1. General
   
   1.1. This Personal Data Protection Policy (hereinafter referred to as the “Data Policy”) describes the method of collecting personal data by the website www.sofacompany.gr, the use of this data by Sofa Company, and the options you have as users regarding the way Sofa Company uses this data. This Data Policy exclusively refers to your personal data, which you provide to Sofa Company during your browsing of this website, so you are aware of the purpose of its processing by Sofa Company, the category of recipients, and the procedures you can follow to exercise your legal rights.
   
   1.2. Personal Data refers to any information relating to an identified or identifiable natural person. Such data, as defined by law and relevant provisions, include, but are not limited to, name, address, date of birth, gender, mobile phone number, email address, and usage data such as username, password, and IP address.
   
   1.3. The processing of personal data is carried out in accordance with: (a) the provisions of the General Data Protection Regulation (GDPR 2016/679), (b) the provisions of applicable Greek legislation for the protection of personal data, (c) the provisions of personal data protection and privacy in the field of electronic communications (Law 3471/2006, as amended), and (d) the decisions of the Personal Data Protection Authority (DPA). Any future changes to the above regulatory framework will be subject to this Policy.
   
   1.4. For any clarification, questions, or legal requests regarding your privacy and the processing of your personal data, you may contact us at any time via email at info@sofacompany.gr.
   
   
2. Collection and Processing of Personal Data
   
   2.1. Sofa Company has designed the website www.sofacompany.gr in such a way that users can visit it without needing to disclose their identity unless they choose to do so. Visitors to the website are required to provide their personal data only when requesting updates on products, prices, and offers, as well as when registering to receive newsletters from Sofa Company and promotional materials that are periodically sent to those who have subscribed to the company’s newsletter, in order to be informed about innovations, new arrivals, exclusive products, and offers.
   
   2.2. For your simple browsing on the website www.sofacompany.gr, Sofa Company does not request any personal information. However, while you browse the website www.sofacompany.gr, Sofa Company collects and processes browsing data through “Cookies,” which exclusively relate to your purchasing habits.
   
   2.3. Sofa Company ensures that it only collects and processes the strictly necessary data, which is appropriate and clear for the intended purpose. Your personal data will never be sold, rented, distributed, or disclosed in any way.
   
   2.4. When you visit/browse the website www.sofacompany.gr, Sofa Company collects and processes the necessary Personal Data, which, according to the law and the Terms of Use, is deemed necessary to respond to your queries related to products, prices, and offers. Among these, examples include Name and Surname, Email Address, Contact Phone (landline and mobile), Address (street, city, postal code, country).
   
   
3. Purpose of Collection and Processing of Personal Data
   
   3.1. The main purpose of processing the Personal Data you provide on the website www.sofacompany.gr is:
   (a) to communicate with you and provide answers to your inquiries related to products, prices, and offers.
   (b) to send newsletters and promotional communications periodically to those who have subscribed to the company’s newsletter, in order to keep you informed about innovations, new arrivals, exclusive products, and offers. Each newsletter includes an option to unsubscribe from further communications by clicking the “Unsubscribe” link.
   For communication via SMS and OTT messaging services (such as Viber, WhatsApp, etc.), Sofa Company uses the mobile phone numbers that have been lawfully processed. For more information regarding the processing of your data by these services and applications, please refer to the respective terms and privacy policies applied by the OTT service providers and mobile operators.
   (c) for statistical research and analysis purposes using aggregate data, aimed at understanding how users interact with and use the website www.sofacompany.gr, thereby improving our products and services.
   
   3.2. We may need to use and retain your Personal Data for legal and compliance purposes, even without your consent, in cases where we are required to fulfill our obligations under the law. This includes situations where relevant data is requested by competent tax, banking, supervisory, or judicial authorities as part of their investigations. Additionally, it may be necessary to use your Personal Data for the prevention, detection, or investigation of a crime, prevention of loss, fraud, or any other misuse of our services and information systems. Furthermore, we may use your Personal Data for internal and external auditing requirements, information security purposes, or to protect or exercise our rights, privacy, security, or property, as well as the rights of others.
   
   
4. Retention Period of Personal Data
   
   Sofa Company retains and stores your Personal Data based on the following criteria:
   (a) When processing is required by provisions of applicable laws and regulations, your Personal Data will be stored for as long as the relevant provisions require, in order to comply with our legal obligations (such as tax and commercial law, and for warranty purposes). At the end of this retention period, your data will be fully deleted or anonymized (e.g., by aggregating it with other data), so it can be used in an unidentifiable manner for statistical analysis and business planning.
   (b) When processing is carried out based on a contract, your Personal Data will be stored for as long as necessary for the execution of the contract and for establishing, exercising, or supporting legal claims based on the contract.
   (c) For the purpose of promoting products and services, your Personal Data will be kept until you withdraw your consent. You may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal.
   To withdraw your consent, you can send an email to: info@sofacompany.gr.
   
5. Recipients of Personal Data and Purpose of Transfer
   
   5.1. Each user-customer using the website www.sofacompany.gr is informed that their Personal Data concerning inquiries related to purchases, products, and services of Sofa Company will be processed for the purpose of serving them, both by the responsible employees of Sofa Company and by third-party recipients and/or processors acting on behalf of Sofa Company.
   
   5.2. Sofa Company reserves the right to transfer your Personal Data for the aforementioned purposes:
   (a) To the company providing CRM services and processing data of registered users-customers of the website www.sofacompany.gr.
   (b) To external partners providing internet and e-commerce services, such as, but not limited to, hosting and technical support services.
   All partners and representatives have been evaluated and selected by Sofa Company based on their proven reliability and competence, and all comply with data protection regulations.
   Sofa Company requires its employees, website maintainers, and third-party partners to take all necessary technical and organizational measures and implement processes for managing and processing personal data in a lawful manner, protecting them in accordance with the GDPR and other applicable regulations.
   (c) To other third-party entities as required for the following purposes: (i) compliance with state requests, judicial decisions, or applicable laws, (ii) preventing illegal uses of the website www.sofacompany.gr or violations of its Terms of Use, (iii) protecting Sofa Company from third-party claims, and (iv) contributing to the prevention or investigation of fraud cases.
   (d) Sofa Company may also transfer your Personal Data in case of a sale or transfer of all or part of its business activities or assets (e.g., in cases of restructuring, transfer, division of a branch, dissolution, or liquidation).
   
   5.3. Sofa Company will not sell, transfer, or disclose personal data it holds about you to third parties—other than the above-mentioned recipients—without your consent, except as required by legal obligations from the competent judicial, police, and other administrative authorities, upon a lawful request, and in accordance with applicable legal provisions.
   
   
6. Processing of Children’s Personal Data
   The Company will not collect or process Personal Data of minors under the age of 16 unless parental consent has been obtained, in accordance with applicable legislation. If we become aware that personal data of a child has been collected by mistake, we will delete such data without undue delay.
   
   
7. Your Legal Rights
   
   7.1. Every visitor or registered user, as the data subject, has the right to exercise their legal rights at any time, as provided in the General Data Protection Regulation (GDPR) 679/2016 of the EU and national legislation, and specifically:
   (a) The right to be informed and access the data processed by Sofa Company,
   (b) The right to restrict the processing of their data,
   (c) The right to rectify or delete part or all (right to be forgotten) of their personal data,
   (d) The right to object, i.e., to raise objections to the processing of their personal data, and
   (e) The right to data portability.
   
   7.2. Sofa Company will attempt to fulfill your request within 30 days. However, the deadline may be extended for specific reasons related to the specific legal right or the complexity of your request. To exercise your legal rights, please contact us in writing via email at info@sofacompany.gr.
   
   7.3. It is clarified that in order for the exercise of the above rights to be valid, identification of the requestor may be required to ensure that the personal data for which a request is made truly belongs to the individual requesting the specific action.
   
   7.4. If we violate the applicable law on the protection of your personal data, you have the right to file a complaint with the Hellenic Data Protection Authority (Postal Address: Kifisias 1-3, P.O. Box 115 23, Athens, Tel. 210.6475600, Email: contact@dpa.gr), if you believe that the processing of your personal data violates the applicable national and regulatory legal framework for personal data protection.
   
   
8. Periodic Changes
   Sofa Company regularly expands, updates, and improves the website www.sofacompany.gr, and may also update and modify this Policy at any time, without notice to you, except by posting the updated Policy on the website www.sofacompany.gr. We recommend that you read this policy periodically to stay informed of any changes to its content and to stay up-to-date with the current and applicable Personal Data Protection Policy.
   
   
9. Cookies Policy
   
   9.1. Sofa Company follows a strict privacy policy to protect the privacy of visitors to the website www.sofacompany.gr. Through this policy, we provide more information about how we use cookies and other automated means to collect specific information about visitors to our website, using any browser and device.
   
   9.2. Cookies are small files (text files) stored on your computer’s hard drive or mobile device or any other internet-connected device you use, through the use of any browser when you visit a website. This allows websites, like www.sofacompany.gr, to function smoothly and without technical anomalies, to collect multiple user preferences, recognize frequent users, facilitate their access, and improve their online experience by saving their preferences as they visit a specific website. Cookies do not harm the users’ devices or the files stored on them.
   
   9.3. The website www.sofacompany.gr uses cookies to provide specialized services and content that caters to the customer’s interests. Cookies do not contain personally identifiable information, and we may use them, for example
   (a) to inform us if you have visited our website before,
   (b) if you are a new visitor,
   (c) to help us identify features of our website that may interest you more,
   (d) to process orders and allow us to present advertising content relevant to your interests and needs.
   
   9.4. Most browsers automatically accept cookies, but customers usually have the option to set their browser to prevent them. Even without cookies, the customer can still use most of the services on the website www.sofacompany.gr.
   
   9.5. The cookies we use are categorized as:
   (a) strictly necessary for the operation of our website,
   (b) performance cookies, and
   (c) analysis and advertising cookies.
   
   Absolutely Necessary Cookies
   Absolutely necessary cookies are essential for the proper functioning of the website www.sofacompany.gr, as they allow you to visit the site securely and use its features, such as access to secure areas and displaying similar products. Without these cookies, the website www.sofacompany.gr cannot function properly and securely.
   
   Performance and Analytics Cookies
   These cookies collect information about how visitors and registered users-customers use the website www.sofacompany.gr, which pages they visit most frequently, and whether they encounter error messages. They are used exclusively to improve the performance of our website and allow us to collect information about your usage, including the content you select while browsing our site, in order to measure the effectiveness and interaction with our website and improve your browsing experience. These cookies may be provided to us by third-party analytics tools but are only used for purposes related to our website.
   Also, if you accept these cookies, we may inform you through automated communication via email, web push (notifications appearing on the browser), and SMS, depending on your preferences for commercial communication.
   
   Targeting and Advertising Cookies
   These cookies are used to deliver content that is more relevant to you and your interests. They may be used for sending targeted advertising and offers, limiting the display of specific ads, or measuring the effectiveness of an advertising campaign. They can also be used to track which promotional channels are more effective through other websites you visit and allow us to reward third-party websites that referred you to our site.
   
   Changes to This Cookies Policy
   Any changes to this cookies policy will take effect as soon as the revised cookies policy is made available on our website.
   
   
10. Transaction Security
    
    10.1. Sofa Company is committed to ensuring the protection and integrity of the data collected regarding users of its website. It has adopted procedures to safeguard the personal data provided by users. These procedures protect users’ data from unauthorized access or disclosure, loss or misuse, alteration, or destruction. They also help ensure that this data is accurate and used correctly.
    
    10.2. Sofa Company applies the appropriate level of security and has implemented reasonable physical, electronic, and administrative procedures to ensure the protection of data collected from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data that is transmitted, stored, or otherwise processed. Access to users’ personal data on sofacompany.gr is granted only to authorized personnel or direct partners of Sofa Company, to the extent necessary to provide services to you. In the event of a breach of files and information containing personal data, Sofa Company will comply with the applicable laws regarding the notification of the breach.