**Privacy Policy of the Online Store "To Thema"** **
- Introduction** At the bookstores "To Thema", we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information during your visit to our website and use of our services. **
- Data Controller** The business under the name Th. Moraitis and Co. EE, with the trade name "to thema", located at Kyprou 6, Vyronas, Athens, is the data controller of your personal data. For any questions regarding the processing of your data, you can contact us at info@tothema.net or at +302107569400 - +302107609490 - +302107642809. **
- What Data We Collect and Why** We collect and process your personal data only when necessary to provide our services, comply with legal obligations, or serve our legitimate interests. The data we collect includes: - **Contact details:** Name, surname, address, phone, email. - **Order information:** Products you purchased, payment amounts, shipping address. - **Payment data:** Information necessary for processing your transactions. The collection of this data is for: - Processing and delivering your orders. - Communicating with you regarding orders or inquiries. - Complying with legal and tax obligations. **
- Legal Basis for Processing** The processing of your personal data is based on the following legal grounds: - **Contract execution:** For the completion and delivery of your orders. - **Legal obligation:** For compliance with tax and other legal requirements. Legitimate interest: For the improvement of our services and your service.
- Data Transfer to Third Parties Your personal data may be transferred to our third-party partners, such as: Transport companies: For the delivery of your orders. Payment service providers: For the processing of your transactions. Accounting services: For compliance with tax obligations. All our partners are contractually bound to protect your personal data and comply with applicable legislation.
- Data Security We take appropriate technical and organizational measures to protect your personal data from loss, misuse, or unauthorized access. However, it should be noted that no method of transmission over the internet or method of electronic storage is 100% secure. 7. Data Subject Rights According to the General Data Protection Regulation (GDPR), you have the following rights: Right of access: To know what data we process about you and for what purpose. Right to rectification: To request the correction of inaccurate or incomplete data. Right to erasure: To request the deletion of your data under conditions. Right to restriction of processing: To request the restriction of the processing of your data. Right to data portability: To receive your data in a structured, commonly used, and machine-readable format. Right to object: To object to the processing of your data under conditions.
To exercise your rights, you can contact us at info@tothema.net. We will respond to your requests as soon as possible.