PRIVACY POLICY
Loomee P.C.
Loomee P.C. respects the Personal Data of users of this Website and is committed to protecting such data in accordance with the General Data Protection Regulation (EU) 2016/679 (the “GDPR”) and applicable Greek law.
As the Data Controller, Loomee P.C. collects and processes Personal Data solely for lawful, specified, and legitimate purposes, including the provision of services, communication with users, and compliance with legal obligations, while consistently safeguarding the security, confidentiality, and protection of such data.
This Privacy Policy describes the collection and processing of users’ Personal Data when they visit the Website or use the services provided by Loomee P.C.
Visitors to the Website and users of the services are requested to read carefully the terms and conditions governing the protection of their Personal Data outlined in this Privacy Policy.
1. DATA CONTROLLER
The Data Controller responsible for users’ Personal Data is:
Loomee P.C.
A Greek Private Company (P.C.), registered with the General Commercial Registry (G.E.MI.) under registration number 192995803000, with Tax Identification Number (TIN) 803247692, and registered office at 1 Ermou Street, Metamorfosi, North Athens, 14452, Greece.
Email: hello@theloomee.com
2. SCOPE OF PROCESSING
In connection with the operation of its Website and the provision of its services generally, Loomee P.C. collects and processes users’ Personal Data, particularly when a user places an order or rents products, creates a user account, contacts Loomee P.C. through the contact form, or submits comments or reviews.
The Personal Data that may be collected includes, by way of example, the user’s full name, email address, telephone number, billing and delivery addresses, order or rental history, and technical information such as the user’s Internet Protocol (IP) address and data concerning the user’s browser and device.
The above Personal Data is processed lawfully, fairly, and transparently in accordance with the GDPR and applicable national legislation.
3. PURPOSES OF PROCESSING
Personal Data provided to Loomee P.C. may be processed by electronic, digital, or paper-based means solely for the following purposes, in accordance with the principle of data minimization:
- to provide the services of Loomee P.C. and manage its contractual relationship with users, including the completion of orders, bookings, or rentals;
- to comply with legal, tax, accounting, and regulatory obligations arising under applicable law;
- to respond to requests for communication, information, or support submitted by email or through other available communication channels;
- to send informational and promotional material concerning the services, offers, or news of Loomee P.C., and to conduct customer satisfaction surveys, provided that the necessary consent has been obtained; and
- to ensure the proper operation of the Website, the security of transactions, and the protection of users and the systems of Loomee P.C.
Personal Data is always processed lawfully, transparently, and securely, solely for specified and legitimate purposes. Loomee P.C. takes appropriate measures to ensure that Personal Data remains accurate, up to date, and protected.
4. LEGAL BASES FOR PROCESSING
The collection and processing of users’ Personal Data is carried out in accordance with the GDPR and is based on the following legal grounds:
4.1 Performance of a Contract or Pre-Contractual Measures
Article 6(1)(b) GDPR: Processing is necessary for the performance of a contract or to take steps at the request of the Data Subject before entering into a contract. This legal basis applies primarily to the conclusion, performance, and completion of agreements for the rental of baby and children’s equipment and to the provision of related services by Loomee P.C., including the creation of a user account, the management of orders or rentals, invoicing, product delivery and collection, and customer service. The user’s consent is not required for these purposes.
4.2 Compliance with Legal Obligations
Article 6(1)(c) GDPR: Processing is necessary for Loomee P.C. to comply with legal obligations arising under applicable law, including tax, accounting, and regulatory obligations.
4.3 Legitimate Interests
Article 6(1)(f) GDPR: Processing is necessary for the legitimate interests pursued by Loomee P.C., including ensuring the security of information systems, preventing fraud, protecting the Website, and maintaining the proper operation of its services, provided that such interests are not overridden by the rights and freedoms of users.
4.4 Consent
Articles 6(1)(a) and 7 GDPR: Where processing is not necessary for the performance of a contract or compliance with a legal obligation, the user’s prior express consent is required. This applies, for example, to the sending of newsletters, promotional communications, or other secondary processing purposes. Consent is voluntary and may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal or the user’s relationship with Loomee P.C.
5. DATA RETENTION
Personal Data is retained for the shortest possible period and only for as long as is necessary for the applicable processing purpose, subject, where relevant, to the user not having withdrawn consent.
Order or rental data, including a user’s name, address, telephone number, and related information, is retained for the duration of the rental and thereafter for as long as required for tax purposes, possible legal claims, and other applicable legal obligations. User account data is retained for as long as the account remains active.
Personal Data is deleted, destroyed, or anonymized when it is no longer necessary for the fulfillment of the purposes described above, unless its continued retention is required by applicable law.
6. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
Loomee P.C. does not disclose users’ Personal Data to third parties for advertising or marketing purposes unless the user has provided prior express consent.
In connection with the performance of rental services, the Personal Data that is strictly necessary may be disclosed to third-party service providers acting as Data Processors on behalf of Loomee P.C., including, by way of example, payment service providers, courier and delivery companies, spam detection services, hosting providers, and providers of technical support for the Website. Such service providers process Personal Data solely on behalf of Loomee P.C. and in accordance with its instructions.
Loomee P.C. may also disclose Personal Data where required by law or by a competent public authority, where necessary for the establishment, exercise, or defense of legal claims, or for the protection of the lawful rights and security of Loomee P.C., its users, or third parties.
Loomee P.C. may use aggregated and anonymized data for statistical and operational purposes or to improve its services, provided that such data cannot be used to identify users.
7. RIGHTS OF DATA SUBJECTS
Users of the Website have all rights provided under applicable Personal Data protection legislation, including the GDPR. Subject to the conditions and limitations established by law, users have the following rights:
7.1 Right of Access and Rectification
To access their Personal Data and obtain information concerning its processing, and to request the correction of inaccurate or incomplete Personal Data.
7.2 Right to Object
To object to the processing of their Personal Data, particularly where processing is carried out for direct marketing or profiling purposes, or where processing is based on the legitimate interests of Loomee P.C., unless compelling legitimate grounds exist that override the user’s rights.
7.3 Automated Decision-Making
To object to decisions based solely on automated processing, including profiling, under the conditions established by applicable law.
7.4 Right to Erasure
To request the deletion of their Personal Data (the “right to be forgotten”) where the data is no longer necessary for the purposes for which it was collected or where consent is withdrawn and no other legal basis for processing exists.
7.5 Right to Restriction of Processing
To request restriction of processing, including where Personal Data is retained solely for compliance with legal obligations, such as tax and accounting requirements, following completion of a rental.
7.6 Right to Data Portability
To receive Personal Data they have provided in a structured, commonly used, and machine-readable format, or to request its transmission to another Data Controller, where processing is based on consent or the performance of a rental agreement.
7.7 Right to Withdraw Consent
Where processing is based on consent, to withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
These rights may be exercised by contacting Loomee P.C. by email at hello@theloomee.com or by mail at 1 Ermou Street, Metamorfosi, North Athens, 14452, Greece.
Users also have the right to lodge a complaint with the Hellenic Data Protection Authority after first submitting their complaint to the Data Controller. Complaints may be submitted in writing to 1-3 Kifisias Avenue, 115 23 Athens, Greece, or electronically through the Authority’s website.
Hellenic Data Protection Authority website: www.dpa.gr
8. COOKIES
Cookies are small text files stored on a user’s computer, mobile device, or other device when the user visits a website. Cookies enable a website to recognize the device during subsequent visits and support the proper operation, functionality, security, and performance of the Website.
Cookies do not generally contain information that directly identifies an individual user. However, information collected through cookies may be associated with Personal Data where necessary to provide specific services or improve the user experience.
Loomee P.C. uses cookies and similar technologies for the following purposes:
- to ensure the proper operation and functionality of the Website and Platform;
- to recognize users and maintain active sessions during navigation;
- to remember user preferences, including language and display settings;
- to improve the performance, usability, and overall user experience of the Website;
- to collect aggregated statistical information concerning Website traffic and usage; and
- to enhance the security of the Website and help detect fraudulent or unauthorized activity.
Depending on their purpose, cookies may be categorized as follows:
- Strictly Necessary Cookies: essential for the operation of the Website and generally cannot be disabled through Loomee P.C. systems;
- Functional Cookies: enable the Website to remember user preferences and provide enhanced functionality;
- Analytics Cookies: help Loomee P.C. understand how visitors interact with the Website by collecting statistical information; and
- Marketing Cookies: may be used to deliver relevant advertising and measure the effectiveness of marketing campaigns, where applicable and only with the user’s prior consent where required by law.
Where required by applicable law, non-essential cookies will be placed on a user’s device only after the user has provided the relevant consent through the Website’s cookie banner or cookie preference center.
Users may modify or withdraw their cookie preferences at any time through the cookie preference center, where available, or through their browser settings. Most browsers allow users to reject, block, or delete cookies. Disabling certain cookies may affect the functionality, availability, or performance of the Website, and certain services may not operate as intended.
For more detailed information concerning the cookies used by Loomee P.C., including their purpose, duration, and legal basis, users should consult the separate Cookie Policy, where available.
9. SECURITY MEASURES
As the Data Controller, Loomee P.C. implements appropriate technical and organizational measures to protect the Personal Data it collects, retains, uses, and otherwise processes. These measures are designed, in particular, to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access, including risks arising from malware, viruses, attacks on information systems, data corruption, and other security threats.
10. CONSENT
By accessing the Website, creating a user account, entering into a rental agreement for baby equipment with Loomee P.C., and providing Personal Data, users acknowledge that their Personal Data will be collected, stored, and processed by Loomee P.C. in accordance with this Privacy Policy and the GDPR.Where consent constitutes the applicable legal basis for a specific processing activity, Loomee P.C. will request consent in a manner that is freely given, specific, informed, and unambiguous. Users may withdraw such consent at any time in accordance with Section 7.7 above.