For CHE.ΜA., the protection of personal data is of paramount importance and is treated with the utmost seriousness. Respect for the personal data we manage and ensuring their proper processing is one of the Company’s priorities. For this reason we take all appropriate technical and organizational measures to protect the personal data we process to ensure that their processing is always carried out in accordance with the requirements set by the current legal framework and in particular by the General Data Protection Regulation (EU) 2016/679.
1. PROCESSING MANAGER – CONTACT DETAILS
CHE.ΜA. acts as the Processor for all personal data it collects, processes and stores.
CHE.ΜA. Address: 25th of March 11, P. Fokea, 190 13 Telephone: 22910 78235
Email: hello@xima.gr
Contact Person: Babis Brikkes
2. WHICH DATA WE COLLECT AND PROCESS
In order to serve you and offer you our services and products, we collect and process all the data that you disclose to the representative of the call center when you place your order or the data that you fill in the corresponding fields when you open a user account on our website and more specifically, name, postal address, contact telephone (landline or mobile), e-mail, tax information (in case you want to issue an invoice). Please note that our Company website may contain links to other websites. Our Company is not responsible for the privacy and privacy practices and / or the content of these websites. If you are under the age of 15, please obtain the permission of your parent or guardian before disclosing any of your personal information to us.
3. PROCESSING PURPOSES & LEGAL PROCESSING BASIS
All the above personal data are collected and subjected to processing in order primarily to execute the contract of sale between us for our products and more specifically for the preparation and delivery of your order and our communication with you regarding it. Some of your data may be used for the following purposes always with your consent:
– Contact you regarding contests and other events.
– Update and send offers and information material about our products and services.
– Statistical purposes and surveys.
– Promotion and promotion of our products and services.
Legal bases for data processing may be as appropriate:
i. The execution and completion of the contract between us for the sale of our products to you (preparation and delivery of your order). Without the collection and use of the above information we will not be able to serve you.
ii. The consent you can give us in order to receive information about offers or promotional material for our products and services, the commercial actions and activities we develop, etc. You can revoke your consent whenever you wish, by contacting us at contact details referred to in paragraph 1 or through our website.
4. WHERE WE DISCLOSE YOUR PERSONAL DATA
Your personal information may be disclosed to the following recipients:
– To the franchisees, the store managers of the CHE.ΜA. network and the distributors in order to prepare and deliver the order.
– To a newsletter sending company (provided you have given your consent for us to send you a newsletter).
– To an sms sending company (in case you have given your consent to receive updates).
– In partner companies, in order to be able to receive your gift, if you are a winner in a competition in which you participated (every time we organize a competition, we mention in the terms of the competition the fact of disclosing your details to the partner company).
– In cooperating event companies (in case you want to organize a party).
– To an external partner who supports us in software matters.
– In the cooperating legal department of the company, in case of legal or out-of-court dispute.
– To police or other state authorities if we are asked to do so officially or after a prosecutor’s order.
5. DATA STORAGE PERIOD
Your data is kept in the CHE.ΜA. database for 5 years after your last transaction with the company or for as long as the legislation may require (eg in the case of an invoice, as long as the tax legal framework stipulates). If the processing is based on your consent, the personal data is kept until you revoke that consent. It is clarified that the withdrawal of consent does not affect the legality of the processing based on the consent before its withdrawal. In any case, CHE.ΜA. applies all appropriate technical and organizational measures to ensure the protection of personal data that it processes and continuously takes care to prevent any unauthorized access to this data.
6. RIGHTS RELATED TO YOUR PERSONAL DATA
Regarding the processing of your personal data you can exercise the following rights:
Right of access You have the right to know what data we hold and process, why and other additional information about them, as well as to request a copy of them. Right of correction You have the right to request the correction, modification and completion of your personal data.
Right of deletion (“right to be forgotten”) You have the right to request the deletion of your personal data when it is processed with your consent. In cases where the processing is based on another legal basis (such as the execution of a contract, a legal obligation or the protection of the legal interests of the Company, etc.) your right may be subject to restrictions or may not exist.
Right to restrict processing You have the right to request a restriction on the processing of your personal data:
– when their accuracy is disputed and until the relevant verification is done
– alternatively, instead of deleting them
– when they are no longer necessary for the processing purposes for which we collected them, but are necessary for the establishment, exercise or support of legal claims by you
– when you have objections to their processing and until it is verified that there are legal reasons for this processing by the Company Right to object to processing You have the right to object to the processing of your personal data when it is done on the basis of a legitimate interest, as well as for the purposes of direct marketing and profiling.
Right to portability You have the right to request and receive your personal data in a form that allows you to access, use and process it using commonly used processing methods. In addition, for your data which we process with automated means and based on your consent or for the execution of a contract, you can ask us to transfer it directly to another controller, if this is technically possible.
Right to withdraw consent If the processing of your data is based on your consent, you have the right to revoke it at any time. Revoking your consent does not affect the legality of the processing based on your prior consent. For the exercise of your above rights and for any question, complaint or other information regarding the processing of your personal data you can contact us at hello@xima.gr or the contact details mentioned in paragraph 1.
7. COMPLAINTS RIGHTS TO THE PERSONAL DATA PROTECTION AUTHORITY (APDP)
You have the right to file a complaint to the Personal Data Protection Authority regarding issues relating to the processing of your personal data.
8. CHANGES IN PERSONAL DATA PROTECTION POLICY
Any future changes in the Privacy Policy of our Company will be posted on its website and where required, will be notified.