The company “LILLY DROGERIE SINGLE MEMBER S.A.” (hereinafter “LILLY DROGERIE”) would like to inform the public that it processes the personal data of data subjects, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the national laws, the decisions/instructions of the Hellenic Data Protection Authority and the other National and European competent Authorities, in full respect of its customers’ privacy.
- The websites of LILLY DROGERIE
LILLY’s DROGERIE website is http://www.lillydrogerie.gr/.
Additionally, LILLY’s DROGERIE facebook page is Lilly Drogerie GR and its account on Instagram is @lillydrogeriegr.
Through these websites and pages, users may be informed about LILLY DROGERIE’s products, they can also buy products, create a user account, apply for a member card, apply for a job, participate in competitions, request for delivering them newsletters.
- Which personal data do we process?
A. When applying for a member card:
Full Name, father’ s name, phone number, email address.
B. When applying for delivering newsletters:
Full Name, father’ s name, phone number, email address.
C. When buying through e – shop:
Full Name, father’ s name, phone number, email address, purchase history, products added to the customers’ cart or removed from it, wish list.
D. When creating a user account:
Full Name, father’ s name, address, phone number, email address.
E. Other data:
Notes from the communication with LILLY DROGERIE (when and how LILLY DROGERIE communicated with the customers, complaints, information about the products), image recording system CCTV in shops, username in social media, comments and reviews in social media, educational background (studies, skills, professional experience), when applying for a job position.
LILLY DROGERIE does not process data about payments (such as the number of credit card, paypal information, elements of bank account); such information is processed only by service providers’ payments.
- Who processes personal data?
Access to personal data have:
a) LILLY’s DROGERIE Group of companies and the staff employed by them
b) third – parties service providers of banking exchanges, transfers, hosting websites
c) Google, Facebook, Instagram.
- How is the personal data collected?
Personal data is collected directly from the customer, through leaflets, applications, websites or by using any other legal way.
- What is the purpose of processing personal data?
Personal data are collected:
a) On the basis of performing a sales contract through e – shop.
b) On the basis of issuing of a membership card.
c) On the basis of creating a user account.
d) In order to answer customer’s questions.
e) In order to deliver to the customer the products he/she bought by LILLY’s DROGERIE e – shop.
f) In order to offer the customer a bonus program.
g) In order to send promotional material to the customer.
h) In order a customer to take part in a competition.
i) In order to evaluate the qualifications of an employee candidate.
j) In order to protect the customers, the staff and their assets from criminality.
k) In order to comply with the obligations of the labour, accounting and tax legislation and the legislation related to e – commerce.
- The period of retention.
Your data will be processed for the period necessary and only for the purpose mentioned above, in line with our customers’ needs and in compliance with our legal obligations. Data retention conditions are determined on the basis of the following specific criteria:
a) When processing takes place on a contractual basis through e – shop, your personal data will be stored for the period needed to perform this contract.
b) When answering customer’s questions, your personal data will be retained for the period needed to process the question.
c) For marketing purposes due to customer’s consent, your data will be stored until he/she abolishes his/her registration or asks for deletion.
In any case, we may retain some personal data in order to comply with our legitimate obligations and so as to be able to manage your rights either for statistical or historic purposes.
When the retention of your personal data is no longer needed, we remove them from our systems and our archive or we anonymize them, in order to prevent our customers’ identification.
- What are the rights of any data subject?
b) The customer has the right to apply for a copy of personal data possessed by LILLY DROGERIE.
c) The customer has the right to correct and modify the data, provided that they are wrong or they are no more updated, or / and fulfilled, if the data are incomplete.
d) The customer has the right to request deletion of personal data, if such information is no more needed for the purpose it has been processed.
e) When processing is based on customer’s consent, he/she has the right to withdraw it without affecting the lawfulness of processing based on consent prior to its withdrawal.
In order to exercise any of the above rights the customer may directly contact LILLY DROGERIE by the ways mentioned above.
- Security of your personal data.
LILLY DROGERIE applies all appropriate technical and organizational measures to ensure safe processing of personal data, in accordance with the legislation. Measures taken aim to prevent the accidental loss or destruction and unauthorized and / or illegal access to, use, modification or disclosure of data. LILLY DROGERIE undertakes to protect and keep safe customers’ personal data by taking any measure needed.
LILLY’s DROGERIE website uses the technology of SSL (Secure Socket Layer). The SSL technology is based upon a key code, which allows the encryption of data before sending them through the SSL connection. The security check between the Server and the data is made by using this unique key code, which ensures the communication. The browsers Netscape Navigator, Internet Explorer, Mozilla Firefox, Opera, Safari supports the SSL Protocol and for this reason we highly recommend you to use them in order to have access to LILLY’s DROGERIE website.
Finally, LILLY DROGERIE gives the best of its efforts to ensure the safety of customers’ personal data and, for this purpose, as soon as data is processed, LILLY DROGERIE uses strict procedures to prevent unauthorized access to them.
- Which is the applicable law of processing personal data?
This Policy is amended when necessary and the last updated Policy is published on the website of LILLY DROGERIE.