Privacy Policy

1 Introduction
The Privacy Policy aims to help you understand why we collect your personal data and how we use it, as well as to demonstrate our compliance with national data protection legislation and the General Data Protection Regulation (GDPR) 679/2016. We hope everyone will take the time to read it carefully.

This policy applies to all of you who purchase and use our products or services through our points of sale (stores), by phone, through applications, or via our website.

2 Who We Are
The company operates under the name “NEXT GEN RETAIL SERVICES ELECTRICAL, IT, TELECOMMUNICATIONS AND INSURANCE BROKERS SINGLE MEMBER S.A.”, VAT No. 094077783, headquartered in Heraklion, Attica (90 Marinou Antypa Street), telephone [210-2899999], with a legally registered branch in Nicosia, Cyprus, at 22 Makariou III, Mnasíadou & De Tyras Street. The Company offers experiences, products, and services that significantly improve our customers’ daily lives through an efficient operating model across all customer touchpoints.

3 Your Security
When you make a purchase from us, use our services, or communicate with us and our partners, it is necessary for us to process your personal data. During data processing, we comply with applicable law and take into account your opinions and preferences to understand your expectations and ensure they are reflected in our business decisions. In this context, maintaining your trust is a top business priority and commitment.

Our Company’s Privacy Policy provides detailed information about when and why we collect your personal data, how we use and process it, how long we retain it, and under what conditions we may share it with others.

4 Sources of Data Collection
When you visit one of our points of sale (e.g., stores, websites, social media pages), we may ask you to provide certain information about yourself so that we can serve you.
This information may include:

· Identification and contact details such as name, address, email address, phone number, and other contact information. These are collected when purchasing a product in-store or upon your first registration for our online services, e.g., when you participate in a survey, post a comment on our social media pages (Facebook, Twitter, YouTube), or take part in a competition.
· User account information, such as username and other identifiers or credentials used to access our online services.
· Information about you when applying for insurance or loans offered by selected third-party partners, such as employment details, financial status, and information derived from identification documents such as an ID card, passport, or driver’s license.
· Device information.
· IP address and cookie data collected when accessing our Company websites.
· Location data.

Cases where we may request your personal data:
· When purchasing products in our stores, by phone (call center), or through our website.
· When contacting us to resolve issues related to products or services you have already received.
· When registering to use our online services.
· When requesting updates about marketing promotions.
· When participating in one of our contests or completing a customer survey.
· When registering for our reward programs.
· When submitting requests.

5 Purposes for Processing Your Personal Data
We process your personal data for the purpose of concluding and executing a contract, including:
· Processing and completing orders and payments for products and services you have purchased, or issuing refunds.
· Responding to inquiries related to the products and services you have purchased.

Thus, when you place an order with us, we process your personal data to the extent necessary (such as identification, contact, and payment data) to send or provide you with the product or service, confirm payment, and subsequently respond to related requests, such as product replacement or warranty activation.

Additionally, we may use and process your personal data, provided you have given us your consent, for the following purposes:
· To notify you when a product becomes available again.
· To contact you via email or SMS regarding our products and services, contests, offers, promotions, or special events.
· For promotional activities related to our products and services or those of our partners that we believe may be of interest to you, provided we have your consent to contact you.
· To reward you as part of your participation in the Company’s loyalty programs.
· To provide content of interest to you when browsing our websites.
· To keep you informed about promotional activities (based on your consent), e.g., by customizing communications or sending targeted messages via social media and third-party platforms.

6 Legitimate Interest
We may process your personal data whenever necessary based on our legitimate business interests for the following purposes:
· To provide customer support, respond to, and communicate with you regarding your requests.

7 Compliance with Legal Obligations
We will use your personal data to comply with our legal obligations, such as:
· Meeting tax, accounting, and other statutory obligations.
· Responding to requests from public authorities or courts.
· Verifying the accuracy of the data we hold about you.
· Contacting you if there is a potential safety risk from a product you purchased or in the event of a recall.

Any other obligations expressly provided for by applicable law.

8 Consent
With your prior, free, explicit, and informed consent, we will process your personal data for the following purposes:
· Using automated information for purposes such as:
Personalizing the online experience of our visitors.
Providing content (including advertising) tailored to your interests and browsing behavior on our online services.

We use this information to provide you with targeted advertising and collect demographic information about you. With your consent, we may use automated information to determine usage patterns and how we can tailor our services to better meet your needs.

9 How We Share Your Personal Data
The Company may share your personal data within the Currys Group to manage the above purposes at a group level. Currys Group members receiving this information are not allowed to use your data for other purposes or disclose it to third parties unless there is a lawful reason.

10 Our Service Providers
We work with service providers, suppliers, insurers, and organizations that process your personal data on our behalf, provided they comply with data protection and security standards under written contractual terms. We share only the information necessary for them to provide their services to us or facilitate service delivery to you, and we inform you accordingly, depending on the service you choose to use.

11 Other Organizations and Individuals
In certain cases, we may transfer your personal data to other organizations. For example:
· When you apply for credit or purchase an insurance product, we will transfer your information to the insurance companies we collaborate with to complete the insurance contract. In this case, we act as a credit intermediary, and the insurance services are provided by a partner insurance company.

12 International Transfers of Your Personal Data
The Company does not transfer your personal data to third parties outside the European Union unless the conditions of Articles 44–49 of the GDPR are met and appropriate due diligence has been conducted prior to the transfer. This also applies when our suppliers or service providers use equipment or resources located outside the EU to process your data on our behalf.

In the case of data transfers to third countries, your data will continue to be subject to appropriate safeguards and protected in the same way as within the EEA.

Safeguards and guarantees we adopt for the protection of your personal data during transfers to third countries include, among others, the use of the European Commission’s Standard Contractual Clauses in our contracts with data recipients, copies of which may be provided upon request.

13 How We Use Your Information for Automated Decision-Making
Sometimes we use systems to make automated decisions based on personal information we have (or are permitted to collect) about you or your business. This helps ensure that our decisions are fast, fair, efficient, and accurate, based on what we know.

In such cases, processing of your personal data will be based on your prior explicit consent or when necessary for the performance of a contract between us (e.g., sales, warranties, etc.).
When processing is necessary for contract performance, it will be done:
· To ensure a potentially higher level of consistency or objectivity in decision-making (e.g., reducing the likelihood of human error, discrimination, or misuse of power).
· To reduce the risk of customers failing to pay for goods or services purchased.
· To enable us to make decisions more quickly and improve efficiency.

14 Marketing
When you subscribe to our Company’s marketing list (i.e., consent to receive promotional messages), we will use the information you provide (e.g., email address, user account, or social media username) to inform you about our new products, services, offers, and company news, for as long as your consent remains active.

Additionally, after completing a purchase (product or service) and being duly registered in our customer database, we may use your information to:
· Inform you about our latest products, services, or offers.
· Contact you if we need or must provide additional information.
· Periodically confirm your satisfaction with our products and services.

15 Your Rights
Under the GDPR, you have the right to exercise the following rights regarding your personal data:
· Access and Information: You have the right to obtain information about what data we have collected, for what purpose, the legal basis for processing, the retention period, the recipients, the existence of automated decision-making, and any transfer (or intended transfer) of your data to third countries.
· Rectification: You have the right to request the correction of inaccurate information or the completion of additional data about you.

16 How Long We Keep Your Personal Data
We will retain your personal data for as long as you remain a Kotsovolos customer. After you cease to be a customer, we will retain your data for up to 10 years following your last purchase during which your personal data was used, unless a law requires longer retention.

17 Security Measures
All companies within the Currys Group use technical and organizational security measures to protect your personal information from loss, destruction, and any unauthorized access or alteration by third parties.

18 Links to Other Websites
Our websites may contain links to other websites operated by organizations we do not control. If you are directed from our website to a third-party website, we encourage you to read their privacy statements.

19 Social Media
We use social media such as Facebook, Google, YouTube, Instagram, and Twitter to promote our products and services and inform the public about our company news.

20 Contact Us
If you have a question or complaint regarding this policy or how we handle your personal data, please contact us:
By email: Personaldata@kotsovolos.gr
By mail: 90 Marinou Antypa Street, Heraklion, Attica, P.C. 14122.

Policy Updates
We reserve the right to revise this Policy by publishing an updated version on our Website. The revised Policy takes effect upon publication on our Website. This policy was last revised in May 2023.