Information of consent for personal data prosessing (GDPR)

Our company is under the name «LA VIE EN ROSE BY DIMITRA KATSAFADOU COSMETICS MANUFACTURING AND TRADING SOCIETE ANONYME», located in Agia Paraskevi , Ag. Ioannou 75A, Athens, (hereinafter referred to as "the Company"), collects, processes and protects your personal data in accordance with the provisions of the new General Regulation on the Protection of Personal Data (GDPR, EU Regulation 2016/679 and of the Council of 27 April 2016 "on the protection of individuals with regard to the processing of personal data and on the free movement of such data") and with the provisions of Law 4624/2019 Elesa General Rules.

 

  1. What data are we processing

The Company collects and maintains information, both in hard copy and electronically, that you provide when we enter into a partnership agreement and at any time contact any of our affiliates requesting information about our Company and partnership offers.
In particular, as part of the fulfillment of our contract, we collect and process the following personal data:
• Personal information such as full name, surname, date of birth, marital status, ID, ID number or other identification information,
• Contact details such as home address, work address, work phone, mobile phone, fax, email,
• Credit or debit card information, bank accounts (depending on the billing method you have chosen and if necessary only for the cooperation between us).

  1. Purposes for which we process your information

2.1. Performance of the contract
We process your personal data during the preparation of our agreement during and after the termination of the contract for the following purposes:
(a) at the pre-contractual stage of reviewing your application and concluding the relevant contract;
(b) to issue and send to you service invoices, sales invoices, and purchase invoices from individuals;
(c) to provide you with the products and services in accordance with our contract;
(d) for communication on any matter arising out of the execution of our contract;
(e) to execute a process of collection of any arrears arising under the contract.

2.2. Customer Profile Configuration
Once you have given us your consent by filling in the relevant "Statement of Consent or Withdrawal of Consent", we store the information you provide in the contract as well as information related to the use of our services (service categories, frequency of service use) so that be able to find out about your customer experience and provide you with customized services and advertising that suits your needs and preferences.

2.3. Preventing and managing fraud
We process your personal data for the purpose of preventing and managing potential fraud. In addition, we may receive information about the commission of offenses where this is necessary to protect our legitimate interests, that is to say, the protection of our assets and our customers.

2.4. Promotion - Advertising
Once you have given us your consent by completing the relevant Consent Form, the Company may process your personal data for the following additional purposes:
(a) to promote products and services;
b) to participate in various promotional activities of the Company.

2.5. Legal Obligations - Claims
We process your personal data:
(a) to defend our legal rights before judicial or other authorities;
(b) fulfilling our compliance obligations with domestic and foreign supervisory authorities, such as to the Personal Data Protection Authority (ASCPS),
(c) to deal with issues that will arise in our cooperation with the National Medicines Agencies or other supervisory agencies of health service providers.

  1. Who receives and processes your information

3.1. Your information may only be accessed by our properly authorized employees or third parties, who may be:
a) External affiliates or authorized resellers of the Company providing sales of products and services.
b) External Partners of the Company providing research and / or advertising services, provided you have given your consent.
(c) Debt recovery companies, lawyers, bailiffs or other persons necessary for the collection of arrears.
(d) Other companies providing services and to the extent that the transmission of personal data is necessary to execute the contract or to satisfy customer requests.
(e) Financial institutions.

3.2. Your data (ie name, surname, ID number (or ID card for nationals) or Passport number or other official identity document and country of issuance (for foreigners), related to either your debt, has expired, we are forwarding to our legal representative the processing, with the sole purpose of enabling our Company to verify your solvency as a prospective client. In any case you retain the right of access and objection to the above transmission.

3.3. Your data is transmitted to public services, administrative and judicial authorities, supervisory and regulatory authorities where required by law, court order or any other act binding on the Company in compliance with its supervisory obligations.

  1. How long we keep your information

The time we keep your data depends on the time of conclusion and termination of the contract as well as our obligation to apply the legal and particular tax framework.

4.1. Your personal data will be deleted after the legal retention period, and at the latest 5 years after the termination of the contract. Your data will then be deleted, unless you give your consent to edit it again. In any case, you have the right to request termination of communication for advertising purposes at any time.

4.2. In cases where the retention of personal data is necessary for the exercise or protection of our legal rights before judicial or other authorities provided by applicable law, the above 5-year period shall be extended until the end of the period where such data is no longer available. necessary for the above purposes.

4.3. This time limit may be set out in the context of tax audits or litigation.

  1. Your rights

The Company safeguards your rights to the processing of your personal data and makes it easy for you to exercise it.
You have the right:

5.1. Requesting access to your personal data, in particular, you can obtain information about what data we process, the purposes for which we process it, the recipient categories to which it is sent, their scheduled storage, their origin, if not we have collected from you as well as obtain information on the existence of any automated decision-making process, including profile analysis.

5.2. Request correction of your personal data if inaccurate or incomplete.

5.3. Request the deletion of your personal data, unless the processing of such data is necessary for the fulfillment of a legal obligation, for reasons of public interest, including any obligations to the supervisory authorities of our health service providers or for our exercise or defense of legal claims.

5.4. Request a restriction on the processing of your personal data for specific purposes only.

5.5. Portability of your data. That is, to receive your personal data that you have provided in a structured, commonly used format, or to request it to be transmitted to another person.

5.6. Revoke your consent to the processing of your personal data at any time either by following the relevant option provided in the emails you receive or by a statement you will send to the Company's contact details and in particular to the Company's email [email protected] In this case, their processing will be stopped by us, without affecting the legality of any processing until your consent has been withdrawn.

Finally, if you believe your rights are being violated you have the right
refer to the Data Protection Authority
(ASCP).