MARKS & SPENCER – BONUS CLUB
PRIVACY NOTICE ON THE PROTECTION OF PERSONAL DATA
MARKS & SPENCER MARINOPOULOS GREECE (hereinafter referred to as "MARKS & SPENCER") having its registered office and headquarters in Athens, on Ermou Street, no. 33-35, acting in its capacity as Data Controller, collects and further processes your personal data, only if absolutely necessary, for explicit and legitimate purposes, in accordance with the General Data Protection Regulation (EU) 2016/679 (hereinafter "GDPR") and the Greek law 4624/2019, as applicable. This privacy notice is intended to inform you about the processing of your personal data collected and processed in the context of the "BONUS CLUB" Privileges Program offered by MARKS & SPENCER.
PURPOSES OF PROCESSING & LAWFUL BASIS
|
PURPOSES OF PROCESSING
|
LAWFUL BASIS
|
|
Completion of registration to the "BONUS CLUB" Privileges Program. The applicant provides the following identification and contact information upon registration: First Name, Last Name, Home Address, City, Postal Code, Mobile Phone, Home Phone, Date of Birth.
|
Compliance with our legal obligations.
|
|
We collect information regarding your purchases when you use your Membership Card for the purpose of redeeming the Benefits. The collection of points is proportional to your use of the Card.
|
Performance of a contract with you.
|
|
We collect information when you use your password to verify your identity and log in to the app, where you will be informed regarding your points.
|
Performance of a contract with you.
|
|
Granting and redeeming the points you have collected with your purchases.
|
Performance of a contract with you.
|
|
Improving the services we offer you through your participation in surveys we conduct.
|
Our legitimate interest.
|
|
Offering special and personalized offers via newsletter, SMS and/ or instant messages that correspond exclusively to your preferences.
|
Provided that you have given your consent.
|
|
Sending newsletters and instant messages to inform you about new products and offers (marketing).
|
Provided that you have given your consent.
|
|
Sending special offers and promoting products and services through Social Media that correspond to your preferences.
|
Provided that you have given your consent.
|
COLLECTION & USE OF PERSONAL DATA OF MINORS
Subscribing to the newsletter service as well as subscribing to the MARKS & SPENCER Privileges Program is only available to persons over 18 years of age.
If it is found that any personal information has been collected from a minor without verifiable parental consent, this information will be deleted as soon as possible.
TRANSFER OF PERSONAL DATA
At MARKS & SPENCER we care about the security and protection of the personal data you provide us. We do not share your information with unauthorized third parties.
Your personal data is transferred to "QIVOS - WE CREATE CUSTOMER LOYALTY S.A." which provides MARKS & SPENCER with CRM services and acts on its behalf. In any case where we outsource the processing of personal data to third party affiliated companies acting as data processors, we ensure that these companies take the same measures to protect your personal data as MARKS & SPENCER and process your data only in the context of an explicit and written instruction. In addition, recipients of your data are social media providers for the purpose of sending personalised offers.
RETENTION PERIOD
MARKS & SPENCER keeps and processes your personal data for as long as your membership card remains active.
If your membership card remains inactive for a period of two (2) years, MARKS & SPENCER will delete your data after six (6) months, unless a different retention period is required by the applicable legislation.
SECURITY OF PERSONAL DATA
The processing of personal data is carried out in a manner that ensures its confidentiality. MARKS & SPENCER and its partners use appropriate technical and organisational security measures, rules and other procedures to protect your personal data from any unauthorised access, misuse, alteration, unauthorised disclosure, loss or accidental/unlawful destruction and any other form of unlawful processing.
YOUR RIGHTS
Under GDPR you have and may exercise (where applicable) the following rights: (i) the right of access and information; (ii) the right of rectification; (iii) the right to erasure; (iv) the right to request restriction of processing; (v) the right to data portability; (vi) the right to object, including to automated decision-making and profiling; and (vii) the right to withdraw your consent at any time, taking into account that the withdrawal of consent does not affect the lawfulness of the processing carried out. In particular, the withdrawal of consent regarding the use of your e-mail address is also possible electronically by following the relevant link and the instructions provided in each relevant communication (unsubscribe).
We inform you that you can exercise the above rights by sending a relevant letter addressed to MARKS & SPENCER, to the attention of the Data Protection Officer of MARKS & SPENCER, Mr. Konstantinos Anastasopoulos, or by sending an e-mail to GR.dataprivacy@marks-and-spencer.com or by sending a written request via a relevant form available at any MARKS & SPENCER store.
In case of exercising any of the above rights, MARKS & SPENCER will respond swiftly and in any case within one (1) month from the submission of the request, informing you in writing about the progress of its fulfilment.
For further information on the processing of your data or the exercise of your rights by MARKS & SPENCER, please refer to our Privacy Policy, available at: https://marksandspencerfood.gr/politiki-prostasias-prosopikwn-dedomenwn/.
Finally, if you have any complaint regarding this notice or any data protection issues, you may also contact the Hellenic Data Protection Authority at the following address: www.dpa.gr.