PRIVACY POLICY

1. Introduction

This privacy policy includes the ways in which FARCOM COSMETICS S.A. processes information which can be used to directly or indirectly identify a person (“Personal Data”) and which is collected by using the website of FARCOM COSMETICS S.A. and its contact form or order form. In any event, FARCOM COSMETICS S.A. reserves the right to change the terms of personal data protection after informing visitors/users within the existing or any future legal framework. If visitors/users do not not agree with the terms of personal data protection provided for in this section, they must refrain from using the services of enterprises.

You can browse our e-shop without providing any of your personal details. Your personal details will be requested solely if you wish to contact FARCOM COSMETICS S.A. or place an order.

Our website complies with General Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”), which is a directly binding statutory act, combined with Greek Law 4624/2019 (Government Gazette, Series I, Issue 137/29.08.2019) implementing the said Regulation. The GDPR creates certain new rights for natural persons and reinforces some of the rights already existing under Directive 95/46/EC. Directive 95/46/EC was repealed on 25 May 2018, when Regulation 2016/679 (GDPR) entered into force.

In this text, “User” means the person using the services of the website of FARCOM COSMETICS S.A., “Visitor” means the person visiting our website (www.hdfarcom.gr), and “Customer” means any person entering into a transaction with FARCOM COSMETICS S.A. to purchase its products.

Any processing of personal data carried out by FARCOM COSMETICS S.A. is conducted in such a way so as to ensure its confidentiality. All information is securely stored and access thereto is permitted solely to authorised staff. FARCOM COSMETICS S.A. applies and develops the necessary technical and organisational measures to protect the Personal Data of Users, Visitors and Customers (all of whom are considered to be personal data “Subjects”) from unauthorised or unlawful processing and use, as well as any loss, destruction, damage, theft or unlawful access.

2. Collection and Use of Personal Data

2.1. Legitimate basis for using your personal data

FARCOM COSMETICS S.A. collects only the personal data necessary to satisfy your requests. Where additional, optional information is sought, you shall be informed at the time of collection of such data and your prior consent shall be required for processing.

The legal framework in force allows us to process personal data only if we have a legitimate basis for doing do. Therefore, when we process your personal data we rely on one of the following processing cases:

Provision of consent: Your consent may be requested occasionally so that we can process some of your personal data. Such data shall only be processed in this way with your express consent (Article 6(1)(a) of the GDPR).

Performance of contract: Where the processing of your personal data is necessary for the fulfilment of our obligations under a contract entered into between us (Article 6(1)(b) of the GDPR).

Legal obligation: This occurs where we are required to process your personal data in order to comply with a legal obligation, including but not limited to: a) keeping records for tax purposes; b) providing information to a public body; c) complying with the requirements of a legislative or regulatory provision or a court judgment (Article 6(1)(c) of the GDPR).

Protection of your vital interests: This applies to cases where the processing of your personal data is necessary to protect your vital interests (Article 6(1)(d) of the GDPR).

Performance of a task carried out in the public interest or in the exercise of official authority: This applies to cases where the processing of your personal data is necessary for the performance of a task carried out in the public interest (Article 6(1)(e) of the GDPR).

Legitimate interests: We may process your personal data in cases where such processing is in the legitimate interests of our company when performing a lawful activity in order to ensure the continuity of that activity. Such processing shall, of course, not override your interests, freedoms and fundamental rights (Article 6(1)(f) of the GDPR).

FARCOM COSMETICS S.A. does not process your personal data such as personal data relating to a person’s race, nationality, political beliefs, trade union membership, religious beliefs, philosophical beliefs, physical or mental health, sex life and orientation, criminal convictions and offences.

The sections below cover the specificities of each of the aforesaid groups from which personal data are collected.

2.2. Collection of the Data of Data Subjects

FARCOM COSMETICS S.A. collects the personal data of Data Subjects through its Customer call centre, its External Associations, and its website.

The sections below cover the Data Subjects whose personal data are collected.

FARCOM COSMETICS S.A. may collect and process personal data concerning Users via the contact form, Website Visitors, Customers via the order form, and its External Associates.

Where required under the legal framework in force, we shall ask for your express consent for the processing of your personal data as collected by FARCOM COSMETICS S.A.

FARCOM COSMETICS S.A. processes the following personal data:

  • Users’ Personal Data: Full name, landline number, mobile telephone number, residential address, IP address, e-mail address.
  • Visitors’ Personal Data: IP address, cookies
  • Customers’ Personal Data: Full name, residential address, account shipping address, passport number, landline number, mobile telephone number and e-mail address.

3. Data Transmission

FARCOM COSMETICS S.A. does not disclose your personal data to third parties outside the European Union in countries where there is no appropriate data protection system in place. However, where such a data transfer is necessitated, FARCOM COSMETICS S.A. shall take every possible measure to ensure that your data are treated securely as is the case within the EU/EEA and in accordance with this Policy and the legislation in force. Furthermore, FARCOM COSMETICS S.A. shall update this Policy in order to cover cross-border data transmission and the relevant safeguards concerning the privacy of its platform’s Users.

4. Data Retention Period

FARCOM COSMETICS S.A. shall not retain the data of Data Subjects for longer than necessary for the fulfilment of the purposes for which they were collected or as required by the legal framework in force.

Where sale contracts have been concluded with FARCOM COSMETICS S.A., the latter shall keep its customer’s personal data until the lapse of the general limitation period prescribed by law for claims, i.e. up to twenty (20) years after the expiry of the contracts in question in any manner.

If during said 20-year period legal proceedings with FARCOM COSMETICS S.A. that directly or indirectly involve the Customer are ongoing, the aforementioned retention period shall be prolonged until a non-appealable judgment has been rendered. In certain cases, specific personal information may be retained for a longer period of time, due to possible legal obligations, legitimate interests of FARCOM COSMETICS S.A., etc. Such cases include but are not limited to those relating to any area of law (tax, civil, criminal, etc.).

Where a transactional relationship is not concluded, the personal data of Users or Customers shall be retained for a period of no more than five (5) years from the date they were collected. Where a longer or shorter data retention period is prescribed by law, the aforementioned data retention period shall be extended or curtailed accordingly.

FARCOM COSMETICS S.A. may collect, record and process the data of Visitors to its website. We may record your IP address and use cookies.

5. Use of the Website

In accordance with the specific provisions of Article 8 of the Regulation, minors under the age of fifteen (15) are prohibited from disclosing their personal data to FARCOM COSMETICS S.A. via its website without the prior consent of their guardian. We request that such persons do not submit information to us. In the event that website Users fall under the above category and continue disclosing their personal data to us via our website our, FARCOM COSMETICS S.A. shall consider that these persons have received prior consent from their guardian.

6. Rights of Data Subjects

The new GDPR Regulation grants you the following rights concerning the processing of your personal data:

Right to Access: You have the right to request access your personal data. This enables you to receive a copy of your personal data held by FARCOM COSMETICS S.A.

Right to Rectification: You have the right to request rectification of your personal data. This enables you to correct any incomplete or inaccurate data held by FARCOM COSMETICS S.A. In this case, we will need to verify the accuracy of the new data you provide.

Right to Erasure: You have a right to request the erasure of your personal data. This enables you to request that we erase or remove personal data if there is no reason for us to continue processing them.

Right to Restriction of Processing: You have a right to request the restriction of processing of your personal data.

Right to Object: You have the right to object to the processing of your personal data at any time where the processing of your data is based on the discharge of a duty carried out in the public interest or in the exercise of official authority (case referred to in Article 6(1)(e) of the Regulation) or if processing is necessary for the purposes of the legitimate interests pursued by FARCOM COSMETICS S.A. or by a third party (case referred to in Article 6(1)(f) of the Regulation).

Right to Data Portability: You have a right to request the transfer of your personal data to yourself or third parties. We shall provide your personal data to you or the third party you have indicated in a widely used, machine-readable format. Please note that this right applies only to automated information that you initially provided consent for us to use, or where we used this information to perform a contract concluded with you.

Right to Withdraw Consent: You may withdraw your consent at any time where you have already granted your consent to the processing of your personal data. However, this shall not affect the legality of any processing that took place before your consent was withdrawn. If you withdraw your consent, FARCOM COSMETICS S.A. may not be able to offer you certain of its products or services. You will be informed accordingly at the time of your request.

Non-automated decision-making: Automated decision-making occurs when an electronic system uses personal data to make a decision without human intervention. In this case you have the right to not be subject to decisions made solely on the basis of automated processing, including profiling with legal effects that concern you or significantly affect you in a similar manner, unless you provide consent or if this is necessary for the conclusion or execution of a contract between us or if otherwise permitted by law. You also have the right to challenge decisions made about you with the above procedure.

FARCOM COSMETICS S.A. respects your rights over your personal data and facilitates their exercise. You may address any request, query or complaint regarding your personal data by calling us at 2310 837077 or sending us an e-mail message at [email protected].

In any event, if you feel that the protection of your personal data has been breached in any manner, you have the right to lodge a complaint with the Hellenic Data Protection Authority (1-3, Kifisias Avenue, GR-11523, Athens) or online (www.dpa.gr).