This Personal Data Protection Policy governs access and use of the Website mahila.gr.
Mahila.gr is the “Website” of a commercial center, which is managed and maintained by the Greek anonymous company “BODY ART S.A., Import-Export underwear, clothing, footwear & accessories” which is based in Alimos ( 77 Poseidonos Ave, P.C. 17455), in Greece (VAT number: EL099855410 / Tax Office: Commercial Companies’ Piraeus Office) (hereafter the “Company”).
Any individual who visits the website or uses the services is, for the sake of brevity, referred to as the “Personal Data Subject” or “Subject”.
Management and protection of your personal data is governed by the terms of this announcement and the relevant provisions of both the Greek and the EU and international law regarding the protection of the individual against the processing of personal data and the Decisions of the Hellenic Data Protection Authority. Any future change in the above regulatory framework will be included in this Policy.
This Personal Data Protection Policy (hereafter the “Data Policy” or “PDPP”) aims at informing you on the policy of the Company as regards your personal data, which you share with us, so that you are aware of the purpose of its processing by us, the group of the receivers and the procedures that you can follow to exercise your legal rights.
The Company acting as a Data Controller can occasionally amend its Terms and Conditions, including the “PDPP”, in whole or in part, at its sole discretion. Any change in this will come into force upon posting of the amended Policy on the Website. Hence, we advise you to regularly check its content.
In any case, in so far as you continue using our Website and its services, after changes have been made according to the above, it will be regarded that you accept these changes unconditionally. If you do not agree with the terms of this Policy, as it may be amended, in whole or in part, you must stop using the Website.
Your confidentiality as well as the safety and protection of your personal data are very important for the Company. For this reason, we collect and manage your personal data with the utmost care, with responsibility and we take special measures to protect it with safety. In order for you to have detailed indications on how the Company manages your personal data, we invite you to read the following Data Policy, where you will find all the essential information on the processing of your personal data by the Company concerning your browsing the mahila.gr and the use of the provided services.
We also advise you to read the “Cookies Policy” of the mahila.gr website, which includes detailed information on the conditions concerning the services that we provide. Some services may be subject to certain legal conditions and regulations. In these cases, we will make sure that you will be provided with all the necessary information.
The Company is in no way responsible for the Personal Data Protection and Management Terms of other websites to which you may connect through links on this website.
For any clarification, question or legal requirement on your confidentiality and the processing of your personal data you can contact us at any time by sending a request to the Customer Service Department stating the request via an email at firstname.lastname@example.org, or by sending a letter to the address of the Company’s headquarters. If you wish, you can also contact the Data Protection Officer (DPO) sending an email or a letter through the post office to the “Data Protection Officer”.
- PERSONAL DATA PROTECTION POLICY
2.1. DEFINITION OF PERSONAL DATA
Personal data shall mean any information relating to the subject of the data, that is any information relating to the natural person to whom the data is related and who is identified or identifiable. Data of the sort, as defined by the Law and the relative European provisions, is, for example, the name, the address, the date of birth and the sex of the member, the mobile number, the email as well as any usage data, such as the username, the password and the IP address.
2.2. COLLECTION AND PROCESSING OF THE PERSONAL DATA
When you simply browse the Website mahila.gr none of your personal data is requested by the Company. Nonetheless, the Company, while you are browsing or using the services provided by the mahila.gr, collects and processes browsing data which concerns exclusively your browsing habits.
The categories of the personal data collected and processed by the Company on your visit/browsing the Website mahila.gr are the following:
- a) we collect your email, title, name, surname, birth date, city, p.c., mobile phone number and country on your subscription to our Newsletter service in order to send you newsletters concerning the Company, mahila.gr, its products/ services, any offers etc. If you choose to participate in our email newsletter, the email that you share with us will be forwarded to Rocket Science Group LLC which provides us with email marketing services. We consider that Rocket Science Group LLC is a third-party data processor (Paragraph 2.5 below). Your email will remain in the data base of the Rocket Science Group LLC for as long as we continue using the services of the Rocket Science Group LLC for the email marketing services or until you explicitly request to unsubscribe from the list. You can do this by using the unsubscribe links that are included in all newsletters that we send you. For as long as your email remains in the Rocket Science Group LLC database, you will be regularly receiving email newsletters from us.
- b) we collect and process the Personal Data, such as Name, Surname, Email and Telephone number that you provide us with when you contact the Customer Service Department, so that we shall be able to contact you in order to provide information on new products/services. If you choose to contact us using the contact form in the page “Contact”, none of the data that you provide us with will be saved on this Website or transferred/subjected to processing by any of the third-party data processors defined in Paragraph 2.5. On the contrary, the data will be categorized in an email just for us to reply to you.
- c) in case you provide us with the personal data of a third-party (such as Name, Surname, Address, Telephone number) on this Website, then we will protect the Third-Party Personal Data in accordance with this Personal Data Protection Policy.
2.3. PURPOSE OF COLLECTION AND PROCESSING OF THE PERSONAL DATA
The personal data that you share with us on your visit/browsing the pages and services of the Website mahila.gr is intended and processed solely for the following purposes:
– in order to send newsletters of the Company and mahila.gr, for commercial contact for our products and services, so that you get informed on the innovating, new arrivals, exclusive products and offers,
– for the communication between us and for managing your requests through the Customer Service Department,
– in order to enhance the provided services. Always with your consent, we can use your contact data within a market research and general researches on detecting satisfaction, in order to enhance our services and the relation with our users.
– for statistic researches and analyses with aggregate data in order to understand the way in which users interact and use the Website mahila.gr, enhancing our products and services.
In the above cases, the processing of your Personal Data is regarded to be legal as it aims at providing a specific service that you requested.
This data cannot be used by any third-party without complying with the provisions in force.
2.4. RETENTION PERIOD OF PERSONAL DATA
The Company processes your personal data during the period that every contract is in force and, after termination of the latter in any way, for as long as it is laid down in the current legal framework.
More specifically, your personal data, which is processed by the Company, is retained mandatorily during the period required for the processing for which it is subject to processing or/and the current legal framework.
After termination of this period, the data is retained in accordance with the current legal framework for as long as it is provided from termination of the business relationship or for as long as it is required for the defense of the rights of the Company before a Court or other competent Authority.
2.5. PERSONAL DATA RECEIVERS AND PURPOSE OF ITS FORWARDING
Your Personal Data is subject to processing by the Company which acts as a Data Controller.
For organization and operation requirements related to the provision of services by mahila.gr, the Company can forward your personal data to its representatives or/and subcontractors in order to support, promote and execute your transaction with them, but always under conditions that completely ensure that your personal data is not subject to any illegal processing, that is, other than the purpose of the forwarding according to the above.
The Company reserves the right to forward your Personal Data for the above purposes:
– to third-parties, natural or legal persons, that may provide on behalf of the Company promotion and marketing services both of the Company and its products or services.
– or to third-party collaborators of us, who provide technical services, such as host and technical support services.
All collaborators, representatives or/and subcontractors have been assessed and selected by the Company for their proved trustworthiness and ability and all comply with the law laid down in the above paragraphs. In case some of them are based in countries non members of the European Union, forwarding of your Personal Data is carried out with the guarantees laid down by the Law.
The Company and mahila.gr will not sell or in any other way forward or share its website Subjects’ personal data with third-parties, apart from the above mentioned ones, without consent of the Subject, except for the implementation of relative legal obligations and only as regards the Competent Authorities. Retained data of the file may be shared with the Competent Justice, Police and other Administrative Authorities upon their legal request and in accordance with the current legal provisions. Also, in case of a legal provision, service order or official preliminary examination, mahila.gr and the Company reserve the right to put the relative data at the disposal of the corresponding service.
2.6. CONSENT OF THE SUBJECT
By using any Service on mahila.gr, in accordance with the Personal Data Protection Policy of mahila.gr, you state that you are above 18 years old and that you accept and consent to this Personal Data Protection Policy and more specifically:
2.6.1. Marketing and Advertisement Actions
By subscribing to the Newsletter service on mahila.gr you accept that mahila.gr will process and use your personal data for advertising actions, such as sending emails with general information or advertising ones (newsletters) concerning the Company, its products and services.
If you wish, mahila.gr will resign from the use of your Personal Data for advertising purposes under the condition, however, that you will request or follow the unsubscribe procedures from the list of the members who receive the newsletters of mahila.gr. You can, at any time, send a relative email at email@example.com or set accordingly in your Member’s Account the Sending Newsletters Function or unsubscribe from them following the procedures laid down in every newsletter email that you receive from us.
2.6.2. Processing as regards deceptive practices
According to the Law, the Company must report to the Hellenic Data Protection Authority any illegal violation of the Personal Database of the Website or the database of a third-party of data processing to any and all relevant persons and authorities within 72 hours from the violation, if it is evident that the personal data that is saved in an unidentifiable form has been violated.
2.6.3. Forwarding to Legal Services in case or in the absence of a Legal Provision
Since forwarding of data is not allowed according to Law, you consent to the forwarding of your personal data to prosecution and supervisory authorities for the necessary protection from dangers, for state and public security as well as for the prosecution of criminal offenses.
2.7. TRANSFER AND SAVING OF PERSONAL DATA
Transfer of Personal Data between the Website mahila.gr and your browser is carried out with encryption and it is delivered through HTTPS.
Your data is saved in our servers which are found in a safe location.
2.8. RIGHTS OF THE SUBJECT, INFORMATION AND UNSUBSCRIPTION
Provision of your Personal Data is a contractual obligation. You are free to choose whether you will share with us or not your Personal Data, but in the absence of the required data the execution of your requests from our Company will not be possible.
The Company carries out the following processing of personal data only in case the Subject has explicitly consented to it:
– marketing activity, polling and market research.
– analysis of the browsing habits in the environment through the use of the Profile of the Personal Data Subject, for the sole purpose of creating a better experience and individualization of the latter on our Website.
Provision of your Personal Data for these activities is absolutely optional. You are free to provide us with your Personal Data or not for this purpose, but in their absence the Company will not be able to carry out marketing and advertising activities, polling and market researches or analysis of your habits.
After verifying your identity as Personal Data Subjects you have the following rights:
|Right to information||The COMPANY must inform you on the processing to which your data is subject, such as which data is processed, for what purpose, for how long it retains it, using clear and simple wording.|
|Right to access||You have the right to receive from the COMPANY a confirmation as to whether or not your personal data is processed and, if this is happening, you have the right to access this data.|
|Right to correction||You have the right to demand from the COMPANY to correct any inaccurate personal data of yours and to complete any incomplete data.|
|Right to delete||You have the right to request from the COMPANY to delete your personal data, which can be satisfied provided some specific conditions are met.|
|Right to limit processing||You have the right to ensure that the COMPANY will limit processing provided some specific conditions are met.|
|Right to object||You have the right to object, at any time, to the processing of your personal data. The COMPANY, in this case, must stop processing, except if it proves urgent and legal reasons which outweigh your interests, rights and freedoms as subject of the data or for the establishment, exercise or support of legal claims.|
|Right to human intervention within a decision through an automated procedure||You have the right to request from the COMPANY that you do not undergo, if that is the case, a procedure of decision making solely according to an automated processing, including profiling, which produces legal effects that concern you or affect you significantly in a similar way.|
|Right to portability||You have the right to request from the COMPANY that you obtain your personal data, which you have provided in a structured, commonly used and machine-readable format, or that the COMPANY transfers it to another server.|
In order to facilitate the exercise of these rights, the COMPANY ensures that internal procedures are developed so that it can respond in time and effectively to your requests.
At any time you reserve the right to information or objection to further processing of your data in accordance with the relevant Law on Personal Data Protection. For this reason, you must address your request written to the Company and mahila.gr or by sending an email at firstname.lastname@example.org. In order to further facilitate the exercise of these rights, the COMPANY ensures that internal procedures are developed so that it can respond in time and effectively to your requests..
If you regard that your Personal Data has been retained illegally, you can submit a request to one of the Supervisors that are competent for compliance with the Personal Data Protection Rules.
We respond to your Requests free of charge, without any delay and in any case within (1) one month from the day we received your request. However, if your Request is complicated or there is a large number of Requests from you, we will inform you within a month if we will need to extend the deadline for (2) two more months within which we will respond.
If your Requests are clearly unfounded or undue, especially due to their recurrency, the Company can impose the payment of a reasonable tariff, taking into consideration the administrative cost for the provision of information or the execution of the requested action or it can refuse to continue with the Request.
This text can be changed with time, hence we advise you to regularly check its content.
2.9. LEGAL REFERENCES AND USEFUL LINKS
Processing of the Personal Data of the Users/Customers of mahila.gr is done by the Company, which also uses a Data Controller based in the EU and subject to the terms provided by the Regulation (ΕU) 2016/679 General Data Protection Regulation, and the European and Greek personal data processing regulations and controls of the competent Hellenic Control Authority.
Last update 24/05/2018