Privacy Policy

PRIVACY / PERSONAL DATA PROTECTION POLICY

Introduction

Kids Cooking Club A.E., with its registered office in the municipality of Piraeus at 73–75 Irakleidon Street, Tax Identification Number: ......, Tax Office: .. Piraeus, and a branch in Glyfada at 58 Zerva Street & Irakleous, telephone: 2130030644, email: info@kidscookingclub.gr, website: www.kidscookingclub.gr, informs you, under Regulation (EU) 2016/679 and the relevant provisions of Greek personal data protection legislation, that, in its capacity as data controller, it processes your personal data and that of your children. This data is collected through your participation in one of our programs or promotional activities, your registration on our Website and our relationship with you generally.

Data Protection Officer (DPO)

For any matter concerning the processing of personal data, please contact the Data Protection Officer (DPO) directly: email: info@kidscookingclub.gr, telephone: 2130030644.

WHAT PERSONAL DATA DOES KIDS COOKING CLUB COLLECT?

Personal data is information that can be used to identify or contact an individual, as well as other information relating to that individual. We take care to collect only the data that is strictly necessary, appropriate and clearly relevant to its intended purpose. We collect the following personal data:

(a) Identification data relating to you and your child: full name, father’s name, age, gender and Tax Identification Number. We collect this data directly from you and may verify it by asking to see your identity card or another appropriate document.
(b) Your contact details: postal and email address and contact telephone number (landline or mobile).
(c) Your child’s health data: any food or other allergy or health condition. We collect this data directly from you when you complete your application.
(d) Your social media username (optional).
(e) Data provided when creating a user account on the Website (mandatory: email address and login password).
(f) Photographs/videos taken during our programs, on or off our premises, subject to parental consent to photographs/videos being taken of their child.
(g) Image data from video recording systems on our premises, where the legally required notices are displayed.

Kids Cooking Club A.E. will not sell, otherwise transfer or disclose its customers’ personal data to unrelated third parties without the consent of the data subject (parent), except where required by law and only to the competent authorities/bodies, or where data is transferred to and processed by partner companies for operational and IT support purposes (for example an accounting or law office or company), for statistical or historical purposes, and by the partner business Kallitechnoupoli for operational purposes and to improve our educational programs.

Following the relevant parental consent, Kids Cooking Club may publish, in any manner it considers appropriate, and/or use for advertising purposes in any medium, photographs and videos, as well as any information relating to its activities, without notice and without paying compensation to any persons who may have participated.

Why do we collect your data and for what purposes do we process it?

Kids Cooking Club A.E. collects and processes your personal data:

A. To perform our service agreement with you. This processing serves purposes such as identifying you and communicating with you during and after our contractual relationship. We may therefore need to contact you by email or telephone for administrative reasons, for example to handle enquiries you submit and arrange details when organising events on your behalf.
B. To share information about our services, products and events, and for other promotional purposes (competitions, promotional activities, etc.). With your consent, we will use your personal data to inform you by email, telephone and/or social media about relevant products and services, including offers, discounts, etc. You may withdraw this consent at any time.
C. To operate and improve the services and products we provide and carry out customer satisfaction research. We do this on the basis of our legitimate business interests.
D. To protect you, namely parents and children, as well as employees and their property, and Kids Cooking Club’s premises and property generally. We therefore use closed-circuit television (CCTV) and security cameras to protect the safety of individuals (parents, children, partners and employees) and property (materials and premises). We do this on the basis of our legitimate business interests.
E. To comply with obligations imposed by law, for example when invoicing our services or handling your complaints or reports.

What is the legal basis for Kids Cooking Club to process your data?

Data protection legislation sets out various grounds on which a company may collect and process your personal data, including the terms of our contractual relationship.
Kids Cooking Club’s legal obligations (for example under tax legislation), and your consent where required, such as when you choose to receive newsletters.
Kids Cooking Club’s legitimate interests. In certain cases, we collect your data in a manner reasonably expected as part of our business operations and which does not materially affect your rights, freedoms or interests (for example to inform the insurance company that insures registered school members).

With whom is your data shared?

We reiterate that Kids Cooking Club will not sell, otherwise transfer or disclose the personal data of its customers, parents and children, to unrelated third parties without the data subject’s consent, except where required by law and only to the competent authorities/bodies.

Your data is accessible only to the strictly necessary Kids Cooking Club personnel, who are bound by confidentiality obligations, and to our partner businesses or third-party service providers, who process your data as data processors on our behalf and in accordance with our instructions.

Data may also be shared with:

Third-party service providers who process personal data on our behalf (insurance company, legal and accounting service providers, promotional activity management, Google and Facebook).
Third-party bodies or public authorities, to the extent necessary to: (i) comply with a government request, court decision or applicable law; (ii) prevent unlawful use of the Website; (iii) protect us against third-party claims; and (iv) help prevent or investigate criminal offences.

Personal Data Retention / Storage Period

If you enter into an agreement with Kids Cooking Club, your personal data will be retained throughout its duration. It is also retained for as long as you have an account at kidscookingclub.gr. When an agreement ends, Kids Cooking Club may retain your personal data until the general statutory limitation period for claims expires, namely for a maximum of twenty (20) years from its termination by any means. If, at the end of the twenty (20) years, legal proceedings involving Kids Cooking Club or any associated company are ongoing and concern you directly or indirectly, the retention period will be extended until an irrevocable court decision is issued. Where the applicable legal framework provides for a shorter or longer retention period, the above period will be reduced or increased as required by the relevant provisions. A form bearing your signature and containing your personal data may be retained in electronic/digital form.

What are your rights regarding your personal data?

If you wish to withdraw your consent to receiving our newsletter, you can select the link “To unsubscribe from the newsletter mailing list, click here” at the bottom of each newsletter.

In all cases, you have the following rights regarding your personal data:

(a) Right of access. To know the categories of personal data we retain and process, their source, the purposes of processing, the categories of recipients, the retention period and your relevant rights.

(b) Right to rectification. To request correction and/or completion, amendment or updating of your personal data so that it is complete and accurate, providing any necessary document demonstrating the need for correction or completion.

(c) Right to restriction. To object to any further processing of your retained personal data: (a) when you contest its accuracy, pending verification; (b) when you oppose erasure and request restriction of use instead; (c) when the data is no longer needed for processing purposes but is necessary for you to establish, exercise or defend legal claims; and (d) when you object to processing, pending verification of whether our legitimate grounds override the grounds for your objection.

To request restriction of processing while your objections to processing are being examined.

(d) Right to object. To object at any time to processing of your personal data where, as described above, it is necessary for the legitimate interests we pursue as data controller.

(e) Right to be forgotten. To request erasure of your personal data from our records. In all other cases (for example where an agreement exists, processing is required by law or there is a public interest), this right is subject to specific restrictions or does not apply, depending on the circumstances.

(f) Right to data portability. To request transfer of your data to another data controller or receive it in a readable format free of charge. This right applies to data you have provided to us where processing is carried out by automated means on the basis of your consent or to perform a relevant agreement.

Please note that:

(i) Your rights under (c), (d) and (e) may not be fulfilled, in part or in full, where other compelling and lawful grounds override your right, or where they concern data necessary to establish, exercise or defend legal rights or fulfil Kids Cooking Club’s obligations, such as entering into and/or continuing our agreement.

(ii) Exercising the above rights takes effect for the future and does not affect data processing already carried out.

(g) You may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr, telephone: +30 210 6475600, fax: +30 210 6475628, email: contact@dpa.gr) if you believe your rights are infringed in any way.

To exercise any of the above rights, or for any matter concerning the processing of your personal data, you may contact the Data Protection Officer (DPO) in writing: address: 58 Zerva Street & Irakleous, Glyfada 16675, email: info@kidscookingclub.gr, telephone: 2130030644.

To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you submit under this Privacy Policy.

Kids Cooking Club will make every effort to respond to your request as soon as possible and, in any event, within thirty (30) days of submission. This period may be extended by a further thirty (30) days if we consider it necessary at our sole discretion, taking into account the complexity and number of requests. Kids Cooking Club will inform you of any extension within thirty (30) days. This service is provided free of charge.

However, where a data subject’s requests are manifestly unfounded, excessive or repetitive, Kids Cooking Club may either charge a reasonable fee, informing the subject accordingly, or refuse to respond to their request(s).

Personal Data Security

Recognising the importance of the security of your personal data, Kids Cooking Club implements appropriate organisational and technical measures to secure and protect your data against accidental or unlawful destruction, accidental loss, alteration, unauthorised disclosure or access, and any other form of unlawful processing.

However, the nature and operation of the internet do not allow us to guarantee that unauthorised third parties will never be able to breach the technical and organisational measures in place, gain access to personal data and potentially use it for unauthorised and/or unlawful purposes.

Validity and Interpretation of Terms

The above terms apply and are interpreted in accordance with the applicable national and European legislative and regulatory framework for personal data protection. Kids Cooking Club reserves the right to change its personal data protection terms in accordance with the relevant legal framework in force.

These personal data protection terms may therefore be revised and updated at any time without notice and will always be published on our Website, www.kidscookingclub.gr. We encourage you to read this Policy regularly to understand how your data is protected, as continued use of the Website and Kids Cooking Club’s services constitutes acceptance of any amendments to this Policy.

This Privacy Policy was last amended on 30 August 2018.