PERSONAL DATA PROTECTION STATEMENT
1. Who we are – What this statement is about
We provide this Statement to help you understand how we may use any personal information we receive from you, in any way, and in particular through the internet and other electronic communication networks. By providing your personal information to us, in any way, in written or electronic form, through our website or social media page, etc., you accept our Personal Data Protection Statement and give your consent to our collecting, using and disclosing your personal data in the manner described therein. If you do not agree with this Statement, please do not provide us with your personal data. This Statement is incorporated and forms part of the Terms and Conditions governing any transaction or interaction that may result in the provision of Personal Data to EMA, as well as the use of www.ema.gr, or our facebook page 'Continental Tyres Greece', and any other website or social media page, in general. We will use your information only for the purposes set out below.
2. What is Personal Data
Personal data means any information relating to an identified or identifiable natural person which is processed by EMA, as a result of or in connection with the provision of services. An identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identity card, location information, an online identifier or one or more factors related to the psychological, physical, genetic, mental, economic, cultural or social identity of that natural person.
3. What data we collect from you, where we derive them from, how we use them
EMA generally collects only personal data that are necessary to meet your requests, perform its commercial transactions, or obligations imposed by law and its legitimate commercial interests. You will be informed where additional, optional information is gathered at the time of data collection.
Please do not provide sensitive information to EMA unless this is required for the purpose of providing personal data.
Outline of the data we collect
Information you provide: We collect information which you provide to us, which, inter alia, may include the following:
Your name, email address, postal address, postal code, telephone number, or in case of transactions, the tax information necessary for tax compliance purposes. We collect this information in various ways, for example when you enter it in your transactions with us, or participate in competitions or promotions.
Information we collect automatically: We collect data when you communicate with our company and access our advertisements. This information includes:
your interaction with us through emails, facebook, messenger, chatbot and text messages, and so on, details of your communication with Customer Service, such as the date, time and reason for contacting us, device identifiers or other unique identifiers.
Information from other sources: We also receive information from other sources. We protect this information in accordance with the practices described in this Statement and other additional restrictions imposed by the data source. These sources vary from time to time, but may include:
- service providers who help us identify a location based on your IP address, in order to customise our services, as well as for other uses in accordance with this Statement;
- payment service providers, who inform us about the methods of payment in your transactions;
- sources available to the general public, such as open government databases.
If possible, we will provide you with the option to choose how we use this information (for example, by selecting whether or not to receive special promotions) (opt in/opt out). You may choose to provide us with personal information in case, for example, you contact us with a question, register on our website, place an order, fill out a questionnaire or other form with your personal information, request information from us, participate in a competition, or make use of a promotion. It is specifically stated that we do not keep or process in any way personal data relating to the details of the payment method, i.e. bank account, credit or other bank card details, beneficiary names entered in the secure environment of a banking institution with which we cooperate for this purpose.
You may decide whether or not you wish to receive newsletters from us, with the exception of any communication we are required by law to have with you, or in response to a request made by you, or to perform a transaction between us. In the event that you specifically participate in our competitions through Facebook, we may, under the terms of that competition, derive your address (Facebook Messenger ID) through the Chatbot application.
Product Promotion: To the extent that you consent to the use of your personal data for promotions, these data may be used for such purposes. Such use of your personal data requires that you provide your explicit consent, as when, for example, you activate the appropriate box of a promotion and then press a button to confirm. In this case, we may send you advertisements for our products and services, or invite you to participate in promotions. We will contact you by the means to which you have consented, such as by e-mail, if you provide us with your e-mail address, by telephone or SMS if you provide us with your telephone number, or through social media communication applications, if you provide us with these details. Finally, we may also use your data to analyse and improve the effectiveness of our webpages, as well as for promotion and market research purposes.
Every time we communicate with you, you can opt to unsubscribe from our communication list. If you decide to unsubscribe from a service or communication list, we will delete your data as soon as possible, although it may take some time and/or information before we can process your request.
For any information regarding your unsubscription from the communication list of our website or any Social Media Network pages, you can contact the administrator, or our company at the details listed herein.
If you choose to register or log in to any of our webpages using a third party single sign-on registration service that authenticates your identity and transmits your social media login information to us, we collect any information or content needed for your registration or login, for which you have given the social media provider permission to share with us, such as your name or email address. Collection of any other information may depend on the privacy settings you have agreed with the social media provider, so please review the privacy statement or policy of this social media service.
When visiting our webpages, some data that cannot be associated with a specific person (non-personalised data) may be collected, which help EMA provide better services to its customers (analytics). For example, the domains from which the visits originate are recorded, and visitors' activities are measured on the EMA websites, in a way that the collected data cannot identify users. This information is used and analysed only cumulatively, for the purpose of identifying trends and patterns. The above information is not analysed based on individual users. EMA may use this information to analyse trends and statistical data, and thus improve its services to its customers.
In some cases, you may have previously provided your personal data, e.g. you are our former employee or partner.
Tools based on geographic location
These location data are collected to provide you with information about the services we think may be of interest to you based on your geographic location, to inform you about our network of partners or dealers of our products, and to improve the products and services we provide based on geographic location. In some cases, you may receive newsletters related to your geographic location, such as weather reports, closest dealer of our products, road safety messages, via Messenger, Chatbot or similar applications, provided you have given your prior consent for this purpose, by clicking on the corresponding available option.
Social media applications
The purpose of social media functions is to facilitate sharing information and content. Any personal information that you provide to any function of a social media network in which EMA participates, e.g. Facebook, may be disclosed to other users of that function (unless otherwise stated at the time of collection), over which we may have limited or no control.
How we use your personal data
The legal basis for the collection and use of personal information described in this Privacy Statement depends on the personal information in question and the specific context in which this is used and collected. We usually collect your personal information from you when we request it to perform a contract between us, provided that such processing serves the legitimate interests of our company and does not harm your data protection interests or your fundamental rights and freedoms, or provided you have given your consent for this purpose.
In some cases, collection of your personal information may be necessary as required by law, or in order to protect your vital interests or the vital interests of third parties. In other cases, such data is necessary to identify you in relation to our products and services, or to provide, analyse, manage, improve our services and marketing activities, to process your orders and payments, and to communicate with you about these or other issues, to keep records, or to detect and prevent violations. If you have queries about the use of your personal data (including the legal basis and transfer mechanisms we rely on), please contact EMA at email@example.com.
Your personal data are not used for other purposes, unless we obtain your permission, or unless this is required or permitted by law or by professional standards.
If, for example, you send us your CV in order to apply online for a post at EMA, we will use the information you provide to see if you meet any current job opportunities.
Disclosure of information
We do not share personal data with third parties that are not affiliated with us, unless this is necessary for our legitimate business purposes and requirements, in order to respond to your requests and/or as required or permitted by law, or to respond to legal procedures, to protect our customers, to protect life, to maintain the safety of our products, and to protect EMA's rights or property.
In some cases, we may share your personal data with various third companies or service providers, dealers or administrators of web pages and social media pages that work on our behalf or with us.
For example, we may work with payment service providers (for example credit card companies, banks, transport and courier companies, etc.), IT service providers (e.g. computer centres, host providers, backup services, database services) in order to carry out our business, secure data or serve website users. These providers have access to the personal data needed in order to offer their services and perform your transactions. These providers are obliged to use personal data in accordance with this Statement, as well as the regulatory data protection laws under Greek and European legislation.
We share your personal data with your consent or as required to complete any transactions or to provide any products you have requested or authorised. We also share data with EMA affiliates and subsidiaries.
EMA may also disclose personal data in order to respond to requests from the government or law enforcement authorities, or when required to do so under the provisions of applicable law, court orders or statutory regulations. Such disclosures may also be required for privacy protection or security audits and/or to investigate or respond to complaints or security threats.
If, when disclosing information, we transfer personal data to countries outside the European Economic Area and other regions that have comprehensive data protection laws, we will ensure that the information is transferred in accordance with this Statement and applicable data protection legislation.
In addition, EMA will not transfer in any way the personal data you provide to it to any third parties or to the above mentioned parties, unless they apply adequate measures of data protection.
We know how important it is to protect children's personal data, especially online. In particular, any services and products we offer, our websites or social media pages are neither intentionally designed for nor addressed to children. In the event that we become aware or think that a minor has provided personal information, we will make every reasonable effort to delete such personal information from our records, or locate it, and to the extent permitted by law, retain it for the sole purpose of ensuring that it will no longer be used.
5. Precautionary measures
We take steps to keep your personal information safe. We apply appropriate physical, electronic and administrative procedures to safeguard the information we collect. We have no control over the privacy of emails before they reach us. We recommend that you do not include confidential, private or sensitive information in your emails or any posts on social media pages or online, in general. In the unlikely event that we think that the safety of your personal information in our possession or under our control is compromised, we will try to inform you as soon as reasonably practicable under these circumstances and by any appropriate means, by using your contact details at our disposal.
Please note that the transmission of information online is not completely safe. Although we make every effort to protect your personal data, we cannot guarantee the safety of the data transmitted on our website or our social media pages. After receiving your information, we apply strict procedures and security features to prevent unauthorised access.
Our websites or social media pages may contain links or references to other websites or pages that are beyond our control. Please note that we do not have control over these websites and that this Statement does not apply to them. We advise you to read the personal data protection statements, and terms and conditions of the linked or referenced websites you visit.
6. Data retention time
We make every reasonable effort to keep the personal data we collect from you only for the time for which we need them and for the purpose for which they were collected, or until you request their erasure (if this occurs earlier), unless we continue to keep the information according to applicable law.
7. Your rights
Access to your data: You have the right to request a copy of your personal data kept by us.
Right to rectification: We always make sure that your data are accurate and up to date. For this reason, you can ask us to correct any personal data that, in your opinion, do not correspond to the above.
Right to erasure: You have the right to ask us to delete any personal information about you, provided:
- You believe that we no longer need to keep the information to serve the purpose for which it was obtained;
- We process this information with your consent, and you have withdrawn this consent (See section 'Withdrawal of consent');
- You have reasonable objected to our using your data (See section 'Objections to the use of data');
- We use your data against the law or our contractual obligations.
Right to object: You have the right, at any time, to ask us to stop using your personal data for marketing or other purposes. When you submit your request, we will cease using your data, unless there are compelling legitimate grounds that override your interests.
Right to restriction of data processing: In some cases, you may ask us to restrict processing of your data.
Automated processing: If we use your data in an automated manner to make decisions that affect you significantly, you have the right to request that such a decision be reviewed by an individual to whom you can appear and contest this decision. You have this right only if your data were processed with your consent or as part of our contractual relationship with you.
Withdrawal of your consent: When we process your data with your consent, you can withdraw this consent at any time, and we will stop using your data for the purposes for which the consent was given. The withdrawal of consent shall not affect the lawfulness of processing before withdrawal of consent.
Right to data portability: You have the right to request that we transfer your personal data to another provider.
Contact: Please contact us by any means of communication set out in the relevant section if you wish to exercise any of the above rights.
8. Changes to this Statement
We submit this Statement to frequent review and may occasionally modify or revise it at our sole discretion. If we make any changes, we will record the date of modification or revision in the Statement. The updated Statement will apply to you and your data from that date. We advise you to review this Statement occasionally to see if any changes were made on how we process your personal data. This Statement was last updated on May 25, 2018.
9. Non-acceptance of this Statement and its terms
In the event that you choose not to accept these terms in relation to your personal data or the use of our website in general, or you withdraw your acceptance in the future, then you may either not be able to use our products and services, for which your consent is requested to process your personal data, or you may not be able to initiate or continue a contractual relationship, or such relationship may be abruptly terminated, or you may not be able to take part in competitions and promotions, or your participation in them may be cancelled, regardless of the stage this action may be, even after the end of any promotion or competition, in which case you are required to return any gifts, prizes or incentives you received from EMA, based on your initially granted and subsequently revoked consent.
10. Contact us
If you have any questions, comments or complaints regarding our processing or protection of your personal data, or if you wish to modify your personal data or exercise any of your rights as a data subject, please contact us at firstname.lastname@example.org or at the postal address Galinis 17, Kifissia, 14564 or call 210 6290300.
11. Right to terminate
We try to resolve any complaints we receive in relation to the processing of personal data promptly and consensually. Nevertheless, you have the right to lodge a complaint on any such matter to the Personal Data Protection Authority or any competent authority designated in the future for this purpose.