Privacy  policy

El Greco Contracts LTD. takes the protection of your personal data very seriously. The purpose of this Privacy Policy is to inform you of the type of personal data that will be collected when you use our website elgrecogallery.com or visit one of our stores, as well as how we will process, use, and protect such data. This Privacy Policy is aligned with the European General Data Protection Regulation (hereinafter “GDPR”) and other applicable data protection regulations. The terminology in this Privacy Policy is based on GDPR definitions.

Data Protection Statement – El Greco Contracts LTD

Scope

Use of the www.elgrecogallery.com website and visiting any of our showrooms is subject to the Privacy Policy set out below. El Greco Contracts LTD, 91 Lemesou Avenue, 2121, Nicosia, Cyprus (hereinafter “The Company”) is considered as the data controller. Protecting your personal data is important to us, in particular, with regard to respecting your personal rights in connection with the processing and use of such data. The term “personal data” refers to information regarding the personal and/or factual circumstances of an identified or identifiable natural person. This includes but is not limited to the person’s name and surname, email address, telephone number, postal address, as well as user data such as the IP address. We collect, process, and use your personal data in compliance with the relevant laws.

Automated data collection and processing by your browser

As with every website, our server automatically collects the following information and temporarily saves it in server log files, which are transmitted by your browser – unless you have deactivated such function: the IP address of the computer transmitting the request, the client’s file request, the http response code, the volume of data transmitted, the website from which you access our website (referrer URL), the date and time of the server request, the type, version and language of your browser, the operating system on the computer transmitting the request. Our server log files are not evaluated based on personal use. At no time can the provider allocate this data to specific persons. This data is not combined with other data sources.

Collection and processing of data provided voluntarily

When you provide us with personal data such as but not limited to your name, phone number, email address and residency address by email, in our online shop or via the contact form available in our stores, this is voluntary. This data is used to fulfil our contractual relationship, to process your inquiries and orders. Your data will be used for our own advertising by email as well. We delete the data that arises in this context after its storage is no longer required, or we limit processing if there are statutory retention requirements. Legal basis for processing is performance of the contract and our legitimate interest. When you register in our online shop and create a customer profile, we save the customer account information you provided (in particular, your name, billing and delivery addresses, telephone number, payment information and email address) so that you do not have to re-enter your data every time you place an order. You can update or delete your profile at any time. Legal basis for processing is performance of the contract.

Newsletter

If you would like to subscribe to our newsletter, please provide your valid email address and confirm that you are in agreement with the following (therefore, legal basis for such processing is your consent): “I agree that El Greco Contracts LTD. may process and use the data I have entered to send me an email newsletter to inform me about furniture and home accessories, as well as ongoing company promotions and events. I can revoke this agreement at any time by sending written notification to 91 Lemesou Avenue, 2121 Nicosia, Cyprus or to privacy@elgrecogallery.com. In the event that I revoke consent, the data I have entered will be deleted and will no longer be used for sending the newsletter.”

Social platforms

On the basis of your consent in accordance with the Newsletter section, we work together with Mailchimp for the purpose of sending newsletters and promotions to your email address. Mailchimp will receive your email address with your consent. You can find more information on the processing of your personal information in the privacy policy of Mailchimp. Legal basis for such processing is consent. Mailchimp Global Privacy Statement: https://www.intuit.com/privacy/statement/

Transmission to third parties

If you have given us personal data, this will not be passed on to third parties. Any transfer that takes place will only be with your consent, as part of processing your inquiries, your orders and the use of our services to commissioned subcontractors, who only receive the necessary data for the execution of this order and use it for a specific purpose, as part of order data processing in accordance with the statutory provisions to service providers bound by instructions, or as part of the fulfilment of legal obligations to entities entitled to receive information.

Payment

To process payments made by credit card, EPS (Electronic Payment Standard), we will process the following information: your name, your billing address, your email address, your customer ID.

Customer’s Account

We store your personal data as an individual customer profile in our system. You provide us with such personal data by making a purchase order via our online shop, via our sales staff. Processing of such data is based on a legitimate interest in accordance to remain in contact with you and to provide you with relevant offers and content based on your previous purchases and interests.

Social Networks

We would like to inform you about the collection, processing and use of your data via El Greco’s Facebook page (https://www.facebook.com/elgrecogallery) and Instagram profile (https://www.instagram.com/elgrecogallery/). Facebook and Instagram are provided by Meta Platforms Ireland Ltd. The scope of this information depends on your personal settings. If you contact us voluntarily via a Fan Page, personal data can be processed by us for purposes of interaction and communication. Facebook may process data outside the EU. We use anonymized “insights” statistics to improve our content. Legal basis for processing is legitimate interest.

Data protection information for online meetings, conference calls and webinars via Microsoft Teams

We use Microsoft Teams to hold telephone conferences, online meetings, video conferences and/or webinars. El Greco Contracts LTD is responsible for data processing related to these meetings. Microsoft acts as a processor. When you join an online meeting, the following personal data may be processed: IP address, user information (display name, contact details, email), meeting metadata, text, audio, and video data. We only record meetings with prior notice and consent. Legal basis for processing is execution of the contract or legitimate interest in effective communication.

Recipients/disclosure of data

If you have given us personal data, this will in principle not be passed on to third parties except with your consent, as part of legitimate interest for communication, as part of order data processing to Microsoft, or to fulfill legal obligations.

Data processing outside the European Union

There is no data processing outside the European Union, as we have limited our storage location to EU data centers.

Right to object

You have the right to object to the processing of personal data relating to you for reasons arising from your particular situation.

Deletion of data

We generally delete personal data if there is no requirement for further storage. In the case of statutory retention requirements, deletion occurs after the retention obligation has expired (6 years under Cyprus law).

Your rights

You may request information about your stored data, its origin, recipients, and purpose of storage at any time free of charge. You have the right to correct, block, and delete your data as per the law, revoke consent at any time, object to processing, and request data portability. You can also lodge a complaint with the supervisory authority. Please send your requests to 91 Lemesou Avenue, 2121 Nicosia, Cyprus or email limassol@elgrecogallery.com.