Privacy Policy
The personal business of Christina Petridou, with the purpose of operating a wellness center – spa and retail and wholesale of perfumes, cosmetics and toiletries, located in Pefka Thessaloniki, on 29A Papanikolaou Avenue, contact address info@secretsofbeauty.gr, telephone number 2310 673701 main and owner of the commercial shop providing body and facial care and treatment services and trading perfumes, cosmetics and toiletries under the name “Secrets of Beauty all about Spa“, is concerned about privacy issues and has as its priority the safeguarding of your personal data.
For this reason, we make every effort to ensure the highest level of security when collecting and processing the personal data you provide to us. The management and protection of the personal data of customers/suppliers of this website is subject to the terms of this privacy policy as well as to the provisions of national, Community and international law on the protection of individuals with regard to the processing of personal data, as applicable from time to time. Any possible future relevant legislation will be subject to this privacy policy. In any case, the company reserves the right to change the terms of personal data protection to comply with the applicable legal framework.
These personal data protection terms may therefore be subject to review and update at any time. Our company is committed to informing you of any changes to its privacy policy. By signing the affidavit of acceptance/consent to this privacy policy and by providing your personal data to our company, you declare that you have been fully and clearly informed of the terms included in it, that you are aware of your legal rights and that you give your consent to the company’s processing of your personal data.
1. What is personal data?
The term “personal data” means any information that can identify you directly (e.g. your full name) or indirectly (e.g. your telephone number). This means that personal data includes, but is not limited to, information such as email address, home address, usernames, personal preferences and shopping habits. The person (natural person) to whom the data refers is called the data subject.
2. What is data processing?
Data processing is any operation or set of operations which is performed, whether or not by automated means, on personal data or on sets of personal data, such as the collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, transmission to third parties, dissemination, alignment, combination, restriction, erasure and destruction of personal data. Any natural or legal person in the public or private sector who holds and processes personal data is called a controller. Any natural or legal person in the public or private sector to whom the processing of data on behalf of the controller is entrusted shall be called a processor.
3. What data do we process?
The personal business of Christina Petridou, as the controller, collects the personal data of customers/suppliers of the above mentioned shop only when they themselves voluntarily provide them and only for the processing purposes mentioned herein. Our company collects four types of information about customers/suppliers:
1. Information that the visitor provides to us when registering as a customer.
2. Information that the visitor/user provides to us when subscribing to the company’s newsletter service.
3Data that the visitor/user provides to us for the preparation of the contract between us.
The personal data that may be collected are the following.
4. How does the newsletter service work?
The company provides the users of its Website with the possibility of sending a newsletter to their e-mail address if they declare that they wish to benefit from this service. The sending of newsletters by the company is fully compatible with the mailing regulations. There will be no misuse of this service. The company uses the Mailchimp service to manage its newsletter.
When you register as a user you are given the option to subscribe to the newsletter. If you choose to do so, a message will be sent to your email address in order to provide us with your explicit consent for the periodic sending of the newsletter.
Our company has contractually ensured the security of your data through an agreement with Rocket Science Group LLC as the data processor (https://mailchimp.com/legal/data-processing-addendum/ ).
The user of the service can in any case and at any time request to stop receiving advertising messages, since each message includes the option to withdraw consent. For any issue that may arise, you can contact the company either by e-mail([email protected]) or via the helpline(+30 2310673701).
5. For what purpose do we process your data?
We collect and process your personal data solely for the following purposes:
1. The establishment, maintenance and performance of the business relationship between us. The data you provide us with will be used for the proper preparation and execution of service contracts and related actions (sending a receipt, changing or cancelling an appointment, identifying a client when necessary, managing payments, etc.).
2. The promotion and advertising of our products and services. We may ask for your consent in order to use your data to send you
targeted or generalized advertising and promotional material about new products and services or special offers of our store (by mail, e-mail, fax, SMS, etc.).
3. Statistical research. Your personal data for which you have provided your consent helps us to monitor the traffic of our store, the consumption habits of our customers and the needs of supplying products.
4. Mandatory compliance with applicable legislation. Our company processes the personal data you provide us with in order to comply with the requirements of the applicable legislation (issuance of receipts, accountability principle, data retention for a minimum period of time, etc.).
6. What is the legal basis for processing the data?
The collection and processing of data is done to support and monitor your business relations with the company, the preparation and execution of the contract between us and to better serve you and is based on your prior explicit consent regarding the type of data and the purposes of processing, within the framework of the applicable legislation.
7. Who are the recipients of your data?
The recipients of the data are: (A) Christina Petridou’s sole proprietorship and the absolutely necessary staff of the company, who are bound by confidentiality obligations; (B) our partner companies, which process your data as processors on our behalf and in accordance with our instructions; (C) public or judicial authorities or independent authorities, if it is required by law or a public prosecutor’s order or a court decision/decree; (D) public or judicial authorities or independent authorities, if it is required by law or a public prosecutor’s order or a court decision/decree; (E) public or judicial authorities, if it is required by law or a public prosecutor’s order or a court decision/decree; (F) public or judicial authorities, if it is required by law or a public prosecutor’s order or a court decision/decree.
8. How do we ensure that processors respect your data?
Processors have agreed and contractually committed with our company:
– To maintain confidentiality.
– Not to share data with third parties without the permission of the company.
– To take appropriate security measures.
– To comply with the legal framework for the protection of personal data.
– Not to process beyond what they are allowed to do.
9. For how long are your data kept?
Personal data relating to customers/suppliers of our online store are collected and kept for the absolutely necessary time required for the above processing purposes and then deleted. The duration of data processing is determined by the retention obligation imposed by the applicable legal framework. In any case, our company retains the data at least for as long as the contract lasts and for as long as legal claims arising from it may arise. It is also possible to extend the period of data retention for reasons of proof before the courts regarding the fulfilment of the contractual obligations of the company or for reasons of compliance with the instructions of public or independent authorities.
10. Is your data safe?
Our company is committed to safeguarding your personal data. To protect the personal data of our store’s customers/suppliers, we employ all necessary data security measures to prevent the risk of loss, misuse, unauthorized access and disclosure. We review and modify our security measures whenever necessary. The processing of your data in any way is only permitted to persons authorised by us, our employees and partners exclusively for the purposes stated above. Our employees have all undertaken a confidentiality commitment to
and as stated above our company has ensured that those carrying out the processing on its behalf meet the requirements and provide sufficient assurances for the respect of your personal data. Our business will not make your personal data available for sale or otherwise transmit or disclose it to third parties not related to it without your consent, except in the application of relevant legal dictates and to the competent authorities only.
11. What are your legal rights?
With regard to the protection of your personal data, you have the following rights:
– Right of access. You may obtain
from us free of charge a copy of the personal data we hold about you.
We reserve the right to charge a reasonable fee for any further copy that you may request from us.
– Right to rectification: You can ask us to delete your data if they are no longer necessary for the purposes for which they were collected. In addition, you have the right to request the erasure of your personal data in the event that your consent to processing is withdrawn, provided there is no other lawful basis for it.
– Right to restrict processing: You can request restriction of processing of your data where the accuracy of the data is contested, unlawful or for other reasons. If you object, we will stop processing your data, provided that there are no legitimate grounds for further processing. The processing of your data for advertising purposes does not constitute a legitimate ground.
– Right to portability: You can request that we receive your data in a structured, commonly used and machine-readable format or that it be transferred to another controller.
– Right to object: You can object to the processing of your data or withdraw your consent. In this case, we will immediately stop processing your data, unless there are legitimate or compelling reasons that override your right.
– Right to object: You have the right, if you believe that your rights regarding the protection of your personal data are being violated, to lodge a complaint with the Personal Data Protection Authority, which is located in Athens (Kifissia 1-3, P.C. 115 23) and at the following telephone number 2106475600 and fax 2106475628 or at the email address [email protected]
12. How can you exercise your rights?
To exercise your rights, you can send us an email describing the right you wish to exercise either to the company’s email address [email protected] with the title-request “EXERCISE RIGHT OF ACCESS/DESCRIPTION/DESCRIPTION/DETERMINATION/ANALYSIS” describing your request. We will then review it and respond as soon as possible. We respond to your requests free of charge within one (1) month of receipt. However, if your request is complex or if there are a large number of requests, we may obtain an extension of two (2) months if it is absolutely necessary and after informing you. If your requests are manifestly unfounded or excessive, in particular because of their repetitive nature, our company reserves the right not to respond to them.
