1 Introduction
The Privacy Policy aims to help you understand why we collect your personal data and how we use it, and to demonstrate our compliance with national data protection legislation and the General Data Protection Regulation (GDPR) 679/2016. We hope that everyone will take the time to read it carefully.
This policy applies to all of you who purchase and use our products or services through our points of sale (stores), by phone, through applications, or via our website.
2 Who We Are
The company operates under the name “NEXT GEN RETAIL SERVICES ELECTRICAL, IT, TELECOMMUNICATIONS AND INSURANCE BROKERS SINGLE MEMBER S.A.” with VAT number 094077783 and is headquartered in Heraklion, Attica (90 Marinou Antypa Street), telephone [210-2899999], and has a legally registered branch in Nicosia, Cyprus, at 22 Makariou III, Mnasíadou & De Tyras Street. The Company offers experiences, products, and services that significantly improve our customers’ everyday lives through an efficient operating model across all points of contact with them.
3 Your Security
When you make a purchase from us, use our services, or communicate with us and our partners, it is necessary for us to process your personal data. During the processing of your data, we comply with applicable law and, in addition, take into account your views and preferences so that we can understand your expectations and ensure that they are reflected in our business decisions. Within this framework, maintaining your trust is a business priority and a commitment.
Our Company’s Privacy Policy provides detailed information about when and why we collect your personal data, how we use and process it, how long we retain it, and under what conditions we may share it with others.
4 Sources of Data Collection
When you visit one of our points of sale (e.g., stores, websites, social media), we may ask you to provide certain information about yourself so that we can serve you.
This information may include:
· Identification and contact data such as name, address, email address, phone number, and other contact details. These data are collected when purchasing a product from our stores or upon your first registration for our online services, e.g., when you participate in a survey, post a comment on our social media pages (Facebook, Twitter, YouTube), or take part in a competition.
· User account information, such as username and other identifiers or credentials used to access our online services.
· Information about you when applying for insurance or loans offered by selected third-party partners, such as employment details, financial status, and identification document data (ID card, passport, or driver’s license).
· Device information.
· IP address and cookie data collected when accessing our Company websites.
· Location data.
Situations where we may ask you to provide personal data:
· When purchasing products in our stores, by phone (call center), or through our website.
· When contacting us to resolve issues related to products and services you have already received.
· When registering to use our online services.
· When requesting updates about marketing promotions.
· When participating in one of our competitions or completing one of our customer surveys.
· When registering for our reward programs.
· When submitting requests.
5 Purposes for Processing Your Personal Data
We process your personal data for the purpose of entering into and performing a contract, including:
· Processing and completing orders and payments for products and services you have purchased, or issuing refunds.
· Responding to inquiries about the products and services you have purchased.
Thus, when you place an order with us, we process your personal data as necessary (such as identification, contact, and payment data) to send or provide the product or service, confirm payment, and subsequently respond to requests such as product replacement or warranty activation.
Additionally, we may use and process your personal data, provided you have given us your consent, for the following purposes:
· To notify you when a product is available again.
· To contact you via email or SMS regarding our products, services, competitions, offers, promotions, or special events.
· For promotional activities related to our products and services or those of our partners that we believe may be of interest to you, if we have your consent to contact you.
· To reward you as part of your participation in the Company’s loyalty programs.
· To provide content relevant to your interests when browsing our websites.
· To inform you about promotional activities (based on your consent), such as customizing communications or sending targeted messages via social media and third-party platforms.
6 Legitimate Interest
We may process your personal data whenever necessary based on our legitimate business interests for the following purposes:
· To provide customer support, respond to, and communicate with you regarding your requests.
7 Compliance with Legal Obligations
We will use your personal data to comply with our legal obligations, such as:
· Fulfilling tax, accounting, and other legal obligations.
· Responding to requests from public authorities or courts.
· Verifying the accuracy of the data we hold about you.
· Contacting you if there is a potential safety risk from a product you purchased or in the event of a recall.
Any other obligation expressly provided for by applicable law.
8 Consent
With your prior, free, explicit, and informed consent, we will process your personal data for the following purposes:
· Using automated information for purposes such as:
* Personalizing our online visitors’ experience.
* Providing content (including advertisements) tailored to your interests and browsing behavior on our online services.
We use this information to provide you with targeted advertising and collect demographic information about you. With your consent, we use automated information to identify usage patterns and tailor our services to better meet your needs.
9 How We Share Your Personal Data
The Company may share your personal data within the Currys Group to organize service delivery at the group level. Members of the Currys Group receiving this information are not allowed to use your data for other purposes or disclose it to third parties unless there is a lawful reason.
10 Our Service Providers
We work with service providers, suppliers, insurers, and organizations that process your personal data on our behalf, provided they comply with data protection and security rules under written contractual terms. We share only the information necessary for them to provide their services to us or facilitate the provision of their services to you, and we inform you accordingly depending on the service you choose to use.
11 Other Organizations and Individuals
In some cases, we may transfer your personal data to other organizations. For example:
· When you apply for credit or purchase an insurance product, we will share your information with our partner insurance companies to complete the insurance contract. In this case, we act as a credit broker, and insurance services are provided by a partner insurance company.
12 International Transfers of Your Personal Data
The Company does not transfer your personal data to third parties outside the European Union unless the conditions of Articles 44–49 of the GDPR are met and appropriate due diligence has been carried out before the transfer. This also applies when our suppliers or service providers use equipment or resources located outside the EU and process your personal data on our behalf.
In cases where personal data are transferred to third countries, they will remain subject to appropriate safeguards and be protected in the same way as within the EEA.
The safeguards and guarantees we adopt to protect your personal data during transfers to third countries include, among others, the adoption of the European Commission’s Standard Contractual Clauses in our contracts with data recipients, copies of which can be provided upon request.
13 How We Use Your Information for Automated Decision-Making
Sometimes we use systems to make automated decisions based on personal information we have (or are permitted to collect) about you or your business. This helps ensure that our decisions are quick, fair, efficient, and accurate based on what we know.
In such cases, the processing of your personal data will either be based on your prior explicit consent or when necessary for the performance of a contract between us (e.g., sales, warranties, etc.).
When processing is necessary for contract performance, it will be done:
· To ensure a potentially higher degree of consistency or objectivity in the decision-making process (e.g., reducing human error, discrimination, and misuse of authority).
· To reduce the risk of customers failing to pay for goods or services purchased.
· To enable faster decision communication and improve efficiency.
14 Marketing
When you subscribe to our Company’s marketing communications, i.e., when you consent to receive promotional messages, we will use the information you provide (e.g., email address, user account, social media username) to inform you about our new products, services, offers, and company news, for as long as your consent remains active.
Additionally, after completing a purchase (product or service) and being registered in our customer database, we use your data to:
· Inform you about our latest products, services, or offers.
· Contact you if we need or must provide additional information.
· Periodically check that you are satisfied with our products and services.
15 Your Rights
Under the GDPR for the protection of personal data, you have the right to exercise the following rights:
· **Access and Information:** You have the right to obtain information about what data we have collected, for what purpose, the legal basis of processing, how long we will retain it, the recipients, the existence of automated decision-making, and the transfer (or intended transfer) of your data to third countries.
· **Rectification:** You have the right to request that we correct any inaccurate information or complete additional information about you.
16 How Long We Keep Your Personal Data
We will retain your personal data for as long as you remain a Kotsovolos customer. After you cease to be a customer, we will retain your data for up to 10 years following your last purchase during which your personal data was used, unless a law requires a longer retention period.
17 Security Measures
All companies within the Currys Group use technical and organizational security measures to protect your personal information from loss, destruction, and any unauthorized access or alteration by third parties.
18 Links to Other Websites
Our websites may contain links to other websites operated by organizations we do not control. If you are redirected from our website to a third-party site, we encourage you to read their privacy statements.
19 Social Media
We use social media such as Facebook, Google, YouTube, Instagram, and Twitter to promote our products and services and inform the public about our company news.
20 Contact Us
If you have a question or complaint about this policy or how we handle your personal data, please contact us:
By email: [Personaldata@kotsovolos.gr](mailto:Personaldata@kotsovolos.gr)
By mail: 90 Marinou Antypa Street, Heraklion, Attica, P.C. 14122.
Policy Updates
We reserve the right to revise this Policy by publishing an updated version on our Website.
The revised Policy takes effect upon publication on our Website.
This Policy was last revised in May 2023.