time to time by publishing the new version on the website or linked apps.

The user should check this page regularly to make sure he is in compliance with any changes to the terms of this Policy.

Our website informs users about any change to this Privacy Policy with relevant pop-up windows.