Personal Data Protection Policy
Introduction
We would like to assure you that for K. Sarafidis BROS SA
("Tumi") with Tax Identification Number 094069562 based in Pylaia,
Thessaloniki, Agia Anastasia & Laertos (Philippos Business Center), PC
57001, the protection of our customers' personal data is of primary importance.
For this reason we take the appropriate measures to protect the personal data
of our customers, which we process and to ensure that the processing of personal
data is always carried out in accordance with the obligations set by the
applicable legal framework,
both by the company itself and by third parties who work with
us.
We would also like to
assure you that at K. Sarafidis BROS SA, we do not collect data on minors under
18 years of age.
Processor - Data Protection Officer (DPO)
The company K. Sarafidis BROS SA ("Tumi") based in
Pylaia, Thessaloniki, Agia Anastasia & Laertou (Philippos Business Center),
PC 57001, email: berson@sarafidisgroup.gr, tel: (+30) 210 94178700, website: gr.tumi.com informs you that, for the purposes of conducting its business
activities, it processes personal data of its customers in accordance with the
applicable national legislation and European Regulation 2016/679 on the
protection of natural persons against the processing of personal data and the
free movement of such data (General Regulation on Data Protection, hereinafter
"the Regulation") as in force.
For any issue regarding the processing of personal data contact
in writing with the personal data department at email: dpo@sarafidisgroup.gr,
fax 210 9415002 with the Data Protection Officer (DPO) Kosmas Tasiadamis.
What is the purpose of processing and how we use your personal
data
We use your data in various ways which differ depending on the
purpose of processing. There are cases in which K. Sarafidis BROS SA ("Tumi")
will not be able to take action if it has not collected your specific personal
data, such as your data required for the execution of your orders from our
online store.
Purposes of processing your personal data are:
(a) the execution of the contract of sale of the goods you wish to
purchase (eg the purchase of a suitcase) either from our physical stores in
Greece or from our online store gr.tumi.com
Specifically:
Execution of your orders
In order to execute your orders and to be able to support you even after
the sale, the necessary personal data we need are:
- the name, and the surname for the natural persons and for the companies
the surname, the TIN, the Tax Office and the activity, so that our company
knows who will be the person who will receive the order.
the full address
(street, number, postal code, city) of invoicing and / or delivery so that you
can pick up the order at the place of your choice.
- your landline number so we can contact you regarding your order.
- your mobile phone number for your electronic information via email and /
or telephone communication regarding your order.
- your e-mail address (e-mail), so that you receive updates regarding your
order..
- All the above information is necessary for the prevention and detection
of fraud against you and against our company.
(b) After your consent and if you have notified us, either when creating a
member account on this website, or when purchasing goods in a physical or
online store of our company, or when subscribing to our newsletters and
personalized communication, If necessary, your personal information is
provided, the following possibilities are provided:
Subscribe to newsletters, send updates and offers:
To subscribe to our company newsletters, send updates and / or offers
and / or promotions you must state your e-mail address (email) to our physical
or online store.
By subscribing to our Newsletters and personalized updates, you give us your
express consent to receive all of our updates and / or offers and / or
promotions that we send via email and text messaging or Instant messaging
through the relevant services (e.g. x. with SMS, Viber, Push Notifications
etc.).
Create a member account:
To create a Member
Account you will need to provide us with your email address and set your
personal passwords.
By registering on the
website gr.tumi.com, you provide us with your explicit consent, to
receive all our updates and / or offers and / or promotional actions that we
send via emails and text messages or Instant messaging through the relevant
services (for example with SMS, Viber, Push Notifications etc.).
Customer Satisfaction Survey
Your personal data that we collect from our website and / or our
physical stores, are used for your participation in a Customer Satisfaction
Survey, under the specific conditions set by the current legal framework. The
Customer Satisfaction Survey is currently conducted via electronic
communication with you.
Personalized communication ("profiling")
In order to provide you with the best possible browsing experience on
our site, the personal data we collect may be used to send personalized
updates, provided you have given your consent, subject to the specific
conditions set by the applicable legal framework.
Creating a member account using Social Media:
- To create a Member Account using Social Media you must give your prior
consent to the respective Social Media.
- An essential element that we receive from the Social Networking medium
is the address of your Email.
- The additional data we receive depends on the respective Social
Networking medium. Indicative can be your gender or date of birth or both if
and when you have declared them as public data.
- By creating a member account, according to the above, you give us your
consent to place your next orders without having to re-enter your details. You
will now be able to enjoy an optimal experience with access to your account
information, your order history and the status ("status") of your
pending orders, your preferences ("favorites") and all the settings
offered on the page "my account".
This will give you access to all your data, so you can add or
modify it, as appropriate. You will be able to enter in your account all the
necessary information for the execution of your orders, so that you do not have
to fill them in every time you place a new order.
You will also be able, if
you wish, to add additional information such as your gender and date of birth,
which will allow us to be able to offer you an even closer to your needs and
more personalized information.
Credit / Debit Card Details
- Your credit / debit card details will be requested upon completion of
your order, provided you choose the relevant payment method and will be used
exclusively for their electronic transmission through the secure environment of
Eurobank for the completion of your payment only. K. Sarafidis BROS SA
("Tumi") does not store any credit / debit card information in its
electronic systems or in a physical file.
- The certification of the cardholder may require the transfer of your
card details to a third party provider, in cooperation with the bank that
completes the card payment process.
What are the legal reasons for processing your personal data?
The personal data that you provide with your explicit consent to K.
Sarafidis BROS SA ("Tumi"), can be processed by us only when there is
a legal reason.
Legitimate reasons for processing your personal data are:
(a) the
execution of the contract of sale of the goods you have purchased either from
our physical stores in Greece or from our online store gr.tumi.com (eg
the purchase of a suitcase) and consequently the fulfillment of our contractual
obligations under this, proof of submission of your orders, after-sales
support, the ability to contact you about your orders and generally where it is
reasonably necessary or required to use them to comply with legal or regulatory
requirements, to resolve disputes, prevention of fraud and abuse
(b) the
safeguarding and protection of the legitimate interests, both yours and ours,
For this reason we use closed circuit television (CCTV) and security cameras in
the physical stores of our company to safeguard the security of our customers
and facilities, as well as special security software to detect and prevent
malware. In particular, in our online store, we collect information, such as
your IP address, location information, users' devices, etc., in order to detect
or prevent fraud or abuse of our website.
(c) compliance
with various obligations imposed by law, such as regulatory compliance for tax
purposes, e-commerce legislation.
(d) the
consent you provide to K. Sarafidis BROS SA ("Tumi"), under the
specific conditions set by the current legal framework, to subscribe to
newsletters, receive updates on products, offers and / or promotions, to
participate in research customer satisfaction, receive personalized updates,
etc.
Minors and children are allowed to use our website;
K. Sarafidi BROS SA ("Tumi") does not sell its goods
to children and minors under 18 years of age.
The children's goods that we have for sale can be bought
exclusively by adults and not by children or minors under 18 years of age.
If you are under 18 years
old, you can only make purchases from our website with the participation and
approval of a parent or guardian.
Where we transmit the data
For the fulfillment of the above mentioned purposes of
processing your personal data, K. Sarafidis BROS SA ("Tumi") may
disclose or transmit personal data that you have given us to subsidiaries or
affiliated with the company "K. Sarafidis BROS SA" companies , or to
third party service providers who in cooperation with it contribute to the
smooth operation of this website, as indicative and not restrictive, the technology service providers for the
protection and security of our electronic systems, the advertising companies,
as well as the companies that cooperate with us for the execution of corporate
programs and customer reward programs, the companies that conduct customer
satisfaction research. In particular, for the
purposes of implementation and execution of the respective sales contract
through our online store, your necessary information is forwarded to
cooperating companies that have been assigned the execution of part of the
contract such as logistics, transport, order management companies, etc.
In all the above cases K.
Sarafidis BROS SA ("Tumi") remains responsible for the processing of
your personal data and sets the individual details of the processing, and signs
a special contract with third parties to whom it assigns execution of
processing activities, in order to ensure that the processing is carried out in
accordance with the applicable legal framework and that any natural person may
freely and unhindered exercise the rights conferred on him by the applicable
legal framework.
What are your rights in relation to your personal data?
K. Sarafidis BROS SA ("Tumi") undertakes the obligation to
keep with absolute confidentiality the file of personal data that you have
stated to us during your registration on our website or our physical stores, as
well as your transaction history in the online store tumi.bagstories.gr and
only for the purposes of processing those mentioned above.
The data storage period is decided based on the following specific
criteria depending on the case:
When processing is required by the provisions of the applicable
legal framework, your personal data will be stored for as long as the relevant
provisions require.
When processing under contract, your personal data is stored for
as long as is necessary for the performance of the contract and for the
establishment, exercise, and / or support of legal claims under the contract.
For various promotional / advertising activities (marketing
activities), your personal data is kept until the withdrawal of your consent.
You can exercise this right at any time. Revoking your consent does not affect
the legality of the processing based on your consent during the period prior to
its revocation.
We will also keep the account data you created on our site stored for as long
as you maintain it and have not requested its deletion. If required to comply
with legal or regulatory requirements, resolve disputes, prevent fraud and
abuse, or impose terms and conditions of access to this website, we may retain
some of your data as required, even after deletion of your account.
To revoke your consent,
please contact the Data Protection Officer (DPO) of K. Sarafidis Bros. SA
("Tumi") at the following contact details: email:
dpo@sarafidisgroup.gr, fax 210 9415002 or directly with the Data Protection
Officer ) Kosma Tasiadami
What are your rights in relation to your personal data?
Every natural person
whose data is processed by K. Sarafidis BROS SA ("Tumi") reserves the
following rights:
Right of access:
You have the right of
direct access to information on matters of your personal data and verification
of the time and manner of their initial storage, as well as information on the
methods used to process and protect them
Right of correction:
You have the right to
study, correct, update or modify your personal data.
Right to delete:
You have the right to
submit a written request for deletion of your personal data from the archive of
K. Sarafidis BROS SA ("Tumi") at any time, provided that we have
processed them after your prior consent. In all other cases (such as when there
is a contract, an obligation to process personal data imposed by law, public
interest), this right is subject to certain restrictions or does not exist, as
the case may be.
Right to restrict processing:
You have the right to request a restriction on the processing of
your personal data in the following cases: (a) when you dispute the accuracy of
your personal data and until it is verified, (b) when you do not want your
personal data deleted restrict their use, (c) when your personal data is not
used for processing purposes, are,
however, necessary for the establishment, exercise and support of legal claims,
and (d) when you object to the processing and until it is verified that there
are legitimate reasons that apply to us and outweigh the reasons why you oppose
the processing.
Right to object processing:
You have the right to
object at any time to the processing of your personal data in cases where, as
described above, it is necessary for the purposes of the legitimate interests
we pursue as controllers, as well as to the processing for the purposes of
direct marketing and consumer profiling.
Right to portability:
You have the right to receive, free of charge, a copy of the
"Customer Card" containing your personal data in electronic or
printed form, which will allow you to access, verify and edit it using commonly
used processing methods. You also have the right to request that, if
technically feasible, we transfer your data directly to another controller.
This right can be exercised for the data you have provided to us
and their processing is carried out by automated means, with your prior consent
or in execution of a relevant contract.
Right to withdraw consent:
Finally, K. Sarafidis BROS SA ("Tumi") informs you
that in cases where the processing of your personal data is done after your
prior consent, you have the right to revoke it freely, without prejudice to the
legality of the processing based on consent before you recall it.
To exercise any of the above rights you can contact in writing to the Data
Protection Officer (DPO) Kosmas Tasiadami at the following contact details:
email: dpo@sarafidisgroup.gr, fax 210 9415002
Right of complaint to the PDPA:
You have the right to file
a complaint to the Personal Data Protection Authority (www.dpa.gr): Call
Center: (+30) 210 6475600, Fax: (+30) 210 6475628, E-mail: contact@dpa.gr
Personal Data Security
K. Sarafidis BROS SA ("Tumi") has taken care and
implements appropriate technical and organizational measures in order to
securely process your personal data and prevent accidental loss or destruction
and unauthorized and / or illegal access to them, use, modifying or disclosing
them. In any case, the way the internet works and the fact that it is free does
not allow anyone to be guaranteed that unauthorized third parties will never be
able to violate the applicable technical
and organizational measures
by acquiring access and possibly using personal data for unauthorized and / or
unauthorized purposes.
Cookies information
What are Cookies?
Cookies are small text files with information that a website stores on a
user's computer (usually in a web browser such as Internet Explorer, Chrome,
Opera, Mozilla Firefox, Edge, etc), so that every time he links to the website,
the latter retrieves this information and offers each user personalized
services that meet their individual needs. A typical example of such
information is the user's preferences on a website, as they are stated by the
choices he has made on that website (e.g. x. selection of specific
"buttons", searches, ads, etc).
How and why do we use Cookies?
The online store tumi.bagstories.gr uses Cookies to collect
online activity information, store your preferences and settings, as well as to
optimize the navigation experience on our website. We also use cookies to
personalize content and ads, provide social media features, and analyze your
traffic. In addition, we share information about how you use our site with our
social media, advertising and analytics partners, who may combine it with other
information you have provided or collected in connection with your use of their
services.
Cookies in no way harm your
device and may allow us to offer you faster and better navigation on our
website.
Use of Cookies:
We store on your device the absolutely necessary Cookies for the
operation of the website.By using the website gr.tumi.com you accept the
use of Cookies with consent in the respective option. The Cookies sent from our
website and stored on your electronic device are indicative of the following:
- IIS session cookie
- B2C Platform cookies
- CardinalCommerce
- Google Analytics
- Google Adwords
- AdNexus™
- Neustar® AdAdvisor®
- DoubleClick (Google)
- AddThis
- Lotame Solutions
- AdRoll
By disabling Cookies or revoking your consent, certain features of the Website
will not be available. Additionally, the performance and functionality of the
website may be affected.
How you can delete cookies
You can delete cookies
and disable their use.
Select the browser you are
using and follow the instructions:
If you are using another browser, consult your provider's
information.
Attention: Our Cookies
policy is being reformed to be compatible with both the provisions of the
General Data Protection Regulation.
Additional Information When Data is Collected by Third Parties and Not
Directly by the Individual - Social Media
In our online store gr.tumi.com we
provide you with the opportunity to register by creating a member account
("Login / Register") or to log in to your account ("Login /
Register") using your accounts from various Social Media (Facebook,
Google+), without having to remember passwords, through an automated secure
operation which takes place through the direct communication of our systems
with the respective social network.
Prerequisite for the use of the above automated registration /
login function is to authorize the respective social media for this use, which
also authorizes the media to transmit to you your personal data which you have
declared as "public" on the respective social media networking. At
the time of authorization you are informed of exactly what information will be
transmitted and you are given the option to de-select some of them.
Your authorization to the respective medium is made once and is
valid until you, with your own energy towards the respective medium, terminate
it. You can search for the relevant functions - options in your personal
account on the respective social media.
Your personal information
that we collect from social networks, as long as it is public and only with
your explicit consent, is the Name, Surname, E-mail, your date of birth and gender, but also any other information you have
stated as public on social media. This information is used by us to create a
member account on our website and its needs, as described in the relevant
section "Creating a member account"
Links to other sites.
Our
website may contain links to foreign websites. K. Sarafidis BROS SA ("Tumi")
is not responsible for the privacy practices or the content of other websites
that do not belong to K. Sarafidis BROS SA ("Tumi"). We therefore
recommend that you read the privacy statements of these foreign sites
carefully.
