Privacy Policy

Personal Data Processing Clause | Transactions with Customers

This clause provides a framework of understanding of the personal data collected by the company under the name “BLUEVILLAS” (hereinafter referred to as the “Controller”), as required by the General Data Protection Regulation of the European Union (GDPR) which entered into force on 25.05.2018.

Personal data collected from our customers will be checked and processed by the Processor for the purposes of concluding transactions with our customers and providing our services to them. In addition, personal data may be processed with affiliated and associated companies of the Processor and only under the instructions and directions of the latter.

This clause applies to any data subject that trades and receives the services and goods of any kind provided to the market by our company. You have the possibility, at any time, to contact us regarding your privacy policy and exercise your rights The processing shall be carried out based on the legal provisions and requirements of the Regulation and in particular the granting of consent where required and the necessary assurance that compliance arises with a legal or contractual requirement or condition for concluding a contract such as in this case any transactions with our customers. The processing of the data of the subjects is also considered to be essential in the legitimate interest of the Controller.

The legitimate interest of the Controller provides the possibility of processing the clients’ personal data for specific purposes, such as:

  1. Improving the provision of services for the benefit of our customers.
  2. Upgrading of network security and information systems.
  3. Promotion of commercial advertising.
  4. Communication via e-mail.
  5. The prevention of fraud and any other illegal activity.

The personal data of our company’ s clients are collected in accordance with the legal procedures and processed for as long as necessary. We maintain administrative, technical and physical safeguards aimed at protecting data against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. For these purposes we apply the following measures:

  • Encryption of data during transfer.
  • Strong user authentication.
  • Enhanced network infrastructure.
  • Network monitoring applications. 

We may share our customers’ personal data with suppliers who perform services on our behalf, based on our instructions. The latter may not use or disclose the information unless it is necessary to provide services on our behalf or to comply with the legal requirements of the Regulation.

As data subjects you have the following rights in accordance with Articles 15 - 22 of the General Data Regulation (GDPR).

  • Right of access: You can see the data concerning you as well as whether the processing is carried out according to the Regulation.
  • Right of correction: You may request the correction of inaccurate or incomplete information concerning you.
  • Right of deletion: You can ask the Processor to delete information that concerns you and is not necessary to achieve the aims of the operation.
  • Right to restricted processing: Upon your request the processing of your data can be restricted to what is strictly necessary.
  • Right to data portability: You can receive the data held by the Controller in machine readable format (usb stick) and request their transfer to another Controller.
  • Right of objection: You can at any time object to the processing of your data without a specific statement of reasons.
  • Right to human intervention: You can request the processing of your data to be based on the human factor and not automated by technological means for the purpose of compiling profiles, etc.
  • Right to file a complaint to the supervisory authority: You can file a complaint to the Personal Data Protection Authority (APDP) in case your data is processed in violation of the provisions of the Regulation.
  • Right to revoke the consent: You can revoke your consent at any time (according to Article 7 of the GPA) which enables your data to be processed.

In the following cases, our company is obliged by the Regulation to disclose personal data of customers: 1) if requested in accordance with a legal provision or legal procedure, 2) law enforcement authorities or other government officials on the basis of a legitimate request for disclosure; and 3) when the disclosure is necessary or appropriate to prevent physical damage or financial loss or in connection with an investigation into suspected or actual fraudulent or illegal activity.

You can contact us for any clarification regarding the above-mentioned issues as well as regarding the exercise of your rights on the phone 0030 210 4836 802 Or via email info@bluevillascollection.com.