PERSONAL DATA PROTECTION POLICY REGARDING THE WEB PAGE www.seventeencosmetics.com
At Seventeen, our objective is to respect and protect as much as possible your privacy and preferences, safeguarding a high protection level and confidentiality while processing your personal data. Therefore, with this document we would like to inform you about our practices regarding the personal data protection, about the way we collect your data, how and for which purposes we process them and what kind of data it is likely to collect from you when you use our web page www.seventeencosmetics.com. Moreover, we would like to inform you on the rights you are entitled to with regard to data processing by our Company.
HELLENICA S.A. COSMETICS (hereinafter referred to as the 'Company') is the controller of personal data collected through our web page and the data processor. The Company is domiciled in Maroussi, Attica, at 7 Cheimaras Street, 7, with Tax Identification Number (T.I.N) 094004232 and GEMI (General Commercial Registry) No 000249101000.
HELLENICA S.A COSMETICS is bound to secure the protection of your personal data, pursuant to the legislation provisions in effect and declares that the collection and processing of personal data of the Website users shall be carried out in accordance with the provisions of the General Data Protection Regulation (GDPR-hereinafter the "Regulation").
If you are required to provide personal data while using our web page, we assure you that your data shall be used by us respecting your privacy and your personality, always in accordance with this personal data protection statement and the rules stipulated by the Regulation.
HELLENICA S.A. COSMETICS is entitled to change this policy at any time without prior notification individually to each user. Such change shall be disclosed to the Company's website and to a designated place for that purpose.
Data we collect:
On a case by case basis, we may collect the following information-data from our Web page users:
- Full name
- Contact information, including telephone number and e-mail address
- Postal address
- Future contact preferences and feedback by consumers
- Other information related to customers' research or/and offers
In addition, the web or mobile applications may collect accurate location information from your apparatus, provided that you consent to the collection of such information. We could use service providers for the provision of location services using the location data you provide.
For the collection and processing of your data we request your consent, except for the cases whereby data processing is allowed or enforced by the law for the pursuit of an overriding legal interest or in case it has already been lawfully granted. In addition, you will always have the right to freely use our Web page even if you do not disclose your data, with the exception of some services/operations of our Web page that presupposing the collection of such data (e.g. sending of newsletters).
The Company shall reserve the right, whenever this is allowed or imposed by law and for the pursuit of a legal interest overriding the need for users' privacy protection, to process personal data of users, without their consent.
The data processed by the Company shall be always relevant and necessary for carrying out the purpose data are collected in the first place, adhering to the proportionality and data 'minimization' principle.
Purpose for collecting and processing personal data
Processing of personal data collected by the Website users is carried out for the following purposes:
- To send newsletters related to new products, special offers, suggestions for the use of products to the e-mail addresses given to the Company by users filling in the respective form on the website, providing their explicit consent to receive advertising messages.
The e-mail addresses offered for sending newsletters are kept in a file without specifying the address holder's name, unless this is inferred from the address itself containing the user's first name or last name.
- Organization of aesthetics seminars in various places of Greece with participation of Web page Users; such participation requires collection of candidate participants’ communication data as well as necessary information to extract statistical conclusions on the parties being interested in these seminars-events.. The data we collect in these cases include the following:
- Name, Last name, Father's name
- Domicile Address
- Telephone number (fixed or/and mobile)
- If you wish to contact us through the communication form on our Web page, you need to provide your full name and your e-mail address and probably the company you work at; such data will be kept only for the purpose of communicating with you on the question-message you submit through the communication form.
- In case we wish to use this information to contact you for market research purposes or products promotion, then you will be informed in advance seeking your consent to process your data. Communication is likely to take place through e-mail, telephone, fax or mail.
- Some of the data we collect from Users may be used to adapt our website accordingly, depending on Users' interests, as well as in order to improve our products and services. This could be mainly achieved through Cookies being collected by the browser. For further information on Cookies collection, kindly read the relevant paragraph below.
We shall be bound to ensure the safety of your information. In order to avert unauthorized access or disclosure, we have taken all appropriate technical and organizational measures for your personal data protection from accidental or unlawful destruction or accidental loss, or alteration, and to prevent unauthorized disclosure or access and any other unlawful processing.
We also commit ourselves to respecting the provisions of the General Data Protection Regulation (GDPR) regarding the likelihood of data leakage. Should data leakage be ascertained from our file due to violation, we declare that we will take any measure required to mitigate the harm and we shall inform as soon as possible the competent supervising authority and in particular the Personal Data Protection Authority and all Users, in particular as to whether the breach is likely to put at high risk your rights and freedoms.
Period of data storing
The Company shall store your personal information for the period required to fulfill the purposes described in the Personal Data Protection Policy, unless the law requires a prolonged storing period. In particular, the Company shall store your personal data only for as long as it is required, taking into consideration the need to reply to questions or resolve problems, to provide new and improved services and compliance with legal requirements pursuant to the implementing laws. When the personal data collected by the Company are no longer required in this way and for those purposes, then we will destroy them or we will safely delete them.
Usage of cookies
Cookies are small text files requesting permission to be stored in the hard disk of your computer. Once you agree, the text file is added and the cookie helps to analyze the number of visits to the website or to inform you when you visit a specific website. Cookies allow the web applications to respond to you as individualized user. The web application may adapt its operations to the needs, the preferences and your interests by collecting and taking down information on your preferences.
Overall, the cookies help us to offer a better website allowing us to follow up which pages you consider useful and which not. By no means does a cookie give access to your computer or to any information related to you, besides the data you choose to share with us.
You may choose to accept or reject the cookies. Most of web browsers request your consent before they start recording cookies. In any case, you may modify the settings of your browser to reject the cookies, if you wish. This will probably impede you from fully benefiting from the website.
Non disclosure of personal data
We shall not transfer, share or otherwise distribute your personal data to third parties unless provided for differently in this personal data protection policy. We may share your personal information with our subsidiaries across the world that agree to treat such data in accordance with this personal data protection policy and the General Data Protection Regulation, if the protection level is judged adequate by the European Commission; if this is not the case, we may share your personal information provided that there is a legal basis for the transfer of data, as laid down by the data protection legislation in effect. Moreover, you will be informed about the legal basis, the safety measures applied and where you could find a copy of the information related to such security measures.
In addition, it is likely to transfer a part or all the data we store to third parties, acting in our name or on our behalf for processing, always in accordance with the purposes for which the data were initially collected or for purposes such as delivery of services and products, specialized customer service personnel, evaluation of this website usefulness, marketing, data management or technical support. These third parties have been contracted with us to use Personal Data only for the agreed upon purpose and respecting this Personal Data Protection Policy and the legislation for lawful processing thereof; such third parties commit themselves not to transfer nor disclose data to third parties, unless this is stipulated by the law, or is permitted by us or as mentioned in this Policy.
The personal data we collect may also be transferred to third parties in the event of sale, assignment or transfer of the undertaking of this website or part of it and of customers' data associated with this undertaking; in such a case, it shall be required by the buyer, or transferee or successor to process the personal data, in accordance with the Personal Data Protection Policy herein. Furthermore, personal data are likely to be disclosed to third parties if we are requested to proceed to such disclosure by virtue of implementing law, decree or governmental regulation or if such disclosure is otherwise necessary to support any criminal or other legal investigation or procedure domestically or abroad.
Links to other websites
This personal data protection policy shall apply only for this website and not for third parties’ websites. We could provide links to other websites that we believe they may interest our visitors. Our objective is to ensure that said websites abide by the highest standards. However, due to the nature of the website, we cannot guarantee the personal data protection standards of the websites we provide the links to, nor can we be held responsible for the content of other websites besides this one; this personal data protection policy is not meant to be applied in any other link besides this website.
Protection of personal data of children
If you are below 18 years old, you are entitled to freely browse the pages of this Website but you are not allowed to provide us with your personal data, as you are not lawfully allowed to provide your consent. We shall never accept to receive data from a person whom we know is below 18 years of age and in any case, if by mistake we collect such data in a file, we shall immediately delete them, once we are informed about the person's age. If you are younger than 18 years of age and you are interested in this Website's services, you are kindly requested to consult your parents or people who exercise parental care.
Right of access, rectification, objection and deletion and other rights
In any case, you reserve the right to request information on data concerning you and kept in our file; you may also request rectification or restriction of data processing.
You are also entitled at any time to request access to any personal data stored in our file and a copy thereof. You should take into consideration that most likely you will be requested to verify your identity before your request is processed.
Furthermore, you may at any time request permanent deletion of all your data from our file, if their storage is not required for reasons of public interest or the adherence to a legal obligation pursuant to the Greek or European legislation. Upon request, we shall delete your personal data from our systems, excluding the information contained in e-mails, correspondence and other documents that we can keep as a piece of evidence of the terms of the legal relationship between us. You should take into consideration that most likely you will be requested to verify your identity before your request is processed.
If you no longer wish to receive our newsletter, click on the option "unsubscribe" to opt-out from the newsletter mailing list.
In addition, you are entitled to decline the processing of personal data, whenever you wish, and to freely revoke your consent to the usage of your personal data; this revocation shall not of course affect the data processing having occurred prior to revocation.
You also reserve the right to request and receive your personal data kept in our file in printed or electronic form and to forward them freely to any other data controller or to ask us directly to forward your data to another data controller (portability principle).
In general, for any request you may have with respect to the exercise of the rights provided for by the legislation, rest assured that we will reply within a short and reasonable time offering you all information required regarding your request.
You may submit your requests on the exercise of your rights, either by sending an e-mail to firstname.lastname@example.org or by sending a letter to the postal address mentioned below.
Future amendment of the Protection Policy
Launching a complaint with a supervisory authority
Should you consider that we process your personal data in breach of the laws and regulations on personal data protection, you are entitled to lodge a complaint to the Data Protection Authority.
Contact information with the Data Controller
Should you have any question or query related to our Web page users' personal data processing, please do not hesitate to contact us sending an e-mail to email@example.com or a letter to the postal address:HELLENICA S.A. COSMETICS
7, Cheimaras street GR-15125 Maroussi, T. 211 8804000, F. 210 6198840-9