Privacy Policy

«JAM pedals» attaches great importance to the protection of privacy and personal data of visitors/users. It should be noted that personal data are defined by the relevant legislation (General Data Protection Regulation 2016/679/E.U.) only those information relating to an identified or – based on specific characteristics – identifiable natural person (data subject). Information relating to legal persons and groups of persons or statistical information from which it is impossible to trace back to an identified or identifiable natural person does not fall into this category and is excluded from the scope of the relevant legislation.

This Privacy Policy is compatible with the European Regulation on the Protection of Natural Persons about Processing Personal Data (E.U./2016/679) and Greek Legislation (Law 4624/2019).

Data Controller is the company “JAM pedals” based at 71 Ious Street, Athens – Kato Petralona, 11853, VAT Number: EL114496920, business registry number: 009334401000

This policy may need to be amended in the future regarding the processing of personal data. If the modification of these terms is of such nature and extent that it is not covered by the above data processing terms, the Company will publish the new version of the policy. By navigating and using our website, visitors/users acknowledge that they have read, understood, and unconditionally accepted the Privacy Policy.

In the following terms, you will find important information regarding the purpose of using your data, their protection, and your rights as data subjects. For clarification, contact the Contact Person for Personal Data Issues of “JAM pedals” at support@jampedals.com.

Definitions

1. “Personal Data”: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

2. “processing”means any operation or set of operations that are performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, Use, disclosure by transmission, dissemination or otherwise making available; association or combination, restriction, erasure or destruction;

3. “Restriction of Processing”: the marking of stored personal data to limit their processing in the future;

4. “Filing system” means any structured set of personal data accessible according to specific criteria, whether centralized, decentralized, or dispersed on a functional or geographical basis;

5. “Controller”: the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data, where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its appointment may be provided for by Union or Member State,

6. “Processor”: the natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller;

7. ‘Recipient’ means a natural or legal person, public authority, agency, or other body to whom personal data are disclosed, whether a third party or not. However, public authorities that may receive personal data in the context of a specific investigation by Union or Member State law shall not be considered as recipients; such data are processed by those public authorities by applicable data protection rules depending on the purposes of the processing;

8. ‘Third party’ means any natural or legal person, public authority, agency, or body, except the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data;

9. “Consent” of the data subject: any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they, by a statement or by explicit affirmative action, signify agreement to the processing of personal data relating to them;

10. “Personal Data Breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed;

11. “Special Categories Data”: personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data to uniquely identify a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

Personal data we collect

You are not obliged to provide us with your personal information while visiting our website. Small data concerning the type of your device and the time of visit are stored through cookie mechanisms. Part of them may be transmitted to third parties if you have chosen to send them by activating selective cookie mechanisms.

Visitors to our website are also asked to provide us with their data only if they want to order product(s) to send an email to our Company.

The Company collects the following types of information about users:

1. information that the user gives us to execute his order from our online store,

2. information that the user gives us in competitions that take place from time to time,

When filling out any order form from our online store, you will be asked to:

1. country

2. Name

3. Company name

4. address

5. prefecture

6. Geographical District

7. postal code of your area,

8. your email address,

9. your phone number,

10. part of your credit card information (which you submit directly to the https://checkout.stripe.com/ environment)

When the user communicates with the Company, the following information is collected:

1. Name

2. Email

3. Country

4. Free text message

For the implementation of the Education pricing initiative, the following information is collected:

1. Full name

2. Qualification (student or teacher)

3. Scan of the student-educational ID card or other document that certifies their status

4. Name and contact email of the educational organization they are registered or working for

Each order processing requires collecting personal information for delivery or reservation of an order. Your submission of your data means that you consent to these data being processed by our Company for the above reasons. In no other case the Company may share your personal information with others without your prior consent unless required by law. Please note that under certain circumstances permitted or required by law or court order, the collection, Use, and disclosure of your data is done online without your prior consent (for example, in the case of a court order).

Our Company has accounts on the following social media:

• Facebook

• Instagram

• Twitter

• YouTube

• TikTok

• Pinterest

In the above media, our Company processes personal data (such as your username and possibly your photo) to provide information about our activities and services and as an additional way of communication.

With actions such as liking or following our specific page, you declare consent to the relevant processing, i.e., to the processing of the username you use and any photo of you that accompanies it. The social media themselves make the withdrawal of consent with the same but reverse procedure (unlike unfollowing).

In any case, we declare that we do not know and are not responsible for whether these social networks further process personal data, whether they have additional processing purposes, whether they transfer to third countries, whether they use processors and sub-processors, whether they profile and how they carry out the processing of personal data as a whole.

Before providing any consent, we recommend that you consult the privacy policy of these social networks. If you upload your photos to our page in the above media or additional personal data, you are responsible for this processing. Due to the ease of sharing photos and other personal data on social media, we recommend using them to assess the potential risks arising from their disclosure.

Our Company does not and cannot exercise influence and control over the nature and extent of personal data collected and maintained by social media platforms as a condition or result of their Use and bears no responsibility for collecting and processing personal data. For more information on the purposes of collection and further processing and Use of personal data by social media platforms, as well as on the rights and available settings to protect your privacy and personal data, please consult the privacy policy of each social media platform.

Purpose and principles of personal data collection

“JAM pedals” uses the information you provide to us to contact you about:

1. the delivery of the order at your place,

2. to confirm and identify the customer in any necessary case,

3. for new or alternative products offered by “JAM pedals.”

4. special offers of “JAM pedals”

5. receipt of prizes following a competition draw,

6. Continuous improvement and enhancement of our services

You can choose whether or not you want to receive such communications from our Company through the relevant information fields or by sending your request via email to support@jampedals.com email address. The processing is limited to personal data that are necessary and appropriate for fulfilling the purposes and functions. The Company complies with the principles governing the processing of personal data. Personal data (Article 5 G.D.P.R.):

1. They shall be processed lawfully, fairly, and transparently about the data subject (‘lawfulness, fairness and transparency’).

2. They are collected for specified, explicit, and legitimate purposes and are not further processed in a manner incompatible with those purposes. Further processing for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes shall not be considered incompatible with the original purposes under Article 89(1) (‘purpose limitation’).

3. They are adequate, relevant, and limited to what is necessary for the purposes for which they are processed (‘data minimization’).

4. They shall be accurate and, where necessary, updated; all reasonable steps must be taken to immediately erase or rectify inaccurate personal data about the purposes of the processing (“accuracy”).

5. They shall be kept in a form that permits the identification of data subjects only for the period necessary to process the personal data. Personal data may be stored for more extended periods provided that the personal data will only be processed for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes by Article 89(1) and that appropriate technical and organizational measures required by this Regulation to safeguard the rights and freedoms of the data subject are implemented (“storage limitation”).

6. They shall be processed to ensure appropriate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage, using appropriate technical or organizational measures (integrity and confidentiality).

Legal bases for processing

The Company may collect and process personal data of customers and visitors for the purposes mentioned above based on the following legal bases for processing:

Use of personal data we collect

The provision of your data to the Company “JAM pedals” is sometimes mandatory and sometimes optional.

It is usually mandatory in cases where your data is necessary to provide you with our services, fulfill a contract, or comply with legal requirements. If you provide them to us in these cases, it will be possible for us to provide you with our services.

It becomes optional in cases where we request some of your data to improve/upgrade our services, to create additional value from our communication, or to provide you with other services without prejudice to the primary processing purposes.

You can choose whether or not you want to receive advertising/promotional material by following the instructions in the email you receive.

In any case, we will inform you when processing is mandatory and when it is not. In the latter case, we will ask you for your prior explicit consent to the relevant processing operations.

Data Recipients

The Company reserves the right to transmit your personal information to agents and subcontractors to support, promote, and execute your business relationship with us, but always under conditions that fully ensure that your personal information does not undergo any unlawful processing, i.e., other than the purpose of transmission by the above. For example, we reserve the right to transmit your data for the above purposes to the transport companies mentioned in terms of Use for sending to you the products you have purchased from our Online Store to credit card providers to process a payment on your behalf, as a consequence of your purchase from our Online Store, to third parties – natural or legal persons – who may provide promotion and marketing services on our behalf, both of our business and our products or services, or to our third-party partners, who provide us with technical services, such as hosting and technical support services.

Personal Data Retention Period

Your data will be retained and processed by our Company until the completion of your order. The personal data of the registered user/customer will be kept and processed until the registered user/customer requests the deletion of his account or for any processing of his data based on his consent until he declares the withdrawal of his consent to provide the Company’s services. Nevertheless, some necessary personal data relating to their business relations with the Company, as well as the information, consent, and withdrawal of the member’s consent to the processing of their data, will remain as information for the registered user/customer to ensure proof of the legality of the processing of their data by the Company and to safeguard the legal claims of the parties. Once the limitation period for each claim has expired, we will proceed to delete the personal data. In any case, each registered user/customer, as a personal data subject, has the right to submit a question to the Contact Person for Personal Data Issues on how to process and protect their data. Suppose they need to consider that they are satisfied with the answer. In that case, they have the right to complain to the competent supervisory authority (Personal Data Protection Authority) (1-3 Kifissias Avenue, 11523 Ampelokipoi, tel. 210.647.5600, www.dpa.gr).

Rights of Data Subjects

Data subjects have the right to:

1. They are informed about the processing of personal data.

2. They gain access to their data.

3. They request the correction of incorrect, inaccurate, or incomplete personal data.

4. Submit a request to erasure personal data when it is no longer necessary or if the processing is unlawful.

5. Object to processing personal data for reasons related to their particular situation, subject to art.21 par.6 G.D.P.R.

6. They submit a request to restrict the processing of personal data in specific cases.

7. File a complaint with the Personal Data Protection Authority (1-3 Kifissias Avenue, 11523 Ampelokipoi, tel. 210.647.5600, www.dpa.gr) or with the supervisory authority of the E.U. Member State where they reside or work or with the supervisory authority of the place of the alleged infringement.

Communication

If you have any questions or concerns about this Privacy Policy, please get in touch with us at support@jampedals.com.