Privacy Policy
HASP HELLAS SA shall inform the guest/registered user and the guest/registered user shall acknowledge that he/she is aware of the following:
1. General
The natural persons visiting the website www.fmsstores.gr (users) may surf in its webpages and make use of its services and content either as simple guests or as registered users, and for the processing of their personal data due to this access the present policy shall apply. Regarding some specific services (such as for example sport advice, answers to questions about products etc.) the more specific terms for personal data processing mentioned upon filing of the service order, shall apply additionally.
The company under the name "HASP HELLAS SA” is the controller, responsible for the processing of the personal data of the guest / registered user and controls the processing of his/her data in the webpages for the services of www.fmsstores.gr. The processing of the personal data is made in accordance with the provisions of the General Data Protection Regulation (GDPR 2016/679), the law 4624/2019 and the relevant applicable Greek laws on the protection of personal data, as well as on the protection of personal data and privacy in the field of electronic communications (L.3471/2006, as in force from time to time) and the decisions of the Data Protection Authority (DPA).
For the processing of your data as described below, HASP HELLAS SA relies on the following legal bases:
Execution of the agreement (article 6.1.b GDPR): In order for the purpose of execution of the distance sale agreement to be satisfied or for the purpose of undertaking measures upon the user’s request before the conclusion of the agreement, and especially, in order for the user to conclude his/her orders in www.fmsstores.gr, the processing of the personal data he/she gives upon his/her registration and submission of his/her order in the order registration form, and the reporting and monitoring of his/her transactions, is necessary. Purpose of this basic processing of data for each user is the completion of the certain order, the communication and dispatch of informative messages relating to the stages required until the order is properly delivered, the provision of explanation in relation to the order, and in general the analysis and information about purchases made, the delivery of the order to the place of the user’s choice, the confirmation and identification of the user in any necessary case and the notification provided to the user about the available stock per product and store in www.fmsstores.gr. Furthermore, the facilitation of the registered users through the creation of a user’s account with completed invoice and shipping data, information about his/her purchases, management of his/her communication with HASP HELLAS SA, and as of July 2021, the reward of the registered user with bonus points and benefits due to his/her purchases in case he/she is also a member of the customers’ loyalty program of HASP HELLAS SA and concludes purchases via www.fmsstores.gr are also included in the aforementioned purposes.
Legal Interests (article 6.1.f GDPR): Any form of processing of personal data is required for the improvement of services provided by HASP HELLAS SA, the detection of a fraud attempt or misuse, the potential cooperation with judicial and regulatory authorities. It is also required for the regular information of the guest or/and registered user via a phone contact, by post, via e-mail, mobile SMS or through any other appropriate means of communication using the above person’s contact details, duly obtained, in respect of the use of www.fmsstores.gr for online purchase of the products and services of HASP HELLAS SA. under their transactional relationship (article 11 par. 3 of L.3471/2006), and provided the user has not objected against this contact/communication. This information may include information about its products or/and offers or/and competitions, the contact for survey purposes for the improvement of the products and services provided to its users as well as any other promotional actions of the Company and the service of similar purposes. Further, HASP HELLAS SA may contact the guest or/and registered user via message services such as Viber, WhatsApp etc., for purposes of better communication and control of the communication cost. The registered users have also the discretion, as of July 2021, to select the communication channels, which shall be used by HASP HELLAS SA for their information through their personal account in www.fmsstores.gr. The changes in these preferences shall be implemented within 30 days (at the latest), for technical reasons. Finally, HASP HELLAS SA considers that in its legal interests the image and promotion of the company itself and its stores, as well as of its products and services in the online (electronic) social media and the other services of the information society are included, granting at the same time the chance to other users of these media to participate in the promotional activities as well as to declare that they like (“like") our page and upload comments about our products.
Legal Obligation (article 6.1.c GDPR): some users’ data are kept for compliance with the legal obligations of HASP HELLAS SA, such as for taxation and accounting purposes.
Consent - Agreement: The completion of the e-mail address by the guest or the registered user in the special field of the webpage www.fmsstores.gr constitutes a positive act of consent for the delivery and receipt of informative / promotional messages.
2. Processing and category of personal data - Rights of guests/registered users
a) Personal Data Processing: HASP HELLAS SA, in case of online purchase, shall process the personal data of the user, as these are given by himself/herself at the opening of his/her account or/and in his/her order in the data registration form, in order for the specific order be completed through our online store. Each user of the online store (e-shop) www.fmsstores.gr has the option to select 2 ways in order to complete an online order and to register his personal data:
1. As a simple guest: In this case his/her personal data shall be retained in the records of HASP HELLAS SA for ninety (90) days as of the delivery or the closing of his/her specific order and the processing of these data shall only relate to the execution of the sale agreement remotely. The data, however, proving the conclusion of the transaction shall be retained for tax purposes (invoice statement) and his/her contact details / data shall be used by HASP HELLAS SA for purposes of commercial communication, unless the user has declared that he/she does not wish such communication.
2. As a registered user of the online store (e-shop): In this case the registered user has created a user’s account in our online store and his/her personal data shall be retained in the records of HASP HELLAS SA.. until he/she requests their deletion. Once per year HASP HELLAS SA shall request from the registered user to confirm the accuracy of the data it maintains and to update them provided there are changes. The registered user may at any time change or correct his/her data making a log-in into his/her account in www.fmsstores.gr (login) filling in his/her username and his/her password.
b)Personal Data Category and Processing Purpose
More specifically, the personal data that every user should provide (either he/she makes purchases as a guest or as a registered user) in order for any transaction be performed via the e-shop (www.fmsstores.gr) of HASP HELLAS SA, and in order for orders of the company’s products to be submitted, are the following:
· his/her full name (first name and surname);
· the delivery address of the products;
· the charging address of the order (in case this is different from the delivery address);
· the full invoicing data, such as Name, Profession, Tax Office and T.I.N (in case the issue of an invoice has been selected);
· the mobile phone number and the landline number;
· his/her e-mail address.
In addition to the aforementioned, HASP HELLAS SA also collects and saves the following personal data only about its registered users:
• history of orders;
• date of last log-in in the account;
• products placed in the basket or in the wishlist;
• participation in promotional activities.
In case a delivery of products or services to a third party, different from the guest or register user, is requested, the latter acknowledges that he/she shall have full responsibility for the provision of information to and the full consent of the aforementioned third party, whom he/she appoints as a recipient, for the disclosure of his/her personal data to the company “HASP HELLAS SA”, only for the purpose of delivery to the third party, of the respective products/services, and undertakes full liability for any claims of this person against “HASP HELLAS SA”.
The credit card data used by the guest or the registered user are not stored in storage means of HASP HELLAS SA.. during the transaction but are registered directly in a safe environment of the collaborating company, which has undertaken the launching of the payment procedure by cards.
The guest but also the registered user is also informed that in respect of the contact between him and HASP HELLAS SA, under the article 11 par. 3 of L.3471/2006, HASP HELLAS SA is processing the contact details registered by him. Furthermore, when notifications about changes of the terms of use of www.fmsstores.gr are sent via SMS/viber/email etc. to the registered user-customer with a hyperlink (link), the IP address of his electronic device (mobile phone, tablet, computer, etc.) may be registered as a proof that the member has received the relevant information.
Purpose of the basic data processing is the execution of the agreement and the completion of the specific order, the communication with the guest/registered user and the dispatch of informative messages relating to the stages for the settlement of the order, the provision of explanation in relation to the order and generally the information about purchases he/she has made, the delivery of the order at the place of the guest’s / registered user’s choice, the confirmation and his/her identification in every necessary case and the information about the existing stock in www.fmsstores.gr. The guest/registered user shall be informed that the provision of his/her above mentioned obligatory personal data, as well as the transactions’ details that are necessary and constitute a prerequisite, for the purpose of proper execution of the agreement for the order and delivery of the products and services. For this reason his/her consent is not required for this specific processing.
Each guest/registered user who uses www.fmsstores.gr shall be informed that his/her personal data relating to the receipt, execution and delivery of the order as well as the questions in relation to purchases, products and services of HASP HELLAS SA and the orders in www.fmsstores.gr, shall be subject to processing for the purpose of service to the users-customers provided both by the competent employees of HASP HELLAS SA and by third recipients or /and processors, on its behalf, in the context of execution of an order. These third recipients are transport companies, companies for individual or group shipments, internet service and e-commerce providers and customers’ service call centers, with whom HASP HELLAS SA is cooperating and who are subject to special strict terms of data processing agreed upon by HASP HELLAS SA, in its capacity as Controller. HASP HELLAS SA requires from its employees, the maintainers of its webpage, as well as from its third partners to take all necessary technical and organizational measures (including the appropriate policies and procedures), so that these measures will prohibit the disclosure of personal data of guests/registered users-customers of the company, who are processing, avail and apply data management and processing procedures, in a way that is lawful and protective for personal data, pursuant to GDPR.
No other processing or transmission of data of guests/registered users shall be performed by HASP HELLAS SA and its e-shop (www.fmsstores.gr), unless there is a prior full notification of the aforementioned persons and receipt of their consent, where required.
c) Data Recipients: As regards the data which are necessary for the pursuit of each and any of the above mentioned processing purposes and in respect of the responsibilities of each recipient, the recipients of data of the guest/registered user are or may be:
i. The responsible employees of HASP HELLAS SA;
ii. The tax authorities and the banking authorities in case of a relevant audit;
iii. The company which currently provides CRM services and processes the data of the registered users-customers as a processor on behalf of HASP HELLAS SA, in accordance with the directions and order of HASP HELLAS SA or any other company that will provide in the future to HASP HELLAS SA the same services in replacement of or in collaboration with the above company.
iv) External partners who provide internet services, orders storage and management, call center services, courier service or group shipping of products, services for product establishment and services for the sales data analysis, to whom the necessary data for the fulfillment of their duties are transmitted with strict restrictions and procedures. These companies shall use the data provided toy them under the terms of use of www.fmsstores.gr exclusively according to the directions of HASP HELLAS SA.
d) Rights of the Data Subject: Each guest or registered user, as a data subject, may exercise at any time his rights, as prescribed in the General Data Protection Regulation 679/2016 EU and, particularly, in the articles 12 until 23 of GDPR and the national legislation, and more specifically:
i) the right to receive information and obtain access to the data processed by HASP HELLAS SA;
ii) the right to restriction of his/her data processing;
iii) the right of rectification or erasure of some or all (right to be forgotten) of his/her personal data;
iv) the right to object, that is to oppose the processing of his personal data; and
v) the right to his/her data portability.
Each guest/registered user may exercise his/her aforementioned rights as follows:
· By submitting a relevant request to the e-mail address [email protected];
Furthermore, the registered users:
Regarding the right of access and the right to rectification/supplement of personal data, the company provides the option to the registered users of www.fmsstores.gr to review, rectify / supplement their personal data through their personal account in www.fmsstores.gr in the unit «Account’s Data» and «Mailing Addresses».
Regarding the right to data portability, the company provides the option to registered users to receive their personal data or/and transmit them to another controller, by submitting a written request to the e-mail address [email protected].
Each registered user is informed that he/she has the right to withdraw his/her consent to any data processing to which he/she has given his/her consent in www.fmsstores.gr, from his/her personal account in www.fmsstores.gr in the unit «Personal Data Settings» or by sending e-mail correspondence.
In case of exercise of one of the above mentioned rights of the registered user, HASP HELLAS SA shall take any possible measure for the satisfaction of the request within one (1) month as of its submission. In this case, the registered user is informed that the least required information of his/her personal data shall be maintained in order for the company to secure its legal interests.
e) Personal Data Retention Term: The data of the guest of www.fmsstores.gr shall be kept and processed by HASP HELLAS SA until completion of his/her specific order, except for those data that are required to be kept and retained for tax purposes.
The data of the registered user of www.fmsstores.gr shall be kept and processed by HASP HELLAS SA, until he/she requests the deletion of his/her account or, regarding the data processings performed under his/her consent, until he/she shall declare the withdrawal of his/her consent for the purposes of provision of the services of HASP HELLAS SA. Nevertheless, some required personal data relating to his/her transactions with HASP HELLAS SA, as well as the information, consent and withdrawal of consent of the member in relation to his/her data processing shall remain as information for the registered user-customer as a guaranteed proof of the lawful processing of his/her data by HASP HELLAS SA and for ensuring the legal claims of the parties.
f) Special Category Data: The member is informed that HASP HELLAS SA neither collects nor demands the disclosure of sensitive personal data for the needs of www.fmsstores.gr.
g) Transparency Obligation: For any other information regarding his data as well as their processing and protection any data subject may address the Data Protection Officer of HASP HELLAS SA (Data Protection Officer) in the email [email protected] and in the call line 210 6293011. In case, however, that he/she considers that he/she is not satisfied by the answer or in general by the method of collection, processing and management of his/her data, he/she is informed that he/she has the right to file a termination notice in the competent supervisory authority (Data Protection Authority, www.dpa.gr, 1-3, Kifisias str., P.C. 115 23, Athens, tel. 210 6475600, email [email protected]).
h) Technical and Organizational Protection Measures: HASP HELLAS SA, the processors acting on its behalf and its agents /assistants in the fulfillment of its duties are contractually committed to apply the appropriate technical and organizational measures for the best possible protection of the personal data against any random or unlawful data destruction or loss, alteration, unlawful disclosure or access to them and in general their unlawful processing (including the remote access) as well as for guaranteeing the option of recovery of data availability and of the access to them. These measures aim at ensuring a safety level addressing the risk that may affect the certain data, taking always into account the kind, category and significance of the data, the evolution of the technology, the application cost and the nature, scope of application, the framework and the purposes of each specific processing, applying at the same time procedures for the regular testing, assessment and evaluation of efficiency of these technical and organizational measures. In any case, HASP HELLAS SA, the processors acting on its behalf and its agents /assistants in the fulfillment of its duties are contractually committed to keep the confidentiality of the personal data and not to disclose or give access to the data to any third party without the prior notification of their subject except for in cases explicitly provided by law.
HASP HELLAS SA declares that no other use of the personal data of the guest/registered user shall be made for other purposes, apart from those mentioned in the present terms without notification in advance, and where required, his express consent.