MARKS
& SPENCER – BONUS CLUB
PRIVACY NOTICE ON THE PROTECTION OF PERSONAL DATA
MARKS &
SPENCER MARINOPOULOS GREECE (hereinafter
referred to as "MARKS & SPENCER") having its registered
office and headquarters in Athens, on Ermou Street, no. 33-35, acting in its
capacity as Data Controller, collects and further processes your personal data,
only if absolutely necessary, for explicit and legitimate purposes, in
accordance with the General Data Protection Regulation (EU) 2016/679
(hereinafter "GDPR") and the Greek law 4624/2019, as applicable. This
privacy notice is intended to inform you about the processing of your personal
data collected and processed in the context of the "BONUS CLUB"
Privileges Program offered by MARKS & SPENCER.
PURPOSES OF
PROCESSING & LAWFUL BASIS
|
PURPOSES OF
PROCESSING
|
LAWFUL
BASIS
|
|
Completion of
registration to the "BONUS CLUB" Privileges Programand the option
to update the member's identification and contact details. The applicant
provides the following identification and contact information upon
registration: First Name, Last Name, Title, Mobile Phone, Email Address, City,
Region, Postal Code, Date of Birth.
|
Compliance
with our legal obligations.
|
|
We collect
information regarding your purchases when you use your Membership Card for the
purpose of redeeming the Benefits. The collection of points is proportional
to your use of the Card.
|
Performance of
a contract with you.
|
|
We useyour personal membership card code and
your mobile phone number to verify your identity and log in to the app, where
you will be informed regarding your points.
|
Performance of
a contract with you.
|
|
Granting and
redeeming the points you have collected with your purchases.
|
Performance of
a contract with you.
|
|
Improving the
services we offer you through your participation in surveys we conduct.
|
Our legitimate
interest.
|
|
Offering
special and personalized offers via newsletter, SMS and/ or instant messages
that correspond exclusively to your preferences.
|
Performance of
a contract with you.
|
|
Sending
newsletters and instant messages to inform you about new products and offers
related to the Program (marketing).
|
Performance of
a contract with you.
|
|
Sending
special offers and promoting products and services through Social Media that
correspond to your preferencesthrough the Program.
|
Performance of
a contract with you.
|
COLLECTION
& USE OF PERSONAL DATA OF MINORS
Subscribing to
the MARKS & SPENCER Privileges Program is only available to persons over 18
years of age.
If it is found
that any personal information has been collected from a minor without
verifiable parental consent, this information will be deleted as soon as
possible.
TRANSFER OF
PERSONAL DATA
At MARKS &
SPENCER we care about the security and protection of the personal data you
provide us. We do not share your information with unauthorized third parties.
Your personal
data is transferred to "MENA SERVICES MONOPROSOPI I.K.E."
which provides MARKS & SPENCER with CRM services and acts on its behalf. In
any case where we outsource the processing of personal data to third party
affiliated companies acting as data processors, we ensure that these companies
take the same measures to protect your personal data as MARKS & SPENCER and
process your data only in the context of an explicit and written instruction.
In addition, recipients of your data are social media providers for the purpose
of sending personalised offers.
RETENTION
PERIOD
MARKS &
SPENCER keeps and processes your personal data for as long as your membership
card remains active.
If your
membership card remains inactive for a period of two (2) years, MARKS &
SPENCER will delete your data after six (6) months, unless a different
retention period is required by the applicable legislation.Please note that
purchase data (financial and tax data) are kept for as long as required by the
relevant legislation in order to comply with our tax obligations.
SECURITY OF
PERSONAL DATA
The processing
of personal data is carried out in a manner that ensures its confidentiality.
MARKS & SPENCER and its partners use appropriate technical and
organisational security measures, rules and other procedures to protect your
personal data from any unauthorised access, misuse, alteration, unauthorised
disclosure, loss or accidental/unlawful destruction and any other form of unlawful
processing.
YOUR RIGHTS
Under GDPR you
have and may exercise (where applicable) the following rights: (i) the right of
access and information; (ii) the right of rectification; (iii) the right to
erasure; (iv) the right to request restriction of processing; (v) the right to
data portability; (vi) the right to object, including to automated
decision-making and profiling.
We inform you
that you can exercise the above rights by sending a relevant letter addressed
to MARKS & SPENCER, to the attention of the Data Protection Officer of
MARKS & SPENCER or by sending an e-mail to
GR.dataprivacy@marks-and-spencer.com or by sending a written request via a
relevant form available at any MARKS & SPENCER store.
In case of
exercising any of the above rights, MARKS & SPENCER will respond swiftly
and in any case within one (1) month from the submission of the request,
informing you in writing about the progress of its fulfilment.
For further
information on the processing of your data or the exercise of your rights by
MARKS & SPENCER, please refer to our Privacy Policy, available at:
https://marksandspencerfood.gr/politiki-prostasias-prosopikwn-dedomenwn/.
Finally, if you
have any complaint regarding this notice or any data protection issues, you may
also contact the Hellenic Data Protection Authority at the following address:
www.dpa.gr.