Our company with the name "KALLY VALLENI BEAUTY EVANGELOS ORFANOUDAKIS & SIA E.E. TRADE OF COSMETIC PRODUCTS - ORGANIZATION OF EVENTS" and distinctive title "KALLY VALLENI BEAUTY", based in Heraklion, Crete, at 77 Makedonias St. P.O. 71307, with A.F.M. 802560154 (hereinafter "the Company") collects, processes and protects your personal data in compliance with the provisions of the new General Regulation for the Protection of Personal Data (GDPR, Regulation EU 2016/679 of the European Parliament and of the Council of April 27, 2016 "for the protection of natural persons against the processing of personal data and for the free circulation of such data") as well as with the provisions of Law 4624/2019 regarding the enforcement measures of the General Regulation.
What data do we process?
The Company collects and maintains data, in paper and electronic form, that you provide when we enter into a cooperation agreement and at any other time you contact one of our partners requesting information about our Company and cooperation offers.
In particular, in the context of fulfilling the contract between us, we collect and process the following personal data:
Personal information such as name, surname, date of birth, marital status, social security number, VAT number or other identification information,
Contact information such as home address, work address, work phone, mobile phone, fax, email,
Credit or debit information cards, bank accounts (depending on the billing method you have chosen and if it is necessary only for the cooperation between us).
Purposes for which we process your data
2.1. Execution of the contract
We process your personal data during the drawing up of the sales contract between us during the contract as well as after its termination, for the following purposes:
a) during the pre-contractual stage to check your application and conclude the relevant contract,
b) to issue and send you service invoices, sales invoices, and retail purchase invoices;
c) to provide you with the products and services in accordance with the terms of the contract between us,
d) for communication on any matter that arises in the context of the execution of the contract between us,
e) to carry out the collection process of any overdue debts of yours that will arise in the context of the contract.
2.2. Customer Profile Configuration
As long as you have given us your consent by completing the relevant "Declaration of consent or withdrawal of consent to the processing of personal data" we store the information you provide in the contract as well as information related to the use of our services, (categories of services, frequency of service use) so that to be able to learn about your experience as our customer and to provide you with personalized services and advertising communications that match your needs and preferences.
2.3. Fraud prevention and management
We process your personal data for the purposes of preventing and managing potential fraud incidents. In addition, we may receive information about the commission of offenses if this is necessary to protect our legitimate interests, i.e. to protect our assets and our customers.
2.4. Promotion – Advertising
As long as you have given us your consent by completing the relevant Consent Form, the Company may process your personal data for the following additional purposes:
a) to promote products and services,
b) for participation in various promotional actions of the Company.
2.5. Legal Obligations – Claims
We process your personal data:
a) for the defense of our legal rights before judicial or other Authorities,
b) to fulfill our compliance obligations to domestic and foreign supervisory authorities, such as e.g. to the Personal Data Protection Authority (PDPAH),
c) for the processing of issues that will arise during our cooperation with the National Medicines Organizations or other supervisory Organizations of health service providers.
Who receives and processes your data
3.1. Only our properly authorized employees or third parties may have access to your information, which may be:
a) External partners or authorized resellers of the Company who provide services for the sale of products and services.
b) External partners of the Company who provide research and/or advertising services, provided you have given your consent.
c) Debt collection companies, lawyers, bailiffs or other persons necessary for the collection of overdue debts.
d) Other companies that provide services and to the extent that the transmission of personal data is necessary for the execution of the contract or the satisfaction of customer requests.
e) Financial institutions.
3.2. Your data (i.e. first and last name, patronymic, A.F.M. (or A.D.T. for nationals) or Passport number or other official identity document and country of issue (for foreigners), concerning either your debt, which has become overdue, they are transmitted to our respective legal representative for processing, with the sole purpose of enabling our Company to check your solvency as a candidate customer. In any case, you retain the right to access and object to the above transmission.
3.3. Your data is transmitted to public services, administrative and judicial authorities, supervisory and regulatory authorities if this is required by law, court decision or any other act binding on the Company in the context of compliance with its supervisory obligations.
How long we keep your data
The time we keep your data depends on the time of conclusion and expiry of the contract as well as on our obligation to apply the respective legislative and especially tax framework.
4.1. Your personal data will be deleted at the end of the legal retention period, and no later than 5 years after the end of the contract. Your data will then be deleted, unless you give your consent to its processing again. In any case, you have the right to request the termination of communication for advertising purposes at any time.
4.2. In cases where the retention of personal data is necessary for the exercise or protection of our legal rights before judicial or other authorities provided for by the current legislation, the above period of 5 years is extended until the end of the period when these data are no longer necessary for the above purposes.
4.3. This deadline may be cited in the context of tax audits or legal claims.
Your rights
The Company ensures your rights regarding the processing of your personal data and makes it easy for you to exercise them.
You have the right to:
5.1. Request access to your personal data and, in particular, you can receive information regarding which data we process, the purposes for which we process it, the categories of recipients to whom it is sent, the planned storage period, its origin, if not we have collected from you, as well as receive information about the existence of any automated decision-making process, including profile analysis.
5.2. Request correction of your personal data if it is inaccurate or incomplete.
5.3. Request the deletion of your personal data, unless the processing of such data is necessary for the fulfillment of a legal obligation, for reasons of public interest including any kind of our obligations to the supervisory authorities of health service providers or for our exercise or defense against legal claims.
5.4. Request restriction of the processing of your personal data only for specific purposes.
5.5. Portability of your data. That is, to receive your personal data that you have provided in a structured, commonly used format, or to request that it be transferred to another person.
5.6. To withdraw at any time your consent to the processing of your personal data in writing either by registered letter that you will send to the company headquarters or by a statement that you will send to the company's e-mail [email protected] In this case, the processing will be stopped them by us, without this affecting the legality of any processing until the withdrawal of your consent.
I can change my contact information at any time by unsubscribing.
Finally, if you believe your rights are being violated, you have the right
appeal to the Personal Data Protection Authority
(P.D.P.A)